Webcasts

Wrapping Up The GHOST: Lessons Learned From The Ghost Vulnerability

• Friday, February 6th, 2015 at 1:00 PM EDT (18:00:00 UTC)
• Johannes Ullrich and Chris Wysopal

Sponsor

You can now attend the webcast using your mobile device!

Overview

2015 is still young, and we already have to deal with yet another branded vulnerability affecting large numbers of systems. Likely, this isn't the last time that this will happen. In this presentation, we will explain what Ghost was all about, how to recognize vulnerable systems and what can be done to mitigate the risk. We will also look beyond Ghost to explain what can be done to quickly assess your organizations exposure from the latest news worthy vulnerability and how to build a comprehensive framework to address high priority vulnerabilities.

Speaker Bios

Johannes Ullrich

Johannes is currently responsible for the SANS Internet Storm Center (ISC) and the GIAC Gold program. In 2000, he founded DShield.org, which is now the data collection engine behind the ISC. His work with the ISC has been widely recognized, and in 2004, Network World named him one of the 50 most powerful people in the networking industry. Prior to working for SANS, Johannes worked as a lead support engineer for a web development company and as a research physicist. Johannes holds a PhD in physics from SUNY Albany and is based in Jacksonville, Florida. His daily podcast summarizes current security news in a concise format. Listen to Johannes discuss "HTML5: Risky Business or Hidden Security Tool Chest for Mobile Web App Authentication" in this SANS webcast.

Chris Wysopal

Chris Wysopal is Co-Founder, Chief Technology Officer at Veracode, which he co-founded in 2006. He oversees technology strategy and information security. Prior to Veracode, Chris was vice president of research and development at security consultancy @stake, which was acquired by Symantec.

In the 1990's, Chris was one of the original vulnerability researchers at The L0pht, a hacker think tank, where he was one of the first to publicize the risks of insecure software. He has testified to the US Congress on the subjects of government security and how vulnerabilities are discovered in software.

Chris received a BS in computer and systems engineering from Rensselaer Polytechnic Institute. He is the author of The Art of Software Security Testing.

Chris is often called upon to download the latest Minecraft mods for his 6-year-old son. An avid photographer and nature-lover, Chris spends his free time hiking the many conservation trails near his home outside Boston.