Category Archives: Security Active

RSA Security Bloggers Meet Up 09 – 3 Weeks Away

RSASBM09

The RSA Security Bloggers Meet Up is only 3 weeks away, so if your a security blogger, reporter or media type and want to attend don’t forget to email bloggermeetup[at]securityactive.co.uk to register your attendance, there are only 50 spaces.

The venue for this even is The Fountains Abbey in London just down the road from the Hilton Metropole where the conference is happening. We will be there from 7:30 PM onwards in the upstairs meeting room, on the 20th October 2009.
FountainsAbbey

If your looking to sponsor the event there is still a short amount of time remaining to get involved (payments need to be received by the 14th October 2009), get in touch at the above email address if your interested.

See you there it should be fun.

We are proud and grateful to have the following organisations sponsoring  this event:

Qualys

IronKey

ISACA

Chris Gates – Open Source Information Gathering – BruCon 2009

This is the second of my 3 videos recorded at BruCon 2009.
This is the excellent presentation from Chris Gates on Open Source Information Gathering.

Abstract: This talk is about using the current open source tools to generate a detailed target footprint for a blackbox penetration test. Suppose for our penetration test we are given nothing but a domain name. Client-side and Social Engineering attacks are in scope, but we’re on our own to come up with all the information needed to execute those attacks (just like a real attacker would be required to do). The days of running Sam Spade or simply querying a whois server for the totality of your information gathering are dead. We need to leverage all the information freely available to us on the net to build both our network attack list as well as our client attack list. This information includes network ranges, hidden company affiliations, hostnames, dns information, public documents with their metadata and email addresses for client side attacks.

Also to learn more about Chris and what hes up to check out his website.

Chris Gates – Open Source Information Gathering – BruCon 2009 from Dale Pearson on Vimeo.

Presentation Slides – Click Here

:: Please do not copy this video without written permission of Security Active or Chris Gates | Linking to is fine ::

Jayson E. Street – Dispelling the myths and discussing the facts of Global Cyber-Warfare – BruCon 2009

This is the first of my 3 videos recorded at BruCon 2009.
This is the excellent presentation from Jayson E. Street on Dispelling the myths and discussing the facts of Global Cyber-Warefare.

Abstract: There is a war being raged right now. It is being fought in your living room, in your dorm room even in your board room. The weapons are your network and computers and even though it is bytes not bullets whizzing by that does not make the casualties less real. We will follow the time line of Informational Warfare and its impact today. We will go deeper past the media hype and common misconceptions to the true facts of whats happening on the Internet landscape. You will learn how the war is fought and who is fighting and who is waiting on the sidelines for the dust to settle before they attack.

Jayson has an excellent book coming out called “Dissecting the Hack: The Forbidden Network

Also to learn more about Jayson and where he is talking check out his website.

Jayson E. Street – Dispelling the myths and discussing the facts of Global Cyber-Warfare – BruCon 2009 from Dale Pearson on Vimeo.

Presentation Slides – Click Here

:: Please do not copy this video without written permission of Security Active or Jayson E. Street | Linking to is fine ::

BruCon 2009, gone but certainly not forgotten

CIMG2534

Well I am back from BruCon, and what can I say it was excellent. Benny and Co did a fantastic job of setting up and running the Conference, and I am sure an excellent time was had by all. Great to see faces old and new, listen to some great speakers, attend some great workshops and spend some excellent time with cool people drinking excellent beer 🙂

If your not sure what I am on about check out http://brucon.org for more information.

I have recorded a couple of videos that I will be posting over coming few weeks (due to Vimeo restrictions), so check back to the blog for presentations from Jayson Street, Chris Gates and Chris Nickerson.

If you want some detailed posts on some of the presentations as they went on check out Chris Riley’s Blog (he has a time machine, so he could blog about them before the speaker even knew what they were saying).

Also check out Help Net Security for some official press material of the event.

So to all those I met and enjoyed the company of (you know who you are) thanks for a great one and see you soon.

Couple of pics, even some Kiosk hacking and Craig Balding talking about Cloud Security 🙂

Products reviewed and rated @ Security Active

As already mentioned I have been doing some book proposal reviews with Syngress, and will hopefully have some newly released books to review in the future. I have reviewed different products and applications for other sites and forums, and obviously mention various tools, kit and gadgets as part of research and recommendations.
I have spoken with a few vendors in the security and technology industry and have had some positive interest in reviewing their products and posting them to the blog to share.

So if you work for a company or have a product you think is worth reviewing please drop me a mail “reviews[at]securityactive.co.uk”.

I look forward to bringing you information on interesting products in the future.