JeffBolden.net Ramblings from a IT Professional and NetSec Geek

SANS2007 Day 3/4 Recap

Tuesday and Wednesday were both full days for me, covering the ISO27002 controls as well as hitting lunch and learns, some great after-hours talks, and a trip or two down the strip as well. The highlight of the past 2 days was a couple of excellent talks on bluetooth eavesdropping as well as a talk on VM Escape issues.

Josh Wright's Wednesday evening talk on bluetooth eavesdropping was excellent (as usual, great talk Josh!) and showed just how bad bluetooth security is. He has a great YouTube video up showing the issues as well as a great paper on Dispelling Common Bluetooth Misconceptions that he just released. I highly recommend taking a look at both. Also, be sure to check out his website www.willhackforsushi.com for lots more wireless info.

Tonight is the PaulDotCom security podcast live here at SANS and I'll be dropping in for that. It's only fitting since I was lucky enough to be at their first podcast at SANS 2005 in LA. They've come a long way since then! =) They will be running a live stream as well as taking questions over IRC, so be sure to jump over to their site and get the info, then join us tonight!

SANS2007 Day 2 Recap

It's been a fun  couple of days down here at Vegas! I flew down Saturday night and got to Caesars around 8pm and got settled in. A nice surprise was getting bumped up to a nicer room in the Augustus Tower, with a great view of the Bellagio Fountain right out my window. It's been awhile since I've been to Vegas, and man the strip sure has changed! After class yesterday I managed to get out and do a little exploring, then went down to the Hilton and checked out the Star Trek Experience. I have to say it was pretty cool, but I was ready to hit the sack after all the wandering around.

I'm heading down to check out the vendors, pick up some swag, and mingle with the security elite. =) Also on the agenda for after-hours Wednesday night is a talk from Josh Wright on Bluetooth Headset eavesdropping, as well as a presentation from Ed Skoudis on VM Escape. I'm also going to try to get over to the PaulDotCom sec podcast on Thursday.

SANS2007, Vegas-style!

SANS Network Security 2007 is almost upon us! It's been over 18 months since I've been to SANS so I'm really looking forward to going to the Vegas conference this year, even if it is a management track. I'll be doing the MGMT411 track this time, covering the ISO 17799/27001. It's a good overview to refresh my memory on the "official" security framework in my new role, but I would be much more excited about the malware or forensics tracks. I guess it can't alway be fun and games... =)

If anyone reading this (all 2 of you...) is going to the Vegas conference and would like to get together, be sure to drop me a line and we can schedule a night. I always like meeting fellow netsec geeks for food and fun!