Visit us at: www.microsoft.com/security

security portal
SecurityFocus is the leading provider of
security intelligence services for business, anda trusted information resource for the securitycommunity.
The services SecurityFocus provides tobusinesses include the following:
Vulnerability Database; Security Intelligence
Alert (SIA) service; Attack Registry andIntelligence Service (ARIS)
SecurityFocus also hosts popular security
community mailing lists including Bugtraq,
the ARIS analyzer service,l and open-source
intrusion detection systems (IDSs).
The award winning SecurityFocus Web site isthe largest security information source on theInternet. The site promotes security

knowledge, security awareness, and an open
discussion of security-related topics. The site
also provides topical content areas, called Focus
Areas, on security topics such as Security
Basics, Sun, Linux, Microsoft, Incident
Handling, IDSs, and Viruses. In addition, theSecurityFocus site includes security advisories,vulnerabilities and solutions, security links toother resources, original content, and breaking
security news.
To join the growing number of SecurityFocus
members and discover more about
SecurityFocus, please visit
www.securityfocus.com.

mail indicia

Hone Your Skills at
supported byPricewaterhouseCoopers is dedicated to providing
strategic security solutions to clients, helping
them build a comprehensive trusted infrastructure
across the enterprise. The threat and vulnerability
practice are uses state-of-the-art analysis
software, sophisticated techniques, industry
knowledge and proven methodologies to help
ensure clients’ operations are not interrupted.
Windows 2000 security is a strong point of theTVA practice; other services include vulnerability
assessments; web application vulnerability
reviews; security architecture design andimplementation; security policy creation; web
portal application security integration; managed
security services, and PricewaterhouseCoopers’
flagship identity management solution. To learn
more about PricewaterhouseCoopers’ security andprivacy solutions, call 800.639.7576 or visit their
web site at www.pwcglobal.com/security.

Lock Your WindowsBlack Hat, Inc • 2606 Second Avenue, no 406 • Seattle, WA 98121 • www.blackhat.com

pricewaterhousecoopers

Since its inception in 1975, Microsoft’smission has been to create software for the
personal computer that empowers andenriches people in the workplace, at school
and at home. Microsoft’s early vision of acomputer on every desk and in every home iscoupled today with a strong commitment toInternet-related technologies that expand thepower and reach of the PC and its users. As
the world’s leading software provider,
Microsoft strives to produce innovative
products that meet customers’ evolving needs.

Briefings & Training Windows Security

microsoft

Black Hat

platinum sponsors

Black Hat Briefings and Training:
Windows Security
FEB 5-6, 2002 (TRAINING) AND FEB 7-8, 2002 (BRIEFINGS)NEW ORLEANS, LA USA • RADISSON HOTEL
Protect your assets from cyber intruders by attending the world’s premier technical event
for Win2K, NT and .Net security experts•

Receive insights from 30 cutting edge security
experts and “underground” security specialists•

Choose from 2 optional days and 7 tracks ofintense hands-on Windows security training,including a new NSA certification course•

Network with hundreds of colleagues fromaround the world and enjoy Mardi Gras

sponsors
platinumsecurity portal

www.blackhat.com
FOR UPDATES AND TO REGISTER OR CALL +1.916.853.8555

“Inadequate securityleaves companies open
not to just hackers butto lawsuits.”
CIO Magazine, November 2, 2001
Attacks on your organization’s vital information
infrastructure are multiplying exponentially. And if you
operate in the Windows environment, your systems faceunique threats from a cadre of determinedhackers, competitors, customers,
disgruntled employees andshadowy cyber intruders.
You need to attend the one
event that provides thedefinitive solutions toWindows security
challenges—The Black Hat
Briefings and Training:
Windows Security.

briefings

training

registration
information

At the Black Hat Windows Security Briefings you will be placed right on the front lines.
Spanning two days with six separate tracks, this conference will explore the technologies, tools,and techniques needed by system administrators to stay on the cutting edge. Our speakers will
be releasing current "never before seen" tactics and tools. The sessions are intense, informativeand cutting edge.

Black Hat Training is designed to raise theprofessional’s competence level on specific security
topics. At the Black Hat Windows Security 2002
Training, we will be offering seven courses:

fees:

one day courses:
MS SQL Server Security Mysteries
Explained

One-Way SQL Hacking: The Futility ofFirewalls in Web Hacking

NT Network Intrusion

Chip Andrews, sqlsecurity.com

JD Glaser, Senior Software Engineer, Foundstone
Saumil Udayan Shah, Principal Consultant,
Foundstone

Auditing Binaries: Reverse Engineering
Windows 2000

VoIP: The Next Generation of Phreaking
Ofir Arkin, Managing Security Architect, @stake

Attacking and Defending DNS
Jay Beale, Founder & Principal SecurityConsultant, JJB Security Consulting & Training

How to Fix A Broken Window
Erik Pace Birkholz, Principal Consultant,
Foundstone

NT/2K Incident Response and Mining
for Hidden Data: Post Mortem of aWindows Box

Oracle Vulnerabilities
David Litchfield, Managing Director & Cofounder, Next Generation Security Software

Web Vulnerability and SQL Injection
Countermeasures: Securing YourServers From the Most Insidiousof Attacks
Timothy Mullen, CIO, AnchorIS.ComThe Devil Inside: Planning Securityin Active Directory Design

Work Hard and Play Hard
This is the best formula for a successful conference!
The Black Hat Briefings and Training Windows Security
conference is located in the heart of New Orleans at thehistoric Radisson Hotel, during the peak celebrations ofMardi Gras.

Harlan Carvey

Radisson Hotel New Orleans, New Orleans, LA1500 Canal Street New Orleans Louisiana 70112
tel: +1 504 522 4500 or +1 800 333 3333
fax: +1 504 522 3627

Raymond Forbes, aka Rooster

TaranisRouting and Tunneling Protocol Attacks

Jonathan Wilkins, Security Researcher,
Bitland.net

Rates:
Feb 1-8: $149 single/double or $179 triple/quad(Super Bowl weekend thru the Conference)
Feb 9-12: $179 single/double or $209 triple/quad(Mardi Gras weekend)
Discount Code: BLACKHAT(you MUST mention this code or you will NOT get thegroup discount rates).

Third Generation Exploits on NT/Win2kPlatforms
Halvar Flake, Reverse Engineer, Black Hat
Consulting

Active Directory & Group Policy

FX, Phenoelit

Deploying & Securing Microsoft Internet
Security and Acceleration Server
Jim Harrison, Microsoft tester, Subscription
Products Group

Laura A Robinson

Bi-directional Communications in a
Heavily Protected Environment
Roelof Temmingh,Technical Director &Founding Member, SensePost

Cracking NTLMv2 Authentication
Urity, SecurityFriday.com
partial schedule shown. go toWWW.BLACKHAT.COM
for complete schedule, session
descriptions and to register“Within seconds of getting to Black
Hat, I remember that this is not anormal security conference.”
Bruce Schneier, CTO, Counterpane Internet Security

JD Glaser, Foundstone

Halvar Flake, Black Hat

Blackhat Briefings Only

$1,195.00

One BlackHat Training Course
Not Attending Briefings$850.00

Two Blackhat Training Courses
Not Attending Briefings$1,550.00

One BlackHat Training Course& BlackHat Briefings$1,850.00

Two Blackhat Training Courses& Briefings$2,500.00

Blackhat Briefings& Foundstone$3,695.00

Foundstone Only

$2,600.00

Using Active Directory to Manage Security
Rooster

Secure Development of Data-Driven Web
Applications
Timothy Mullen, AnchorIS

Advanced Scanning with ICMP
Ofir Arkin, @stakefour easy ways to register:

two day courses:
NSA InfoSec
Assessment Methodology
Security Horizon

online:www.blackhat.com

mail:

Convention & Meeting Services
11325 Sunrise Gold Circle
Suite B
Rancho Cordova, CA 95742

phone:

1.916.853.8555

fax:

1.916.853.8585

Security Horizon

Ultimate Hacking:Black Hat Edition
Foundstone

Please note that many of these classes were oversold
at Black Hat USA 2001. Go to www.blackhat.com
for more information and to register.

To register via fax or mail, please print andcomplete the online registration form.
If you need additional information or
assistance call Convention & MeetingServices at 1.916.853.8555
or E-mail us at
info@convmgmt.com“Customers are thefastest growing groupof electronic intruders
faced by companies.”—Information Week
September 3, 2001

www.blackhat.com