BrakeSec Education Podcast

Latest Episodes:

Episode 9: Framework for Improving Critical Infrastructure Cybersecurity Mar 24, 2014

Show notes

This week, we got into some discussion about frameworks, and the different types of frameworks available (regulatory, "best practice", and process improvement)

We also looked at the new "Framework for Improving Critical Infrastructure Cybersecurity" ratified and released last month.

Does it meet with our high expectations? You'll just have to listen and find out.

http://www.nist.gov/cyberframework/

Intro "Private Eye", transition "Mining by Moonlight", and Outro "Honeybee" created by Kevin MacLeod (incompetech.com) Licensed under Creative Commons: By Attribution 3.0http://creativecommons.org/licenses/by/3.0/

Episode 8: Why a simple password is not so simple... Mar 18, 2014

Show notes

Cracking great show this week! Mr. Boettcher and I got all into authentications methods, why they don't always work, and what can we do to make passwords more secure, using Mike Murray's method of 'Passphrases' over passwords...

Finally, we talked about some adventure Mr. boettcher had with a friend's malware infection (it wasn't me, I promise!). He took what we learned from @hackerhurricane (Michael Gough) and is actively doing forensics on it.

http://daleswanson.org/things/password.htm

Malware, Rootkits & Botnets A Beginner's Guide by Christopher Elisan

Episode 7, Part 2 with Kevin Johnson from SecureIdeas! Mar 09, 2014

Show notes

This is the Part 2 of our Interview with Kevin Johnson. During our interview, we followed him down the rabbit hole. We learned how to default rulesets in ANY rules based hardware solution sucks. We learned that being a security professional is more than just a fancy title. And finally, we learned that Kevin is a huge fan of Star Wars.

DB Visualizer -- http://www.dbvis.com/

Good article on how homomorphic encryption works:

http://www.americanscientist.org/issues/pub/2012/5/alice-and-bob-in-cipherspace

A thought experiment... Mar 07, 2014

Show notes

I was on LinkedIn this morning and came across this link in the 'Pentesting' group, one of the many groups I have joined there.

It's a series of case studies with a scenario and some questions to be answered in a 5,000 word essay format.

http://resources.infosecinstitute.com/computer-forensics-investigation-case-study/

I thought that in the coming episodes of Brakeing Down Security, it might be interesting to spend a little time breaking down one of these case studies, analyze all the info provided, and give our ideas on how we might go about solving the issue or mitigating what has occurred. Then, we could turn our rabid fans loose on the problem and see if we missed anything, or if someone comes up with a better response (highly likely, as we have many intelligent listeners)

Look for this to happen in the next few weeks.

Episode 7, Part 1 - Kevin Johnson of SecureIdeas! Mar 04, 2014

Show notes

During our SEC542, GIAC Web App Pentesting course, we got the pleasure and honor of sitting down with Kevin Johnson from SecureIdeas on who he is, how Samurai WTF came into being, and why we should be doing licensing for proper ethcial hackers.

Episode 6 - Malware Interview with Michael Gough (Part 2) Feb 24, 2014

Show notes

This is part 2 of our Interview with Malware researcher Michael Gough. We talk about mobile device malware, and how the Sniper Forensic Toolkit, differs from Tripwire.

"Infectedpc_primary.jpg is from bugsrepair.com

Moon Pcap Feb 19, 2014

Show notes

I thought I'd try something a little different. I usually use the blogger.com to talk, but I didn't see a reason to waste all this excellent space, so I'll put my post here.

Last night on Twitter, someone had posted a pcap file of the MOON self-replicating malware running through many newer brands of Linksys router. So I thought I would post the pcap file here for all you packet weasels to enjoy.

Also, we will be posting our Part 2 of Michael Gough, an Austin-based Malware researcher, who enjoys getting an infection for a living.

moon.pcap: http://bit.ly/1eRpvaw (redirects to google drive)

MD5:8138d3c4eb132269135ae174f703d0fb

SHA256:ed65982d9c6e7c4a1a95220af6817e4fa15662ddfd6647c55858dbc79d2bfe80

Episode 6 - Malware Interview Michael Gough (Part 1) Feb 17, 2014

Show notes

This week, we are excited to have Michael Gough, a local malware researcher from Mi2Security on with us to talk about types of malware, infection vectors, some of the tools that users have available to them to detect and prevent malware. We also discuss who gains from malware infections, the 'bad guys', and even the AV/Malware detection companies. We also talk about how his software program "Sniper Forensic Toolkit" would detect malware.

Episode 5 - Interview with Frank Kim Feb 10, 2014

Show notes

This week, we interviewed Frank Kim, an instructor from SANS, talks about developers methods, the challenges of getting developers to code securely, and the efforts to create a culture of secure coding.

Episode 4: Origin stories, and talking about reconnaissance Feb 03, 2014

Show notes

All superheroes have an origin story, Brian and I are not super, but we have a great origin story. This week's podcast is about how we made it into the Infosec industry, and we also discuss the value of research from an OS point of view. We also talk about mentoring and assistance for those looking to get into the InfoSec world.

Intro "Private Eye" and Outro "Honeybee" created by Kevin MacLeod (incompetech.com) Licensed under Creative Commons: By Attribution 3.0http://creativecommons.org/licenses/by/3.0/

Our TOPPODCAST Picks

Follow Us

Stay Connected

BrakeSec Education Podcast

Related Podcasts

Links

Stay Connected