RSA Conference | Connect : Tags : rsa

Connect

2 Posts tagged with the rsa_conference2012 tag

RSAC2012 Podcast: ASEC-302: Remediation Statistics: What Does Fixing Application Vulnerabilities Cost?

Posted by Allison Lorentson Jan 26, 2012

Dan Cornell, Chief Technology Officer, Denim Group

This session presents analysis of data drawn from fifteen software security remediation projects. Data is presented both on the time required to remediate specific classes of vulnerabilities as well as the overall composition of remediation projects so that attendees can see what percentage of remediation projects is spent actually fixing vulnerabilities and what time is spent on other activities.

Dan Cornell has over twelve years of experience architecting and developing web-based software systems. As Denim Group’s Chief Technology Officer, he leads the company's security research team in investigating the application of secure coding and development techniques to improve web-based software development methodologies. Dan was the founding coordinator and chairman for the Java Users Group of San Antonio (JUGSA) and currently serves as the OWASP San Antonio chapter leader, member of the OWASP Global Membership Committee and co-lead of the OWASP Open Review Project. Dan has spoken at such international conferences as ROOTs in Norway, OWASP EU AppSec in Dublin and OWASP EU Summit in Portugal.

Download <07:49>

553 Views 0 Comments 0 References Permalink Tags: rsa_conference, podcast, rsac2012, san_francisco, rsa_conference2012, dan_cornell

RSAC2012 Podcast: EXP-402: Zero Day: A Non-Fiction View

Posted by Allison Lorentson Jan 23, 2012

Mark Russinovich, Technical Fellow, Microsoft Windows Azure Group

Last year, Mark Russinovich published the cyberthriller ‘Zero Day’ chronicling a terrorist scheme to unleash a cyber-apocalypse. In this session, Mark explains the scenario, tools, and techniques that the attackers would have used and their feasibility and risk with demonstrations and references to real-world incidents. He also proposes how we can defend systems against this threat. Spoiler alert!

Mark Russinovich is a Technical Fellow in the Windows Azure group at Microsoft working on Microsoft’s cloud operating system. He is a widely recognized expert in Windows operating system internals as well as operating system security and design. Russinovich is the author of the recently published cyberthriller Zero Day, co-author of the Microsoft Press Windows Internals books, and co-author of the Sysinternals Administrator’s Reference. Russinovich joined Microsoft in 2006 when Microsoft acquired Winternals Software, the company he cofounded in 1996, as well as Sysinternals, where still he authors and publishes dozens of popular Windows administration and diagnostic utilities.

Download <07:45>