CHICAGO (October 21, 2010) - Security experts from Trustwave, a leading provider of information security and compliance solutions, will present at ToorCon 12 in San Diego, October 22 through 24. The presentations will be delivered by members of SpiderLabs, the advanced security team at Trustwave responsible for application security, incident response, penetration testing, physical security and security research.
- David Bryan will deliver Pentesting for Fun...and Profit, which will explore real world penetration testing methodologies, tools and techniques and how the service has evolved over the past few years. He'll provide telling examples of how a single small vulnerability nearly led to full-infrastructure compromise. From internal and external networks to wireless and physical, he'll teach attendees how to gain unauthorized access to systems to obtain data critical to the business infrastructure resulting in better protection.
- He will also deliver, Building the DEFCON Network, Making a Sandbox for 10,000 Hackers, which will explore ways to build a secure network infrastructure using enterprise-class hardware while on a tight budget. The presentation will consider the evolution of networks, which technology has exhibited proven capabilities during the last ten years, and those ideas that have fallen apart. He'll review the implementation of security controls and how to properly define segmentation, which are critical components often overlooked when building a network infrastructure to avoid attacks and traffic interception.
- Nathan Drier will present Intro to Packet Capture Analysis. Packet capture analysis is decoding the languages that computers use to speak to each other. If an attacker can intercept that communication, they can extract all types of information such as visited Web sites, e-mails and attachments, instant messages, usernames and passwords, and much more. This presentation will review several tools and techniques used to extract this information, which can help system administrators track down malware, uncover system abuse and help with basic troubleshooting.
- Rob Havelt, with a co-presenter, will deliver Exploiting a PCI Compliant Network: A How-to Guide, which will explore the inaccurate perception that compliance with the Payment Card Industry Data Security Standard (PCI DSS) automatically ensures an organization's security. This presentation will explore ways to breach a PCI DSS compliant network, demonstrating how drastically limiting the scope of the PCI DSS can undermine all compliance efforts because assessors are only privy to the infrastructure in scope. This technical and tactical presentation will utilize penetration tests, incident data and assessor information to formulate exploitation scenarios from common to more rare and exotic techniques. It will also address the importance of building an overall security strategy into all compliance efforts.
- Eric Monti will deliver iPhone Rootkit? There's an App for That, where he'll present tools and techniques for developing rootkits on the iPhone. He will also be reviewing exploitation of a vulnerability that allows installation of a rootkit based on the jailbreakme.com remote client-side exploit. The implications for the personal owner of a compromised iPhone are serious and could cause the loss of critical data when considering the advancement of mobile banking applications and SMS use for account transfer authentication.
- Rodrigo Montoro will present Scoring PDF Structure to Detect Malicious Files which will look at the recent surge in PDF malware attacks. People fall victim to this type of attack after launching PDFs from email attachments or downloading content from malicious Web sites. Detecting malicious PDFs is complex because there are thousands of ways to write the same content, malicious or secure. While deep analysis of these individual attributes is a daunting task, focusing on combinations of them offers a unique, behavioral approach to detection. This presentation will discuss PDF structure, compare real malicious PDF samples to non-malicious content and demonstrate how analyzing the file structure with a scoring system can greatly aid in determining whether a file is malicious or not.
"A poor security strategy can seriously hinder any compliance effort," said Robert J. McCullen, chairman and CEO of Trustwave. "It's critical for organizations to weave security best practices into all compliance efforts to best protect critical data."
"We're excited to share our information security expertise with attendees and explore ways we can help them better secure their assets," said Nicholas J. Percoco, senior vice president and head of Trustwave's SpiderLabs. "In addition, we're looking at present-day malware attacks such as PDF and iPhone exploits to help an organization understand these security implications."
About Trustwave
Trustwave is a leading provider of on-demand and subscription-based information security and payment card industry compliance management solutions to businesses and government entities throughout the world. For organizations faced with today's challenging data security and compliance environment, Trustwave provides a unique approach with comprehensive solutions that include its flagship TrustKeeper® compliance management software and other proprietary security solutions including SIEM , WAF , EV SSL certificates and secure digital certificates . Trustwave has helped hundreds of thousands of organizations-ranging from Fortune 500 businesses and large financial institutions to small and medium-sized retailers-manage compliance and secure their network infrastructures, data communications and critical information assets. Trustwave is headquartered in Chicago with offices throughout North America, South America, Europe, Africa, Asia and Australia. For more information, visit https://www.trustwave.com/en-us/.
