Join us for the FREE Cyber Defense Forum | Live Online on October 9


Subscribe to SANS Newsletters

Join the SANS Community to receive the latest curated cyber security news, vulnerabilities and mitigations, training opportunities, and our webcast schedule.

SANS Institute Heads to Washington D.C. for Annual Cyber Security Event, SANS Capital City

Special Evening Talk to Spotlight How Open Source Intelligence Searches Leverage Security
Vulnerabilities in Popular Web Applications Used for Health and Exercise Tracking

  • Bethesda, MD
  • May 18, 2015

SANS Institute, the global leader in information security training, today announced its return to Washington D.C. July 6 - 11. SANS Capital City 2015 will feature hands-on, immersion-style cyber security training courses for security professionals at all levels. Many of the courses offered are aligned with DoD Directive 8570 and associated with GIAC Certifications.

Bonus evening sessions will address some of today's most complex cyber security issues and cover such topics as complex password myths, why you need continuous monitoring, and evolving threats. SANS instructor and active member of the NoVAHackers group, Micah Hoffman, will speak about Running Away from Security: Web App Vulnerabilities and OSINT Collide. His talk will spotlight weaknesses in several web applications used for health and exercise tracking and reveal how trivial it is to find the real people behind the "private" accounts.

According to Hoffman, "It seems as if nearly every aspect of our lives are being pulled into the computer world. There are wrist-sensors for tracking our steps, phone apps that plot our workouts on maps, and sites to share our healthy-eating and weight loss progress. What people don't realize is when they sign up for these sites, they usually use pseudonyms or the sites give them a unique numbered ID to keep their information "private"; but how private is their information? My talk will provide the answer to that question."

SANS Capital City attendees will have the opportunity to participate in some of SANS' most popular training courses such as SEC504: Hacker Tools, Techniques, Exploits and Incident Handling, SEC542: Web App Penetration Testing and Ethical Hacking, SEC579: Virtualization and Private Cloud Security, and SEC660: Advanced Penetration Testing, Exploit Writing, and Ethical Hacking. Also offered at this event, and an ideal choice for those just starting their career in information security, is the SEC301: Intro to Information Security course.

For a complete list of training courses and evening talks, or to register for SANS Capital City 2015, please visit:

SANS Media Contact

About SANS Institute

The SANS Institute was established in 1989 as a cooperative research and education organization. Today, SANS is the most trusted and, by far, the largest provider of cyber security training and certification to professionals in government and commercial institutions worldwide. Renowned SANS instructors teach more than 60 courses at In-Person and Live Online cyber security training events, and more than 50 courses are available anytime, anywhere with our OnDemand platform. GIAC, an affiliate of the SANS Institute, validates practitioner skills through more than 35 hands-on, technical certifications in cyber security. The SANS Technology Institute, a regionally accredited independent subsidiary, offers a master’s degree, graduate certificates, and an undergraduate certificate in cyber security. SANS Security Awareness, a division of SANS, provides organizations with a complete and comprehensive security awareness solution, enabling them to easily and effectively manage their ‘human’ cybersecurity risk. SANS also delivers a wide variety of free resources to the InfoSec community including consensus projects, research reports, webcasts, podcasts, and newsletters; it also operates the Internet's early warning system – the Internet Storm Center. At the heart of SANS are the many security practitioners, representing varied global organizations from corporations to universities, working together to support and educate the global information security community. (