08/25/2006: New section in our site with the published security advisories
As another result of the bet of Internet Security Auditors to R & D, we have opened a new area on our website where we will publish those vulnerabilities discovered by our audit team, and we have chosen to report to manufacturers, according to a established procedure. Area can be found in the news advisories section.
All these will be notified in advance to the various creators, producers and development groups, and after the publication of the security update or patch the software, will be published. If the manufacturer does not respond to the various communications will be published vulnerability, along with the "full-disclosure", which aims to raise awareness among software developers with a responsibility to correct the defects identified in the software they develop.
08/01/2006: We collaborate with Thinking Stone in the ModSecurity project
Last year, Europe's largest security meeting held in Holland (What the Hack!), We presented the ModSecurity project concept and testing the improvements in which we began to work.
After months of working closely with the creator of the security module for Apache, a report published in July by Forrester comparing it with various commercial and Application Firewall ModSecurity stood as the most widely used firewall in the world, was published in July through the discussion list of the first package of draft code with the first version of the functionalities we have developed, and continue to develop.
All the code we develop will be published initially through the project list and will be included in its final form, the module itself, once it has been exhaustively tested, all under the GPL and open source way accessible to everyone.
07/01/2006: Sponsors of the Internacional Security Congress No cON Name 2006
Again this year, Internet Security Auditors will sponsor the No cON Name (NcN) together with the Government of the Balearic Islands.
Since this is already the sixth convocation of the congress, is located in one of the oldest events and a significant recognition, as has become the forum where leading experts in the security of Spain (and abroad) unveil their investigations during recent years.
We encourage anyone with interest in knowing the greatest exponents of security here and abroad, to stay on your calendar the days of 28 to 30 September to attend this conference as an inescapable event like this.
05/28/2006: We present the security standards of VISA and Mastercard in the IGC 2006
This year the committee of the Internet Global Congress returned to choose from among nearly 500, one of the cuts proposed by the team at Internet Security Auditors including it within the official program. If previous years the stories we included the security treaty in new technologies, this year the safety standards issued by VISA and Mastercard, called PCI DSS (Payment Card Industry Data Security Standard) and occupied our attention for all attendees, including those who were professionals in security, electronic commerce, the financial sector (the most affected by these mandatory rules, etc.).
Year after year, the IGC is still one of the congresses in Barcelona regarding the different aspects of Information Technology, where security is always a special space given its significance in the technology sector today.
05/16/2006: Sponsorship and participation in the first OWASP Meeting in Spain
Following the recent launch of the chapter of the OWASP Spain held its first meeting for this flag in Spain. Four were the presentations that were conducted, treating the web application security from the very different viewpoints. And how could it be otherwise, four security specialists, such as Vicente Aguilera (Spanish, Chapter Leader of OWASP and partner of Internet Security Auditors), Javier Fragoso (Technical Systems and CIO, in CESCA and Jess Security), Javier Fernandez-Sanguino (Consultant Germinus) and Jess Garcia (SANS Institute instructor and CEO in Jess Security), not defrauded more than 70 attendees, who made this first meeting a success.
Internet Security Auditors and CESCA collaborated on this first meeting, held in the building Annexus the North Campus of the UPC, for this is the first in a long series of events that, as carried out worldwide by the respective chapters, web security placed in their proper place.
04/20/2006: We present the second semester training schedule
We continue to offer the most complete and comprehensive security course schedule seen so far in Spain and certification course for the CISSP, official courses of EC-Council CEH and CHFI, and following the success of the first call, preparation courses for official certification ISO / IEC 27001:2005 Lead Auditor, following the agreement with BSI Spain. And besides, our courses Hacking Web Applications and Systems Securing UNIX / Linux and Windows.
In summary, the most extensive and complementary range of independent certification of product, seen so far and the result, firstly, work and effort of the board of Internet Security Auditors with the commitment to the agencies authorized to issue such certifications, and another, for the dedication and continuous preparation of an auditor and consultant team to obtain instructor qualifications enabling us to provide, progressively, these courses in Castilian as certified teachers in these same agencies.
03/06/2006: Sponsor of the Conference in the Private Investigators Official Colleague of Catalonia
On March 6, the Professional Association of Detectives de Catalunya gathered some of the largest research professionals in the Internet Research conference.
Given the experience in the field of Computer Forensics, Internet Security Auditors at the invitation of the College count on us. Always a pleasure to sponsor workshops for our company as interesting as this.
The success was overwhelming, with more than 130 attendees, from private research, law and computer science research. Surely in the next call to be successful again, if anything, even greater.
02/24/2006: Sponsors of the Barcelona and Madrid FIST Conferences FIST
Continuing the commitment of Internet Security Auditors to bet on events and informative meeting point for professionals and amateurs security, continue with the sponsorship of the F.I.S.T. Conferences Barcelona and Madrid during the coming months.
These conferences, free of charge and open to the public generally aim to disseminate knowledge, techniques and research conducted by computer security professionals and have wide acceptance among practitioners.
As usual, the conference will be held in the auditorium of the IFF (Faculty of Informatics of Barcelona Campus Nord - Edifici B6, C / Jordi Girona ,1-3 Salgado, 08034 Barcelona) from the Universitat Politècnica de Catalunya (UPC).
01/02/2006 - Internet Security Auditors signs an agreement with BSI Spain for training ISO 27001 courses
Inside the framework of contributions with the world reference agencies in independent certifications
of security, inside the ones that up to now they were found the ISECOM, (ISC)² and the EC-Council, an
agreement has been signed with BSI (British Standards Institution) Spain for start the teaching of the different necessary Official
Courses for the obtaining the certifications Lead Auditor, Implantator and Essentials of the norms BS 7799 and its
equivalent one ISO/IEC 27001.
With this agreement, Internet Security Auditors, shows its commitment with the diffusion, training and
recognition that contributes an organization as is BSI on a worldwide basis.
Already there are dates for the first course, in spanish,
of ISO/IEC 27001 Lead Auditor.