Double session evening event

The (ISC)² Belux Chapter is the official association of (ISC)² certified information security professionals in Belgium & Luxembourg.(ISC)² is a worldwide organization regrouping more than 120.000 information security professionals around the planet among which over 22.000 in EMEA.(ISC)² is the organization providing the most renowned Information Security Certification, the CISSP (Certified Information Systems Security Professionals).

(ISC)² Belux Chapter

Two sessions: one on Security in the software development lifecycle and another on business aligned security.

BeCentral

Session 1:Developers: your first line of defense against cyber threatsWith the increasing number of cyber security attacks at the application level, the developers play a pivotal role in implementing a proper cyber resilience program for your company.Speaker:Mr. Eric BariauxEric is currently Secure Delivery Director at Approach, where he focuses on bringing cyber security best practices to all aspects of the software development lifecycle. He leads a team of highly qualified experts in providing secure, end to end solutions to high profile organisations.Having worked as senior developer, software architect and team leader for customers in the financial, insurance, telecommunication and healthcare sector, Eric brings a practical approach to making security and privacy an integral part of the development process.Session 2:Business Aligned SecurityRecently, the french ANSSI (Agence Nationale de la Sécurité des Systèmes d&#x27;Information) has released an open-source AES library for ARM microcontrollers. This software implementation aims to provide a practical protection against side-channel attacks with state-of-the-art techniques. Additionally, the ANSSI has provided a first security analysis in which no attack could succeed with less than 100,000 observed encryptions.In this presentation, a bottom-up approach is followed in order to analyze the security of this software. First, the implemented countermeasures and their expected behaviors are detailed. Second, the attack path and the methodology to extract useful information are described from a higher perspective. Third, the attack efficient is evaluated: we show that a full encryption key is recovered in less than 30 seconds (2,000 measurements). The improvement compared to the ANSSI&#x27;s security analysis mainly comes from the introduced methodology called &quot;Countermeasure&#x27;s Dissection&quot;. As a conclusion, I argue that such a fine grain security evaluation is hard to automate without the knowledge of the target and under realistic timing constraints. If not done under these assumptions, the effective level of security may be over-estimated. Such case would be damaging for the long-term security of an infrastructure.Speaker:Mr. Koen Maris

Our {communityGuidelinesLink} describe the sort of content we prohibit on Eventbrite. If you suspect an event may be in violation, you can report it to us so we can investigate.

To report other categories of prohibited or illegal content, submit {link}

Double session evening event

More events from (ISC)² Belux Chapter

Discover more events from (ISC)² Belux Chapter, from Business to other experiences you might love.

Double session evening event

More events from (ISC)² Belux Chapter

Discover more events from (ISC)² Belux Chapter, from Business to other experiences you might love.

You might also like...

Browse more events with different dates, prices, and formats to find your next great experience.