FYI webcast this Thursday - https://www.blackhat.com/html/webcast/10182012-Defensive-Tools.html

We all know playing defense is hard. With offense, you only have to be right once to claim victory. Wouldn't it be great if the same rules applied to defense? If victory was as simple as stopping just 1 out of 100 daily attacks on your network, we'd all be going home early.

But that's not how it works.

Defense needs all the help it can get. And one of the best defensive tools in our Arsenal is the open-source WAF ModSecurity. Now, with ports to IIS7 and Niginx, ModSecurity is useable on 86% of the world's web servers. SOURCE: Netcraft.com

If your organization has a web server that needs defending, this webcast is for you. Please join Black Hat in October for the following presentation:

Title: ModSecurity Quick-Start Overview

Abstract:
What is your organization's "Time-to-Fix" for vulnerabilities identified in your live web applications? How quickly can you respond to new attacks launched against your site? ModSecurity (www.modsecurity.org) is a hugely popular, cross-platform, open source web application firewall (WAF) toolkit that helps organizations to defend their live web applications. This webcast will provide a crash course showing how to quickly installing ModSecurity, utilize open source and commercial rule sets and highlight many of its cutting-edge capabilities.

--
Ryan Barnett
Trustwave SpiderLabs
ModSecurity Project Leader
OWASP ModSecurity CRS Project Leader



This transmission may contain information that is privileged, confidential, and/or exempt from disclosure under applicable law. If you are not the intended recipient, you are hereby notified that any disclosure, copying, distribution, or use of the information contained herein (including any reliance thereon) is STRICTLY PROHIBITED. If you received this transmission in error, please immediately contact the sender and destroy the material in its entirety, whether in electronic or hard copy format.