VIDEO.HACKINTHEBOX.ORG

conference.hitb.nl

HITBSecConf2010 – Malaysia

http://conference.hitb.nl/hitbsecconf2010kul

A big thank you to our sponsors, speakers, crew (both .MY and .NL! And volunteers for all their help in putting together our 8th annual show! All conference materials can be downloaded from:. Http:/ conference.hackinthebox.org/hitbsecconf2010kul/materials/. Official conference photos are available at:. Http:/ photos.hackinthebox.org/. Keynote videos are available via our Youtube channel at:. Http:/ www.youtube.com/hitbsecconf. Post Conference Coverage (Mainstream Media). Post Conference Coverage (Blogs).

navegandoentrecolisiones.blogspot.com

Navegando entre colisiones: septiembre 2010

http://navegandoentrecolisiones.blogspot.com/2010_09_01_archive.html

Viernes, 10 de septiembre de 2010. Information Gathering - DNS Cache Snooping. Como ya hemos visto en alguna ocasión, a la hora de realizar una auditoría o una prueba de pentest lo primero y más importante es reunir cuanta información sea posible acerca del objetivo, es la fase que se denomina "information gathering". Para comprometer equipos. La mejor manera de saber los dominios visitados es comprobar si se puede realizar un " snooping. Sobre la caché del servidor DNS. Y extraer los dominios que nos in...

conference.hitb.org

HITBSecConf2010 – Malaysia

http://conference.hitb.org/hitbsecconf2010kul

A big thank you to our sponsors, speakers, crew (both .MY and .NL! And volunteers for all their help in putting together our 8th annual show! All conference materials can be downloaded from:. Http:/ conference.hackinthebox.org/hitbsecconf2010kul/materials/. Official conference photos are available at:. Http:/ photos.hackinthebox.org/. Keynote videos are available via our Youtube channel at:. Http:/ www.youtube.com/hitbsecconf. Post Conference Coverage (Mainstream Media). Post Conference Coverage (Blogs).

conference.hackinthebox.nl

HITBSecConf2010 – Malaysia

http://conference.hackinthebox.nl/hitbsecconf2010kul

A big thank you to our sponsors, speakers, crew (both .MY and .NL! And volunteers for all their help in putting together our 8th annual show! All conference materials can be downloaded from:. Http:/ conference.hackinthebox.org/hitbsecconf2010kul/materials/. Official conference photos are available at:. Http:/ photos.hackinthebox.org/. Keynote videos are available via our Youtube channel at:. Http:/ www.youtube.com/hitbsecconf. Post Conference Coverage (Mainstream Media). Post Conference Coverage (Blogs).

securesoftware.blogspot.com

Writing Secure Software: Tribute to Software Security Guru Roman Hustad

http://securesoftware.blogspot.com/2010/11/tribute-to-software-security-guru-roman.html

Secure software engineering and risk management strategies for building secure web applications. Monday, November 15, 2010. Tribute to Software Security Guru Roman Hustad. Roman is survived by his wife of 6 years, Tanya (Burgdorf) Hustad, and his sons Lucas (4 yrs old) and Wyatt (2 yrs old), his sister Holly (Fail) Hoeksema, and brother, Andrew James. The whole family is being supported and cared for by loving family and friends in Davis, CA at the moment. Papers on SoftwareMag.com, such as:. Roman also ...

securesoftware.blogspot.com

Writing Secure Software: Application Security Guide for CISOs

http://securesoftware.blogspot.com/2011/08/application-security-guide-for-cisos.html

Secure software engineering and risk management strategies for building secure web applications. Friday, August 05, 2011. Application Security Guide for CISOs. To make OWASP more visible to Chief Information Security Officers (CISO)s I put together an initial draft of an application security guide that can be downloaded from here. I believe the time is mature for an organization like OWASP to reach up CISOs directly with a targeted guide. The first part of this OWASP guide. Friday, August 05, 2011. Dr Ja...

securesoftware.blogspot.com

Writing Secure Software: Recent Acquisitions In The Security Industry And What It Means For Software Security Professionals

http://securesoftware.blogspot.com/2010/09/software-security-industry-and.html

Secure software engineering and risk management strategies for building secure web applications. Friday, September 10, 2010. Recent Acquisitions In The Security Industry And What It Means For Software Security Professionals. 65279;. 65279;The recent news of the acquisitions of McAfee. HP suite of tools for software testing. Moreover, the news of McAfee. In the 90’s the main targets for viruses were users' PC, typical attack vectors included opening unknown email attachments to infect their PC...

securesoftware.blogspot.com

Writing Secure Software: How a process model can help bring security into software development

http://securesoftware.blogspot.com/2010/03/how-process-model-can-help-bring.html

Secure software engineering and risk management strategies for building secure web applications. Sunday, March 21, 2010. How a process model can help bring security into software development. Very good article about SSDLC. Security Enhanced Software Development LifeCycle. It should be mandatory reading for promoters of SSDLC. Initiatives within organizations. This article. Third in the series on the secure software lifecycle. Captures some of my previous work around the concept of the ( SSF. To the work ...

securesoftware.blogspot.com

Writing Secure Software: Perceived Security vs. Real Security

http://securesoftware.blogspot.com/2010/03/perceived-security-vs-real-security.html

Secure software engineering and risk management strategies for building secure web applications. Friday, March 19, 2010. Perceived Security vs. Real Security. MC Escher (1898 - 1972), Bond Of Union, 1956. One important factor is fear, consider for example these data as fear relates to perception of risk:. the fear of earthquakes has been reported to be more common than the fear of slipping on the bathroom floor although the latter kills many more people than the former. Well, assume you would like to dri...