Trustwave Unveils New Offerings to Maximize Value of Microsoft Security Investments. Learn More

Trustwave Unveils New Offerings to Maximize Value of Microsoft Security Investments. Learn More

Services
Capture
Managed Detection & Response

Eliminate active threats with 24/7 threat detection, investigation, and response.

twi-managed-portal-color
Co-Managed SOC (SIEM)

Maximize your SIEM investment, stop alert fatigue, and enhance your team with hybrid security operations support.

twi-briefcase-color-svg
Advisory & Diagnostics

Advance your cybersecurity program and get expert guidance where you need it most.

tw-laptop-data
Penetration Testing

Test your physical locations and IT infrastructure to shore up weaknesses before exploitation.

twi-database-color-svg
Database Security

Prevent unauthorized access and exceed compliance requirements.

twi-email-color-svg
Email Security

Stop email threats others miss and secure your organization against the #1 ransomware attack vector.

tw-officer
Digital Forensics & Incident Response

Prepare for the inevitable with 24/7 global breach response in-region and available on-site.

tw-network
Firewall & Technology Management

Mitigate risk of a cyberattack with 24/7 incident and health monitoring and the latest threat intelligence.

Solutions
BY TOPIC
Offensive Security
Solutions to maximize your security ROI
Microsoft Exchange Server Attacks
Stay protected against emerging threats
Rapidly Secure New Environments
Security for rapid response situations
Securing the Cloud
Safely navigate and stay protected
Securing the IoT Landscape
Test, monitor and secure network objects
Why Trustwave
About Us
Awards and Accolades
Trustwave SpiderLabs Team
Trustwave Fusion Security Operations Platform
Trustwave Security Colony
Partners
Technology Alliance Partners
Key alliances who align and support our ecosystem of security offerings
Trustwave PartnerOne Program
Join forces with Trustwave to protect against the most advance cybersecurity threats
News Releases

Six Security Experts from Trustwave's SpiderLabs to Speak at ToorCon 12

CHICAGO (October 21, 2010) -   Security experts from Trustwave, a leading provider of information security and compliance solutions, will present at ToorCon 12 in San Diego, October 22 through 24. The presentations will be delivered by members of SpiderLabs, the advanced security team at Trustwave responsible for application security, incident response, penetration testing, physical security and security research.

  • David Bryan will deliver Pentesting for Fun...and Profit, which will explore real world penetration testing methodologies, tools and techniques and how the service has evolved over the past few years. He'll provide telling examples of how a single small vulnerability nearly led to full-infrastructure compromise. From internal and external networks to wireless and physical, he'll teach attendees how to gain unauthorized access to systems to obtain data critical to the business infrastructure resulting in better protection.
  • He will also deliver, Building the DEFCON Network, Making a Sandbox for 10,000 Hackers, which will explore ways to build a secure network infrastructure using enterprise-class hardware while on a tight budget. The presentation will consider the evolution of networks, which technology has exhibited proven capabilities during the last ten years, and those ideas that have fallen apart. He'll review the implementation of security controls and how to properly define segmentation, which are critical components often overlooked when building a network infrastructure to avoid attacks and traffic interception.
  • Nathan Drier will present Intro to Packet Capture Analysis. Packet capture analysis is decoding the languages that computers use to speak to each other. If an attacker can intercept that communication, they can extract all types of information such as visited Web sites, e-mails and attachments, instant messages, usernames and passwords, and much more. This presentation will review several tools and techniques used to extract this information, which can help system administrators track down malware, uncover system abuse and help with basic troubleshooting.
  • Rob Havelt, with a co-presenter, will deliver Exploiting a PCI Compliant Network: A How-to Guide, which will explore the inaccurate perception that compliance with the Payment Card Industry Data Security Standard (PCI DSS) automatically ensures an organization's security. This presentation will explore ways to breach a PCI DSS compliant network, demonstrating how drastically limiting the scope of the PCI DSS can undermine all compliance efforts because assessors are only privy to the infrastructure in scope. This technical and tactical presentation will utilize penetration tests, incident data and assessor information to formulate exploitation scenarios from common to more rare and exotic techniques. It will also address the importance of building an overall security strategy into all compliance efforts.
  • Eric Monti will deliver iPhone Rootkit? There's an App for That, where he'll present tools and techniques for developing rootkits on the iPhone. He will also be reviewing exploitation of a vulnerability that allows installation of a rootkit based on the jailbreakme.com remote client-side exploit. The implications for the personal owner of a compromised iPhone are serious and could cause the loss of critical data when considering the advancement of mobile banking applications and SMS use for account transfer authentication.
  • Rodrigo Montoro will present Scoring PDF Structure to Detect Malicious Files which will look at the recent surge in PDF malware attacks. People fall victim to this type of attack after launching PDFs from email attachments or downloading content from malicious Web sites. Detecting malicious PDFs is complex because there are thousands of ways to write the same content, malicious or secure. While deep analysis of these individual attributes is a daunting task, focusing on combinations of them offers a unique, behavioral approach to detection. This presentation will discuss PDF structure, compare real malicious PDF samples to non-malicious content and demonstrate how analyzing the file structure with a scoring system can greatly aid in determining whether a file is malicious or not.

"A poor security strategy can seriously hinder any compliance effort," said Robert J. McCullen, chairman and CEO of Trustwave. "It's critical for organizations to weave security best practices into all compliance efforts to best protect critical data."

"We're excited to share our information security expertise with attendees and explore ways we can help them better secure their assets," said Nicholas J. Percoco, senior vice president and head of Trustwave's SpiderLabs. "In addition, we're looking at present-day malware attacks such as PDF and iPhone exploits to help an organization understand these security implications."

About Trustwave

Trustwave is a leading provider of on-demand and subscription-based information security and payment card industry compliance management solutions to businesses and government entities throughout the world. For organizations faced with today's challenging data security and compliance environment, Trustwave provides a unique approach with comprehensive solutions that include its flagship TrustKeeper® compliance management software and other proprietary security solutions including SIEM , WAF , EV SSL certificates  and secure digital certificates . Trustwave has helped hundreds of thousands of organizations-ranging from Fortune 500 businesses and large financial institutions to small and medium-sized retailers-manage compliance and secure their network infrastructures, data communications and critical information assets. Trustwave is headquartered in Chicago with offices throughout North America, South America, Europe, Africa, Asia and Australia. For more information, visit https://www.trustwave.com/en-us/.

Latest News Releases

Trustwave Honored with Leadership and Career Growth Awards

Chicago – June 19, 2024 – Trustwave, a global cybersecurity and managed security services leader, today announced it was awarded with two new Comparably awards: 2024 Best Companies for Career Growth...

Read More

Trustwave Unveils New Offerings to Maximize Value of Microsoft Security Investments

Chicago, IL – June 4, 2024 – Trustwave, a leading cybersecurity and managed security services provider, today announced an expanded portfolio of offerings designed to help organizations unlock the...

Read More

Trustwave SpiderLabs Exposes Unique Cybersecurity Threats in Public Sector

Chicago – May 14, 2024 – Trustwave, a leading cybersecurity and managed security services provider, today released a comprehensive report titled "2024 Public Sector Threat Landscape: Trustwave Threat...

Read More