March 2025 Meeting - Sponsor: Secure Ideas Topic: Attacker's Perspective: How attackers view your applications
March 6, 2025 General Meeting with 1 Hour Presentation and CPE Credit
Presentation 5-6pm followed by Networking 6-7pm with Appetizers
Meeting Location: Sheraton Hotel, Jaguar II, 10605 Deerwood Park Blvd, Jacksonville, FL 32256
Meeting Sponsor: Secure Ideas
Cost:
Members: Free
Guests: $10
Speaker:
Kevin Johnson, CEO, Secure Ideas
Kevin Johnson is CEO of Secure Ideas, a consulting company dedicated to security testing and training. Kevin passionately advocates for cybersecurity through his work with Secure Ideas and as a faculty member at IANS. During his over 30 years in the industry, Kevin acted as an instructor and author for the SANS institute. He also contributed to a number of open-source projects, including OWASP SamuraiWTF (a web pen-testing training environment), Laudanum (a collection of injectable web payloads) and Yokoso (an infrastructure fingerprinting project) and was the founder and lead of the BASE project for Snort. Kevin has served as an expert witness in court cases involving cybersecurity.
Topic: Attacker's Perspective: How attackers view your applications
In this presentation, we'll dive into the mindset of cyber criminals and explore how they approach your applications.
By understanding the attacker's perspective, you'll gain invaluable insights into fortifying your digital defenses.
Key Highlights:
- Real-World Demonstrations: Witness live hacking scenarios that showcase common vulnerabilities and attack vectors.
- Case Studies: Explore actual penetration testing stories, revealing surprising security oversights in seemingly robust applications.
- Attacker Methodology: Learn the step-by-step process hackers use to identify and exploit weaknesses in your systems.
- Defense Strategies: Discover practical techniques to shield your applications from various attack techniques.
Our speaker, an experienced penetration tester, will guide you through the hacker's toolkit, demonstrating how seemingly innocuous application features can be leveraged for malicious purposes. You'll gain a new appreciation for the importance of a security-first mindset in application development.
Whether you're a developer, system administrator, or security professional, this talk will equip you with the knowledge to see your applications through the eyes of an attacker – and ultimately, to build more secure systems.
Don't miss this chance to step into the shoes of a hacker and revolutionize your approach to application security!
Visit these websites for additional chapter details:
• LinkedIn Group Site: www.linkedin.com/groups/1539547
2025 Meeting Calendar:
January 23, 2025
March 6, 2025
Stay tuned for more dates!
Chapter goals and leadership principles:
• To have informative chapter events and fun professional social networking
• Share and promote vendor neutral best practices for information security
• Promote the educational and ethical standards, and the knowledge base of the ISSA association and the CISSP certification
More info: You may contact the local Board of Directors of the Jacksonville / NE Florida ISSA Chapter at: board[at]neflorida.issa.org
Board Members: Vicki Harris (Maximus), Scott Manning (Black Knight Financial), Mark McCrary (Presidio),
Derek Sandland (The Main Street America Group), Chris Layfield (Comcast),
Michael Butler (Black Knight), Patrick Merry (Maximus)
To join ISSA: Go to www.issa.org/join. Don't forget to also select chapter: Northeast Florida.