I know a number of Userland engineers are in the bay area. The Dynamic
Testing Workshop promises to help engineers see how to use dynamic
testing tools using code from your project.
This workshop could be a good way to identify if there are some easy
steps we could take to improve and automate dynamic testing in Userland.
Sign-up is tomorrow, so I apologize for the late notice. If you are
interested but do not have time to register by tomorrow, let me know
and I'll see what I can do.
Brian
-------- Original Message --------
Subject: Last Chance to Register for the SPOC Summit and Workshops!
Date: Mon, 30 Apr 2012 16:42:16 -0700
From: shirley-ann stern <[email protected]>
Organization: Oracle Corporation
To: spoc-newsletter_us_grp <[email protected]>
** <http://www.oracle.com/>**
Oracle Corporation <http://www.oracle.com/>
Oracle HQ
*SPECIAL ANNOUNCEMENT
SPOC Summit Week 2012**
Registration Closing May 2
*
*April 30, 2012**
*
* Â _SPOC Summit Registration Closes Soon!_
<imap://brian%2ecameron%40oracle%[email protected]:993/fetch%3EUID%3E/INBOX%3E137619?part=1.2.4&filename=Summit%202012%20Update3.html>
Â
*SPOC Summit Registration Closes Soon!
*
*
**Register NOW for the SPOC Summit and Workshops - May 2 is the Last Day
to Sign up!**
*
Demand for the workshops and SPOC Summit the week of May 7 is still
strong so registration and registration continues until May 2. All
events will take place at the Oracle HQ Conference Center, 350 Oracle
Parkway, Redwood Shores, CA.
Who Should Attend
Besides SPOCs, the intended audience includes Senior Developers, Team
Leads, Development Managers, QA staff, Architects, and others with a
vested interest in developing secure products. The Workshops listed
below will appeal to a broader developer audience and anyone who can
benefit from these should register There is no registration fees for
the workshops or Summit as the events costs breakfasts, lunches and
reception are covered by GPS; your cost center is responsible for
travel, hotel and other incidentals.
Please note the pop up web page when you complete your registration; it
is your confirmation and you can print it out.
The Week in Review
The very first workshops will be held Monday afternoon, May from 1-5
PM. You may choose one of three workshops, Oracle Database 12c
Defense-in-Depth Preview, the New SPOC Orientation, or Fuzzing - Theory
and Practice.
The recently added workshop, Oracle Database 12c Defense-in-Depth
Preview deserves special attention as it will be key to you Database 12c
uptake efforts. Join the database security team to see and hear about
the many exciting new security capabilities coming in Oracle Database
12c and find out how to use them.Â
New capabilities include redaction of production data before it leaves
the database, policy based contextual auditing, new advanced application
security features, enhanced Advanced Security TDE key management for
consolidated databases, new Database Vault mandatory realms, reduced
dependency on SYSDBA with new roles for Oracle RMAN and Data Guard,
improved manageability through Enterprise Manager 12c, integration with
application data model (ADM) and sensitive data discovery, and the list
goes on.  Join this session and learn about the biggest database
security release in Oracle's history and the impact it will have on your
product. Be sure to take advantage of this opportunity to jump start
your efforts by learning directly from the database security team.Â
This session requires a separate registration:
<http://my.oracle.com/pla/myo/utls_qsv_html.response?p_id=1239877>Oracle
Database Defense-in-Depth Workshop Registration
<http://my.oracle.com/pls/myo/utls_qsv_html.response?p_id=1239877>
Or you may choose the Fuzzing - Theory and Practice workshop coveringÂ
the theoretical fundamentals of fuzzing supplemented by hands-on
fuzzing experience.  A bootable CD of material is provided and a
laptop is required(Windows, Linux, Mac, etc. are all fine). The workshop
aims to equip participants with the necessary skills and knowledge to
conduct basic fuzzing of the products they are responsible for.  This
session also requires separate registration.
Fuzzing Workshop Registration
<http://my.oracle.com/pls/myo/utls_qsv_html.response?p_id=1239604>Â
The third alternative is New SPOC Orientation and Clinic geared to new
Security Leads and SPOCs who have joined Oracle since last year's
Summit. The session will cover the ABCs of OSSA programs and processes
along with Security Vulnerability Handling 101.Â
New SPOC Orientation/Clinic Agenda
<https://gps.oracle.com/doku.php?id=spoc:start>
This is a great opportunity to ask questions and get an understanding of
the basics of Oracle's product security programs. This session
requires a separate registration:
New SPOC Orientation/Clinic Registration
<http://my.oracle.com/pls/myo/utls_qsv_html.response?p_id=1239574>
The Summit itself will be held Tuesday through Thursday, May 8-10 and
will consist of a mixture of general sessions and tracks.Â
SPOC Summit 2012 Registration
<http://my.oracle.com/pls/myo/utls_qsv_html.response?p_id=1239635>
This year the emphasis for all the sessions is on "how to" practical
information that can be used on your project. Hot topics to be covered
include cloud security, mobile security, web application security and
host of others. The most current agenda can always be found on the GPS
wiki:
SPOC Summit 2012Â Agenda
<https://gps.oracle.com/doku.php?id=spoc:start#resources>
<http://my.oracle.com/pls/myo/utls_qsv_html.response?p_id=1239635>
Also, We close out the week with twosecurity tools tutorials presented
by the vendor. The Fortify and WebInspect workshops are scheduled to
follow one another onFriday May 11, Fortify in the morning 8:30 am -
12:30 pm and WebInspect in the afternoon 1-5 pm at the Oracle Conference
Center.
The Fortify workshop is a more advanced "power"user session covering:
* Collaborative use of the tool for a team managing single code
repository: issue assignments to developers, notifications, reports,
managing issues over time as code evolves and how to deploy an
effective issue management environment.
* Custom filters and rules overview, combining rules of different types.Â
* A walk through a number or real, non-trivial issues:Â
identification as false positive/duplication/real issues and
analysis. Practical examples of using Fortify with various
frameworks such as ADF, OA, JSF, and other supported ones.
* Details on Fortify rules, APIs covered by Fortify. (Groups spend
time defining custom rules, then next version includes a Fortify
rule similar to the custom user-defined one, and users see double
findings. How avoid this) Â
The WebInspect session is on a beginner/intermediate level and attendees
should have basic knowledge and some use of it, at the very least,
evaluation mode. The session will cover:
* A general feature/functions overview (technical);
* Guidance for using WebInspect with web services;
* Guidance for using the tool in a SOA environment or for SaaS products.
* A walk through audience of a number of real (non-trivial) issues:
identification and analysis.
Once again, these sessions each require separate registration - please
state areas of interest that you would like covered.
Fortify Workshop Registration
<http://my.oracle.com/pls/myo/utls_qsv_html.response?p_id=1239575>
WebInspect Workshop Registration
<http://my.oracle.com/pls/myo/utls_qsv_html.response?p_id=1239603>
If the Unexpected Happens....
If you have registered and must cancel due to an unexpected occurrence,
please do so through the online system:
<http://my.oracle.com/pla/myo/utls_qsv_html.response?p_id=1239677>Cancellation
Form
<http://my.oracle.com/pls/myo/utls_qsv_html.response?p_id=1239677><http://my.oracle.com/content/web/cnt1207582>****
Any questions? Contact the Editor <mailto:[email protected]>.
_back to the top_
<imap://brian%2ecameron%40oracle%[email protected]:993/fetch%3EUID%3E/INBOX%3E137619?part=1.2.5&filename=Summit%202012%20Update3.html>
Hardware and Software, Engineered to Work Together
Copyright © 2012, Oracle and/or its affiliates.
All rights reserved.
Contact Us <http://www.oracle.com/corporate/contact/> | Legal Notices
and Terms of Use <http://www.oracle.com/html/copyright.html> | Privacy
Statement <http://www.oracle.com/html/privacy.html>
*Oracle ConfidentialâFor Internal Use Only.*
Oracle Corporation - Worldwide Headquarters
500 Oracle Parkway, Redwood Shores, CA 94065 U.S.A.
_______________________________________________
userland-discuss mailing list
[email protected]
http://mail.opensolaris.org/mailman/listinfo/userland-discuss
