OUSPG

Oulu University Secure Programming Group - Eliminating implementation level security vulnerabilities in a pro-active fashion.

[Rauli Kaksonen @RauliKaksonen]

Our recent article should be interesting for all of you working with open source infosec tools. We identified 100 popular tools based on public data. The article is available at https://t.co/RYzGmEOpSe.
#Cybersecurity #OpenSource #OUSPG #UniOulu

[OUSPG @ouspg]

Check out this year's program and register!

[University of Oulu @UniOulu]

This year's Crisis Management seminar theme, on 9th to 11th of November, is "Preparing for national-level cyber crisis". Government-sponsored cyber attacks have become more common and they have also targeted critical infrastructure. https://t.co/mYIxhHc4CR #UniOulu #cybersecurity

[OUSPG @ouspg]

Join our CriM 2021 Seminar & Workshops 9.-11.11. in Oulu University! This year's focus are the threats to critical infrastructure and how to protect it. Seminar is free for academics, industry participants are welcome with a small fee. https://t.co/VNxkTfMSPH

[OUSPG @ouspg]

Juhannus on tulossa, mutta myös marraskuuta voi jo odottaa, koska silloin järjestämme Oulussa CriM tietoturvaseminaarin 9.-11.11. Alustava ohjelma on osoitteessa https://t.co/VNxkTfMSPH. Lisätietoa luvassa lomakauden jälkeen #OUSPG #BISG #UniOulu #CyberSecurity

[Rauli Kaksonen @RauliKaksonen]

Security testers are challenged by the attackers and the need for test automation. I explore the idea of agile security testing, performing penetration testing first and designing test cases after that.

https://t.co/1gWqjKMRsw

#cybersecurity #agile #automation #testing

[Rauli Kaksonen @RauliKaksonen]

I continued my posts on cybersecurity by arguing that security testing can also be done bottom-up. Compared to top-down security analysis this may produce findings faster and be more applicable in many situations.

https://t.co/D9H4D6gJRK

#CyberSecurity #SecurityTesting

[Rauli Kaksonen @RauliKaksonen]

I continued with my blog posts on software security. Now I present 10 secure design principles and examples of how to map them into software security requirements.

#CyberSecurity #SoftwareEngineering #SecureDesign

https://t.co/2lvdvFeKIR

[Rauli Kaksonen @RauliKaksonen]

I wrote a blog post on software security requirements. Software features are often defined by positive features only. Security can be improved by ruling out insecure unwanted features by negative requirements.

#CyberSecurity #SoftwareEngineering

https://t.co/HRknjDSXsI

[Rauli Kaksonen @RauliKaksonen]

I wrote a blog post on security testing, weaknesses, vulnerabilities, and how to turn tables with the attackers: https://t.co/umo88ENbjI
#cybersecurity #security #testing

[OUSPG @ouspg]

We held a CTF (capture the flag) event as a part of CriM 2020. This was our first time arranging a CTF. Our experience was good, but there were few things we could have improved. Read more at https://t.co/vSc7X2V6b0
#ctf #ctfd #kubernetes #infosec

[Rauli Kaksonen @RauliKaksonen]

I had a talk with @robertvamosi from @ForAllSecure about security tools and open source (me talking from 11 mins onwards): https://t.co/VT9ZXZ9swy
#infosec #opensource #cybersecurity

[Rauli Kaksonen @RauliKaksonen]

Check out my recent blog post! I wrote how we at OUSPG preserve the native command-line experience for (cyber security) tools packaged to containers for easy installation and security. #containers #dfir #cybersecurity #commandline https://t.co/vXKDOqqquu

[CinCan project @CinCanProject]

You are cordially invited to @CinCanProject's online final seminar on Tue 2020-05-12 13:00 - 15:00 EEST / 10:00 - 12:00 UTC!
#dfir #forensics #containers #docker #automation

https://t.co/ioAx31H51z

[Jari Jääskelä @JJaaskela]

@ouspg

[CinCan project @CinCanProject]

♫ On the 23th day of Christmas @armbues sent to me IOC Parser (iocp) to extract indicators of compromise ♫

We’re thankful for Armin Buescher, Steve Clement, Arcuri Davide and others for this tool

Read the blog: https://t.co/52lze4Yzew

#dfir #digitalforensics #containers

[CinCan project @CinCanProject]

♫ On the 22th day of Christmas Project Jupyter sent to me Jupyter Notebook... ♫

We’re thankful for the Jupyter Community!

Read the blog: https://t.co/886IkqS5JK

#dfir #digitalforensics #containers #visualization #access-log-visualization @ProjectJupyter

[CinCan project @CinCanProject]

♫ On the 21th day of Christmas @FireEye sent to me ♫ #FLOSS ♫ to automatically detect, extract and decode obfuscated strings in PE files.

Thanks for creating this tool!

Read the blog: https://t.co/NrgLl3ve9p

#dfir #digitalforensics #containers #fireeye #cincan #security

[CinCan project @CinCanProject]

♫ On the 20th day of Christmas @trufae sent to me #radare2 for reverse-engineering binaries ♫

We’re super thankful for this excellent tool!

Read the blog:
https://t.co/AQtkcgn86a

#dfir #digitalforensics #containers @radareorg

[CinCan project @CinCanProject]

♫ On the 19th day of Christmas Philippe Lagadec sent to me oletools, the many ways of peeking into malicious OLE file ♫ t♫

We’re very grateful about the tool!

Read the blog: https://t.co/YwmSpi4KI7

@decalage2 #dfir #digitalforensics #containers #oletools #malware

[CinCan project @CinCanProject]

♫ On the 18th day of Christmas @devttys0 sent to me ♫ binwalk to extract firmware images… ♫

We’re very much grateful for this ace firmware reversing tool.

Thank you Craig Heffner!

Read the blog: https://t.co/Z4Is7EG4oM

#dfir #digitalforensics #containers #binwalk