May Meetup: Kevin Johnson and Newton's Cradle

Bio:

Kevin Johnson is the Chief Executive Officer of Secure Ideas. Kevin has a long history in the IT field including system administration, network architecture and application development. He has been involved in building incident response and forensic teams, architecting security solutions for large enterprises and penetration testing everything from government agencies to Fortune 100 companies. In addition, Kevin is a faculty member at IANS and was an instructor and author for the SANS Institute .

Kevin has performed a large number of trainings, briefings and presentations for both public events and internal trainings. He is the author of three SANS Institute classes: SEC542: Web Application Penetration Testing and Ethical Hacking, SEC642: Advanced Web Application Penetration Testing and SEC571: Mobile Device Security. Kevin has also presented at a large number of conventions, meetings and industry events. Some examples of these are: DerbyCon, ShmooCon, DEFCON, Blackhat, ISACA, Infragard and ISSA.

Kevin is also very involved in the open source community. He runs a number of open source projects. These include SamuraiWTF; a web pen-testing environment, Laudanum; a collection of injectable web payloads, Yokoso; an infrastructure fingerprinting project and a number of others. Kevin is also involved in MobiSec and SH5ARK. Kevin was the founder and lead of the BASE project for Snort before transitioning that to another developer.

In his free time, Kevin enjoys spending time with his family and is an avid Star Wars fan and member of the 501st Legion (Star Wars charity group).

Abstract:

Newton's Cradle has your information.

From IoT to mobile devices and cloud systems, the Internet and how we use it has once again changed. Privacy and security have collided with function and demand.

In this presentation, Kevin Johnson of Secure Ideas will walk through some of the most common privacy and security issues we find today when we test modern systems, and demonstrate some of the techniques being used in testing. Kevin will also walk through controls that users, enterprises, and developers can use to protect themselves, their products, and their applications.

Evaluate the privacy and security risks within modern systems and IoT. Learn techniques and tools to test your own systems and software. Understand the actual threats organizations face with new technology. Get a methodology to evaluate the problems and flaws within the systems.