Author Archives: webmaster

Keynote speaker: Hervé Schauer

With less than 6 weeks left until the opening day of the AppSec Forum 2014 edition, the Program Committee is pleased to announced that renowned information security expert, Hervé Schauer, will be the keynote speaker on, Thursday November 6th. Hervé’s … Continue reading

Posted in ASFWS 2014, News

Hervé Schauer

Hervé Schauer est un expert renommé internationalement en sécurité des systèmes d’information.

Posted in ASFWS 2014, Speakers

Detailed Event Program Now Available!

The complete AppSec Forum Western Switzerland 2014 Edition Program is now available. The full list of speakers and trainers can be found on the Program page of this site. As previously annouced, the AppSec Forum 2014 event will cover a … Continue reading

Posted in ASFWS 2014, News | Tagged , ,

Virtual Patching Automatisé des Applications Web

Le patching virtuel des applications Web est le processus par lequel les paramètres d’un pare-feu applicatif sont modifiés en fonction des résultats d’un audit de vulnérabilités. Il vise à réduire au maximum le risque d’exploitation des vulnérabilités découvertes. Pour la … Continue reading

Posted in ASFWS 2014, Student Slots

TProxy: un proxy pour l’interception transparente de trafic TCP

Lorsqu’il effectue des tests de pénétration, l’auditeur moderne est parfois confronté à des services et des protocoles plus exotiques que les désormais traditionnelles applications web accessibles par HTTP ou HTTPS. Les proxies d’interception HTTP ne lui sont d’aucune aide lorsque … Continue reading

Posted in ASFWS 2014, Student Slots

Finding holes: Operation Emmental

Like Swiss Emmental cheese, online banking protections may be full of holes. Banks have been trying to prevent cyber crooks from accessing their customers’ online accounts for ages. They have, in fact, invented all sorts of methods to allow their … Continue reading

Posted in ASFWS 2014, Talks

Why .NET needs MACs and other serial(-ization) tales

What is the story behind Microsoft’s patches MS13-067 (SharePoint) and MS13-105 (Outlook Web Access)? What is really involved in a .NET ViewState and why did Microsoft disable the ability to turn off its integrity protection since ASP.NET version 4.5.2 (KB2905247)? … Continue reading

Posted in ASFWS 2014, Talks

Offline bruteforce attack on WiFi Protected Setup

Wi-Fi Protected Setup™ is an optional certification program based on technology designed to ease the setup of security-enabled Wi-Fi networks in home and small office environments. Wi-Fi Protected Setup supports methods (pushing a button, entering a PIN, or using NFC) … Continue reading

Posted in ASFWS 2014, Talks

On the Security of the iCloud Keychain

iCloud Keychain, one of the latest additions to the family of iCloud services that was pitched by  Apple. It is no doubt great for usability, but what about security? What kind of access does Apple  have to your passwords stored … Continue reading

Posted in ASFWS 2014, Talks

Analyse technique d’un piratage helvétique

Il est rare qu’une affaire de piratage suisse fasse autant de vagues que le piratage d’un journaliste de la TSR cet été dans le cadre de l’affaire Giroud. Sans nous prononcer sur le fond de l’affaire nous allons décortiquer en … Continue reading

Posted in ASFWS 2014, Talks

Sébastien Andrivet

Sébastien is playing with computers since the beginning of ’80s. After spending some years with 8-bit processor assembly programming, he specialized in the ’90 in C/C++ and i386 assembly on Win/Intel.

Posted in ASFWS 2014, Speakers

Jean-Philippe Aumasson

Jean-Philippe Aumasson is Principal Cryptographer at Kudelski Security, and is employed in the Kudelski Group since 2010.

Posted in ASFWS 2014, Speakers

Julien Bachmann

Even being more known at AppSecForum for iOS applications reverse engineering and auditing, Julien interest in reverse engineering is wider and applies to any kind of analysis, including malwares and operating system internals.

Posted in ASFWS 2014, Speakers

Registration for AppSec trainings is now open!

Just a little more than two months to go before the Application Security Forum Western Switzerland opens its doors in Yverdon-les-Bains. The first day of the forum will be dedicated to full day appsec training sessions. You’ll find all the details … Continue reading

Posted in ASFWS 2014, News

Andrey Belenko

Andrey Belenko is a Security Engineer at viaForensics where he enjoys breaking things about as much as building things. He became interested in iOS after Apple released iOS 4, the first iOS version to feature proper data encryption.

Posted in ASFWS 2014, Speakers

Dominique Bongard

Dominique Bongard is the founder of 0xcite, a Swiss company focusing on security for mobile and embedded devices. His previous position, which lasted eight years, consisted of leading the Threat Intelligence team for Kudelski Nagravision.

Posted in ASFWS 2014, Speakers

Sébastien Gioria

Sébastien Gioria est consultant senior en Sécurité des Systèmes d’Informations au sein de la société Advens , Chapter Leader de l’OWASP pour la France (http://www.owasp.fr), membre du OWASP Global Education Committee et membre du CLUSIF (http://www.clusif.fr).

Posted in ASFWS 2014, Speakers

Gianni Gnesa

Gianni Gnesa is a security researcher and professional trainer at Ptrace Security, a Swiss-based company that offers specialized IT security services to customers worldwide.

Posted in ASFWS 2014, Speakers

Alexandre Herzog

Alexandre Herzog started his career in Information Technology in 1998 as an IT system administrator in the largest trading room in the Geneva region. Between 2004 and 2007 he attended the University of Applied Sciences Western Switzerland in Sierre.

Posted in ASFWS 2014, Speakers

Ashar Javed

Ashar Javed is a research assistant in Ruhr University Bochum, Germany and working towards his PhD. He has been listed ten (`X`) times in Google Security Hall of Fame,

Posted in ASFWS 2014, Speakers

Philipp Jovanovic

Philipp graduated in Mathematics and Computer Science at the University of Passau (Germany) in 2010. After that he started to pursue this PhD degree at the very same institution in January 2011.

Posted in ASFWS 2014, Speakers

André Liechti

Early interested about electronics and computer sciences (he wrote his first application when he was 12 years old), André Liechti first graduates as an electronic engineer, before being a communication systems engineer.

Posted in ASFWS 2014, Speakers

Yassine Mansri

Yassine Mansri est diplômé de l’haute école d’ingénierie et de gestion et du canton de Vaud, filière sécurité informatique.

Posted in ASFWS 2014, Speakers

Exploiting Software Vulnerabilities on Windows 8

Over the past decade, Microsoft has added several security features to the Windows operating system in order to increase the cost of developing reliable exploits for attackers. Sadly, despite the tangible security improvements in the protection of their users, the … Continue reading

Posted in ASFWS 2014, Talks

C++11 metaprogramming applied to software obfuscation

The C++ language and its siblings like C and Objective-C are ones of the most used languages today. Significant portions of operating systems like Windows, Linux, Mac OS X, iOS and Android are written in C and C++. There is … Continue reading

Posted in ASFWS 2014, Talks