2012-2013 - Ensiwiki

¡¡_ (in)security we trust _!!
SecurIMAG
Grenoble INP
Ensimag
2012-2013
SecurIMAG
(in)security we trust
Guillaume Jeanne
Fabien Duchene
Camille Mougey
Karim Hossen
2012 – 2013
SecurIMAG, a club and an association
• A security club
• We meet once a week
• Learn and practise about several topics related to
computer security
• Organization of events (eg: GreHack)
• Go deeper in concepts and techniques seen during
some courses (eg: break an activation license of an
android application protection)
• Support and help those who want to progress
2
SecurIMAG - title - author - date
Evolution
March 2011
- FUN
2011-2012
2012-2013
- Talks, Projects
- Trainings
- Challenges
- Hacking contest team - 19/10 GreHack
- Video streaming
- Practical work
- Infosec career
- GreHack preparation - create challenges
- Papers synthesis
3
SecurIMAG - title - author - date
Security Topics
Reverse
engineering
Fuzzing
Cryptography
SecurIMAG
Forensics
Steganography
Web
4
SecurIMAG - title - author - date
Talks examples
iOS Data Protection (2012-09)
• Albin PETIT
• Keywords : AES, System keybag, integrity check
Let me SQL inject your heart! (2012-02)
• Franck De Goër & Fabien Duchene
• Keywords : SQL injection, XPath, LDAP, Oracle, MySQL
Defeat userland exploits on Linux (2011-09)
• Arnaud Maillet
• Keywords : RELRO, PIE, Glibc, Canary, Stack Overflow,
Shellcode
5
SecurIMAG - title - author - date
Practical work
• Reverse engineering with IDA
6
SecurIMAG - title - author - date
Advices and helps with your infosec career
• http://ensiwiki.ensimag.fr/index.php/A_career_in_Informa
tion_Security
• Question asked during interview : « je suis dans le train,
je vais aux toilettes, lorsque je reviens comment savoir si
mon ordinateur n’a pas été corrompu ? »
7
SecurIMAG - title - author - date
Own free book library
• http://ensiwiki.ensimag.fr/index.php/Portail:SecurIMAG_
Ensimag_IT_security_and_hacking_club/Library (D324)
8
SecurIMAG - title - author - date
Hacking event : Some of us where there!
InsomniHack2k12 ranking
GreHack2012 ranking
9
SecurIMAG - title - author - date
GreHack2012, Organized by SecurIMAG
• Security Conference (during day)
• 170 people
• Ethical Hacking Contest (during night)
• 100 people
• 10k€ budget
• We need you to GreHack2013 !
10
SecurIMAG - title - author - date
GreHack 2013 - HOW can you help ?
• challenge creation
• general organization
(meal, cocktail)
• looking for sponsors
• network CTF admin
• community manager
• website admin
• …
11
SecurIMAG - title - author - date
GreHack 2013 - WHY to help?
• Benefits
• meet security professionals (CEA, HP…)
• help to find an internship
• a line on the resume
• see behind the scenes of the organization
12
SecurIMAG - title - author - date
Some members
•
•
•
•
•
•
Franck De Goer, 2A ISI
Fabien Duchene, LIG VASCO Team
Karim Hossen, LIG VASCO Team
Guillaume Jeanne, 2A ISI
Arnaud Maillet
Camille Mougey, 3A ISI
• Albin Petit, Master SCCI
• Guillaume Touron
13
SecurIMAG - title - author - date
Who is concerned
• Open to all… (not only Ensimag students !)
• Passionate about computer security or simply want to
extend your knowledge
• Expert or newbie who want to progress
• Girls !
14
SecurIMAG - title - author - date
Contact us
•
•
•
•
15
How to reach that crazy team?
[email protected]
Twitter : @securimagtwitte
LinkedIn : groups?gid=3898897
IRC #securimag on irc.car-online.fr 6697
SecurIMAG - title - author - date
Join US
Every Thursday 5pm-6pm30 @ Ensimag, Amphi E or E101
16
SecurIMAG - title - author - date
Hope to see you soon!
17
SecurIMAG - title - author - date