[Cialug] Cyber Defense Competiton - late April

[Josh More]

If you want to be on my red team, sure.  You'll want to be running Backtrack in some form (VM, local install, bootable CD, bootable USB), or if you want to join the incredibly frustrating world of web hacking, you can run Samurai instead.

People at the high skill levels can hack, people at the lower skill levels can gather data to help others hack AND help keep the documentation of what we find up to date.  There is usually a significant problem of information sharing, so some targets get hit harder than others, which just isn't fair.  That's one thing I'd like to work to fix, and it's something that lower skilled people can be more useful at than others.

Josh More | Senior Security Consultant - CISSP, GIAC-GSLC Gold, GIAC-GCIH
Alliance Technologies | www.AllianceTechnologies.net<http://www.AllianceTechnologies.net>
400 Locust St., Suite 840 | Des Moines, IA 50309
515.245.7701 | 888.387.5670 x7701

Blog: Don't just blame the bad guys, it's your fault too
http://www.alliancetechnologies.net/blogs/morej

How are we doing? Let us know here:
http://www.alliancetechnologies.net/forms/alliance-technologies-feedback-survey
________________________________
From: cialug-bounces at cialug.org [cialug-bounces at cialug.org] on behalf of Matt [matt at itwannabe.com]
Sent: Wednesday, March 30, 2011 23:59
To: Central Iowa Linux Users Group
Subject: Re: [Cialug] Cyber Defense Competiton - late April

So, could I show up and be on a team, but basically just sit and watch with a disturbingly dumb, but somewhat excited, look on my face?  I'd at least do what people told me to do and enjoy the learning experience.

-- Matt

On 03/30/2011 02:53 PM, Josh More wrote:
This event is similar to the competition that we went to in April, with two major exceptions.  First, I got confirmation that we can run as a team this time, so there will be more learning opportunities.  Second, it's against high schoolers and not the last round of the college level, so it'll be easier and hopefully a lot more fun.

For those that haven't played, it's a lot like a game of capture the flag that focuses on cyber security.  The students build and secure environments the best that they can.  Then folks from the community show up for one day and help identify flaws in their system.  They have reached out to us for assistance on this, so if you are free on Saturday, April 29th from 8:00am-6:00pm please consider stopping by.

On the technical side, they need attackers for the "red" team..  Do not worry if you've not done hacking or penetration testing before.  I'll be there and can help you out.  There are lots of tools that we can use for free and, if you're interested, we could work out a way for you to try out the commercial tools that I use on engagements.  If you ever wanted to get your hands dirty on the security side, this is the perfect opportunity to do so.

On the business side, they need people to serve on what they call "green" team.  If you want to see what our customers see when they are attacked, you can join this team.  You would basically hang around with other people, use the systems that the students build and complain when they don't work right.  There is no technical skill required to do this, and it might give you a first-hand experience that you could leverage in future discussions with clients.

If you want to help kids learn and benefit the community, this is a great way to do it.  There is free food and drink, so there is no cost to this event other than gas (and if there are enough folks, we could probably carpool).  Please let me know if you are interested and I will build the volunteer list.

More information on the event is at http://www.it-adventures.org/itolympics.html


Josh More | Senior Security Consultant - CISSP, GIAC-GSLC Gold, GIAC-GCIH
Alliance Technologies | www.AllianceTechnologies.net<http://www.AllianceTechnologies.net>
400 Locust St., Suite 840 | Des Moines, IA 50309
515.245.7701 | 888.387.5670 x7701

Blog: Don't just blame the bad guys, it's your fault too
http://www.alliancetechnologies.net/blogs/morej

How are we doing? Let us know here:
http://www.alliancetechnologies.net/forms/alliance-technologies-feedback-survey


_______________________________________________
Cialug mailing list
Cialug at cialug.org<mailto:Cialug at cialug.org>
http://cialug.org/mailman/listinfo/cialug


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://cialug.org/pipermail/cialug/attachments/20110331/44184079/attachment-0001.html>