also be covered.Ryan Jones, Sr. Security Consultant. Ryan has worked in the information security field for over 14 years. His main focus has been on network, application, and physical security assessments and he has worked in these capacities with over 1000+ clients for a variety of business sectors with the primary the emphasis being on the government, banking, and medical industries. His work included testing web applications, network penetration testing, physical penetration testing, physical security assessments and planning, social engineering testing as well as designing information security remediation programs for these clients. He has spoken at at various events and conferences, including the Defcon Skybox talks. He was a cast member and technical producer of the 2007 TV show "Tiger Team" and is also currently the co-host of the security podcast "Exotic Liability." He is currently a Senior Security Consultant on the Application Security Team of Trustwave's Spiderlabs.----------------------------------------SAP and Caipirinha with PituFalar de SAP dispensa introducoes, nesta apresentacao abordarei as fases de realizacao de um Pen Test em ambiente SAP em producao utilizando um framework publico e OpenSource: Sapyto.Hoje em dia se tem pouco conhecimento da realizacao de Pen Tests em Business Applications. Testes de seguranca em ambiente SAP sao necessarios tendo em vista que implementacoes do SAP estao contempladas em projetos longos e complexos onde se tem muito capital da empresa envolvido. Dados de 2008 do FBI afirmam que fraudes financeira causadas por incidentes de seguranca resultaram em um prejuizo de aproximadamente U$ 470.000 para empresas americanas e para agravar a situacao dados da empresa de consultoria em seguranca da informacao ONAPSIS, mais de 95% dos ambientes SAP avaliados pela empresas estavam propensos a fraudes financeiras causadas por vulnerabilidades tecnicas de seguranca da informacao e que muitas dessas implementacoes foram qualificadas com SOX/PCI DSS/ISO por quatro grandes empresas de auditoria.A partir de agora fazendo a saborosa caipirinha Sergipana com Pitu conheceremos as fases de um Pen Test em SAP. O Pen Test aqui abordado segue como metodologia fases do Sapyto, framework opensource Free) de realizacao de Pen Test em ambientes SAP. Temos entao 4 fases, sendo elas:1 Discovery2 Exploration3 Vulnerability Assessment4 ExploitationJoaquim Espinhara, Pesquisador Independente de seguranca da informacao atua como consultor da SecureInfo Security Solutions. Palestrante em alguns eventos internacionais e em diversos regionais. Palestrante na ultima H2HC 6th Edition) com a apresentacao de Sniffing de redes remotas.----------------------------------------Client-Side Detection AdvancesFile format and JavaScript-based attacks have become the primary focus of the security landscape over the last several years. These attacks can be sophisticated and difficult to detect at wire speeds by an IPS or IDS. Exploit frameworks, such as Metasploit, Immunity's CANVAS and Core Impact provide simple mechanisms to achieve this complexity. Complicating this already difficult detection is the desire for many IPS users to have low-latency analysis at wire speed. The processing necessary to address ASCII hex encoding, JavaScript obfuscation, PDF object compression and the myriad of other techniques available to attackers means that normalizing a document to the point where it can be analyzed for malicious data is simply unfeasible in an inline deployment for Snort or any