Most Informative Talk: Oded Horovitz's talk on VMware. He showed off some upcoming features of the product, like VMSafe, security APIs, and session replay. With VMSafe and the security APIs, you will be able to run code inside the hypervisor! In one demo, he showed how VMSafe can detect malware that was modified to bypass [...]
After posting my RSA schedule, I noticed that the "Research Revealed" track wasn't included in my booklet. So for those that were relying on the booklet to figure out your schedule, and interested in research topics, refer to RSA's detailed agenda. Now to go back and figure out if I need to adjust my schedule [...]
I just finished the scapy dojo with Philippe, and it was awesome. We covered lots of ground for a one day class, but I wish we had at least another day for additional topics. Out of the course outline, we covered everything except the fuzzing and wifi sections. One highlight of the class was when [...]
One thing that I really hate about multi track conferences, is that it takes me forever to determine what I want to see. And with the upcoming RSA conference, they didn't make it easy with 20 tracks to choose from! Here is the workflow that I used to figure out my RSA schedule. The first [...]
I just put together a google shared calendar for all infosec events in North America. If I am missing an event (which is likely), please contact me.
CanSecWest is just around the corner, and TippingPoint just announced some additional incentives to the PWN to OWN contest. Like last year, TippingPoint is giving cash prizes away, but this year they are giving away at least $20,000! For those that aren't familiar with the contest, several machines are setup, with the latest OS patches [...]
The Jericho Forum will be holding a half day conference during RSA on Thursday April 10th, 2008. There will be three presentations, and a roundtable discussion on data security solutions. It is free to attend, and you can find the full agenda and registration link at Jericho Forum. The roundtable discussion sounds interesting, and there [...]
Today, Richard Bejtlich at TaoSecurity posted his ten recurring themes that he observed from recent conferences. They are: Permanent compromise is the norm, so accept it. We can not stop intruders, only raise their costs. Anyone of sufficient size and asset value is being targeted. Less Enterprise Protection, more Enterprise Defense. Less Prevention, more Detection, [...]
Just when you thought one week of RSA goodness was enough, USENIX has more for us the following week! The Usability, Psychology, and Security (UPSEC) workshop will be on April 14th, and the Large-Scale Exploits and Emergent Threats (LEET) workshop will be held on the 15th. Hope to see you there!
USENIX, the advanced computing systems association, recently announced free access to all of their conference proceedings! And here are the security related ones that you all might be interested in: 16h Usenix Security Symposium (Sec '07) 2nd USENIX Workshop on Hot Topics in Security (HotSec '07) DETER Community Workshop on Cyber Security Experimentation and Test [...]