Media

News & Events

Security Compass speaks regularly at conferences across North America and around the world. For media inquires please contact us at media@securitycompass.com

Recent Events

Date Event Highlights Topic
January 31st, 2013 Rohit Sethi quoted in a CNN article: Your Antivirus Software Probably Won't Prevent a Cyberattack. Cybercrime News
October 23rd-24th, 2012 Subu Ramanthan trained students at COUNTERMEASURE 2012. Hacking and Securing Android/iOS
October 13th, 2012 Rohit Sethi and Ehsan Foroughi spoke at OWASP Boston Application Security Conference 2012 (BASC 2012). Pitfalls of Secure SDLC and How to Succeed with Automation
October 10th, 2012 Rohit Sethi spoke at OWASP Cincinnati. Is There An End To Testing Ourselves Secure?
October 10th, 2012 Yuk Fai Chan spoke at Rochester Security Summit. How Secure Are Your Smartphone Apps?
September 2012 Chris Faciana and Nishchal Bhalla attended Crimes Task Force. Attendees
July 21st-26th, 2012 Chris Faciana and Linda Cadigan attended BlackHat USA 2012. Attendees
May 15th-16th, 2012 Rohit Sethi and Sahba Kazerooni spoke at the Security Development Conference 2012. Panel Discussion
May 16th, 2012 Rohit Sethi spoke at OWASP DC May Meeting. Is There An End to Testing Ourselves Secure?
April 12, 2012 Rohit Sethi Appears on Fox News to discuss the risk of cybercrime when dealing with mobile payments. Mobile Security
April 24th, 2012 Takeaki Chijiiwa quoted in a Security News Daily article: How Cybercriminals Empty Your Online Bank Account. Online Banking
February 27th, 2012 RSA Conference 2012 Conference

Past Events

Date Event Topic
July 7th, 2011 Sahba Kazerooni appears on cbc.ca to talk about cellphone hacking. Read article. Mobile Security
June 21st, 2011 Tom Aratyn and Rohit Sethi spoke at XP Toronto. Secure SDLC for Agile
June 15th - 16th, 2011 Krishna Raja and Rohit Sethi spoke at SOURCE in Seattle. JSF Security
June 14th - 15th, 2011 Sahba Kazerooni and Max Veytsman spoke at SC Congress. Going Mobile
May 25th, 2011 Max Veytsman and Yuk Fai Chan spoke at TASK. Android Hacking
May 2nd - 4th, 2011 Nishchal Bhalla spoke at FS-ISAC. Building Secure Software, the U.S. Bank way
March 31st, 2010 Subu Ramanathan and Rohit Sethi spoke at the Canadian Conference on IT Audit, Governance and Security. For more info click here. Control Framework for Auditing
March 1st, 2010 Sahba Kazerooni and Rohit Sethi spoke at RSA, San Francisco. Application and Database Security
January 11th-13th, 2010 Security Compass Public Training Class in Toronto, ON. For more info click here. Application Security for PCI Compliance Class
November 10th-13th, 2009 Rohit Sethi and Krish Raja spoke at OWASP AppSec DC Conference. Securing the Core JEE Patterns
November 10th-13th, 2009 Krish Raja lectured a class at OWASP AppSec DC Conference. Threat Modelling Express Class
November 10th-13th, 2009 Sahba Kazerooni lectured a class at OWASP AppSec DC Conference. JEE Secure Code Review Class
October 12th-14th, 2009 Nish Bhalla spoke at the New York IT Architect Regional Conference. Threat Modeling
October 5th, 2009 Rohit Sethi lectured a class at SecTor. Understanding Web Application Attacks Class
June 23rd, 2009 Rohit Sethi spoke at the online BrightTalk conference about Threat Model Express. Threat Model Express
June 4th, 2009 Rohit Sethi to speak at New York State Cyber Security Conference. Threat Model Express
May 6th, 2009 Rohit Sethi to participate on panel at FS-ISAC. Panel: Securing Integration Points To Protect Your Supply Chain
May 6th, 2009 Oliver Lavery to speak at FS-ISAC. Bank Jobs: Lessons Learned From Assessing Banking Applications
April 24th, 2009 Sahba Kazerooni and Rohit Sethi to speak at RSA, San Francisco. Design Pattern Analysis: Reusable Security Advice
April 22nd, 2009 Oliver Lavery and Tom Aratyn spoke at RSA, San Francisco. Exploit-Me: Penetration Testing Made Simpler
April 21st, 2009 Sahba Kazerooni and Rohit Sethi taught at RSA, San Francisco. Threat Model Express
March 23rd, 2009 Sun acknolwedges and fies security issue in Sun Identity Manager reported by Security Compass Consultant. Sun Identity Manager Security Issue Fixed
March 4th, 2009 Sahba Kazerooni spoke at OWASP Boston Detailed Source Code Review
March 9th, 2009 Jamie Gamble and Rohit Sethi spoke at the Infosec World Conference and Expo. Application Security 1 Day Training
Feb 25th, 2009 Rohit Sethi spoke at ITARC Atlanta. Threat Modelling
December 16th-18th, 2008 Ted Riely and Rohit Sethi spoke at the Minnesota Government IT Symposium. Proactive Security
December 1st-2nd, 2008 Rohit Sethi and Jamie Gamble spoke at the West Coast Security Forum. Achieving 6.6: PCI and Source Code Review
October 23rd-24th, 2008 Tom Aratyn and Krishna Raja spoke at the Free Software and Open Source Symposium. Protecting You with Exploit-Me
October 8th, 2008 Krishna Raja spoke at the ISSA SecureSD Symposium. Exploit-Me Suite for Penetration Testers
October 7th, 2008 Tom Aratyn and Jamie Gamble spoke at SecTor 2008 Exploit-Me for Fun and Profit
September 25th, 2008 Rohit Sethi spoke at the OWASP NYC App Sec Conference. Code-Level Threat Analysis
August 20th, 2008 Nish Bhalla spoke at OWASP App Sec India. Building an Enterprise Application Security Program
April 18th, 2008 Hugo Fortier spoke at Toorcon Seattle. A Rogue Access Point, a Man in the Middle, and a Client Application. What Could Possibly Go Wrong?
April 7th, 2008 Rohit Sethi and Nish Bhalla spoke at the RSA Conference. AOP - Securing Applications Without Code Modifications
April 4th, 2008 Dan Sinclair and Sahba Kazerooni spoke at NotACon. Exploit-Me Series: Firefox Application Penetration Testing Suite
March 28th, 2008 Dan Sinclair and Sahba Kazerooni spoke at CarolinaCon. Exploit-Me Series: Firefox Application Penetration Testing Suite
March 12th, 2008 Nish Bhalla and Krishna Raja spoke at SourceBoston. Detailed Threat Modelling
February 15th, 2008 Rohit Sethi and Nish Bhalla spoke at ShmooCon. Using Aspect-Oriented Programming to Prevent Application Attacks
November 20th, 2007 Nish Bhalla and Rohit Sethi spoke at SecTor 2007. Exploit-Me Series - Free Firefox Application Penetration Testing Suite Launch
November 7th, 2007 Oliver Lavery spoke at NDSU IT Security Conference 2007. A Three-Pronged Approach to Web Application Security
November 7th, 2007 Nish Bhalla and Rohit Sethi spoke at CSI 2007. Tough Target: Awareness for Application Developers
November 1st, 2007 ISC2's SecureCalgary 2007
October 24th, 2007 Quoted in Dark Reading. Exploit-Me: Free Firefox Plug-Ins Test Web Apps
October 4th, 2007 Quoted in Technaute. Securite: des indices utiles aux pirates
July 31st, 2007 Quoted in Computer World. Meet Web 2.0's evil twin
June 13th, 2007 Nish Bhalla spoke at Info Security Canada 2007. Breaking Authentication and Enhanced Authentication
June 14th, 2007 Rohit Sethi spoke at Info Security Canada 2007. Case Study: Using Threat Modelling to Design Secure Applications
May 11th, 2007 Nish Bhalla and Rohit Sethi spoke at the Federation of Security Professionals in Toronto 2007. Case Study&58; Using Threat Modelling to Design Secure Applications
April 25th, 2007 Sahba Kazerooni spoke at IDC WebSec 2007. Vulnerabilities in Web Services
April 18th, 2007 Rohit Sethi spoke at ISC2's SecureMississauga 2007. Using Threat Modelling to Design Secure Applications
March 2007 Sahba Kazerooni spoke at Security Opus 2007. Exploiting and Defending Web Services
March 30th, 2007 Nish Bhalla and Sahba Kazerooni spoke at BlackHat 2007 in Amsterdam. Web Service Vulnerabilities
October 2006 Quoted in GSN Magazine's October 2006 Newsletter.
September 21st, 2006 Nish Bhalla spoke at HackInTheBox 2006 in Malaysia. Finding Secrets in ISAPI
July 21st, 2006 Nish Bhalla spoke at SysScan in Singapore 2006. Binary Analysis, Finding Secrets in ISAPI
June 22nd, 2006 Quoted in Internet News. Search Engines And Their Hacker Friends.
May 1st, 2006 Quoted in CSO Online. 5 Ways Google is Shaking the Security World.
Infosec Conferences in Toronto and DC 2006.
Rohit Sethi spoke at ISC2's SecureToronto 2006.
Rohit Sethi spoke at Info Security New York 2006.
September 29th, 2005 Nish Bhalla spoke at HackInTheBox 2005 in Malaysia. Analyzing Code for Security Defects
June 18th, 2005 Nish Bhalla spoke at Reverse Engineering Conference 2005 in Montreal. Auditing Source Code
Infosec Conferences in Las Vegas and New York 2005. Topic
DallasCon 2005. Topic
Quoted in itWorldCanada. IT World Canada
Quoted in itWorldCanada. IT World Canada

Upcoming Events

We're excited! Come join us at the following events:

Event: CanSecWest Vancouver 2013

Topic: Exploiting and Defending Mobile

Speaker: Subu Ramanthan & Patrick Szeto

Date: March 2nd-3rd, 2013

Event: CanSecWest Vancouver 2013

Topic: Exploiting and Defending Mobile

Speaker: Subu Ramanthan & Patrick Szeto

Date: March 4th-5th, 2013

Event: RSA Conference - USA 2013

Date: February 26th - March 1st, 2013