Special Events

SANS Toronto 2008 Keynotes

Future Trends in Network Security
- Moderator: Rob Lee
- Panelists: Bryce Galbraith, Peter Giannoulis, Andrew Hay, Jason Lam, Dave Shackleford, Dr. Johannes Ullrich, Stephen Sims, Guy Bruneau
- Sunday, May 11, 2008 * 7:00pm

Malicious code and other attacks are increasing in intensity and the damage that they cause. With little time to react, organizations have to become more proactive in their security stance. Reactive security will no longer work. Therefore, organizations need to better understand what the future trends, risks, and threats are so that they can be better prepared to make their organizations as secure as possible. The panelists in-depth, cross-industry experience allows them to give relevant examples in every instance. This presentation covers security issues that are relevant to IT managers and administrators alike.

OWASP Chapter Meeting
- Topic: A Distributed Web Application Honeypot
- Speaker: Johannes Ullrich
- Time: May 13th 2008 * 6:00pm - 7:00pm

Description: DShield.org has been extremely helpful in understanding network based attacks. However, over the last few years many interesting attacks target specific web application flaws which are not detected by DShield's sensor system. Collecting similar data for web applications has been challenging for a number of reasons. First of all, the data needed to understand a web application attack is much richer and a simple efficient data model as the one used by DShield will not provide sufficient details. If more detailed data, like complete requests, are collected, data privacy issues become more of a problem. Simple obfuscation or pattern replacement techniques are usually not sufficient to safeguard this information, or they will make it impossible to understand the attack. Lastly, many web application attacks use search engines to find vulnerable systems, instead of just attacking random servers. Over the next few months we plan to roll out a distributed web application honeypot. We will describe how this honeypot will be implemented to address these issues.

OWASP Toronto chapter meetings are open to the public RSVP is requested by sending an owasp-rsvp@securitycompass.com