Rooted CON 2011

Rooted CON 2011 Congress was held during days 3, 4 and 5 March 2011 in the Auditorium of the Fundación Mutua Madrileña.

Papers

Speaker Paper
Antonio Ramos The asymmetry in the security market
James Van Leeuwen The iPrueba
David Lopez Paz Global Warfare
José Miguel Esparza Obfuscation and (non-) detection of malicious PDF files
Jose Selvi Post-Exploitation Unprivileged Network
Gianluca D'Antonio The Management Information Security and the New
technological hazards in the era of Web 3.0
Alberto Garcia of God Virus, art should not be business
Juan Carlos Diaz
Francisco Jesus Gomez
Malware Distribution Cloud: DNS will be your friend
Jaime Peñalba How to defend themselves in hostile terrain: Protections for Defcon 18 CTF
Roi Martin
Sergi Alvarez
radare2: From forensics to bindiffing
Alexander Martin
Chema Alonso
Spray your posts with Dust
Alejandro Ramos Know your ******: P @ 55w0rd 4dv4nc3d $ (R4c | <1ng
Eloi Sanfelix Hardware security: Side Channel Attacks
José Ramón Palanco NoSQL Security
David Perez
Jose Pico
A practical attack against mobile
Joxean Koret Database Security Paradise
Vins Vilaplana Link Layer Security
Gabriel Gonzalez Man-In-Remote: PKCS11 for fun and non-profit
Hernan Ochoa WCE Internals
Marisol Salanova Computer security and cyber
Ruben Santamarta SCADA Trojans: Attacking the Grid
Jaime Blasco
Pablo Crespo Corner
Lost in translation: WTF is happening inside my Android phone
Daniel Solis
Jose Antonio Lancharro
With Tracking Information OPTOS
Raul Siles Browser Exploitation for Fun and Profit Revolutions
Javier Espasa
Cesar Tascon
Watching the watchers: "I see, what you see?"

RootedPanels

RootedPanel: 20 th Anniversary of the Journal SIC

IMG_4295

This panel, moderated by Roman Ramirez had Jose de la Pena and Luis Fernandez, director and editor respectively of the Journal of computer security SIC, which celebrates its 20th anniversary, with more than 90 editions behind him. Were discussed, with many background mainstream press articles related to computer security, privacy, information leaks, etc..

MATERIAL:

RootedPanel Full-Disclosure

IMG_4798

In computer security, we refer to "Full-Disclosure" the act of publishing all the details about a vulnerability, including detection and how to carry out its operation. In the middle of last year, came up again the controversy and debate against this practice, when a Google researcher, Tavis Ormandy, published specific information about a critical vulnerability affecting Microsoft Windows environments. Microsoft responded by alleging that the researcher had not left enough time to analyze and to organize the solution to such failure, leaving the danger to all users. In this RootedPanel will discuss the types of "disclosure" that are practiced and what would be the most desirable from the standpoint of both manufacturers and independent researchers. The "full-disclosure" helps users, or harm? This panel discussion was moderated by Lorenzo Martinez and Alberto Ortega, SecurityByDefault blog editors, and counted with Fernando Vega (McAfee), Jose Parada (Microsoft), and two security researchers, Ruben Santamarta and Joxean Koret.

MATERIAL: