Building Security Nerds

advertisement
Training Security Nerds:
Computum deos ab hominibus
Xeno Kovah
tl;dt
Required
(partial)
Recommended
r0x0r Skill Tree
Delivered
Malware
Analysis
Future
Advanced x86:
Real Mode
Exploits 3
(2 day, Corey Kallenberg, TBD)
2 day, Matt Briggs, TBD
(3day, John Butterworth, Fall
2012)
Advanced x86:
Virtualization
Rootkits
(2 day, Xeno Kovah)
(2day, David Weinstein, TBD)
Intermediate
x86
(2 day, Xeno Kovah)
ARM
Architecture
(3 day, TBD)
Reverse
Engineering
Exploits 2
(2 day, Corey Kallenberg, TBD)
(2 day, Matt Briggs)
Life of
Binaries
Vulnerabiliti
es & Exploits
1
(2 day, Xeno Kovah)
(2 day, Corey Kallenberg )
Intro x86
(2 day, Xeno Kovah)
Using TPMs
(2 day, Ariel Segall, TBD)
The great pyramid of security knowledge,
as built by slaves to curiosity
The great pyramid of security knowledge,
as built by slaves to curiosity
The great pyramid of security knowledge,
as built by slaves to curiosity
That's the "logo"
Pretty awesome huh?
OPEN
SECURITY
TRAINING
.INFO
(\Why.html)
Why should you teach?
Selfish
 Make mad cash
 Look good at or outside of work by showing what you
know
 Look good at work by creating a training program
 Reinforce existing and learn new material for your own
usage
 Improve your presentation skills
 Networking & Collaboration
 Generate (hopefully) loyal underlings
Why should you teach?
Altruistic
 Pay forward what you've learned from others
 Lower the cost of training for everyone
 Reduce the inefficiency of n00b bootstrapping
 Consistency of shared baseline knowledge on
project/at company.
 Get more deep technical peers faster
 Push your field forward faster
Why should you contribute?
Selfish
 Show that your material is vastly superior to
others’
 Increase your reputation
 Platform to advertise that you are willing to
offer private training for organizations which
don’t have people who can pick up the
material for internal training (works good for
niches.)
Why should you contribute?
Altruistic
 Reduce duplication of effort
 You've got "abandonware" class material that
you would like to give a second life
 Save people time when generating new
classes
 Set a new, higher, baseline for expectations of
knowledge
 Build better organized ordered progressions to
get bootstrap deep skills faster
Questions?
www.OpenSecurityTraining.info
(If you see just a blank page, it means
you're using a broken version of IE.
Shame on you.)
Bonus Content!
CHEAT CODE ENABLED!
r0x0r Arcade
 Some learning requires grinding!
 But it can still be accelerated!
 http://code.google.com/p/roxor-arcade






Such timeless classics as:
BinDeciHex
The *other* ESP game
1 step forward 3 steps back
Whack-a-ssembly/Assembly Munchers
May your buffer overfloweth
 At the demos there's time for!
Thanks
Download