[Owasp-denver] June Meeting
David.Byrne at echostar.com
Tue Jun 5 14:20:46 EDT 2007
The next meeting of the Denver OWASP chapter will be on June 21st at
7:00PM. The location will be announced shortly. Refreshments will be
provided by Symplified (www.symplified.com).
The technical presentation will be by David Byrne from EchoStar
Satellite. He will speak on Anti-DNS pinning attacks, a technique that
allows an attacker to leverage cross-site-scripting to turn a web
browser into a proxy server. This is done using standard browser
functionality; no client-side vulnerabilities are required. The
end-result is that internal servers are not well protected by standard
network firewalls. The presentation will focus on a live demonstration
of an attack.
The non/less technical presentation will be by David Stevens from
Symplified. He will discuss methods to calculate Return on Security
Investment (ROSI). Considering how difficult it often is to get funding
for security initiatives, this is a useful skill for any security
professional or security manager.
Please reply (not reply all) to this email with RSVPs.
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Owasp-denver