Oulu University Secure Programming Group - Eliminating implementation level security vulnerabilities in a pro-active fashion.

Oulu, Suomi
Joined May 2016
Our recent article should be interesting for all of you working with open source infosec tools. We identified 100 popular tools based on public data. The article is available at urn.fi/urn:nbn:fi-fe20211001…. #Cybersecurity #OpenSource #OUSPG #UniOulu
4
2
Security testers are challenged by the attackers and the need for test automation. I explore the idea of agile security testing, performing penetration testing first and designing test cases after that. medium.com/ouspg/agile-secur… #cybersecurity #agile #automation #testing
3
3
I continued my posts on cybersecurity by arguing that security testing can also be done bottom-up. Compared to top-down security analysis this may produce findings faster and be more applicable in many situations. medium.com/ouspg/bottom-up-s… #CyberSecurity #SecurityTesting
6
4
I wrote a blog post on software security requirements. Software features are often defined by positive features only. Security can be improved by ruling out insecure unwanted features by negative requirements. #CyberSecurity #SoftwareEngineering medium.com/ouspg/reduce-vuln…
1
15
1
25
I wrote a blog post on security testing, weaknesses, vulnerabilities, and how to turn tables with the attackers: medium.com/ouspg/turning-tab… #cybersecurity #security #testing
5
6
I had a talk with @robertvamosi from @ForAllSecure about security tools and open source (me talking from 11 mins onwards): thehackermind.com/ep-10-hunt… #infosec #opensource #cybersecurity
7
3
Check out my recent blog post! I wrote how we at OUSPG preserve the native command-line experience for (cyber security) tools packaged to containers for easy installation and security. #containers #dfir #cybersecurity #commandline link.medium.com/HqFg4P7DWab
4
1
You are cordially invited to @CinCanProject's online final seminar on Tue 2020-05-12 13:00 - 15:00 EEST / 10:00 - 12:00 UTC! #dfir #forensics #containers #docker #automation cincan.whereby.com/seminar
♫ On the 23th day of Christmas @armbues sent to me IOC Parser (iocp) to extract indicators of compromise ♫ We’re thankful for Armin Buescher, Steve Clement, Arcuri Davide and others for this tool Read the blog: cincan.io/blog/2019_12_23_io… #dfir #digitalforensics #containers
3
3
♫ On the 22th day of Christmas Project Jupyter sent to me Jupyter Notebook... ♫ We’re thankful for the Jupyter Community! Read the blog: cincan.io/blog/2019_12_22_ac… #dfir #digitalforensics #containers #visualization #access-log-visualization @ProjectJupyter
4
2
♫ On the 21th day of Christmas @FireEye sent to me ♫ #FLOSS ♫ to automatically detect, extract and decode obfuscated strings in PE files. Thanks for creating this tool! Read the blog: cincan.io/blog/2019_12_21_fl… #dfir #digitalforensics #containers #fireeye #cincan #security
♫ On the 20th day of Christmas @trufae sent to me #radare2 for reverse-engineering binaries ♫ We’re super thankful for this excellent tool! Read the blog: cincan.io/blog/2019_12_20_ra… #dfir #digitalforensics #containers @radareorg
8
8
♫ On the 19th day of Christmas Philippe Lagadec sent to me oletools, the many ways of peeking into malicious OLE file ♫ t♫ We’re very grateful about the tool! Read the blog: cincan.io/blog/2019_12_19_ol… @decalage2 #dfir #digitalforensics #containers #oletools #malware
♫ On the 18th day of Christmas @devttys0 sent to me ♫ binwalk to extract firmware images… ♫ We’re very much grateful for this ace firmware reversing tool. Thank you Craig Heffner! Read the blog: cincan.io/blog/2019_12_18_bi… #dfir #digitalforensics #containers #binwalk
♫ On the 17th day of Christmas Brian Carrier sent to me @sleuthkit to investigate disk images♫ CinCan is thankful for this amazing tool! Read the blog: cincan.io/blog/2019_12_17_sl… #infosec #digitalforensics #containers #cincan #security #sleuthkit
♫ On the 16th day of Christmas skylot sent to me Jadx to decompile APK, dex, aar and zip files… ♫ CinCan is thankful for Jadx. Read the blog: cincan.io/blog/2019_12_16_ja… #infosec #digitalforensics #containers #cincan #security #jadx
♫ On the 15th day of Christmas Richard Stallman and David MacKenzie sent to me strings of binutils to inspect files… ♫ CinCan is thankful for strings. Read the blog: cincan.io/blog/2019_12_15_st… @rmspostcomments #infosec #digitalforensics #containers #cincan #security #binutils
♫ On the 14th day of Christmas NSA sent to me Ghidra - the nightmare of malware copyright holders... ♫ Read the blog: cincan.io/blog/2019_12_14_gh… @GHIDRA_RE @NSAGov #infosec #digitalforensics #cincan #security #dfir
5
6