Date: March 26, 2007

Time: 6:30 PM

Phoenix, AZ - for location information, see http://www.azspf.org/node/125

Adam Muntner will be speaking about web application hacking tools and techniques.

For more information, visit
http://www.issa-oc.org/html/LocalEvents2007.html
Date: Jan 11th
Time: 12:00 PM - 1:30 PM
Location: The Sports Club LA/Orange County
Topic: Schrodinger’s Hack - Removing Uncertainty from Application Security
Abstract:
Recognizing the competitive advantage of speed to market, organizations are under pressure to develop and deploy applications as rapidly as possible. According to Gartner Group, 75% of attacks are now focused against the application layer. The combination of rapid development deadlines with the most targeted attack vector often leads to insufficient security analysis, testing, and validation through the entire software development lifecycle. The results are predictable - regulatory compliance headaches, erosion of customer confidence, and ultimately financial loss.

By learning the tools and techniques used by crackers to penetrate applications, participants will learn how to write code resistant against these techniques. Examples covered include SQL injection, LDAP injection, cross site scripting, parameter manipulation, Google hacking, and web services hacking.

About the Speaker:
Mr. Muntner is a Partner of QuietMove, Inc., an information security consultancy specializing in enterprise risk assessment. He has over a decade of combined information technology experience in information security, application development, systems architecture, and security operations management. Before founding QuietMove, Mr. Muntner had managed and performed over 100 risk assessments for government agencies, health care systems, public utilities, and private enterprise. Previously, he was an IBM Penetration Testing Subject Matter Expert and founding member of IBM’s Ethical Hacking Center of Competency. Later, Mr. Muntner was the Information Security Officer for a publicly traded company with offices in 12 countries. Mr. Muntner has been evangelizing web application security since 1998 and speaks regularly at Information Security conferences and for private audiences