London 20 & 21st May 2010, Westminster Conference Centre

  
Developing your own Testing Tools for Secure Development

Bespoke systems require bespoke tools to push the systems beyond functional testing into the realm of security testing.  Security testing requires systems to be prodded, probed and manipulated in ways that the system designers and developers did not consider; therefore requires custom tools.  This talk will cover the importance of made-to-measure testing tools and how they can be developed.  It will also include demonstrations of tools Context have developed to test a diverse range of technologies.  This will include fuzzing tools, test harnesses, modified client applications and hardware testing.  The talk will include demonstrations of Context App Tool (CAT) which is a web application testing tool, a file format fuzzer and a hardware based modified USB client.  The aim is for delegates to understand the necessarily for custom testing tools and the techniques required to develop them.