First BruCON 0x04 volunteer meeting on 24-May in Ghent

We are gearing up towards BruCON 0x04, which will take place in Ghent this year.


Join us for the first volunteer meeting on May 24 in Ghent!


Timing is:
17:00 at the Aula to recon the venue
18:00 at Patrick Foleys for the meetup
19:30 at Patrick Foleys for dinner afterwards


Address Aula: Voldersstraat 9, 9000 Gent
Address Patrick Foleys: Recolettenlei 10, 9000 Gent http://patrick.foleys.be/


Please indicate when you come on doodle to adjust our reservation for dinner: http://www.doodle.com/6r4st6rxap7uig92 ?


PS: if you where a registered volunteer in 2011, BruCON will cover your dinner.


See you there,


Kind regards,


Seba

Getting around in Ghent!

As you all start registering and looking for places to stay, we have created this Google Map to give you a good overview of import locations. The red pin is the conference location, the red bed the conference hotel. The blue pin is the train station, where you will probably arrive if you come from far away and the yellow pins are hotels in the vincinity of the conference locations !

Have fun! see you in September !!


View Brucon 2012 in a larger map

Registrations are open

Oh boy, have the past few weeks been a rollercoaster ride.  Putting up a registration engine for a conference is one thing, putting up one that you know will be scrutinized by the very public it is intended for is a completely different ballgame :-) I can tell you that Seba, Xavier and a few other people on the crew have pulled their weight and made it happen.  A special shout out should go out to the people at StratSec who have generously offered to put our precious registration site to the test by bashing it like an APT going full ninja on a springroll. And with that, it is LIVE :

We are obviously also proud to announce the first talks and workshops for BruCON 2012 and we're pretty sure that, while the proof is in the pudding, it looks tasty already :

TALKS

• Georgia Weidman - Introducing the Smartphone Penetration Testing Framework
• Robert McArdle -  HTML5 - A Whole New Attack Vector
• Raul Siles - Security of National eID (smartcard-based) Web Applications
• Andreas Bogk - Herding RATs
• Josh Corman and Jericho - Anonymous: Implications and Inevitabilities of a Global Hacktivism Movement
• (there is a sixth talk selected but the speaker is in the process of making sure her agenda is aligned)

WORKSHOPS

• Didier Stevens - Windows x64: The Essentials
• Advanced Chrome Extension Exploitation - Kyle 'Kos' Osborn & Krzystof Kotowicz
• Michael Sikorski & William Ballenthin - Clearing the Red Forest
• Abraham Aranguren - Introducing OWTF

Here's the ticket options we have lined up for you :

Ticket options

Basic ticket (no invoice):

• Until 31th of May: 100 Euro (limited to 100 seats)
• Starting 1th of June or after 100 tickets: 160 Euro
• Student tickets are 50 Euro. You will have to show a valid Student ID at the registration desk on September 26th.

Basic tickets includes VAT but no invoice.

Business ticket:

• Until 31th of May: 275 Euro
• Starting 1th of June: 375 Euro

https://registration.brucon.org

Registration for training

Training, we have training to and you can register for those through the same site ! Here's the list of trainings lined up for you : 

• Metasploit for Penetration Testing by Georgia Weidman
• Cyberwar: using the techniques and tactics of APT's in Penetration Tests by Joe McCray
• Corelan Live! by Peter Van Eeckhoutte
• Visual Analytics - Delivering Actionable Security Intelligence by Raffael Marty
• Hacking IPv6 Network by Fernando Gont
• Red Team Testing by Ian Amit and Chris Nickerson
• Assessing and Exploiting Web Applications with Samurai-WTF by Raul Siles

more details about the various trainings can be found here : http://2012.brucon.org/index.php/Training

The price for the 2 day courses is 945 Euro early bird (+ VAT) per attendee. After 1st of June this will become 1045 Euro (+ VAT) per attendee.

https://registration.brucon.org

Our first winners announced.

Hello BruCONneers,

a few weeks ago in preparation for our training schedule for September, we launched a short questionnaire so we could better understand you as an attendee. Just to make sure that we find the best trainings in the areas that you value most.

From the submitters, three people were randomly selected and receive a free BruCON 2012 conference ticket. These people are :

• Tim Dams from Belgium
• Tahir S from Australia
• VB from Belgium

We're looking forward to having them and all of you over for another BruCON edition.

While we're at it, in the coming days we will announce the final list of trainings for BruCON 2012, our unreasonably crazy party AND the date on which tickets will go on sale ! We live in exciting times ...

Official Announcement: BruCON keynotes

I am proud and excited to officially announce our two keynote speakers for BruCON 2012.  Truth be told we've had some quite exciting names join us in the past 3 years and that doesn't make it any easier to find persons of the same calibre to jiggle our brains. We aren't necessarily looking for big names but rather for people who know what they are talking about and people that we trust in engaging and entertaining our audience.

Without further adue, may I introduce you to ... the BruCON 2012 Keynote Speakers !

Ed Skoudis

Ed Skoudis is a founder and senior security consultant with InGuardians and the founder of Counter Hack Challenges, a company that creates Capture the Flag challenges for professionals, college students, and high school kids.  Ed's expertise includes hacker attacks and defenses, the information security industry, and computer privacy issues, with over fifteen years of penetration testing and incident response experience and the scars to show for it. Ed authored and regularly teaches the SANS courses on network penetration testing (Security 560) and incident response (Security 504).  Ed has conducted exhaustive anti-virus, anti-spyware, Virtual Machine, and IPS research; and responded to computer attacks for clients in financial, high technology, healthcare, and other industries.

Ed conducted a demonstration of hacker techniques against financial institutions for the United States Senate and is a frequent speaker on issues associated with hacker tools and defenses. He has published numerous articles on these topics as well as the best selling books Counter Hack Reloaded and Malware: Fighting Malicious Code. Ed was also awarded 2004-2012 Microsoft MVP awards for Windows Server Security and is an alumnus of the Honeynet Project. Previous to InGuardians and CHC, Ed served as a security consultant with International Network Services (INS), Global Integrity, Predictive Systems, SAIC, and Bell Communications Research (Bellcore). Ed also blogs about command line tips.

Katie Moussouris

Katie Moussouris leads the Security Community Outreach and Strategy team at Microsoft. Her team’s work encompasses industry-leading programs such as Microsoft's BlueHat Prize (www.bluehatprize.com the industry's first and largest prize for defensive security research), the BlueHat conference, security researcher outreach, and Microsoft's Vulnerability Disclosure Policies. Ms. Moussouris also founded and runs Microsoft Vulnerability Research, which is responsible for Microsoft’s research and reporting of vulnerabilities in 3rd party software. Ms. Moussouris recently was voted the editor of a new draft ISO standard on Vulnerability Handling Processes, following her work over the past 4 years as the lead expert in the US National Body on an ISO draft standard on Vulnerability Disclosure.

Prior to working for Microsoft, Katie Moussouris was an application penetration tester for several Fortune 500 companies, as a senior security architect for @stake when it was acquired by Symantec. At Symantec, Ms. Moussouris founded and ran Symantec Vulnerability Research.

Ms. Moussouris has spoken at several security conferences including BlackHat AbuDhabi 2011, BlackHat USA 2011, 2010, and 2008, Hack In The Box Amsterdam 2011, GOVCERT.NL 2010, RSA2012, RSA2011, and RSA2010, SOURCEBoston, Shmoocon, Toorcon Seattle, and she was a keynote speaker at ShakaCon in June 2008. Katie Moussouris is the recipient of the 2011 CSO Magazine and Executive Women's Forum Women of Influence Award in the category of One to Watch. 

Watch this space for more exciting announcements in the next few weeks !! BruCON 2012 is going to be awesome.

Brucon and Derbycon ... we're still friends :-)

Lately, there's been a quite some chatter on the twitterverse about an apparent conflict in dates between BruCON and Derbycon.

BruCON training is held on the 24th and 25th of September, the conference itself is held on the 26th and 27th.  Derbycon has training on the 27th and the conference itself is from the 28th to the 30th of September. We're on two different continents but we would agree that two kick-ass conferences so close to eachother would be a little too much for the weak of heart :-)

From the early planning stages, the Derbycon and BruCON teams have been in touch to make sure the conference dates didn't fully collide and we're happy to have achieved that.  We believe (or believed?) that the number of people who'd be lucky enough to be able to attend both trainings and conferences on different continents in the same month would be very, very limited and as such not a lot of agenda conflicts would arise.

To organize a conference there's a lot of details that need to fall in the right place, training locations, conference venues, volunteers, sponsor agendas, speakers, etc... some of those don't leave you a lot of flexibility to move around and accomodate everybody's wishes. Given that we're totally supportive of Derbycon and the huggable crew running it, we can only say that we'll work even harder to avoid to be too close to eachother.

For those looking at attending both, there are flights leaving Brussels on the morning of the 28th that will get you in Louisville around 2.30pm where Dave and the crew should be waiting with open arms to welcome you to Derbycon!

We require your feedback

Hey BruCON people, here's a short blogpost to launch a survey requesting your feedback on training opportunities at BrUCON. This year we want to be even more aware of your education needs so we can try whatever we can to attract knowledgeable speakers with the ability to share her knowlege with you as a student.

Please take a few minutes to provide your feedback here : https://www.surveymonkey.com/s/brucon2012

One person who has completed the review will receive a BruCON ticket that provides access to the event for the two whole days.

Thanks in advance,

Kind Regards

Thr BruCON tramç