Trustwave SpiderLabs to Unveil New Research, Lead Hands-On Demos at Upcoming Security Events

Cyber Security Leader to Appear at Fourteen Events at Black Hat USA, DEF CON 20, Security BSidesLV End Quote

(1888PressRelease) July 20, 2012 - SINGAPORE - Experts from Trustwave, a leading provider of cloud-based compliance and information security solutions, will participate in fourteen sessions during Black Hat USA, DEF CON 20 and Security BSides Las Vegas, 25-29 July in Las Vegas. The discussions will include topics such as: "ModSecurity as a Universal Web Protection Tool," "Shortcomings of Google's Bouncer," "Mobile Data Leakage," and a live demonstration of "Opposing Forces." These sessions will address today's most crucial cybersecurity challenges.

More details about some of the week's most exciting activities and a full schedule of Trustwave's involvement are below:
"ModSecurity as a Universal Cross-Platform Web Protection Tool" at Black Hat USA and DEF CON 20
Presented by Trustwave's Ryan Barnett with Microsoft on July 25, 1415 PDT (Black Hat Arsenal Demo at 1530 PDT).

ModSecurity, the open-source software managed by Trustwave's security team, is already the most widely used Web Application Firewall, protecting millions of websites. During this presentation, Trustwave will announce that ModSecurity has now become the first ever free cross-platform Web Application Firewall, as it will be available for Microsoft's IIS and Nginx platforms. A variety of security advancements and advantages provided by this breakthrough will be discussed, including detection of zero-day attacks on these online servers.

"Adventures in Bouncerland" at Black Hat USA
Presented by Trustwave's Nicholas J. Percoco and Sean Schulte on 25 July, 1700 PDT.
To prevent malicious applications from entering its Android Market, Google introduced a security service called Bouncer. In this presentation, Percoco and Schulte will demonstrate how they discovered some key weaknesses in the system and created an app that beat Google's Bouncer. This talk will analyse the issues being faced by mobile application markets in their war against malware and offer new ideas on how to strengthen defences.

"OPFOR 4Ever" at DEF CON 20

Presented by Trustwave's Tim Maletic and Christopher Pogue on 29 July, 1000 PDT.
Opposing Forces, or OPFOR, provides an exercise focused on improving detection and response through the principle of "train as you fight." Maletic and Pogue will demonstrate how they have applied OPFOR to build a continuous feedback loop between penetration testing and incident response. In OPFOR 4Ever, the defence and offense actually train each other. Attacks will be demonstrated from both a defensive and offensive point of view. Then, using the replay, they will develop the attacks to a form more suitable for real-world penetration testing. The key idea here is to better simulate what "black hat" hackers actually do in order to best understand how to defend against them.

"Mobile Snitch -- Devices Telling the World About You" at Security BSides Las Vegas

Presented by Trustwave's Luiz Eduardo Dos Santos and Rodrigo Montoro on 26 July, 1000 PDT.
In the past few years, we have not only seen a significant growth in use of mobile devices, but also the usage of multiple mobile devices at one time. The nature of mobile Wi-Fi device operations, combined with the lack of user awareness, could lead to someone not only knowing things about your life but even exactly who you are. This type of "unwanted sharing" can even occur within private corporate networks, as will be shown. Most importantly, this presentation will cover the proof-of-concept for "Mobile Snitch," which will automatically gather information about these devices once in the same network. The end goal is to determine the identity of the person accompanying each device.

Trustwave's Full Schedule of Events
• "ModSecurity as a Universal Cross-Platform Web Protection Tool" at Black Hat USA
Ryan Barnett with Microsoft on 25 July, 1415 PDT (Black Hat Arsenal Demo at 1530 PDT)
• "Adventures in Bouncerland" at Black Hat USA and DEF CON 20
Nicholas J. Percoco and Sean Schulte on 25 July, 1700 PDT and 29 July at 1200 PDT
• "Stamp Out Hash Corruption, Crack All The Things" at Black Hat USA and DEF CON 20
Jonathan Claudius on 26 July, 1415 PDT, and 28 July, 1100 PDT
• "Blended Threats and Javascript: A Plan for Permanent Network Compromise" at Black Hat USA
Joshua Brashars on 26 July, 1530 PDT
• "Hookin' Ain't Easy: BeEF Injection with MITM" at Black Hat USA
Steve Ocepek and Ryan Linn, 26 July, 1700 PDT
• "Mobile Snitch - Devices Telling the World About You" at Security BSides Las Vegas
Luiz Eduardo Dos Santos and Rodrigo Montoro on 26 July, 1000 PDT
• "Router of Darkness, Techniques for Embedded System Hacking" at Security BSides Las Vegas
David Bryan on 26 July, 1700 PDT
• "The Patsy Proxy: Getting Others to do Your Dirty Work" at DEF CON 20 Skytalks
Daniel Crowley on 28 July, 1000 PDT
• "Exploit Archaeology: Raiders of the Lost Payphones" at DEF CON 20
Joshua Brashars on 28 July, 1100 PDT
• "Builders Vs. Breakers" at DEF CON 20 Skytalks
Jonathan Claudius on 28 July, 1500 PDT
• "OPFOR 4Ever" at DEF CON 20
Tim Maletic and Christopher Pogue on 29 July, 1000 PDT

About Trustwave
Trustwave is a leading provider of compliance, application, network and data security solutions delivered through the cloud, managed security services, software and appliances. For organisations faced with today's challenging data security and compliance environment, Trustwave provides a unique approach with comprehensive solutions that include its TrustKeeper® portal and other proprietary security solutions. Trustwave has helped hundreds of thousands of organisations - ranging from Fortune 500 businesses and large financial institutions to small and medium-sized retailers - manage compliance and secure their network infrastructures, data communications and critical information assets. Trustwave is headquartered in Chicago with offices worldwide. For more information, visit https://www.trustwave.com.

Trustwave:
www.twitter.com/Trustwave
www.facebook.com/Trustwave

Media contact:

Citra Prasetyo
Asia-Pacific Connections for Trustwave
citra ( @ ) apconnections dot com
+65 6334 9045

###

space

Other Related Press Releases