Abstract

Do terms like XSS, SQLi, RCE, Buffer Overflow, Rootkit, Trojan, Phishing, DDoS, Malware, Virus, or just the word “Hacker” leave you confused? This training is for you. We all had to start somewhere and this training for you, the beginner. Dan and Kevin are here to help you into the world information security. This will be a light hearted, fun and interactive session.

We’ll talk through what these terms mean, and try to answer questions as we go. There’ll be live examples of the basics, and an opportunity to try these out in a lab (so bring along a laptop). The goal of this session is to come away with some usable knowledge, and an entry level understanding of the information security world.

Topics

• What is Hacking? (history, what’s legal, ethics)
• Hacking in popular culture versus reality
• Getting started
• Understanding of attacks
• Performing your first attack
• Tools of the trade
• How to carrying on beyond this session
• And more ...

Bio’s:

Dan runs the Christchurch branch of Information Security Interest Group (ISIG). Formerly a sysadmin in a world of web developers, he’s built, managed, maintained, fixed, and tested a good number of websites. Dan now spends his days looking after clients for Lateral Security.

Kevin occasionally helps Dan run the the Christchurch branch of ISIG. He has been programming for a living since 1986 (yes, longer than most of you have been alive) after studying at what is now known as Ara Institute of Canterbury. Now he is the founder and principal consultant at Katipo Information Security.