<?xml version="1.0" encoding="UTF-8"?><!-- generator="WordPress/2.5.1" -->
<rss version="0.92">
<channel>
	<title>IITAC - International Institute</title>
	<link>http://www.iitac.org</link>
	<description>IITAC - International Institute - Training, Assessment and Certification</description>
	<lastBuildDate>Fri, 04 Jul 2008 08:56:26 +0000</lastBuildDate>
	<docs>http://backend.userland.com/rss092</docs>
	<language>en</language>
	
	<item>
		<title>RECON2008 talk: 64-bit Imports Rebuilding and Unpacking by Sébastien Doucet (IITAC)</title>
		<description><![CDATA[With 64-bit packers and protectors being released, there is presently a growing need to create new tools to facilitate the manual unpacking process and to make it as trivial as it is now for protected 32-bit executables. I'm proposing two brand-new tools: CHimpREC and CHimpREC-64, allowing the spirit of ImpREC to live on under the best possible compatibility with all the x64 versions of the Windows operating system.

This talk is about explaining the inner-workings of coding a 32-bit imports rebuilder and the problems encountered due to the WoW64 environment and Address Space Layout Randomization. Next, is an overview of the differences between the PE and PE32+ formats and their impact on porting CHimpREC to 64-bit. Finally, 2 or 3 short live unpacking sessions with different examples of 64-bit packers and how trivial it has become to deal with them with the help of CHimpREC-64.]]></description>
		<link>http://www.iitac.org/2008/05/recon2008-talk-64-bit-imports-rebuilding-and-unpacking-by-sebastien-doucet-iitac/</link>
			</item>
	<item>
		<title>IITAC - Sponsor of the RECON conference! Free IDA Pro training!</title>
		<description><![CDATA[RECON is a computer security conference being held in Montreal. The conference offers a single track of presentations over the span of three days. RECON also offers a variety of technical training courses that take place just before the conference dates. The conference is  13-15 June 2008.
IITAC is a sponsor of the conference in [...]]]></description>
		<link>http://www.iitac.org/2008/05/iitac-sponsor-of-the-recon-conference-free-ida-pro-training/</link>
			</item>
	<item>
		<title>Microsoft Security Risk Management Guide - Worth a look?</title>
		<description><![CDATA[The Security Risk Management Guide by Microsoft assists to place a plan for security risk management. This guide is technology agnostic and references many industry accepted standards for managing security risk.
According to Microsoft [1]:
This guide helps customers of all types plan, build, and maintain a successful security risk management program. In a four phase process, [...]]]></description>
		<link>http://www.iitac.org/2008/05/microsoft-security-risk-management-guide-worth-a-look/</link>
			</item>
	<item>
		<title>Download DVL Strychnine+e605 1.4</title>
		<description><![CDATA[
DVL Strychnine Download Mirror 1 @ computerdefense.org: [CLICK HERE]
DVL Strychnine Download Mirror 2 @ brooklynoverflow.com: [CLICK HERE]
DVL Strychnine Download Mirror 3 @ dvl.stderr.de: [CLICK HERE]
DVL Strychnine Download Mirror 4 @ chaos-darmstadt.de: [CLICK HERE]

]]></description>
		<link>http://www.iitac.org/2008/05/download-dvl-strychninee605-14/</link>
			</item>
	<item>
		<title>Damn Vulnerable Linux Strychnine+E605 1.5 Alpha started</title>
		<description><![CDATA[We increased the development of the new Damn Vulnerable Linux Strychnine+E605 1.5 Alpha. Several bug fixes have been done, as well some tools like WebGoat are updated. There is no date yet when we publish the new release, however - finally -  we add videos to the DVD.]]></description>
		<link>http://www.iitac.org/2008/04/damn-vulnerable-linux-strychninee605-15-alpha-started/</link>
			</item>
	<item>
		<title>Video: How to setup your own language settings in Damn Vulnerable Linux</title>
		<description><![CDATA[Since several people requested this: This 1 minute video shows how to setup your own language settings in Damn Vulnerable Linux.
]]></description>
		<link>http://www.iitac.org/2008/03/video-how-to-setup-your-own-language-settings-in-damn-vulnerable-linux/</link>
			</item>
	<item>
		<title>Certified Binary Auditing Professional according to ISO/IEC 17024 now available!</title>
		<description><![CDATA[An information technology audit, or information systems audit, is an examination of the controls within an Information technology (IT) infrastructure. An IT audit is the process of collecting and evaluating evidence of an organization&#8217;s information systems, practices, and operations. The evaluation of obtained evidence determines if the information systems are safeguarding assets, maintaining data integrity, [...]]]></description>
		<link>http://www.iitac.org/2008/02/certified-binary-auditing-professional-according-to-isoiec-17024-now-available/</link>
			</item>
	<item>
		<title>Debugger and Sandboxes in Windows</title>
		<description><![CDATA[It is not always possible or desirable to set up a Virtual Machine for debugging an application. While useful, it can be boring to work within a VM, and on the other hand it can become an useless complexity.
However, you need administrator&#8217;s privilege to debug (seDebugPrivilege turned on). And this means your debuggee will run [...]]]></description>
		<link>http://www.iitac.org/2008/02/debugger-and-sandboxes-in-windows/</link>
			</item>
	<item>
		<title>DVL 1.4 - first mirror up!</title>
		<description><![CDATA[The first DVL mirror is up. Thanks to Tyler Reguly from ComputerDefense for his very quick support (again). Check the release notes at the DVL website.
]]></description>
		<link>http://www.iitac.org/2008/02/dvl-14-first-mirror-up/</link>
			</item>
	<item>
		<title>Damn Vulnerable Linux Strychnine+605 1.4 final - Mirrors contacted!</title>
		<description><![CDATA[The mirrors for Damn Vulnerable Linux Strychnine+605 1.4 final have been contacted. Over the weekend we might release the download links.
]]></description>
		<link>http://www.iitac.org/2008/02/damn-vulnerable-linux-strychnine605-14-final-mirrors-contacted/</link>
			</item>
	<item>
		<title>Certified IDA Pro Professional (CIDAP) according to ISO/IEC 17024</title>
		<description><![CDATA[During the next few weeks (2 or 3) we go for the Certified IDA Pro Professional (CIDAP). Again, as certification according to ISO 17024, we provide a high quality certification for the Binary Auditor and Reverse Code Engineering professional - proven by a certification committee. The certification is a practical certification including exercises and assessments [...]]]></description>
		<link>http://www.iitac.org/2008/02/certified-ida-pro-professional-cidap/</link>
			</item>
	<item>
		<title>Decompilation with IDA Pro - For free!</title>
		<description><![CDATA[Decompilation is the reverse process of compilation i.e. creating high level language code from machine/assembly language code. At the basic level, it just requires to understand the machine/assembly code and rewrite it into a high level language, but things are not as simple as they seem, particularly when it comes to implementing a decompiler.
Ever wanted [...]]]></description>
		<link>http://www.iitac.org/2008/01/decompilation-with-ida-pro-for-free/</link>
			</item>
	<item>
		<title>Software Engineering Burnout Syndrome (SEBS)</title>
		<description><![CDATA[The purpose of software engineering is to support the software development process by providing a vehicle for planning, executing and controlling the development of software systems. Software development processes are designed to support software development projects and the people involved. Unfortunatly most processes are designed by people having no clue about real software development driven [...]]]></description>
		<link>http://www.iitac.org/2008/01/software-engineering-burnout-syndrome-sebs/</link>
			</item>
	<item>
		<title>Types of Exception Handling - SEH vs. VEH</title>
		<description><![CDATA[At its heart, Win32 structured exception handling is an operating system-provided service. All the docs you&#8217;re likely to find about SEH describe one particular com-piler&#8217;s runtime library wrapping around the operating system implementation. Under Windows, there are currently two types of exception handling:

 Structured Exception Handling (SEH)


Vectored Exception Handling (VEH)

Structured Exception Handling, uses stack-based exception [...]]]></description>
		<link>http://www.iitac.org/2008/01/types-of-exception-handling-seh-vs-veh/</link>
			</item>
	<item>
		<title>3 days IDA Pro bootcamp as offline or online Training - Preparation for the Certified IDA Pro Professional according to ISO/IEC 17024</title>
		<description><![CDATA[This course is by no means a 3-day powerpoint presentation. Instead, you will be engaged in a number of individual and group hands-on exercises to reinforce and solidify everything that is taught in the class.
Some of the exercises are held in a competitive nature, followed by class discussion to pin point elegant approaches and solutions [...]]]></description>
		<link>http://www.iitac.org/2008/01/3-days-ida-pro-bootcamp-as-offline-or-online-training-preparation-for-the-certified-ida-pro-professional-according-to-isoiec-17024/</link>
			</item>
	<item>
		<title>Damn Vulnerable Linux Strychnine+605 1.4 final</title>
		<description><![CDATA[DVL 1.4 final is ready to go and is uploaded at the moment. We hit the 1.6 GB size, including all necessary to train software development, IT security and Reverse Code Engineering. During the next time the mirrors will be informed. After this we post the links. As well we do a short intro video [...]]]></description>
		<link>http://www.iitac.org/2008/01/damn-vulnerable-linux-strychnine605-14-final/</link>
			</item>
	<item>
		<title>DVL Strychnine+E605 1.4 release in January 2008!</title>
		<description><![CDATA[DVL Strychnine+E605 1.4 will have its release in January 2008! Includes many new tools, such as the ERESI reverse engineering framework, the Eclipse IDE for Java and C/C++. With this release we close the tool addition part and move to training material only. Stay tuned!
]]></description>
		<link>http://www.iitac.org/2007/12/dvl-strychninee605-14-release-in-january-2008/</link>
			</item>
	<item>
		<title>Damn Vulnerable Linux Strychnine+E605 - version 1.4 under construction</title>
		<description><![CDATA[I just have remastered the base of DVL Strychnine+E605 version 1.4. Beside more tool additions I have done some bug fixes as well. The status is now between alpha and beta, I will do now more testing within the next time.
]]></description>
		<link>http://www.iitac.org/2007/10/damn-vulnerable-linux-strychninee605-version-14-under-construction/</link>
			</item>
	<item>
		<title>Remote Debugging a DVL crackme by TiGa (Team+)</title>
		<description><![CDATA[TiGa (Team+) just has finalized his second training video. In this video he uses the IDA Pro Remote Debugging capabilities to analyze a crackme located at DVL remote from a Windows box.
Team+ consists of people working to receive the famous + sign - the most recognized reputation in Reverse Code Engineering. The + sign is [...]]]></description>
		<link>http://www.iitac.org/2007/10/remote-debugging-a-dvl-crackme-by-tiga-team/</link>
			</item>
	<item>
		<title>New additions to Damn Vulnerable Linux 1.4</title>
		<description><![CDATA[Just a sneak preview on current changes:
[Application Development] Add LogWatch (schneider)
[DVL Core] Add XEN (schneider)
[Reverse Code Engineering] Add Insight GDB Debugger (schneider)
[Tutorials] Add CPU Sim  - An Interactive Java-based CPU Simulator (schneider)
[Reverse Code Engineering] Add JAD Java Decompiler (schneider)
[Tools] Add VLC Media Player (schneider)
[Documentation] Add TeTex (schneider)
[Documentation] Add JabRef (schneider)
[Application Development] Add Kile (schneider)
[Documentation] [...]]]></description>
		<link>http://www.iitac.org/2007/09/new-additions-to-damn-vulnerable-linux-14/</link>
			</item>
</channel>
</rss>
