September 17
Jayson Street
Come hear Jayson Street debrief DEFCON 16!
October 15
Integrating Security Into the QA Group
Sponsored by Fortify
Until recently, Web Application Testing was left to security teams and ethical hackers who used advanced tools, such as Web application scanners, to analyze running Web applications. However, security groups are becoming overburdened by product releases, and many organizations are attempting to move security testing earlier in the development cycle. The QA group is a natural candidate, since it generally has the infrastructure in place to test applications for quality issues. However, for many organizations, integrating security into the QA group has been incredibly difficult. The process of running a security test is a learned skill, and not something one can teach a QA tester in a matter of days. On top of that, most security testing tools were designed for penetration testers (since they require an in-depth knowledge of application security theory) and are not generally usable by QA professionals. As a result, very few QA groups have successfully adopted security testing.
November 19th
Stopping Blended Threats Inside and Out, Web and Mail
Sponsored by Secure Computing
This is an informative seminar designed specifically for you and the evolving threats you face today including blended threats, data leakage, malware, phishing, and spyware. We will discuss practical solutions to protect against today's blended Web and Mail threats, prevent data leaks and secure outbound email. You will leave this seminar with a clear vision and plan with which to identify and neutralize the blended threats that face your organization today, as well as learn ways to protect your Web and Messaging infrastructure from the threats of tomorrow.