Sneak Preview – Workshop about Advanced PHP Security
Our CfP ends on 31 July 2010, so we start publishing information about some of the submissions in advance. We got the confirmation from Laurent Oudot, founder of TEHTRI-Security, concerning the Advanced PHP Hacking training. The workshop will deal with breaking into PHP environments, methods of attackers once they are inside, defense against intruders and real hack simulations. This is a hands-on exercise guided by TEHTRI Security experts. Everyone running, developing or auditing PHP web applications should attend.
Knowing how attacks work is the first step of avoiding them. When it comes to web applications, there is no silver bullet. You have to deal with the hosting environment, known about possible vulnerabilities, learn about the tools attackers use and then you can tune your defenses. Code analysis, filters, fuzzing, NIDS and hardening alone are only a part of the picture. If you are considering to attend this training, all you need is a basic understanding of PHP, SQL and HTTP. Laurent will fill in the details.
So if you are a trainer or researcher, the CfP is still open. Send your submissions and be part of DeepSec 2010!