Hack to Save Security Research With Reverse Benchmarking

Santa Clara, CA—07-31-2007—Cenzic, Inc., the leading provider of application security assessment and risk management solutions, today announced that Tom Stracener, senior security analyst for Cenzic, will speak at DEFCON 15 in Las Vegas, one of the oldest and largest continuous running hacker conventions around. Tom's session, entitled "Hacking the EULA: Reverse Benchmarking Web Application Security Scanners," will take place on Sunday, August 5.

The live presentation, in partnership with information security architect Marce Luck, will educate information security managers as well as executives, security architects, Q.A. professionals, developers and business owners on restrictive End User License Agreements (EULAs) and their effect on security research. The presentation will also explore the use of Reverse Benchmarking to investigate false positive types and provide a framework around which public discussion, research and documentation of such flaws can occur without violating EULA agreements.

What: DEFCON 15

Who: Tom Stracener, senior security analyst for Cenzic will host a
presentation.

When: Sunday, August 5, from 10:00 a.m.—10:50 a.m. PDT

URL: For more information on DEFCON 15, please visit:
https://www.defcon.org/

About Cenzic, Inc.

Cenzic is the innovative leader of next-generation application security assessment and risk management solutions that quickly and accurately find more "real" application vulnerabilities in both legacy Web 1.0 and Web 2.0 applications. The Cenzic suite of application security solutions fit any companies' needs from remote, Software as Service (ClickToSecure®), for testing one or more applications, to a full enterprise-wide solution (Cenzic Hailstorm® Enterprise ARC) for effectively managing application security risks across an enterprise. Cenzic's latest ARC release provides a superset of all other application security solutions including Spi Dynamics, Watchfire, Fortify, Ounce Labs and manual pen testing solutions. Cenzic solutions, targeted at financial services, e-retail, high-tech, energy, healthcare and government sectors, are the most accurate, comprehensive and extensible in the industry, empowering organizations to stay on top of unrelenting application security threats.