Black Hat Asia
March 28-31, 2017
Singapore
Black Hat USA
July 22-27, 2017
Las Vegas, NV, USA
Black Hat Europe
December 4-7, 2017
London UK
3/27/2015
11:00 AM
Black Hat Staff
Black Hat Staff
Event Updates
50%
50%

Black Hat USA 2015: Defensive Bonus +3

Defense never seems to garner quite as much glory as offense, but good home-base security is what keeps the lights on and the enterprise humming. Today we'll check out three Black Hat USA 2015 trainings that aim to up your security game and take the "hard" out of hardening.

Hacks are hard to avoid. Even with perfect patching, systems may be compromised through 0-days that only attackers know of. But take heart, says Bastille Linux's Jay Beale, because there are great defensive technologies and techniques that allow you to deflect attacks even when patches don't exist. His hands-on Training Linux Lockdown and Proactive Security will teach you how to protect a Linux system from compromise... and prove that you succeeded (good for bragging rights). As you'll see, you don't have to work in a prison to become a master of lockdown.

Defending Linux boxes may be a well-established art, but hardening cloud instances is something of a newer beast. That'll be the focus of Rich Mogulli's Cloud Security Hands-On (CCSK-Plus), which will give you a solid foundation in cloud security and a full day of hands-on lab exercises. By the end you'll know everything needed to pass the Cloud Security Alliance Certificate of Cloud Security Knowledge (CCSK) exam, and just-added material will explore how you can leverage cloud characteristics and DevOps techniques to take cloud security to another level.

Last on our hitlist today is Active Defense, Offensive Countermeasures and Hacking Back, a Training which embraces the age-old idea that offense can be a key aspect of defense. Come learn how to force an attacker to take more moves to attack your network (increasing your ability to detect them), how to better identify attackers and their motives, and how to get access to the bad guy's system. Oh, a key point: You'll learn how to do all of this legally.

That's all our intel for today. Black Hat USA 2015 will occur at the Mandalay Bay resort in Las Vegas. It goes down August 1-6, so there's plenty of time to lock in early-bird discounts.

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
thehacktimes
100%
0%
thehacktimes,
User Rank: Apprentice
4/4/2015 | 1:18:27 PM
black hat
It will be amazing to see this bonus on this year black hat conf.
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Write a Caption, Win a Starbucks Card! Click Here
Latest Comment: You are infected!  @malwareunicorn to the rescue...  
Current Issue
Security Operations and IT Operations: Finding the Path to Collaboration
A wide gulf has emerged between SOC and NOC teams that's keeping both of them from assuring the confidentiality, integrity, and availability of IT systems. Here's how experts think it should be bridged.
Flash Poll
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2017-0290
Published: 2017-05-09
NScript in mpengine in Microsoft Malware Protection Engine with Engine Version before 1.1.13704.0, as used in Windows Defender and other products, allows remote attackers to execute arbitrary code or cause a denial of service (type confusion and application crash) via crafted JavaScript code within ...

CVE-2016-10369
Published: 2017-05-08
unixsocket.c in lxterminal through 0.3.0 insecurely uses /tmp for a socket file, allowing a local user to cause a denial of service (preventing terminal launch), or possibly have other impact (bypassing terminal access control).

CVE-2016-8202
Published: 2017-05-08
A privilege escalation vulnerability in Brocade Fibre Channel SAN products running Brocade Fabric OS (FOS) releases earlier than v7.4.1d and v8.0.1b could allow an authenticated attacker to elevate the privileges of user accounts accessing the system via command line interface. With affected version...

CVE-2016-8209
Published: 2017-05-08
Improper checks for unusual or exceptional conditions in Brocade NetIron 05.8.00 and later releases up to and including 06.1.00, when the Management Module is continuously scanned on port 22, may allow attackers to cause a denial of service (crash and reload) of the management module.

CVE-2017-0890
Published: 2017-05-08
Nextcloud Server before 11.0.3 is vulnerable to an inadequate escaping leading to a XSS vulnerability in the search module. To be exploitable a user has to write or paste malicious content into the search dialogue.

Dark Reading Radio
Archived Dark Reading Radio
In past years, security researchers have discovered ways to hack cars, medical devices, automated teller machines, and many other targets. Dark Reading Executive Editor Kelly Jackson Higgins hosts researcher Samy Kamkar and Levi Gundert, vice president of threat intelligence at Recorded Future, to discuss some of 2016's most unusual and creative hacks by white hats, and what these new vulnerabilities might mean for the coming year.