Contact:
- 5th ASFWS editionNovember 4th, 20141 month to go.
Follow us on Twitter
My Tweets
Author Archives: webmaster
Keynote speaker: Hervé Schauer
With less than 6 weeks left until the opening day of the AppSec Forum 2014 edition, the Program Committee is pleased to announced that renowned information security expert, Hervé Schauer, will be the keynote speaker on, Thursday November 6th. Hervé’s … Continue reading
Posted in ASFWS 2014, News
Hervé Schauer
Hervé Schauer est un expert renommé internationalement en sécurité des systèmes d’information.
Posted in ASFWS 2014, Speakers
Detailed Event Program Now Available!
The complete AppSec Forum Western Switzerland 2014 Edition Program is now available. The full list of speakers and trainers can be found on the Program page of this site. As previously annouced, the AppSec Forum 2014 event will cover a … Continue reading
Posted in ASFWS 2014, News
Tagged ASFWS, program, speakers
Virtual Patching Automatisé des Applications Web
Le patching virtuel des applications Web est le processus par lequel les paramètres d’un pare-feu applicatif sont modifiés en fonction des résultats d’un audit de vulnérabilités. Il vise à réduire au maximum le risque d’exploitation des vulnérabilités découvertes. Pour la … Continue reading
Posted in ASFWS 2014, Student Slots
TProxy: un proxy pour l’interception transparente de trafic TCP
Lorsqu’il effectue des tests de pénétration, l’auditeur moderne est parfois confronté à des services et des protocoles plus exotiques que les désormais traditionnelles applications web accessibles par HTTP ou HTTPS. Les proxies d’interception HTTP ne lui sont d’aucune aide lorsque … Continue reading
Posted in ASFWS 2014, Student Slots
Finding holes: Operation Emmental
Like Swiss Emmental cheese, online banking protections may be full of holes. Banks have been trying to prevent cyber crooks from accessing their customers’ online accounts for ages. They have, in fact, invented all sorts of methods to allow their … Continue reading
Posted in ASFWS 2014, Talks
Why .NET needs MACs and other serial(-ization) tales
What is the story behind Microsoft’s patches MS13-067 (SharePoint) and MS13-105 (Outlook Web Access)? What is really involved in a .NET ViewState and why did Microsoft disable the ability to turn off its integrity protection since ASP.NET version 4.5.2 (KB2905247)? … Continue reading
Posted in ASFWS 2014, Talks
Offline bruteforce attack on WiFi Protected Setup
Wi-Fi Protected Setup™ is an optional certification program based on technology designed to ease the setup of security-enabled Wi-Fi networks in home and small office environments. Wi-Fi Protected Setup supports methods (pushing a button, entering a PIN, or using NFC) … Continue reading
Posted in ASFWS 2014, Talks
On the Security of the iCloud Keychain
iCloud Keychain, one of the latest additions to the family of iCloud services that was pitched by Apple. It is no doubt great for usability, but what about security? What kind of access does Apple have to your passwords stored … Continue reading
Posted in ASFWS 2014, Talks
Analyse technique d’un piratage helvétique
Il est rare qu’une affaire de piratage suisse fasse autant de vagues que le piratage d’un journaliste de la TSR cet été dans le cadre de l’affaire Giroud. Sans nous prononcer sur le fond de l’affaire nous allons décortiquer en … Continue reading
Posted in ASFWS 2014, Talks
Sébastien Andrivet
Sébastien is playing with computers since the beginning of ’80s. After spending some years with 8-bit processor assembly programming, he specialized in the ’90 in C/C++ and i386 assembly on Win/Intel.
Posted in ASFWS 2014, Speakers
Jean-Philippe Aumasson
Jean-Philippe Aumasson is Principal Cryptographer at Kudelski Security, and is employed in the Kudelski Group since 2010.
Posted in ASFWS 2014, Speakers
Julien Bachmann
Even being more known at AppSecForum for iOS applications reverse engineering and auditing, Julien interest in reverse engineering is wider and applies to any kind of analysis, including malwares and operating system internals.
Posted in ASFWS 2014, Speakers
Registration for AppSec trainings is now open!
Just a little more than two months to go before the Application Security Forum Western Switzerland opens its doors in Yverdon-les-Bains. The first day of the forum will be dedicated to full day appsec training sessions. You’ll find all the details … Continue reading
Posted in ASFWS 2014, News
Andrey Belenko
Andrey Belenko is a Security Engineer at viaForensics where he enjoys breaking things about as much as building things. He became interested in iOS after Apple released iOS 4, the first iOS version to feature proper data encryption.
Posted in ASFWS 2014, Speakers
Dominique Bongard
Dominique Bongard is the founder of 0xcite, a Swiss company focusing on security for mobile and embedded devices. His previous position, which lasted eight years, consisted of leading the Threat Intelligence team for Kudelski Nagravision.
Posted in ASFWS 2014, Speakers
Sébastien Gioria
Sébastien Gioria est consultant senior en Sécurité des Systèmes d’Informations au sein de la société Advens , Chapter Leader de l’OWASP pour la France (http://www.owasp.fr), membre du OWASP Global Education Committee et membre du CLUSIF (http://www.clusif.fr).
Posted in ASFWS 2014, Speakers
Gianni Gnesa
Gianni Gnesa is a security researcher and professional trainer at Ptrace Security, a Swiss-based company that offers specialized IT security services to customers worldwide.
Posted in ASFWS 2014, Speakers
Alexandre Herzog
Alexandre Herzog started his career in Information Technology in 1998 as an IT system administrator in the largest trading room in the Geneva region. Between 2004 and 2007 he attended the University of Applied Sciences Western Switzerland in Sierre.
Posted in ASFWS 2014, Speakers
Ashar Javed
Ashar Javed is a research assistant in Ruhr University Bochum, Germany and working towards his PhD. He has been listed ten (`X`) times in Google Security Hall of Fame,
Posted in ASFWS 2014, Speakers
Philipp Jovanovic
Philipp graduated in Mathematics and Computer Science at the University of Passau (Germany) in 2010. After that he started to pursue this PhD degree at the very same institution in January 2011.
Posted in ASFWS 2014, Speakers
André Liechti
Early interested about electronics and computer sciences (he wrote his first application when he was 12 years old), André Liechti first graduates as an electronic engineer, before being a communication systems engineer.
Posted in ASFWS 2014, Speakers
Yassine Mansri
Yassine Mansri est diplômé de l’haute école d’ingénierie et de gestion et du canton de Vaud, filière sécurité informatique.
Posted in ASFWS 2014, Speakers
Exploiting Software Vulnerabilities on Windows 8
Over the past decade, Microsoft has added several security features to the Windows operating system in order to increase the cost of developing reliable exploits for attackers. Sadly, despite the tangible security improvements in the protection of their users, the … Continue reading
Posted in ASFWS 2014, Talks
C++11 metaprogramming applied to software obfuscation
The C++ language and its siblings like C and Objective-C are ones of the most used languages today. Significant portions of operating systems like Windows, Linux, Mac OS X, iOS and Android are written in C and C++. There is … Continue reading
Posted in ASFWS 2014, Talks