Technical Level: Highly Technical. Speaker: Various Attendees In this presentation, we'll cover the highlights of the conference. The new exploits and tool releases, any new research and make sure you know what you missed out on! Presentation on Metasploitation: Presenter's Website Presentation on Pentium Exploit: PPT Here Reference: CanSecWest/Core Website...

Read More »

Technical Level: Intermediate Technical. Topic: The Changing Threat Environment Speaker: Mike Murray With the newfound commitment to security by vendors, and the publicity that vulnerability research has garnered, the threat landscape has changed significantly since the turn of the century. Mike Murray, nCircle's Director of Vulnerability and Exposure Research will discuss the reasons behind and the consequences of these changes. Presentation: PPT Here...

Read More »

Technical Level: Intermediate. Topic: Risk and Perils of Ignoring the Insider Security Threat Speaker: Carl Bonds, CEO, CSO for Elytra Enterprises There is a tremendous body of evidence that now shows how important it is to protect the organization and its data against malicious and/or inadvertent insider threats. Whether you are operating a call center with casual or semi-casual computer savvy employees plugging in their 60 GB IPODS daily, or allowing executives to carry corporate...

Read More »

Technical Level: Intermediate. Speaker: Bruce Cowper, Microsoft Canada Many organizations have both heterogeneous and geographically distributed systems. Branch offices, Identity Management, collaboration and interoperability present their own challenges. With the release of Windows Server 2003 R2, there are many new and improved features that help you with these scenarios. In this session we will be taking a Security focus on real world scenarios based around Windows Server 2003...

Read More »

Technical Level: Highly Technical. Speaker: Jeremy Richards Linux Live CDs - A penetration testers dream come true -- It's a fully operational linux distribution running in RAM. Hundreds of auditing tools, exploits, scanners, and more. Turn your laptop into a professional auditors platform in a single reboot. We will cover WHAX (previously called Whoppix) and Auditor - two seperate LiveCDs. Live demonstrations of: Audit wireless security, Cracking WEP in 10minutes -- Kismet...

Read More »

Technical Level: Non-Technical. Speakers: Bernedette Schell, Michelle Warren, Harry Benz This month’s TASK meeting will focus on beginning a new career in Information Security, or enhancing your technical and social skills to improve your success in your present career. Our invited speakers will cover the current IT and IS environments in Canada, the changing role of women, technical and soft skills, and the process of preparing for, and successfully applying for, positions in security. Speakers...

Read More »

Technical Level: Highly Technical. Speaker: Brian Bourne and Christopher Diachok Miss us at InfoSec? Here's your chance to see a server behind a firewall, running current A/V being rooted! Rootkits are a word familiar to everyone in the security community, but generally only available to the underground community. A rootkit represents one of the most powerful and dangerous weapons in a hackers toolkit. You need to learn what the blackhats already know. This session will demonstrate...

Read More »

Technical Level: Varied. Some Deep, some not. Speaker: Various DefCon Attendees In case you didn't already know - DefCon is "The largest underground hacking event in the world". If you haven't been, you simply don't know what you're missing. In this presentation, we'll cover the highlights of the conference. The new exploits and tool releases, any new research and make sure you know what you missed out on! Also check the DefCon 13 website....

Read More »

Technical Level: Introduction to Cryptography Speaker: Robert Beggs Cryptography, or “hidden writing”, allows the confidentiality and integrity of electronic data to be preserved when stored or transmitted across an insecure medium such as the Internet. This seminar will provide a hands-on approach to understanding and implementing cryptography. Topics covered will include steganography, private key and public key encryption, a brief overview of Public Key Infrastructure (PKI), hashing...

Read More »

SQL Injection Speaker: Cameron "nummish" Hotchkies, B.Eng Web application attacks take advantage of the fact that most firewalls allow traffic to pass through to the web server. SQL injections, one of the more powerful web attack methods, are fairly easy to learn and understand. This presentation will show everyone how different SQL injections work, as well as useful ways that they can be mitigated by developers. Expect to see demos and code for this presentation. Cameron is one of the founders...

Read More »