Developing Leeds Scene



Conscious that it's been some time since I wrote a post so I thought I'd write a little something about the developing Leeds 'scene' since co-founding DC151 and helping (albeit a little) with BSides Leeds. 

DC151 (Every 2nd Wednesday)

I'd complained for years that Leeds had no regular social gathering for people like us so when Mark C announced BSides Leeds and everyone looked this way I picked up the phone and start texting. After some hurried planning I agreed a format and charter with Matt and we committed to a date for the first gathering, October 11th. We gave ourselves around two months to sort everything, including finding a venue. 

So far we've now held four gatherings and I couldn't be happier with how it's worked out. We've had to learn as we go and tweak the format along the way. We've had some great talks and we continue to receive support and attract interest beyond LS1. 

If you're interested in coming along or getting involved in DC151, please get in touch. You can find us on Twitter and our blog has got the details of the talks and presentations we've had so far. We're also on Instagram.


BSides Leeds (January 2018)

BSides Leeds was a huge success. Mark C did a fantastic job bringing it all together in (really) a very short amount of time. The feedback has been excellent and I'm genuinely excited about next year. 

I had some involvement with BSides Leeds but I struggled to really support it as much as I wanted to in the end due to competing commitments and ill health. I learnt the hard way that flu season is a real thing it and it can mess you up. In the end all I could do was write the sponsorship pack and I ended up having to leave after the keynote on the day because I (genuine quote) "looked green". This meant I missed speaking on the closing panel, much to my annoyance. Hopefully I'll be able to redeem myself next year. 

Talks from the day are up on YouTube and be sure to follow BSides Leeds on Twitter. 

Leeds Hacking Society (Every Thursday) 


Leeds Hacking Society is formed of students attending various courses at Leeds Beckett but is open to students from other institutions. 

 The society, along with Leeds Beckett were heavily involved with setting up and running BSides Leeds and ensuring it went so smoothly. They also have strong ties with the society at Abertay. 

 I'm due to present a talk at the Society in March and will be looking to find out how we can all work closer together to ensure we stand the best chance of attracting and retaining talented students in Leeds.

 Their website details upcoming events and they're on Twitter. 

Popular posts from this blog

Tools & Techniques - Cloud Firewalls (DigitalOcean)

Image
My home lab is (probably) typical of most security professionals: a beefy workstation running VMWare workstation, a beefy-ish workstation running ESXi and a bunch of laptops, switches and other devices.  I utilise a couple of VPS providers for hosting and exposing VMs to the cloud. My VPS provider of choice has been DigitalOcean for the last couple of years (going by my billing history) and to date, they've been excellent. They recently introduced and advertised a new service feature called 'Cloud Firewalls' and I had chance to have a play with them today. Essentially, they've incorporated a network level firewall service to their VPS offering which can be used as an alternative or in addition to host-based firewalls like iptables, firewalld, etc.  Initial Impressions - Pros, Cons and Limitations Pros No Cost (free!!) - Cloud Firewalls are available at no additional cost. Availability - Cloud Firewalls are available in ever region DigitalOcean operate.
Read more

PCI-DSS: Your CDE may be getting bigger

Image
In December, the PCI Security Standards Council released guidance around scoping and network segmentation for card data environment (CDE) assets. In their own words: “Many organizations struggle to understand where PCI DSS controls are required and which systems need to be protected. This document provides guidance to help organizations identify the systems that, at a minimum, need to be included in scope for PCI DSS. Additionally, the document provides guidance on how segmentation can be used to help reduce the number of systems that require PCI DSS controls.” The guidance goes on to visualise a scoping process, considering each category of system in turn: I believe it’s worth highlighting the ‘broadness’ of the “Connected to OR Security Impacting Systems” . These are cases where the: System component is on a different network (or subnet or VLAN), but can connect to or access the CDE (e.g., via internal network connectivity). System component can connect
Read more

WAR GAMES - Simulating Security Incidents

Image
Why it's a good idea There are a myriad of reasons to test in peace time, the controls and processes which collectively represent your incident readiness. These include: Validating your Incident Readiness - testing can confirm that you are as ready as you think you are, and that nothing has changed resulting in an end state which prevents you from initiating IR.  Assess Controls Coverage and Identify Gaps - testing can confirm your controls coverage is adequate as well as highlighting those gaps which you'd rather not have in the event of a real issue. Demonstrate value of investment - you've probably spent a lot of time and other people's money acquiring controls, attracting talent and preparing for the eventually of an incident. Internal stakeholders will likely already be looking for assurance that their investment has been worth while.  Demonstrate investment and commitment to interested parties - internal stakeholders considered, you'll lik
Read more