• Irongeek Security
• Hacking Illustrated Videos
• InfoSec Articles
• Mobile Pen-testing Tools
• Apps/Scripts
• Reviews
• RSS
• Your IP
• Podcasts
• Hoosier Hackers
• Newscat
• Links
• Contact
• Forums
• Workout
• Nutrition
• Supplements
• Humor
• Irongeek Campuses
• Fed Watch
• Books
• Store
• About
• Follow @irongeek_adc

Description: Where do you start? Where am I most at risk? How do I build a program that can withstand an attack? Asked any of these questions in your INFOSEC career? This presentation will focus on proactive measures for companies to increase their overall security posture within a few small changes. Security is a continual progression of constant enhancements. During the presentation, I'll show live demonstrations of common and sophisticated attacks and how to protect against them. Most importantly, I'll show how to build your security program to withstand and detect attacks. Learn how to defend your company and protect what really matters -- your companies ability to generate revenue. This talk is intended for all audiences and will be demonstrating technical avenues for attack as well as security program development.



Bio:

Dave Kennedy is the Chief Security Officer (CSO) for a Fortune 1000 company. Kennedy is the author of the book “Metasploit: The Penetration Testers Guide,” the creator of the Social-Engineer Toolkit (SET), and the creator of Fast-Track. Kennedy has presented on a number of occasions at Blackhat, Defcon, ShmooCon, BSIDES, Infosec World, Notacon, AIDE, Hashdays, Infosec Summit, and a number of other conferences. Kennedy is on the Back|Track and Exploit-DB development team and co-host of the Social-Engineer.org and ISDPodcast podcast. Kennedy is one of the co-authors of the Penetration Testing Execution Standard (PTES); a framework designed to fix the penetration testing industry. Kennedy is a co-founder of DerbyCon, a large-scale security conference in Louisville Kentucky. Kennedy <3's Python.