Security Feeds

The Pen Testing Perfect Storm Webcast Series with Skoudis, Wright, Johnson

Last Updated on Monday, 26 April 2010 23:09 Written by Administrator Monday, 26 April 2010 21:27

(From ethicalhacker.net)

If Ed Skoudis' webcast series entitled Penetration Testing Ninjitsu got your blood pumping, then this series will make your brain explode. EH-Net is proud to join forces with SANS and Core Security to bring you an exciting, new webcast series. This idea has been floating around for some time, so I can't tell you how jazzed I am with the final result.

The first webcast in this series, “Combining Network, Web App and Wireless into the Ultimate Penetration Test,” will take placeOct 15, 2008 @ 1:00 PM EST. Following the webcast, attendees are invited to keep the conversation going with Kevin Johnson, Josh Wright and Ed Skoudis fromInGuardians during discussions hosted by The Ethical Hacker Network (EH-Net), a free online magazine for security professionals. For at least one week after each webcast, the crew will make themselves available to answer your questions directly and candidly in EH-Net’s Community Forums. All discussions will remain freely available on EH-Ne

(from Sans) 

Combining Network, Web App and Wireless

into the Ultimate Penetration Test

The Pen Testing Perfect Storm webcast series brings you a deluge of security assessment tactics and strategies from the combined forces of three penetration testing heavyweights in the SANS faculty:

• Kevin Johnson: web guru and senior security analyst with Intelguardians 
• Josh Wright: wireless wizard and senior security researcher with Aruba Wireless Networks 
• Ed Skoudis: network master and co-founder of Intelguardians

This trio of experts will show you how to assess an organization's real business risks by taking a holistic, comprehensive look at your information security - just as determined and skilled attackers do in the wild. You'll learn techniques for safely replicating chains of threats that can pivot throughout your infrastructure, including:

• Web -- SQL injection, cross-site scripting, remote file inclusion, etc. 
• Wireless -- wireless LAN discovery, crypto and protocol attacks, client duping, etc. 
• Network -- port scanning, service compromise, client-side exploitation, etc. 

This free webcast series is ideal for anyone seeking to go beyond point-focused, "tunnel-vision" assessments to real-world penetration testing - mimicking the sophisticated, multi-staged threats that pose the most significant information security risks to organizations today. 
Sponsored by: Core Security Technologies