Barracuda Networks Inc., a leading provider of content security, data protection and application delivery solutions, today announced an array of activities it will be participating in during RSA and Security Bsides – two major security conferences taking place Feb. 14-17 in San Francisco. This week’s lineup includes:
RSA Conference 2011 – Feb. 14-17: Moscone Convention Center – Booth #1440
Barracuda Chief Research Officer, Dr. Paul Judge and Research Scientist Daniel Peck will lead a joint session exploring the frequency and nature of attacks on Twitter and Facebook:
The Dark Side: Measuring and Analyzing Malicious Activity on Twitter
Thursday, Feb. 17 at 10 am. - Location: Red Room 102
Twitter's popularity and open API and platform make it easy for attackers to exploit. In this talk, Dr. Judge and Peck will offer a sneak peek into the soon-to-be-released Annual Threat Report discuss the scale and history of malicious activity on Twitter and Facebook. In addition the speakers will demonstrate how attackers respond rapidly to the large increases of users driven by celebrity attention, as well as review attacks across trending topics, URL shorteners and more.
Dr. Judge has more than 10 years of experience focused on creating innovative security technologies for businesses. Dr. Judge is a recognized authority on Internet security, having won numerous honors including InfoWorld Top 25 CTOs, Atlanta Power 30 under 30 and MIT Technology Review Magazine's 100 Top Innovators under 35.
Peck is a research scientist at Barracuda Networks with experience attacking and defending critical systems of all sorts, from power plants to major financial institutions. He develops new attack strategies that are implemented as protection in Barracuda Networks product and service lines.
Barracuda Debuts Web Security Flex
Barracuda Networks will demonstrate its newest product, Barracuda Web Security Flex, a hybrid Web security solution that unifies SaaS, appliance and remote filtering deployment options under a single management and reporting portal. Barracuda Web Security Flex allows organizations to harness the power of Web 2.0 applications while protecting users against fast moving, aggressive Web threats. The solution includes cloud-based malware analysis, advanced URL filtering, and extensive coverage for content types and applications, enabling administrators to regulate Web content and Web 2.0 applications.
In addition, Barracuda Networks will showcase its full line of award-winning content security solutions- including the NG Firewall, Spam & Virus Firewall, Barracuda Web Filter, and Barracuda Web Application Firewall, as well as its networking, application delivery, storage and data protection solutions during the show. Barracuda presentations highlighting the Web Security Flex, hybrid content security approach and the benefits of next generation firewall and Web Application firewall technologies will take place at regular intervals throughout the week at Barracuda booth # 1440.
Barracuda Networks will be running a Twitter and Facebook promotion for RSA participants who visit its booth. A daily raffle will be held for attendees who follow Barracuda on Twitter and tweet with hashtags #Cuda1440 and #RSAC, and for the most creative photographs uploaded to Barracuda Networks’ Facebook page.
Security Bsides SF – Feb. 14-15: Zeum Museum (221 Fourth St.)
In addition to his RSA presentation, Peck will also lead a session at BSides discussing key insights a security vendor can learn from starting a bug bounty program:
Lessons Learned from Running a Bug bounty Program
Monday, Feb. 14 at 10 am. - Location: Zeum
A few months ago, Barracuda Labs launched a bug bounty program, soliciting and rewarding security researchers for finding vulnerabilities in its security appliances. While Barracuda Labs was not the first team to offer this type of program, it was the first security product vendor to do so. As such, the team has an interesting perspective to share with the audience. In this talk, Peck will share the internal conversations that were necessary to get all corporate stakeholders – from marketing to product management to engineering and executive management – to buy-in to the program, as well as tips on processes to have in place to make the program run smoothly. Peck will also talk about some of the benefits to a bounty program, counterarguments to the naysayers, and some stats on the types of vulnerabilities reports received.
Also at Security Bsides, Barracuda Networks Manager of Client-Side Technologies Ray Kelly will lead the following session:
Screw the TSA: I’ll be Where I Want, and Get Credit for It!
Monday, February 14 at 1:00pm., Location: Zeum
It’s no secret that the rapid growth in popularity of location-aware social networking sites, such as Foursquare and Facebook Places, are potential new targets for mischievous hackers to exploit. What’s to be gained by GeoHacking? Free t-shirts, free coffee, or a new car? This talk will explore how the APIs work for Foursquare and Facebook, and how hackers can use the API against itself to put a user somewhere to get “credit” for it. Kelly will discuss the list of services that use location and ways to fake location with popular services (via live demo), examine the threat overview and risk matrix of what someone can accomplish with a fake location, as well as review possible countermeasures.
In his current role, Kelly leads the development and oversight of all client-side security applications, and conducts security research as part of Barracuda Labs global threat intelligence efforts. Kelly has been a developer for 16 years and has been in the Internet security space for the past eight years.
Barracuda Networks In the Running for Two Prestigious Security Awards
Barracuda Networks (barracudanetworks.com) has been named as a finalist in the SC Magazine Reader’s Trust Awards “Best Security Company” category and in “Best Web Content Management” category for its Barracuda Web Filter and Barracuda Web Filtering Service. This is the seventh consecutive year that Barracuda Networks and its products have been named as finalists in this prestigious industry award competition, which honors best-in-class security products and services. Winners of this year’s SC Magazine Awards will be announced at a gala dinner and award ceremony to be held in San Francisco during the RSA Conference on Tuesday, Feb. 15, 2011.