Ethical Security Testers Conference
Today the Council of Registered Ethical Security Testers (CREST) and CESG, the UK national technical authority for information assurance, are running the first Ethical Security Testers Conference at Royal Holloway, University of London.
I am attending the conference on behalf of the Open Web Application Security Project (OWASP) Global Industry Committee. Apart from the web security related presentations, I am particularly looking forward to hearing about CREST's progress and the future of CREST/CESG certification schemes.
I will update this posting at the end of the day tomorrow.
Update 16th December 2009: There were many familiar faces at the well-attended first conference. CREST and CESG had put on an interesting programme of mainly technical speakers—the demonstration of the Context App Tool was particularly useful for the application testers present, and I'm looking forward to trying the beta 3 version. Infrastructure security testing presentations were given on USB drivers, Windows authentication, CISCO IOS, deployment solutions and full disk encryption products.
CREST and CESG outlined their vision for information assurance professionalism, and it sounds like the CREST scheme is growing in momentum both in the UK and overseas. It seems there may soon be CREST services available in South Africa abd Benelux, and mention was made of some potential partnership with the SANS Institute.
Posted on: 15 December 2009 at 06:30 hrs
Comments are filtered automatically and should appear shortly after they been checked.