Tag Info

Hot answers tagged

39

I don't know a good reference to point to for further reading. Thus I will try to list a few time-wasters that I personally enjoy. In the following I will allow myself to differentiate between various styles of hacking competitions. I don't know if this is a canonical approach, but it will probably help explaining the differences between the ones I know: ...


11

I've been really enjoying: http://exploit-exercises.com/ From their site: Nebula - Nebula covers a variety of simple and intermediate challenges that cover Linux privilege escalation, common scripting language issues, and file system race conditions. Protostar - Protostar introduces basic memory corruption issues such as buffer overflows, format strings ...


9

In my opinion, being sent to the conference would... Keep your skills up to date in a fast moving industry Bring fresh ideas and perspective back to your company Allow you to network, e.g. scout new hires Increase the presence/awareness of your brand Provide a bonding experience with co-workers To help ensure success... Find out what the application ...


8

iCTF: http://ictf.cs.ucsb.edu/ DC3 (going on right now): http://www.dc3.mil/challenge/ NetWars SANS: http://www.sans.org/netwars/ There are also a lot of security CTF competitions at big conferences like Shmoocon, DEFCON, etc. I would recommend going to some cons for more info. It really depends what end goal you want, either CTF, forensics, live ...


8

You can search for "war games" keyword if you want "puzzles" such as those at OverTheWire.org. Here's a list of some other challenge sites: http://www.wechall.net/sites.php Unfortunately, I don't know of other high-profile competitions than those you've already mentioned. By the way, I think this question would fit a community wiki status.


4

Defcon always worked out as the most cost effective broad technical training for my penetration testers and technical security teams - even though I had to approve budget for them to fly from the UK to Vegas and stay there for the week. Defcon gives cutting edge training direct experience of 'black hat' activities value for money Blackhat is a much more ...


4

Capture.thefl.ag has excellent resources, Live CTF Calendar List of online practice CTFs/Games and write ups by winners of previous CTFs. It can't be more awesome than that.


3

Here's the answer to the technical part of the question. As for the legal bit, well... here's the technical bit: All three services are encrypted, but there's some concern about the scope of that encryption: Client-only encryption: Me Provider You +-------+ +----------+ +-------+ | Plain |========| Plain ...


3

SECURECOMM 2011 will be in London in September 2011.


2

If you are asking about an academic peer-reviewed conference on web security, I have some thoughts for you. First, the four most prestigious peer-reviewed conferences in computer security are generally considered to be IEEE Security & Privacy ("Oakland"), Usenix Security, ACM Computer and Communication Security (CCS), and ISOC Network and Distributed ...


2

This will depend an awful lot on what audience you want. Some conferences are more technical (eg Defcon), some are very commercial (RSA, Infosec, Blackhat), some are focused on Risk, Compliance, Governance, Audit, Security or a range of topics. If I were you I would look at their stated audience, their sponsors, their mission statement, previous years' ...


2

The Workshop on Information Systems Security Engineering (WISSE'11) will be held in London in June 2011. I have no prior experience with this workshop and I have no clue about whether it is a quality venue that's worth your time.


2

I have created a wiki detailing lots of different competitions, with descriptions, and links to write-ups and some resources for Beginners. See it there: http://ctf.forgottensec.com


2

This is not a shameless plug because I am not involved with this podcast at all but listen to the isdpodcast from this past week with Ed Skoudis. Don't remember the exact date but think it was Tuesday or Wednesday. Ed talks a lot about various challenges and CTF stuff.


2

Since you asked about WISE, I assume you are looking for an academic conference? Here is an excellent ranking of security/crypto conferences: Security (MS Academic) And here is the equivalent for WWW conferences: WWW (MS Academic) Not all of these conferences will accept a paper on web security, so you can look at the Call for Papers to check. Most ...


2

http://ctftime.org/ is a good site to know about the upcoming capture the flag events, also it has a ranking and write-ups that are great.


2

Jitsi offers video chat, comes with OTR/SRTP/ZRTP. https://jitsi.org/ The docs say that it can do multi-user video https://jitsi.org/Projects/JitsiVideobridge I have only tried the chat and phone function, they work very well


2

I would ask a lawyer about HIPAA compliance -- that's a legal question, not a technical one. However, I would consider the following: http://greenwirehealthcare.com/hipaa/is-voip-hipaa-compliant/ Skype and Google+ both encrypt data between the client and the server, but do not provide end-to-end encryption.


1

You can find the slides of 2012 here in the schedule... the other material can be found here Have a nice day ;-)


1

Are you sure you want to read research papers on this? If so, here are a few good ones: State of the Art: Automated Black-Box Web Application Vulnerability Testing, J. Bau, E. Bursztein, D. Gupta, J.C. Mitchell. IEEE Security & Privacy 2010. Why Johnny Can't Pentest: An Analysis of Black-box Web Vulnerability Scanners, A. Doupe, M. Cova, G. Vigna, ...


1

There is also the Spider Challenge from Spider.io (Web hacking). The goal: We’ve hidden fourteen codes in and around challenge.spider.io. With each code that you find, we’ll give you a clue to help you find the next code. As soon as you sign in to the challenge, the clock starts ticking. It’s a race against time. It’s a race against other hackers. Best ...


1

The Security Protocols Workshop tends to be held in Cambridge, UK each year.


1

There's a Cyber Forensics Conference, hosted by the University of Strathclyde scheduled for June in Glasgow


1

Update - for an academic, these will be appropriate: B-Sides London this month - some commercial, but a lot of research, both theoretical and applied DC-4420 regular meetings - not commercial Scottish Centre of Excellence for Security and Cybercrime Symposium - hosted by universities and trying to bridge the gap between academics and industry


1

I was on StumbleUpon and found this list of hacking games / challenges - I thought some of you might find them interesting.



Only top voted, non community-wiki answers of a minimum length are eligible