Wednesday 9 July 2014

• 09:30 - 10:10 LemonLDAP::NG, something new in SSO area

  40 mn OUDOT Clément Room : 31 SC002 Professionnal Confirmed

  LemonLDAP::NG is a Free Software dédicated to SSO and access control, used in numerous french administrations and other organizations. Developped since 10 years, it evolves constantly bringing new features at each version. The 1.2 version has (...)

• 10:10 - 10:50 Mimikatz, a short journey inside the memory of the Windows Security service !

  40 mn Benjamin Delpy Room : 31 SC002 Professionnal Confirmed

  Mimikatz has been created in 2007 in order to study some Windows security components (and also in order for its creator to learn how to develop ;)). It allows to expose some security concepts and to better understand Windows internal behavior. (...)

• 11:10 - 11:50 Web Security - a snapshot from W3C

  40 mn Virginie Galindo Room : 31 SC002 Geek Beginner

  This talk aim to provide with the audience an overview of the activities related to security happening in W3C. It will cover initiatives related to specific security features, such as web crypto API, Encrypted Media Extension API, CORS, but also (...)

• 11:50 - 12:10 Race condition in WordPress plugin allows php remote code execution

  20 mn Antoine Cervoise Room : 31 SC002 Professionnal Confirmed

  After discovering an unofficial bug bounty program concerning some WordPress plugins, I have tried to discover some vulnerabilities in order to understand what is going on behind this program. During my study, I found an interesting and not (...)

• 14:00 - 14:20 Visual impairment: its impact on security

  20 mn Sébastien Hinderer Room : 31 SC002 Professionnal Beginner accessibility

  The glance of a blind man on security...

• 14:20 - 14:40 Manage password policy in OpenLDAP

  20 mn OUDOT Clément Room : 31 SC002 Professionnal Confirmed

  LDAP directories can manage password policy (expiration, complexity, brute-force attack prevention,...), this conference will present how to use it in OpenLDAP.

• 14:40 - 15:20 Securing your webserver with YubiKey two-factor authentification

  40 mn Frank Hofmann Room : 31 SC002 Professionnal Master

  The YubiKey is a small token for two-factor authentification. It helps to secure the access to web-based information systems.

• 15:20 - 15:40 Discover and use a YubiKey from Yubico

  20 mn Maxime de Roucy Room : 31 SC002 Large people Beginner

  A Yubikey is a usb device like a flash storage. This is an authentication device that aims to replace the system password commonly used on workstations and on the web. Recognized as a USB keyboard from the system on which it is connected, it can (...)

• 15:40 - 16:20 Play with Crypto

  40 mn Ange Albertini Room : 31 SC002 Geek Beginner

  Cryptography is hard. I don't understand much about it, but that doesn't prevent me to have fun! So I'll just introduce some basic concepts, then I'll share a few crypto tricks. IMPORTANT : this talk will not be lived because (...)