JEREMIAH GROSSMAN OF WHITEHAT SECURITY TO PRESENT
“HACKING INTRANET WEBSITES FROM THE OUTSIDE” AT RSA CONFERENCE

WhiteHat’s Founder and CTO to Deliver Technical Presentation Demonstrating the
Latest Web Threats at the 2007 RSA Conference

Who: Jeremiah Grossman, CTO and Founder of WhiteHat Security, a leading provider of website vulnerability management services

What: Session: Hacking Intranet Websites From the Outside (Session code: HT2-107)
When: Tuesday February 6, at 4:10-5:20p.m. PST
Where: RSA Conference – Green Room 104

WhiteHat Security today announced that Jeremiah Grossman, the Company’s founder and CTO, will lead a technical session at this year’s RSA Conference in San Francisco. The presentation, “Hacking Intranet Websites from the Outside,” will address the increasing prevalence of Javascript malware, the threats associated with it, why organizations must understand it and how they can defend against it.

Session learning objectives include:
• How a user is first infected or attacked using a malicious Web page or Cross-Site Scripting vulnerability;
• How a Web browser can be completely controlled or monitored remotely;
• How a Web browser can be used as a stepping stone to perform network reconnaissance on internal networks; and,
• How to exploit internal machines using a compromised Web browser.

Grossman will demonstrate a wide variety of cutting-edge website attack techniques and describe best practices for securing websites and users against these threats, including:
• Port scanning and attacking intranet devices using JavaScript;
• Blind Web server fingerprinting using unique URLs;
• Discovery NAT'ed IP addresses with Java Applets;
• Stealing Web browser history with Cascading Style Sheets;
• Best-practice defense measures for securing Websites; and,
• Essential habits for safe Web surfing.

In addition to his position at WhiteHat, Jeremiah Grossman is a world-renowned expert in website vulnerability management and a founding member of the website Security Consortium (WASC). He is a frequent speaker at industry events including the Black Hat Briefings, ISACA’s Network Security Conference, NASA, the Air Force and Technology Conference, ISSA and Defcon. Grossman is also a featured expert and frequent contributor on TechTarget’s SearchAppSecurity.com site.

About WhiteHat Security
Headquartered in Santa Clara, California, WhiteHat Security is a leading provider of website vulnerability management services. WhiteHat delivers turnkey solutions that enable companies to secure valuable customer data, comply with industry standards and maintain brand integrity. WhiteHat Sentinel, the company’s flagship service, is the only solution that incorporates expert analysis and industry-leading technology to provide unparalleled coverage to protect critical data from attacks. For more information about WhiteHat Security, please visit our website, www.whitehatsec.com.

###