Security B-Sides DC has Officially Opened its Call for Papers (CFP) for the Event Today

Besides it being the deadline to officially submit your taxes, Security B-Sides DC has officially opened its Call for Papers (CFP) for the event today April 15, 2013 and will last until June 30, 2013. You can submit you ideas at the CFP submission page to enter your information there. You are also permitted to enter more than one CFP submission if you wish to do so. If you are selected as a speaker for the event, you will receive a limited edition B-SidesDC T-shirt.

The plan is to conduct a double-blind method to evaluated the submissions consisting of two teams. The first team would examine the abstract/title with no knowledge of the author, while the second team would just evaluated the speaker’s biography with no knowledge of the topic.

The event will be held at the Washington Marriott at Metro Center on October 19-20, 2013.

For those who are not aware of the Security B-Sides DC’s mission, please read below:

Security B-Sides DC is a regional Security B-Sides held in Washington, DC. It operates under the umbrella principles of Security B-Sides as a larger community project within information security.

Its missions is to provide the information security community the best conference of education, discussion, mentorship and hands-on skills, deemed worthy of being called “The Oktoberfest of B-Sides”. In addition, to provide the information security community the best conference of education, discussion, mentorship and hands-on skills, deemed worthy of being called “The Oktoberfest of B-Sides”.

The event is still need sponsors and volunteers to make this a great success! Please contact event coordinators for more information.

Contact Info

Phone (202) 600-9913

Email info@bsidesdc.org

Website http://www.bsidesdc.org/
http://twitter.com/BsidesDC

 

Data broker Acxiom to reveal what it knows about you

An posting from Cnet news  in there Security and Privacy section: Acxiom, the company that tracks everything from your income to your politics, plans to introduce a service that will reveal what it knows about you, according to a new report.

Consumer data broker Acxiom plans to introduce a service that will reveal to people what it knows about them, according to a Financial Times report.

The company, which is based in Little Rock, Ark., bills itself as an enterprise data, analytics, and software-as-a-service company. It serves 47 of the Fortune 100 companies, more than 7,000 in all, and counts more than a trillion data transactions each week from 700 million consumers worldwide.

To read more click here: 

Cybersecurity more of a priority in Obama budget

An posting from NBC NEW’s in there technology section:  WASHINGTON — President Barack Obama proposed on Wednesday increased spending to protect U.S. computer networks from Internet-based attacks in a sign that the government aims to put more resources into the emerging global cyber arms race.

Obama’s budget proposal for the 2014 fiscal year, which begins Oct. 1, calls for more military “hackers” to head off escalating cyber threats from China, Iran, Russia and other countries. It would also bolster defenses for government and private-sector computer networks.

To read more click here:

Anatomy of an exploit – Linksys router remote password change hole

An interesting posting from Naked Security:

A security researcher from San Jose in California has published a how-to guide detailing a number of vulnerabilities in various Linksys routers.

Phil Purviance, who goes by the handle of SUPER.EVR (EVR stands for Exploitation Vulnerability Research), reported the holes privately on 05 March 2013:

 

And Purviance certainly lived up to his threat, publicly releasing the gory details on 05 April 2013 on his blog.

I don’t want to get sidetracked into a discussion about the disclosure process here – whether 30 days was long enough, whether it was fair to expect a reply after emailing Cisco, which no longer owns the Linksys brand, or whether explicitly documenting the holes was wise.

You’ll have to make your own mind up on those issues, because I’m going to zoom in on one of the holes to see what we can learn from it.

 

To read more click here:

Spamhaus DDoS Attacks: What Business Should Learn

An posting from Information week  in there security section: The distributed denial-of-service (DDoS) campaign aimed at anti-spam group Spamhaus over the past week, allegedly orchestrated by Stophaus.com, set the equivalent of a new land-speed record by reaching attack volumes that peaked at a whopping 300 Gbps.

 

Regardless of the mechanics of that attack — or whether it triggered widespread Internet access slowdowns, which it didn’t — the anti-Spamhaus campaign should serve as fair warning that any business can be a target and thus needs to have a DDoS defense plan in place. “Despite the work that has gone into making the Internet extremely resilient, these attacks underscore the fact that there are still some aspects of it that are relatively fragile,” said Andrew Storms, director of security operations for nCircle, via email.

To read more click here: