Announcement of Security focused XXVI DevClub.lv

 Hi,

Everybody knows that "Merry Christmas" is "Merry" only if it is Safe and Secure, therefore logically this time we will focus on Security issues 🙂

Please pay attention, that this time we meet at Wednesday evening at 10th of December 18:30 at TechHub Riga (Kaļķu iela 12/14 (entrance from Kalēju iela)).

Agenda:

• Agris Krusts from IT centrs will talk about most common web applications security problems found in systems made in Latvia (slides of presentation). Statistics will come from data gathered in penetration tests. Most problems will be illustrated with examples and some will be real applications, but not from our penetration tests.
  (Language – Latvian)
  Tags: web security, OWASP Top 10

  Agris Krusts has more than 20 years experience in IS security, UNIX system administration and software development and more than 10 years in security training. From 2000 is consultant and owner of information security consultancy SIA IT Centrs; worked as security trainer for Zone-H in Latvia, Italy, Russia, Netherlands, United Kingdom and Korea; in 2004 founded online media company SIA Nerealitate which specializes in online crowd sourcing platform development, in 2012 sold crowd sourcing news and entertainment platform spoki.lv to Schibsted media group.
   

• Peter Gubarevich from New Horizons Latvia and Toms Pēcis from Lattelecom once again will bring you to the world of hackers. They will provide two sessions:

  1) Most of you probably already know that SQL Injection vulnerability can be very dangerous. Toms and Peter will demonstrate how exactly an attack against this vulnerability is executed. Hearing it for a hundred times is not as good as seeing it once, isn’t it? They will also explain how it is possible to lower the SQL Injection exploitation risks. (aprx 40min session)

• 2) In the second part, they will show you a method of lowering risks of malware infection and illegal software installation — Application Whitelisting (AWL), which in most scenarios is much more effective than any antivirus you could use. Peter and Toms will also explain why it is important for Developers to know and care about the AWL. (aprx 40min session)

  (Language – Latvian)
  Tags: Security, AWL, SRP, SQL, Injection, Whitelisting, Hacker, CEH, MVP 

  Peter Gubarevich is an IT and Security Professional with more than 15 years experience. He holds Microsoft Certified Trainer, Certified EC-Council Instructor certifications, and also is recognized as Microsoft Security Trusted Advisor, and  MVP:Enterprise Security 

  Toms Pēcis is an IT and Security Professional with more than 10 years of experience. He is also Certified Ethical Hacker and MCITP:Enterprise Administrator.