Trustwave SpiderLabs Uncovers Ov3r_Stealer Malware Spread via Phishing and Facebook Advertising. Learn More

Trustwave SpiderLabs Uncovers Ov3r_Stealer Malware Spread via Phishing and Facebook Advertising. Learn More

Services
Capture
Managed Detection & Response

Eliminate active threats with 24/7 threat detection, investigation, and response.

twi-managed-portal-color
Co-Managed SOC (SIEM)

Maximize your SIEM investment, stop alert fatigue, and enhance your team with hybrid security operations support.

twi-briefcase-color-svg
Advisory & Diagnostics

Advance your cybersecurity program and get expert guidance where you need it most.

tw-laptop-data
Penetration Testing

Test your physical locations and IT infrastructure to shore up weaknesses before exploitation.

twi-database-color-svg
Database Security

Prevent unauthorized access and exceed compliance requirements.

twi-email-color-svg
Email Security

Stop email threats others miss and secure your organization against the #1 ransomware attack vector.

tw-officer
Digital Forensics & Incident Response

Prepare for the inevitable with 24/7 global breach response in-region and available on-site.

tw-network
Firewall & Technology Management

Mitigate risk of a cyberattack with 24/7 incident and health monitoring and the latest threat intelligence.

Solutions
BY TOPIC
Microsoft Exchange Server Attacks
Stay protected against emerging threats
Rapidly Secure New Environments
Security for rapid response situations
Securing the Cloud
Safely navigate and stay protected
Securing the IoT Landscape
Test, monitor and secure network objects
Why Trustwave
About Us
Awards and Accolades
Trustwave SpiderLabs Team
Trustwave Fusion Security Operations Platform
Trustwave Security Colony
Partners
Technology Alliance Partners
Key alliances who align and support our ecosystem of security offerings
Trustwave PartnerOne Program
Join forces with Trustwave to protect against the most advance cybersecurity threats
News Releases

Trustwave SpiderLabs to Present at OWASP AppSec USA 2011

Cyber Security Experts Talk About the Mobile Security Landscape and Discuss Application Security Flaws

CHICAGO (September 15, 2011) - Trustwave, a leading provider of information security and compliance solutions, today announced that Trustwave cyber security experts will deliver four talks at OWASP AppSec USA, in Minneapolis, September 22 through 23. The presentations will be delivered by members of Trustwave SpiderLabs, the team of ethical hackers responsible for application security, incident response and forensics, penetration testing and security research.

Ryan Barnett, senior security researcher, will present Application Layer Intrusion Detection in the Field: Implementing OWASP AppSensor with ModSecurity. Trustwave is the primary custodian of ModSecurity, the most widely deployed Web application firewall in the world. OWASP AppSensor is an application layer intrusion detection framework that outlines various detection points for suspicious or malicious behavior for which Web applications should look. Applying this framework inside of a Web application in a more specific way that helps reduce false positives, which is an issue that often plagues network intrusion detection systems. This presentation highlights a real-world implementation of OWASP AppSensor using ModSecurity to detect such vulnerabilities as session hijacking attacks, HoneyTraps and more.

Charles Henderson, director of application security services, will review Trustwave's 2011 Global Security Report. The presentation will summarize the results and analysis of more than 220 data breach investigations and more than 2,300 penetration tests conducted during the past year. The presentation will cover both technical and business impact analysis.

Mike Park, senior security consultant, will present Android Security, or This is Not the Kind of 'Open' I Meant, which will review security issues associated with Android applications through penetration testing. Using open source tools, he will reverse engineer an application to obtain pristine source code. Such an attack, if done in the wild, would enable a hacker to understand the application's functionality, find embedded keys and SSL certificates, and possibly create a version embedded with a Trojan that could steal data from a user who downloads the malicious version. After reviewing Android's recent application security problems, Park will discuss techniques to help mitigate these issues.

Kevin Stadmeyer and Garrett Held, both senior security consultants, will present Hacking (and Defending) iPhone Applications, which will focus on iPhone application security. The presentation will review the current mobile security landscape and will then drill down into specific vulnerabilities. Issues such as the inadvertent local caching of data, the secure storage of data on the device, business logic contained in the application and web services will be discussed during this presentation.

"As attackers continue to compromise applications, businesses need to ensure that application security testing and training are part of the software development lifecycle," said Robert J. McCullen, chairman, CEO and president of Trustwave. "Trustwave's application security team assists our clients using industry-leading techniques to help better protect their web applications, while also educating developers with regard to security best practices."

"Recent breaches have helped organizations learn that application security is a critical part in defending the corporate infrastructure from attack," said Nicholas J. Percoco, senior vice president and head of Trustwave SpiderLabs. "As application security transcends from Web to mobile, it's even more critical that organizations learn how to protect users and secure personal data before releasing mobile applications."

About Trustwave

Trustwave is a leading provider of on-demand and subscription-based information security and payment card industry compliance management solutions to businesses and government entities throughout the world. For organizations faced with today's challenging data security and compliance environment, Trustwave provides a unique approach with comprehensive solutions that include its flagship TrustKeeper® compliance management software and other proprietary security solutions including SIEM , WAF , EV SSL certificates  and secure digital certificates . Trustwave has helped hundreds of thousands of organizations-ranging from Fortune 500 businesses and large financial institutions to small and medium-sized retailers-manage compliance and secure their network infrastructures, data communications and critical information assets. Trustwave is headquartered in Chicago with offices throughout North America, South America, Europe, Africa, Asia and Australia. For more information, visit https://www.trustwave.com/en-us/.

Latest News Releases

New Trustwave SpiderLabs Research Exposes Unique Cybersecurity Threats Facing Education Industry

Chicago – February 22, 2024 – Trustwave, a leading cybersecurity and managed security services provider, today released comprehensive research uncovering unique cybersecurity threats faced by...

Read More

Trustwave MailMarshal Now Available on Microsoft Azure Marketplace

Chicago – February 1, 2024 – Trustwave, a global cybersecurity and managed security services leader, today announced the availability of Trustwave MailMarshal on the Microsoft Azure Marketplace, an...

Read More

Aquion and Trustwave Announce Strategic Partnership to Boost Cybersecurity in Australia and New Zealand

Sydney, Australia - Jan 30, 2024 - Aquion, a specialist in value-added software distribution, proudly announces its strategic partnership with global managed cybersecurity leader Trustwave. This...

Read More