NoVA Sec XSS Slides Posted

Thanks again to Andre Ludwig for his XSS Gone Wilde (.pdf) presentation.

Happy Birthday NoVA Sec

We're one year old today, because I created NoVA Sec on 21 July 2006. Our speaker for the 26 July meeting will be Andre Ludwig on "XSS Gone Wild." Next month Michael Smith will discuss life as a NOC ant at his MSSP. No date or location for that meeting has been set yet.

NoVA Sec Meeting 1900 Thursday 26 July 07

The next NoVA Sec meeting will take place 1900 (7 pm) Thursday 26 July 2007 at Fishnet Security:

13454 Sunrise Valley Dr. Suite 230
Herndon, VA 20171
703.793.1440



If we don't get a volunteer speaker before then I will present either Open Source Network Forensics or Traditional IDS Should Be Dead. I really just want to get us meeting again so NoVA Sec can rise from our summer slumber. Thanks to Fishnet for hosting!

April Meeting Doubtful

I don't think we will have an April meeting. I am not available Thursday 26 April (or anytime that week). The previous Thursday is ISSA NoVA night. This Thursday is short notice and I'm busy too.

If someone would like to organize a meeting and find a date, speaker and location, please do. Otherwise we can try again in May

NoVA Sec Meeting Friday 1230 23 March 2007

The next NoVA Sec meeting will take place 1230 Friday 23 March 2007 at the Marriott Wardman Park Hotel in Washington, DC, the site for ShmooCon 2007. Registration opens at 1300 Friday, with the conference starting at 1530. Our guest speaker will be Chris Lee, who has numerous cool projects and is a key member of the Honeynet Project.

We will probably not be meeting in a specific room and we very probably will not have a projector. I'd like this to be a meet-for-lunch meeting, possibly using the tables next to the deli for our meeting location. I suggest bringing a laptop in the event Chris has any slides he wants us to ponder on our laptops. Thank you to Chris for driving up from Georgia for ShmooCon and speaking to us.

Honeynet Alliance Membership

At our last meeting I raised the possibility of NoVA Sec operating a honeynet using the Getronics Red Siren IP and hardware range. After speaking with members of the Honeynet Project, they suggested we volunteer NoVA Sec as a member of the Honeynet Research Alliance. Please read the Honeynet Research Alliance Charter for information on the requirements. I'd like to put this to a vote at our next meeting, or at least solicit your inputs here and on our mailing list. Please let me know if you'd like NoVA Sec to become a Honeynet Research Alliance member. Basically, they trade trust and support in exchange for our help. I think it's a good idea. Thank you.

NoVA Sec Meeting 1900 Thursday 22 Feb 07

The next NoVA Sec meeting will take place 1900 (7 pm) Thursday 22 February 2007 at Fishnet Security:

13454 Sunrise Valley Dr. Suite 230
Herndon, VA 20171
703.793.1440



Scott Musman from Augmented Systems will be our guest speaker. He will discuss using autonomic systems for improved intrusion detection.

In the event that I (Richard) cannot make the meeting due to consulting out of town, Keith McCammon has agreed to be Scott's host Thursday evening. Thanks Keith!

Thoughts on March Meeting at ShmooCon

ShmooCon starts Friday 23 March at 3 pm at the Wardman Park Marriott Hotel near the Woodley Park/Zoo Metro stop. That first day of talks ends at 7 pm. I have recruited a special guest speaker, Chris Lee, from the Honeynet Project, as a guest speaker "near" ShmooCon.

I suggest we hold our March NoVA Sec meeting at ShmooCon at 1:30 pm Friday 23 March. We can find a suitable open space, grab it, and chat. Chris can chat without slides.

What do you think?

NoVA Sec Meeting 1900 Mon 29 Jan 07 at Getronics

The next NoVA Sec meeting will take place 1900 (7 pm) Monday 29 January 2007 at Getronics Red Siren. Wesley Shields will discuss FreeBSD jails.