Core Security Technologies present IT SECURITY WEBCAST with Ed Skoudis, Josh Wright, and Kevin Johnson

Pen Testing Perfect Storm Part VI: “We Love Cisco!”

Date and Time: Wednesday, March 23, 2011 at 2pm EDT/ 11am PDT (GMT -4:00, New York)

All registrants will receive a link to the webcast recording after the live session.

About this webcast:

During this webcast, security swashbucklers Ed Skoudis, Joshua Wright and Kevin Johnson will return with more penetration testing madness and demonstrate techniques that you can use to proactively assess the security of Cisco networking equipment throughout your organization.

You’ll learn how to…

 

* Use XSS vulns and Project Yokoso to discover Cisco-centric management interfaces

* Abuse web interfaces for infrastructure control

* Leverage SNMP-to-telnet access escalation for switch pwnage

* Conduct privlege escalation with switch mirror ports

* Engaged in VLAN hopping for fun and profit

* Set up your own virtual routing lab for practice and testing

Speakers: Ed Skoudis, Josh Wright, and Kevin Johnson

 

CORE also invite you to review the slide presentations from the first three parts of this webcast series:

Part I: Combining Network, Web App and Wireless into the Ultimate Pen Test

Part II: Anatomy of a Client-Side Mutiny

Part III: Network Reconstructive Surgery

Part IV: We Love Miscrosoft!

Part V: We Love Adobe!

 

MANDIANT NAMES RICHARD BEJTLICH CHIEF SECURITY OFFICER, SECURITY SERVICES ARCHITECT

From a MANDIANT Press Release:

 

Bejtlich, one of the most influential voices on incident response and computer forensics, joins MANDIANT from General Electric where he served as Director of Incident Response and leader of GE’s Computer Incident Response Team.

 

Alexandria, Va., March 17, 2011 – MANDIANT, the leader in incident response and computer forensics solutions and services for government, defense and enterprise organizations, today announced that Richard Bejtlich will join the MANDIANT executive management team as Chief Security Officer and Security Services Architect, effective April 1.

Bejtlich joins MANDIANT after four years at General Electric, where he served as Director of Incident Response and led GE’s Computer Incident Response Team (CIRT).

“MANDIANT is rapidly expanding its high-end threat detection and response managed service offering, and is focused on building global security operation centers to address the proliferation of targeted attacks,” said MANDIANT President and Chief Operating Officer Travis Reese. “We are excited to have Richard join our executive team to architect additional offerings and focus on protecting our own enterprise.”

Richard Bejtlich

Prior to GE, Bejtlich operated TaoSecurity LLC as an independent consultant, protected national security interests for ManTech Corporation’s Computer Forensics and Intrusion Analysis division, investigated intrusions as part of Foundstone’s incident response team, and monitored client networks for Ball Corporation.

“A priority for MANDIANT in 2011 is to expand the team and the capabilities we use to defend our customers and our company,” Bejtlich said. “Organizations across the globe depend on MANDIANT to protect their information from an array of digital threats. I welcome the challenge posed by my new role, and the opportunity to join this distinguished group.”

Bejtlich began his digital security career as a military intelligence officer at the Air Force Computer EmergencyResponse Team (AFCERT), Air Force Information Warfare Center (AFIWC), and Air Intelligence Agency (AIA).  A graduate of Harvard University and the United States Air Force Academy, Bejtlich is the author of both The Tao of Network Security Monitoring and Extrusion Detection, and co-author of Real Digital Forensics. He also writes for his blog taosecurity.blogspot.com and teaches for Black Hat.

About MANDIANT

MANDIANT is the information security industry’s leading provider of incident response and computer forensics solutions and services. Headquartered in Alexandria, Va., with offices in New York, Los Angeles and San Francisco, MANDIANT provides products, professional services and education to Fortune 500 companies, financial institutions, government agencies, domestic and foreign police departments, and leading U.S. law firms. MANDIANT comprises one of the industry’s largest incident response and forensics forces. The authors of nine books, and quoted frequently by leading media organizations, MANDIANT security consultants and engineers hold top government security clearances and certifications and advanced degrees from some of the most prestigious computer science universities. To learn more about MANDIANT visit www.mandiant.com, read M-Unition, the company blog: http://blog.mandiant.com, follow on Twitter @MANDIANT or on Facebook at www.facebook.com/mandiantcorp.

 

###

 

Contacts:

Anne M. Mroczynski

Senior Director of Marketing, MANDIANT

703.224.2926

anne.mroczynski@mandiant.com

 

Jim Engineer

e-Rainmaker PR for MANDIANT

630.728.1387

jim.engineer@e-rainmaker.com

 

 

GovSec 2011 Conference Includes Cybercrime and Cyberterrorism Sessions

An exciting conference aimed at security and government professionals takes place March 29-31 in Washington, D.C. GovSec 2011 Conference & Expo offers 30+ sessions in four tracks including Protecting from Cyberterrorism and Cybercrime. You can find out more about these and speakers here.

Here is a brief rundown of keynotes and sessions:

* Expo Keynotes: Admiral Thad Allen, USCG (Retired), National Incident Commander, Deepwater Horizon oil spill and Nicholas Stein, series producer of “Border Wars”

* Conference Keynotes: Randy Vickers, Director, United States Computer Emergency Readiness Team, National Cybersecurity Division, DHS and Greg Fowler, SAC New York Joint Terrorism Task Force, FBI

* Cutting Edge Cybersecurity Sessions:  Advanced Persistent Threats – Current Trends in Cyber Crime, Being Proactive and Less Reactive in Security Operations and Cyber Attack Response, and more.

* GovCyber Pavilion: Presentations by Dell, AccessData Corp and others.

Those interested in registering for the conference can visit http://bit.ly/GovSecRegCS . Don’t forget to use code CONF24 for a 10% discount off the conference rate.  The expo is also FREE for qualified attendees.

Visit  http://www.govsecinfo.com for more information.

About GovSec

GovSec, The Government Security Expo and Conference, features an exposition with a full spectrum of physical, IT and cybersecurity solutions, alongside wireless and mobility communications equipment for federal, state and local governments.  GovSec is a one-of-a-kind event that unites thousands of professionals tasked with securing our homeland, from the decision-makers at the federal level to the first responders, firefighters and police officers responding to catastrophic events in their hometown and every government security professional in between.  Attendance to the exposition is free for government, military, law enforcement and first responders as well as industry — new this year!

GovSec is co-located with U.S. Law, the U.S. Law Enforcement Conference and Exposition for federal, state and local law enforcement.

 

 

TakeDownCon Dallas 2011

 

iPad-SNJ
The Premier Technical Infosec Conference Series
 

TakeDownCon aims to empower you with the knowledge and skills required
to protect the integrity of your organization’s security systems,
computer networks and IT infrastructures. http//www.takedowncon.com

TDC-Register

TDC-Training
TDC-Conference
TDC-Speakers
Premier Education Partner

TDC-SecurityOrb

Special Offer!
Sign up for selected training at TakeownCon Dallas through SecurityOrb and get an additional 10% discount!

You must register with this special code:

TDCD-SOR323


TakeDown Training (May 14 – 17) 

TakeDown will offer some of the most sought-after information security
training that will equip you with the skills to defend your IT security
infrastructures. It covers topics such as Ethical Hacking, Computer
Forensics, Penetration Testing, Application Security, Social
Engineering, and Physical Security, among others. Some of the available
training at TakeDownCon Dallas 2011:

Certified Ethical Hacker (CEH) v7 *NEW* 

Computer Hacking Forensic Investigator (CHFI)

Advanced Penetration Testing (CAST 501) *NEW*

Hacking the Human System (CAST 502) *NEW*

Certified Secured Software Lifecycle Professional (CSSLP)

Bluetooth & Wireless Hacking 101


… More


TakeDown Conference (May 18 – 19) 

A well-designed two days program comprising intense presentation and
discussions covering key topics revolving today’s state of information
security. Learn about automated malware analysis, explore SCADA
exploits, find out how to defend against advanced database attacks,
discover how secured government systems aren’t really that secure, know
how toprotecting virtual data centers, and understand how a Nokia N900
or iPod can be armed and made to be an effective pentesting tool… More

TDC-Speakers
Hear from Barnaby Jack, the man behind the infamous ATM hack. Learn from
John ‘Kanen’ Flowers – creator of LISP. Be energized by the energetic
and vibrant Joseph McCray. Get entrhalled by how Babak Javadi and Shane
Lawson reverse engineer physical locks with ease. And how about getting
awed by the charming Georgia Weidman while she demonstrates how a
smartphone can be compromised easily, and many more… More

Special Event: Nite Locks et All

A 3 hour public workshop event will take place on the
evening of May 17th from 7PM to 10PM. A great way to kickstart the conference.
TakeDownCon attendees will be able to learn the basics of lock picking
theory, look and try out some unique locks, break out handcuffs, and
participate in some fun games.


Venue

TakeDownCon is held at
the Intercontinental Hotel Dallas, TX.

Delegates enjoy a
special rate of just
$109

per night. To make
reservations or find out
more details, please click
HERE.

 

White House Conference on Cyber-Bullying Prevention

Today, March 10 at 10:30am EST the President, First Lady, the Department of Education, and the Department of Health and Human Services will welcome students, parents, and teachers to the White House for a Conference on Cyber-Bullying Prevention.
Cyber bullying is bullying through digital communication technologies such as emails, instant messaging, text-messages, digital photos, web postings, and other means of electronic communications.

The conference begins with opening remarks by The President and the First Lady on bullying prevention.

The event can be followed via live stream on www.whitehouse.gov/live
The officially press release and agenda can be accessed here.

 

 

 

TakeDownCon – Attend a Training and Get an iPad – TakeDownCon Dallas 2011

TDC Free iPad
Free iPad + 10% Discount on Training!


Security OrbSecurityOrb is proud to be one of the Premier Education Partners of the brand new TakeDownCon series, which will be making its debut in Dallas, TX, from May 14 – 19, 2011.

Get a FREE iPad and an additional 10% discount when you

 

sign up for selected training offered at TakeDownCon Dallas!*

Visit HERE to find out more about this amazing promotion!
Register Here

To receive all the offers, you MUST register with this promo code: TDCD-SOR323

 

TakeDown Training (May 14 – 17)

Choose from 10 specially selected security courses to suit your training requirements:

1. Certified Ethical Hacker v7 (CEH)
2. Certified Security Analyst / Licensed Penetration Tester (ECSA/LPT)
3. Computer Hacking Forensic Investigator (CHFI)
4. CAST – Advanced Penetration Testing Course
5. CAST – Hacking the Human System
6. CAST – Digital Mobile Forensics Deep Dive
7. CAST – Advanced Application Security
8. (ISC)2 – Certified Secure Software Lifecycle Professional (CSSLP)
9. Wireless & Bluetooth Hacking 101
10. Breaking Layer 0: Physical Security Penetration and Protection

For more information, please visit: http://www.takedowncon.com/training

TakeDown Conference (May 18 – 19)

Hear and learn from the likes of Barnaby Jack, John ‘Kanen’ Flowers, Shawn
Merdinger, Babak Javadi, Dillon Beresford, Joseph McCray, Jayson E
Street, Jeremiah Talamantes, Dave Chronister, Aditya K Sood, Edward
Haletky, Andrew Whitaker, Wayne Burke, Tim Pierson and many others.

Day 1 – Single Track: No Holds Barred

Day 2 – Track 1: The Attack Zone; Track 2: The Defense Sector

For more information, please visit: http://www.takedowncon.com/conference

Special Event: Nite Locks et All (May 17)

A great way to kick off the event. This is a FREE 3 hour public workshop
that will take place on the evening of May 17 from 7PM to 10PM.
Attendees will be able to learn the basics of lock picking theory, see
some unique locks, break out handcuffs, and participate in some fun
games.

Register Here

To receive all the offers, you MUST register with this promo code: TDCD-SOR323

For more information about TakeDownCon, please visit http://www.takedowncon.com or contact: 

Kraken

Director | TakeDownCon

kraken@takedowncon.com

*Terms and Conditions Apply.
EC-Council | 6330 Riverside Plaza Ln NW | Suite 210 | Albuquerque | NM | 87120