BlueHat

From Bounties to the BlueHat Prize – Evolutionary Thinking in Valuing Security Research

Wednesday, July 27, 2011

Handle: k8e IRL: Katie Moussouris Rank: Senior Security Strategist Lead, Head of Microsoft’s Security Community and Strategy Team Likes: Cool vulns, BlueHat, soldering irons, quantum teleportation Dislikes: Rudeness, socks-n-sandals, licorice Today on the MSRC blog, Matt Thomlinson announced the BlueHat Prize, the first and largest incentive prize Microsoft has ever offered to seek out and reward new ideas in computer security defense.

• BlueHat Security Briefings
• Community-based Defense
• EcoStrat
• Mitigations
• Security Ecosystem
• Security Research

Building a safe internet... together!

Wednesday, June 15, 2011

Handle: Cluster IRL: Maarten Van Horenbeeck Rank: Senior Program Manager Likes: Slicing covert channels, foraging in remote memory pools, and setting off page faults Dislikes: The crackling sound of crypto breaking, warm vodka martni Hi everyone, Together with my colleagues Jeff Williams and Holly Stewart from the Microsoft Malware Protection Center (MMPC) I am here at the 23rd Annual FIRST conference in Vienna, Austria this week.

Coordinated Vulnerability Disclosure Reloaded

Tuesday, April 19, 2011

Today on the MSRC Blog, Matt Thomlinson announced three new efforts to provide more transparency into Microsoft’s vulnerability disclosure process. These included a Coordinated Vulnerability Disclosure (CVD) at Microsoft procedures document, the first release of MSVR Advisories on vulnerabilities that were discovered by Microsoft and fixed by affected vendors, and an internal employee disclosure policy.

• CVD
• MSVR
• Responsible Disclosure

Behind the Curtain of Second Tuesdays

Wednesday, December 01, 2010

Handle: Mando Picker IRL: Dustin Childs Rank: Security Program Manager Likes: Protecting customers, working with security researchers, second Tuesdays, bourbon, mandolins Dislikes: Using “It’s hard” as an excuse, quitting when it gets tough, banjos Hello All, I enjoy telling stories. Perhaps, in a former life, I spent time as a bard telling stories of Robin Hood and Maid Marian as I travelled from town to town.

• BlueHat Security Briefings
• MSRC
• MSRC Ecosystem Strategy
• Security Bulletin

Hack.lu: Why it’s all about building bridges

Thursday, November 04, 2010

Handle: Cluster IRL: Maarten Van Horenbeeck Rank: Senior Program Manager Likes: Slicing covert channels, foraging in remote memory pools, and setting off page faults Dislikes: The crackling sound of crypto breaking, warm vodka martni “We want to remain what we are” (“Mir wëlle bleiwe wat mir sinn”) is the national motto of the Grand Duchy of Luxembourg.

• Community-based Defense
• EcoStrat
• Hallway Tracks
• Mitigations
• MSRC
• MSRC Ecosystem Strategy
• Risk Assessment
• Security Conference Engagement
• Security Ecosystem
• Security Engineering
• Security Research
• Security Tools
• Watering Hole

Getting Into Information Security Intelligence Gathering: A BlueHat v10 Retrospective from Speakers Ian Iftach Amit and Fyodor Yarochkin

Tuesday, November 02, 2010

Ian: Having a mild case of “professional ADHD” is probably what got me started on this whole “cyber” thing. Having done research, development, integration and consulting in the past, I was starting to get too many unanswered questions in my mind when dealing with customers and individuals who were being compromised left and right.

• Attack
• BlueHat Security Briefings
• Cyberbullying
• Emerging Threat
• Identity/Identity Theft
• Malicious Software (Malware)
• Password Stealers
• Security Research

Something Old, Something New, True Blue

Friday, October 15, 2010

This year marks the tenth BlueHat at Microsoft, and my sixth round in participating in the event that has been so instrumental in keeping Microsoft developers and executives in touch with the pulse of security research outside Microsoft, and serves as one of the key crossroads for the exchange of ideas from our internal security experts to the outside world.

• BlueHat Security Briefings
• EcoStrat
• Hallway Tracks
• Microsoft Vulnerability Research (MSVR)
• MSRC
• MSRC Ecosystem Strategy
• Security Advisory
• Security Conference Engagement
• Security Ecosystem
• Security Engineering
• Security Research
• Security Tools
• Watering Hole

BlueHat v10 Shipping!

Thursday, October 14, 2010

Handle: Silver Surfer IRL: Mike Reavey Rank: Director, MSRC Likes: Warm weather, Battlestar Galactica, and responsibly reported vulnerabilities Dislikes: Rain, Rain without end, Clouds with potential for rain, reality TV, and unpatched vulns I’m here playing MC at the tenth edition (!!!) of the BlueHat Security Briefings on the Microsoft Campus in Redmond.

• BlueHat Security Briefings
• Community-based Defense
• EcoStrat
• End to End Trust
• Hallway Tracks
• MSRC
• MSRC Ecosystem Strategy
• Security Conference Engagement
• Security Ecosystem
• Security Engineering
• Security Research
• Security Tools
• Watering Hole

The Rapidly Evolving Exploitation Playground

Thursday, October 07, 2010

Hey there, Vincenzo and Fermin here! Next week we will be giving two talks at BlueHat. Vincenzo will be talking with Tim Kornau, Ralf Philipp Weinmann, and Thomas Dullien, about return-oriented programming and how to automate the creation of ROP payloads. Also, Fermin and Andrew Roths will be talking about EMET and how it can prevent the successful exploitation of vulnerabilities.

• BlueHat Security Briefings
• Community-based Defense
• Security Conference Engagement
• Security Engineering
• Security Research

Internet troubles in Korea? E-call center 118 is there to help.

Thursday, September 16, 2010

Handle: Cluster IRL: Maarten Van Horenbeeck Rank: Senior Program Manager Likes: Slicing covert channels, foraging in remote memory pools, and setting off page faults Dislikes: The crackling sound of crypto breaking, warm vodka martni Microsoft often has the pleasure of welcoming foreign government officials to our headquarters. MSR

• Attack
• Community-based Defense
• EcoStrat
• Malicious Software (Malware)
• MSRC
• Risk Assessment
• Security Assurance
• Security Engineering
• Security Research
• Security Tools