ERNW on Tour

Conferences:

TROOPERS10

Heidelberg, 8-12 March 2010

TROOPERS10 - This time it's a home match.

This year we're bringing back the action right to the place where everything started: Heidelberg, Germany.

In 2007 the idea of a security conference without the usual product presentations, marketing blabla, and bull*ht-bingo was born – just pure practical IT security. After an enthusiastic response from our audiences in Munich we decided to evolve the concept into a full-blown conference combined with a series of workshops and round tables.

We're inviting (C)ISOs, IT auditors, sysadmins, security consultants and everyone who is involved with IT security to come to Heidelberg and get in touch with leading experts from all over the world. A number of workshops on monday and tuesday covers highly relevant topics in detail, on wednesday and thursday you'll learn about the latest developments, threats and achievements from world class security evangelists, experts and hackers. And on friday we seat you on round tables right next to the speakers and fellow experts. You'll be able to discuss your own strategies and concerns with them face-to-face. You will be listened to, because in the end of the day we're all the same: TROOPERS in the infosec world.

TROOPERS10 is hosted by ERNW GmbH, an independent information security consultancy and assessment company from Heidelberg, Germany. In the past years, speakers from ERNW were invited all around the world to present their latest ITsec research results and to share their knowledge within the global hacking and infosec community. With this global experience in mind, in 2008 ERNW decided to launch an international conference in Germany. Reconfirmed by the success of the year 2009 edition we decided to step up and take this thing to the next level. Once more it's going to be an event unlike most other "security conferences": No pointless marketing talks, just high-end workshops with hands-on experiences and most important: You'll get real answers and practical benefits to meet today´s and tomorrow's threats.

You're a TROOPER and your next boot camp is scheduled for 8 - 12th of March 2010, Heidelberg, Germany.

Please visit www.troopers.de for more information and sign-up.

Just4Meeting

Lisbon, 25-27 June 2010

Lecture - All Your Packets Are Belong to Us – Attacking Backbone Technologies

Speaker: Daniel Mende

Daniel Mende is a German security researcher specialized on network protocols and technologies. He’s well known for his Layer2 extensions of the SPIKE and Sulley fuzzing frameworks, he has discussed new ways in building botnets and presented on protocol security at many occasions including Troopers08, ShmooCon and Blackhat. Usually he releases a new tool when giving a talk.


Workshop - Can Data Leakage Prevention Prevent Data Leakage?

Speaker: Matthias Luft

Matthias is a seasoned pentester with vast experience in corporate environments. Over the years he focused on evaluating and reviewing all kinds of applications. So he’s one of the first researches who revealed major design flaws and vulnerabilities in the approach of Data Leakage Prevention . He is a regular speaker at international security
conferences and will happily share his knowledge with the audience.

Visit www.just4meeting.com for more information.

Howto: Hardening Cisco Access Points
In this document a basic hardening methodology for Cisco Access Points (of the 1200 series, most steps should apply to others as well) is described. [More]
Security Testing
Testing IT security is one of the core competences of ERNW. Many of our customers get their IT infrastructure and (Web) applications checked on a regular basis. This may either be done on a very technical level in terms of penetration testing or in a more formal way in terms of general security audits, during which we verify the IT Security Compliance of your company compared to best practices according to ISO17799/ISO27001 ... [More]
Research & Technology-Evaluation
Research is the foundation of our Know-How leadership. The objections of this work is to unveil security flaws and vulnerabilities in protocols, technologies and products. Some findings derive from design-flaws, some from poor implementation on a technical level.... [More]