CanSecWest 2008 Presentations

Snort 3.0 - Marty Roesch, Sourcefire

Cross-Site Scripting Vulnerabilities in Flash Authoring Tools - Rich =20
Cannings, Google

Proprietary RFID Systems - Jan "starbug" Krissler and Karsten Nohl, CCC

Media Frenzy: Finding Bugs in Windows Media Software - Mark Dowd and =20
John McDonald, IBM ISS

Targeted Attacks and Microsoft Office Malware - Rob Hensing, Microsoft

Virtually Secure - Oded Horovitz, VMWare

Malicious Cryptography - Fr=E9d=E9ric Raynal and Eric Filiol, Sogeti/Cap-Ge=
mini=20
and ESAT

The Death of AV Defense in Depth: Revisiting Anti-Virus Software - =20
Thierry Zoller and Sergio Alvarez, nRuns

VMWare Issues - Sun Bing, McAfee

Intrusion Detection Systems Correlation: a Weapon of Mass =20
Investigation - Sebastien Tricaud and Pierre Chifflier, INL

Web Wreck-utation - Dan Hubbard and Stephan Chenette, WebSense

Secure programming with gcc and glibc - Marcel Holtmann, Intel

Mobitex network security - olleB, toolcrypt.org

Peach Fuzzing - Michael Eddington, Leviathan

=46uzz by Number - Charlie Miller, Independent Security Evaluators

=46uzzing WTF? What Fuzzing Was, Is And Never Will Be. - Frank Marcus =20
and Mikko Varpiola,Wurldtech / Condenomicon

Vulnerabilities Die Hard - Kowsik Guruswamy, Mu

Hacking Windows Vista - Dan Grifin, JW Secure

ExeFilter: a new open-source framework for active content filtering - =20
Philippe Lagadec,NATO/NC3A

VetNetSec: Security testing for Extremists - Eric Hacker, BT INS

w3af: A framework to own the web - Andres Riancho, Cybsec

A Unique Behavioral Science Approach to Threats, Extortion and =20
Internal Computer Investigations - Scott K. Larson, Stroz Friedberg

=2D-
2008 Dojos

Vulnerability Discovery Demystified Mark Dowd and Justin Schuh
The Exploit Laboratory - Advanced Edition Saumil Shah
Advanced Honeypot Tactics Thorsten Holz
Mastering the network with Scapy Philippe Biondi
Voice over IP (VoIP) Security Nico Fischbach
Practical 802.11 WiFi (In)Security C=E9dric Blancher
Advanced Linux Hardening Andrea Barisani
Defend The Flag Microsoft

=2D-
2008 PWN 2 OWN

There will three targets:
A MacBook Air, running the latest OSX, patched, typical configurati=
on.
A Sony VAIO VGN-TZ37CNB, running Ubuntu, latest release.
A Fujitsu U810, Running Vista, latest update.

The contest will be adjudicated by our impartial celebrity judge:

Ronald C. Dodge JR., Ph.D.
Lieutenant Colonel, Academy Professor
Associate Dean, Information and Education Technology,
United States Military Academy

The victory conditions will be the contents of specific=20
specially planted files on each system, to be extracted=20
by winners. Hack them and you get to keep them, and=20
any associated prizes for the exploits used, oh and the
fame and glory. :-)

Browsers (I.E., Mozilla, Safari), Mail Clients (Outlook,=20
Mail.app, Thunderbird), and IM clients (MSN, Adium,=20
Pigdin, Skype all platforms) are all in scope.
More details and official rules soon.

cheers,
=2D-dr

=2D-=20
World Security Pros. Cutting Edge Training, Tools, and Techniques
Vancouver, Canada March 25-28 - 2008 http://cansecwest.com
pgpkey http://dragos.com/ kyxpgp