Core Security Technologies present IT SECURITY WEBCAST with Ed Skoudis, Josh Wright, and Kevin Johnson
Pen Testing Perfect Storm Part VI: “We Love Cisco!”
Date and Time: Wednesday, March 23, 2011 at 2pm EDT/ 11am PDT (GMT -4:00, New York)
All registrants will receive a link to the webcast recording after the live session.
About this webcast:
During this webcast, security swashbucklers Ed Skoudis, Joshua Wright and Kevin Johnson will return with more penetration testing madness and demonstrate techniques that you can use to proactively assess the security of Cisco networking equipment throughout your organization.
You’ll learn how to…
* Use XSS vulns and Project Yokoso to discover Cisco-centric management interfaces
* Abuse web interfaces for infrastructure control
* Leverage SNMP-to-telnet access escalation for switch pwnage
* Conduct privlege escalation with switch mirror ports
* Engaged in VLAN hopping for fun and profit
* Set up your own virtual routing lab for practice and testing
Speakers: Ed Skoudis, Josh Wright, and Kevin Johnson
CORE also invite you to review the slide presentations from the first three parts of this webcast series:
Part I: Combining Network, Web App and Wireless into the Ultimate Pen Test
Part II: Anatomy of a Client-Side Mutiny
Part III: Network Reconstructive Surgery
MANDIANT NAMES RICHARD BEJTLICH CHIEF SECURITY OFFICER, SECURITY SERVICES ARCHITECT
| From a MANDIANT Press Release:
Bejtlich, one of the most influential voices on incident response and computer forensics, joins MANDIANT from General Electric where he served as Director of Incident Response and leader of GE’s Computer Incident Response Team.
Alexandria, Va., March 17, 2011 – MANDIANT, the leader in incident response and computer forensics solutions and services for government, defense and enterprise organizations, today announced that Richard Bejtlich will join the MANDIANT executive management team as Chief Security Officer and Security Services Architect, effective April 1. Bejtlich joins MANDIANT after four years at General Electric, where he served as Director of Incident Response and led GE’s Computer Incident Response Team (CIRT). “MANDIANT is rapidly expanding its high-end threat detection and response managed service offering, and is focused on building global security operation centers to address the proliferation of targeted attacks,” said MANDIANT President and Chief Operating Officer Travis Reese. “We are excited to have Richard join our executive team to architect additional offerings and focus on protecting our own enterprise.”
Prior to GE, Bejtlich operated TaoSecurity LLC as an independent consultant, protected national security interests for ManTech Corporation’s Computer Forensics and Intrusion Analysis division, investigated intrusions as part of Foundstone’s incident response team, and monitored client networks for Ball Corporation. “A priority for MANDIANT in 2011 is to expand the team and the capabilities we use to defend our customers and our company,” Bejtlich said. “Organizations across the globe depend on MANDIANT to protect their information from an array of digital threats. I welcome the challenge posed by my new role, and the opportunity to join this distinguished group.” Bejtlich began his digital security career as a military intelligence officer at the Air Force Computer EmergencyResponse Team (AFCERT), Air Force Information Warfare Center (AFIWC), and Air Intelligence Agency (AIA). A graduate of Harvard University and the United States Air Force Academy, Bejtlich is the author of both The Tao of Network Security Monitoring and Extrusion Detection, and co-author of Real Digital Forensics. He also writes for his blog taosecurity.blogspot.com and teaches for Black Hat. About MANDIANT MANDIANT is the information security industry’s leading provider of incident response and computer forensics solutions and services. Headquartered in Alexandria, Va., with offices in New York, Los Angeles and San Francisco, MANDIANT provides products, professional services and education to Fortune 500 companies, financial institutions, government agencies, domestic and foreign police departments, and leading U.S. law firms. MANDIANT comprises one of the industry’s largest incident response and forensics forces. The authors of nine books, and quoted frequently by leading media organizations, MANDIANT security consultants and engineers hold top government security clearances and certifications and advanced degrees from some of the most prestigious computer science universities. To learn more about MANDIANT visit www.mandiant.com, read M-Unition, the company blog: http://blog.mandiant.com, follow on Twitter @MANDIANT or on Facebook at www.facebook.com/mandiantcorp.
###
Contacts:
Anne M. Mroczynski Senior Director of Marketing, MANDIANT 703.224.2926
Jim Engineer e-Rainmaker PR for MANDIANT 630.728.1387
|
GovSec 2011 Conference Includes Cybercrime and Cyberterrorism Sessions
An exciting conference aimed at security and government professionals takes place March 29-31 in Washington, D.C. GovSec 2011 Conference & Expo offers 30+ sessions in four tracks including Protecting from Cyberterrorism and Cybercrime. You can find out more about these and speakers here.
Here is a brief rundown of keynotes and sessions:
* Expo Keynotes: Admiral Thad Allen, USCG (Retired), National Incident Commander, Deepwater Horizon oil spill and Nicholas Stein, series producer of “Border Wars”
* Conference Keynotes: Randy Vickers, Director, United States Computer Emergency Readiness Team, National Cybersecurity Division, DHS and Greg Fowler, SAC New York Joint Terrorism Task Force, FBI
* Cutting Edge Cybersecurity Sessions: Advanced Persistent Threats – Current Trends in Cyber Crime, Being Proactive and Less Reactive in Security Operations and Cyber Attack Response, and more.
* GovCyber Pavilion: Presentations by Dell, AccessData Corp and others.
Those interested in registering for the conference can visit http://bit.ly/GovSecRegCS . Don’t forget to use code CONF24 for a 10% discount off the conference rate. The expo is also FREE for qualified attendees.
Visit http://www.govsecinfo.com for more information.
About GovSec
GovSec, The Government Security Expo and Conference, features an exposition with a full spectrum of physical, IT and cybersecurity solutions, alongside wireless and mobility communications equipment for federal, state and local governments. GovSec is a one-of-a-kind event that unites thousands of professionals tasked with securing our homeland, from the decision-makers at the federal level to the first responders, firefighters and police officers responding to catastrophic events in their hometown and every government security professional in between. Attendance to the exposition is free for government, military, law enforcement and first responders as well as industry — new this year!
GovSec is co-located with U.S. Law, the U.S. Law Enforcement Conference and Exposition for federal, state and local law enforcement.
TakeDownCon Dallas 2011
![]() |
||
| The Premier Technical Infosec Conference Series TakeDownCon aims to empower you with the knowledge and skills required |
||
|
|
||
| TakeDown Training (May 14 – 17)
TakeDown will offer some of the most sought-after information security |
||
| Certified Ethical Hacker (CEH) v7 *NEW*
Computer Hacking Forensic Investigator (CHFI) Advanced Penetration Testing (CAST 501) *NEW* Hacking the Human System (CAST 502) *NEW* Certified Secured Software Lifecycle Professional (CSSLP) |
||
|
|
||
| TakeDown Conference (May 18 – 19)
A well-designed two days program comprising intense presentation and |
||
![]() |
||
| Hear from Barnaby Jack, the man behind the infamous ATM hack. Learn from John ‘Kanen’ Flowers – creator of LISP. Be energized by the energetic and vibrant Joseph McCray. Get entrhalled by how Babak Javadi and Shane Lawson reverse engineer physical locks with ease. And how about getting awed by the charming Georgia Weidman while she demonstrates how a smartphone can be compromised easily, and many more… More |
||
|
|
||
|
Special Event: Nite Locks et All
A 3 hour public workshop event will take place on the |
||
|
|
||
|
Venue
TakeDownCon is held at Delegates enjoy a per night. To make |
![]() |
|
TakeDownCon – Attend a Training and Get an iPad – TakeDownCon Dallas 2011
|
|||||||||||










SecurityOrb is proud to be one of the Premier Education Partners of the brand new TakeDownCon series, which will be making its debut in Dallas, TX, from May 14 – 19, 2011.