Thursday, October 30, 2008

OWASP AppSec Asia Conference 2008, Taipei

I feel very pleasure to be invited and attend to the AppSec conference. Wayne from Amorize and his team made every efforts from preparing, organizing to implementing this conference. There were over 1200 attendees in this conference. Even it is not for profit and Wayne needs to get big money from his pocket for this conference. I am not going to just say "It is a good job", in fact, I am deeply touched and respecting enthusiasm and passion from him and his team.

Meanwhile, our OWASP chapter leaders in Asia Pacific region could gather together and discuss our ideas and how we promote OWASP APAC and its future directions. The meeting lasted 3 hours and it was very fruitful and constructive. (Be frank, the meeting room like those Chinese politican meeting room)

In addition, I could meet different chapter leaders, speakers and professionals and you could find their sessions from the conference page.http://www.owasp.org/index.php/OWASP_AppSec_Asia_2008. Meanwhile, you should find their professional profiles.

Moreover, I am thankful to all of you to attend to my session about Metasploit and Meterpreter. As HD Moore and his team are very brilliant to establish the exploitation framework. I do want to introduce it to you guys about its powerand automation. At the same, apart from the tools, audience could know once the server is exploited, what should the penetration testersor attackers do to make post exploitation and cover their tracks? It is helpful to people to reference if theirapplications/systems are being pentested as well.

I believe some slides will be published to there. At the same time, I have linked with some blogs/research site from them and here you are:Wayne Huanghttp://www.armorize.com/corpweb/en/about/armorize_teamhttp://www.armorize.com/

Robert Hansenhttp://www.sectheory.comhttp://ha.ckers.org/

Steven Adairhttp://www.shadowserver.org/wiki/

Tim Basshttp://www.thecepblog.com/2008/10/14/owasp-appsec-asia-2008-taiwan/

Let us keep our passion rolling for OWASP AppSec Conference!

No comments: