August 2017 Meeting
Details
We will have time for food, drinks, networking, and job sharing. We also have two talented local folks presenting different angles on application security.
Title: Who knew having standards could be bad for you?
Abstract: HTML/5 has some really cool features and abilities, perhaps too many. As is the mantra for security in general, the less you have to secure the better. Having 100's of features means you have 100's of features to secure. Watch and listen as Rich Rumble shows how frameworks like HTML/5 can be used by the bad guys to trick users into thinking they are following a best practice, but an HTML/5 "feature" leads to ruin. The talk will focus on Phishing, but not your typical or "main-stream" download/attachment methods. You won't find these methods in a top-10, or your current Computer Based Training, but maybe you should.
Bio: Rich Rumble has worked in IT for 17+ years, fulfilling IT/Network admin and analyst roles for most of that time. The past 7 years Rich has been focused on Security and has wore many hats. Rich gave training at CircleCityCon 2016 about Phishing techniques as well as prevention advice. His most recent talk was at B-Sidesindy, this time with a focus on Physical devices used in Phishing.
Title: Difference Between RASP and Traditional Web Application Firewalls
Abstract: Runtime Application Self-Protection (RASP) technology offers another layer of defense for applications; but what’s the difference between RASP and traditional web application firewalls? RASP offers many advantages, including a technical perception into event triggers, data flows, configuration, and the logic of the application. The talk will focus on the advantages and disadvantages of RASP solutions in contrast to traditional web application firewalls.
Bio: Justin Baxtron has worked in the information security field for over 3 years as a consultant and analyst. He holds a GIAC Web Application Penetration Tester (GWAPT) certification and focuses on application security assessments, as well as software engineering.
Location, food, and drink sponsored by Virtusa/Polaris (Apparatus).