Search Results for "2013"

RVAs3c Badge Preview

For the first two years of RVAsec, our friends at hack.rva have come up with two awesomely interactive badges for attendees. Planning for the 2014 badge started right after the 2013 conference, and since June is coming quickly we caught up with Morgan Stuart to get some info on what they are planning.

The 2013 badges were a huge hit–can you tell us a little about them?

2013 RVAsec Badges

2013 RVAsec Badges

Morgan: Last year’s design focused on a large feature set. The badge included 8 LEDs, infrared transmitter and receiver, piezo buzzer, 3D printed button, and it even had USB support. This meant that these badges could talk back and forth to each other wirelessly, you could tap, turn, and shake for input, and you could plug it up to your laptop and compose some tunes with your keyboard. The “game” on the badge consisted of seven stages, where we progressively introduced a new feature of the badge in some puzzle. By the second day, we had many people’s badges partaking in the “game of death.” Your badged counted down your health with the LEDs (in base 2 of course), forcing you to scavenge for food. HackRVA’s table had a beacon on it that would occasionally emit some “food” over IR, but most importantly you could attack other players. When a player died, they’re respawn downtime included about a minute of transmitting food to nearby players. Eventually we introduced a patient zero for “zombie mutation” (thanks Ron) and things got pretty crazy.

The badges did get a little annoying making noise the whole time. What were some thing that you learned from last year?

Morgan: There was a lot we took away from last year’s experience. Most important is getting the manufacturing of these devices down tight. We ran into a lot of unforeseen problems that we are trying to avoid by starting early with refined processes. Still, there are plenty of areas that could use improvement. For instance, the past few weeks we’ve been working out a photo etching method. It still needs work, but it will remove a lot of difficult-to-control variables that last year’s toner-transfer method had. There was also quite a bit of difficulty getting the accelerometer soldered on the board correctly, this lead to about half the badges not having an accelerometer, which was a big let down for everyone. We’re avoiding these kinds of small and sensitive components this year.

The design’s other biggest limitation was the restricted user I/O; we don’t think a button and accelerometer were enough input and the 8 LEDs with piezo could only say so much. We want interfacing with the badge to be enjoyable and intuitive, not frustrating or complex.

Due to the issues manufacturing last year, much of our focus was put on getting our hardware numbers up late in the build. The badges we ended up with had a great hardware feature set, but we just didn’t quite have the time we needed to fully exploit them with the software. HackRVA’s space has grown a lot in the last year, and we have some new and very responsible members who can help lift some of the weight off our shoulders when it comes to managing the fabrication of all this year’s boards. This means more time for software.

The good news about last year’s badge was that a lot things worked very well. Our design of the software and hardware was really founded on getting the attendees to interact with one another and we felt it did that in a big way. The badge became a great avenue to spark up a conversation or just geek-out with someone. Oh, and we’ll be sure to have a way to turn the sound off this year.

What are the plans for the badges this year?

Morgan: I first want to say that this year’s badge has again been redesigned from the “copper up,” but it’s undoubtedly the successor to last year’s badge. The badge games will again focus on getting the attendees to interact and think. Using them will be a whole lot of fun.

If someone wanted to hack or modify them, what will they need to do?

Morgan: Last year you needed a PicKit to modify the firmware–this is a piece of hardware that can cost as much as $30 or $40 for older versions. This year, we are aggressively pursuing a boot loader option which means you’ll simply need a USB cable and some free (as in beer) software to hack away.

Can you give attendees any other hints or teasers about the badges?

Morgan: One of the earliest changes we had in mind has really forced us to rethink the design and placement of every component. I won’t say much else other than we think lanyards are pretty lame…

Anything else?

Morgan: We would like to thank everyone at RVAsec, including Jake and Chris, for letting us do this these past few years. It’s challenging, but a whole lot of fun.

Thanks Morgan, we look forward to seeing this year’s badges!

If you are interested in helping out hack.rva with the badges, software or hardware, they have Thursday night open houses. More information can be found at http://hackrva.org/.


RVAsec 2014 CFP is now open!

The call for papers for RVAsec 3 is now open!

Conference: June 5-6th, 2015

Location: Richmond, VA

CFP Submission Deadline: February 14th, 2014 at 11:59 PM Eastern


RVAsec is a Richmond, VA based security convention that brings top industry speakers to the midatlantic region. In its second year, RVAsec 2013 attracted 265 security professionals from across the country. For 2014, the conference is a two day and dual-track format, with a mixed focus on technical and management/business presentations.

All talks must be 55 minutes in length, and submissions will need to select either technical or business/management tracks.

Join us and enjoy the perks!

For more information and requirements, or to submit, please visit:

http://rvasec.com/2014-cfp/

If you are interested in running a training class on June 4th, please email us at info@rvasec.com with the following information:

1) Title Of Class
2) Overview of Class:
3) Instructor:
4) Instructor Bio:
5) Class Size:
6) Student Prerequisites:
7) Proposed Cost / Amount Required Per Student:


CFP Submission – 2014

The call for presentations (CFP) for RVAsec 3 is CLOSED!

*************************************************************

CFP deadline is Friday, February 14th, 2014 at 11:59 PM Eastern!


RVAsec 3
June 5-6th, 2014
Richmond, VA, on the Virginia Commonwealth University campus


RVAsec is a Richmond, VA based security convention that brings top industry speakers to the midatlantic region. In its second year, RVAsec 2013 attracted 265 security professionals from across the country. For 2014, the conference is a two day and dual-track format, with a mixed focus on technical and management/business presentations.

All talks must be 55 minutes in length, and submissions will need to select from one of two tracks:

  • Business
  • Technical

 

The following types of presentations will not be accepted:

  • Sales or marketing for companies or products
  • CFP submissions from in-house or agency PR/marketing professionals
  • Talks which do not offer new insight or perspective

RVAsec will hold no copyright on presentation content, but all speakers will be required to provide approval to post slides and video recordings of the talk on the RVAsec or other web sites.


Speaker Perks

  • Free admission to RVAsec
  • Invitation to the RVAsec speaker party
  • RVAsec T-shirt, badge & attendee swag bag
  • One 50% off pass for a friend or co-worker
  • Fame and glory, internet style!
  • Opportunity to be the recipient of the RVAsec “STFU” sign

RVAsec has a limited travel budget, but speakers who request travel
assistance may be eligible for:

  • Travel allotment up to $300
  • 3 nights hotel at the Crowne Plaza Richmond Downtown
Please note that companies that fund their speaker’s travel will receive a free Associate Sponsorship Level.

Click here to submit a talk to the CFP now!

 


If you are interested in running a training class on June 4th, please email us at info@rvasec.com with the following information:

1) Title Of Class
2) Overview of Class
3) Instructor
4) Instructor Bio
5) Class Size
6) Student Prerequisites:
7) Proposed Cost / Amount Required Per Student:


RVAsec Videos: Schuyler Towne & Dan Holden

And wrapping up the RVAsec 2013 videos are Schuyler Towne and Dan Holden!

Schuyler Towne: Vulnerability Research Circa 1851

Dan Holden: DDoS and Modern Threat Motives


RVAsec Videos: Jericho & Don Allison

Jericho: Our Straw House: Vulnerabilities

Don Allison: Observations on the (Mostly) Inadvertent Effect of Data Management on International Cybercrime Investigations


RVAsec Videos: Colby Clark & Rockie Brockway

Two more videos from RVAsec 2013!

Colby Clark: The Digital Battlefield

Rockie Brockway: Business Adaptation or: How I Learned to Stop Worrying and Love the Internet’s Unclean Conflicts


RVAsec Videos: Brian Lockrey & Gus Fritschie/Andrew Du

Even more speakers from RVAsec 2013!

Gus Fritschie & Andrew Du: How to Defend Against FISMA

 

Brian Lockrey: Social Media Digital Forensics


RVAsec Videos: Itzik Kotler & Dan Han

Here are two more speaker videos from RVAsec 2013!

Itzik Kotler: Hack Like Its 2013

 

Dan Han: SIEM implementation: What to Expect


RVAsec Videos: Mike Shema & Daniel Ramsbrock

More RVAsec 2013 presentation videos! This pair from Mike Shema and Daniel Ramsbrock both cover about web application security and are a must-watch!

Mike Shema: JavaScript Security & HTML5

Daniel Ramsbrock: Web Application Vulnerabilities and Solutions


Surveys, Slides, Videos and more!

RVAsec 2013 is over and we are very pleased with how everything turned out!  It was an aggressive move to grow the way we did this year, but we heard your feedback loud and clear, and you demanded more!

The first year RVAsec was a 1 day single track conference that attracted approximately 170 attendees.  This year, we grew to 2 days, 2 tracks and had over 265 attendees!

Some thanks are in order for:

  • Our brilliant keynote speakers Alex Hutton and Chris Wysopal
  • The amazing speakers that shared their time and knowledge!
  • All of the trainers for providing affordable classes to the RVA community
  • Hack.RVA for once again making awesome badges
  • Hope and VCU for all of their support and the facility
  • All of the volunteers for donating their time to ensure everything was in order
  • The sponsors for making it possible to put on the conference
  • Rapid7 for the after party
  • Create A Print & Sign for the shirts
  • The CTF team for putting on an amazing event
  • And of course to everyone that attended RVAsec 2013!

 

We are in the process of cleaning up some loose ends to wrap up RVAsec 2013.  Here are a few other quick updates:

  • Attendee survey will be out soon–we need your feedback to make RVAsec 2014 even better, so please take a few minutes to complete it
  • Training feedback survey has been sent to all attendees
  • Slides will be posted soon
  • We will be starting post processing on video in the coming days and will have them ready as soon as possible.

 

If you have any questions please contact us!