SecCamp - das Barcamp rund um Information Security

vSecCamp - Virtual SecCamp 04.04.2020, 13:00 - 18:00

On Saturday, April 4th, we will launch an experimental, fully virtual SecCamp! From 13:00 CEST (UTC+2) to 18:00 CEST (UTC+2) we will hold the vSecCamp via a video conferencing service.

As usual, we will first hear your session proposals, plan the agenda together, and then hold multiple 45-minute sessions in parallel. At the end of the day, we will come back together for the wrap-up.

We will contact all ticket holders with technical details a few days before the event.

Timetable
Location

13:00

Opening Session

14:00

Discussion about Home Office - secure it

Best practices for employes - connections - storage - distribution - conferencing, meetings?

Room: ROOM ALICE

Agile [vs] Security

I'd like to discuss if these are a contradiction or a complementary improvement What is your experience? What do you want to know about agile.

BUFFER OVERFLOW 101

I want to give an intro to buffer overflows as an attack method (stack smashing).

Security-Test-Driven Company

I'm more a Developer than a security guy, but I do security. I'm not very good in this "we find security holes afterwards" thingy. I prefer more a test driven approach: constantly checking for errors, fix them and test that they do not occurre again. I started a project in my company to test-drive our whole infrastructure to find issues and wanna give you my experience about that, how do that and also funny stories what we found. Security is not that hard! You just need to start doing it. And yes, I do some some ISO27k bashing ;-)

Sven Strittmatter

Room: ROOM MALLORY

15:00

Learning from a failed responsible disclosure process

I'd like to give some insights into the disclosure process of security issues in electronic classbooks. A lot of things went wrong before public disclosure and resulted into unpatched issues when first information were published. I'd like to discuss what went wrong and how these problems may have been avoided.

Room: ROOM ALICE

How are (secure) internet standards created?

I'd like to discuss how internet standards are developed at the IETF and at other organizations, like the W3C. A special focus will be the security aspects of internet standards.

What about sudo

Disclaimer: This is maybe to small for 50 minutes. I have questions about sudo: - Should I use it or does it increase attack surface? - Should I use it with or without password? - Should I use it with root password or suddens password? What are your opinions?

Sven Strittmatter

Open discussion on IoT and IIoT security

I'd like to discuss experiences on IoT and IIoT security. Tools you use, methods you follow, Interesting use cases. The idea is not to do a presentation but more share knowledge among practitioners.

Room: ROOM MALLORY

16:00

Functional Safety with PROFIsafe

I ´d like to discuss the features and structure of the functional safety protocol. In particular, the security features will be analyzed and possible attacks on the protocol will be discussed.

Zain Umer Javaid

Room: ROOM ALICE

Security scanning and TLS profiling with yesses

Yesses is a new open-source tool for security scanning developed and in use at yes.com. In this session, Daniel and I will give an overview of the features of yesses. One main feature of yesses is the ability to compare the TLS settings of a server with a Mozilla TLS Profile. This feature is also available separately as a public web service.

Fabian Hauck,Daniel Fett

Security Testing in CICD processes

(experience collection proposed from someone with no experience ) with focus on web applications like angular, main interest how to security related checks can be integrated into deployment processes

Play a wargame

Let's do something practical. overthewire.org offers a variety of interesting wargames. We can form teams and solve the tasks together and thus learn from each other. I would suggest to limit the teams to 3 people, so that a discussion can also develop. No installation is necessary.

Room: ROOM MALLORY

17:00

Closing Session

18:00