[prev in list] [next in list] [prev in thread] [next in thread] 

List:       owasp-washington
Subject:    Re: [Owasp-washington] OWASP NoVA meeting this Thursday 19-April
From:       Trevor Hawthorn <trevor.hawthorn () stratumsecurity ! com>
Date:       2012-04-18 12:30:32
Message-ID: 8633463368238474871 () unknownmsgid
[Download RAW message or body]

I have two speakers who want to present. I should know by the end of
the week who is going to talk.


--
Trevor Hawthorn, Managing Principal
Stratum Security // Innovative Risk Solutions
d: 703.994.4167 x201 m: 703.459.5321 o: 888.687.1337 x700
www.stratumsecurity.com
13800 Coppermine Road, Suite 302 // Herndon, VA 20171

On Apr 18, 2012, at 8:22 AM, Derek Rogillio <derek@rogillio.net> wrote:

> Sounds like a plan, Doug.  I just signed up, and will plan to work out there on \
> Thursday to make the commute easier. 
> Do we need a speaker for the next OWASP DC meeting?
> 
> -Derek
> 
> Doug Wilson wrote:
> > Hey folks,
> > 
> > While we are working on getting the next OWASP DC meeting set up, I
> > wanted to pass along this event info for OWASP NoVA this coming Thursday.
> > 
> > http://owaspnova04192012.eventbrite.com/
> > 
> > Time: --------
> > 
> > April 2012 OWASP NoVA Meeting Thursday, April 19, 2012 from 6:00 PM to
> > 9:00 PM (ET)
> > 
> > Place: ---------
> > 
> > Living Social campus, Reston, VA
> > 
> > Bio: -----
> > 
> > Masha (a.k.a Marina) has dreamed of becoming a security consultant
> > before she ever knew what a ballerina was, and that's a good thing
> > -because she does not intend her talk to be a ballet recital. Having
> > been in software security for over seven years, Ms. Khainson has
> > delivered Architecture Risk Assessment, Secure Code Review, and Ethical
> > Hacking on many architectures, platforms and technologies. Marina has
> > also developed training materials for clients and led remediation
> > assistance teams.
> > 
> > Prior to joining Cigital, Marina was a member of a research team at a
> > leading security research provider, where using disassembly as well as
> > protocol and source code analysis, she provided key information on newly
> > released vulnerabilities. Before that, Marina assisted the same research
> > team in producing detailed reports on critical malware and spyware
> > threats, as well as developing and testing content for network security
> > devices from some of the top providers of intrusion detection and
> > prevention technologies.
> > 
> > Abstract: -----------Malicious Code Detection or BRIC Breaking Through
> > Static Analysis: As organizations outsource development to less
> > trustworthy providers malware becomes as much a problem as introduction
> > of honest vulnerability by one's own development shop. Assessment
> > practices currently look for vulnerability within source code and a
> > running systems but these are but a few of windows of opportunity for
> > malware introduction. This presentation demonstrates an approach for
> > augmenting an existing security practice with the capability to detect
> > potentially malicious code through secure code review. First, we show
> > how to break malicious intent--often quite subtle--into concrete
> > patterns we can reliably detect. The framework then demonstrates how to
> > build suspicion around reliance of particular patterns' use in concert
> > which, increasingly, imply malicious intent. These techniques will be
> > explained through a demonstration in a real world application.
> > 
> > _______________________________________________
> > Owasp-washington mailing list
> > Owasp-washington@lists.owasp.org
> > https://lists.owasp.org/mailman/listinfo/owasp-washington
> _______________________________________________
> Owasp-washington mailing list
> Owasp-washington@lists.owasp.org
> https://lists.owasp.org/mailman/listinfo/owasp-washington
_______________________________________________
Owasp-washington mailing list
Owasp-washington@lists.owasp.org
https://lists.owasp.org/mailman/listinfo/owasp-washington


[prev in list] [next in list] [prev in thread] [next in thread]