6pm – 9pm
UBS - 499 Washington Ave, Jersey City, NJ
OWASP Meetings are OPEN TO THE PUBLIC Event Donation $10.00 per person
Visit the OWASP website to see a full event schedule
6:00pm - 7:00pm – Marc Maiffret
Founder/CTO & Chief Hacking Officer eEye Digital Security As eEye Digital Security’s Co-Founder/CTO and Chief Hacking Office
7:00pm - 8:00pm – Tom Brennan
OWASP NJ President/AccessIT Group Risk Practice Manager - AccessIT
8:00pm - 9:00pm – Jeremiah Grossman, Founder/CTO - White Hat
Abstract: “HACKING INTRANET WEBSITES FROM THE OUTSIDE” This hour-long presentation will feature Jeremiah Grossman, WhiteHat Security Founder and CTO. Mr. Grossman will demonstrate: How a user is first infected or attacked using a malicious Web page or Cross-Site Scripting vulnerability; How a Web browser can be completely controlled or monitored remotely. How a Web browser can be used as a stepping stone to perform network reconnaissance on internal networks; and, How to exploit internal machines using a compromised Web browser.
11:00 am PDT
Register Online
WhiteHat Security founder and CTO, Jeremiah Grossman, will present new findings from the latest WhiteHat Security Web Application Security Risk Report. Based on WhiteHat's aggregate data from hundreds of web application assessments, Mr.Grossman's presentation will provide a first-of-its-kind look at the top vulnerabilities that attackers are exploiting to break into websites.
Please join us for an hour-long presentation as Jeremiah Grossman covers:
• Identify and discuss the top ten vulnerabilities
• Define the severity levels of Web application vulnerabilities
• Present strategies for complete website vulnerability management
Mr. Grossman is a world-renowned expert in website security and a founding member of the Web Application Security Consortium. He is a frequent speaker at industry events including RSA, CSI, Black Hat Briefings, ISACA’s Networks Security Conference, NASA, the Air Force and Technology Conference, ISSA and Defcon.
Complete a brief online registration form or paste the following link into your browser's address bar, https://whitehatsec.market2lead.com/go/whitehatsec/Stats041107. WhiteHat will send you a confirmation email with the URL and appropriate credentials to participate.
Attendance is limited to the first 100 registrants, so please register early to reserve your space. All registrants will receive a copy of WhiteHat's Web Application Security Risk Report.
Tribeca Grand Hotel, New York, NY
7:30 am
Register Online
2007 will mark a significant milestone in the field of website security. With the wave of new Web 2.0 features and functions, completely protecting your Web applications has become even more complex and difficult to manage. We know that 8 out of 10 websites are vulnerable to attack. What are the top vulnerabilities threatening your websites? How do you take control away from the hackers and protect your company and customers?
WhiteHat Founder and CTO, Jeremiah Grossman will open the program with findings from the most recent WhiteHat Website Security Risk Report. Learn about the vulnerabilities plaguing real companies across the Web. WhiteHat CEO, Stephanie Fohn, will then provide guidance on what security professionals need to do to fight back against website attacks.
7:30 am - 8:00 am: Registration and Breakfast
8:00 am – 9:30 am: Program
Welcome: Stephanie Fohn, president and chief executive officer, WhiteHat Security
Top Ten Website Vulnerabilities: Jeremiah Grossman, founder and CTO, WhiteHat Security
Five Stages of Website Security Grief: Stephanie Fohn, president and chief executive officer, WhiteHat Security
Wednesday, May 30, 2007
2007 will mark a significant milestone in the field of website security. With the wave of new Web 2.0 features and functions, completely protecting your websites has become even more complex and difficult to manage. We know that 8 out of 10 websites are vulnerable to attack. How do you take control away from the hackers and protect your company and customers?
- Reveal the top 10 attacks of 2006 by creativity and scope
- Predict what these attacks mean for websites in 2007
- Present strategies to protect your corporate websites