Islam Azeddine Mennouchi
Barcelona, Cataluña, España
2 mil seguidores
Más de 500 contactos
Acerca de
Mennouchi Islam Azeddine security consultant and OWASP Algeria Chapter leader More than…
Artículos de Islam Azeddine
-
3 Most Common Errors When Installing OpenvSwitch
3 Most Common Errors When Installing OpenvSwitch
Por Islam Azeddine Mennouchi
Contribuciones
-
What are the best web application security practices for financial institutions?
we can always enforce shift left security through secure coding training for different roles inside the organization to help spread a security culture. Trying to involve all roles in for example threat modeling activities will reduce security vulnerabilities significantly by the end of the SDLC
-
What are the best web application security practices for financial institutions?
When it comes to secure coding and SDLC in general trying to adopt a shift left security and integrate security in all the steps development life cycle is an important aspect. And we can always enforce this through secure coding training for different roles inside the organization to help spread a security culture.
-
What are the most important server security settings for you to configure?
When it comes to SSL/TLS encryption it is also important to consider that your server supports the latest SSL/TLS version and avoid deprecated versions. Another activity that is relevant to this is certificate pinning. Certificate pinning forces your client app to validate the server's certificate against a known copy. After pinning your server's certificate inside your client app, your client should check the basic validity of the cert as in No
Actividad
-
Ravi de partager avec vous un projet qui m'a toujours tenu à coeur et que j'ai toujours voulu réaliser à Constantine! Grand merci à tous ceux qui…
Ravi de partager avec vous un projet qui m'a toujours tenu à coeur et que j'ai toujours voulu réaliser à Constantine! Grand merci à tous ceux qui…
Recomendado por Islam Azeddine Mennouchi
-
🎙️ 𝐀𝐧 𝐇𝐨𝐧𝐨𝐫 𝐭𝐨 𝐂𝐡𝐚𝐢𝐫 𝐚𝐭 𝐈𝐓𝐑𝐀𝐍𝐒’2024 I had the distinct privilege of serving as a session chair at "Meeting R&D ITRANS’2024"…
🎙️ 𝐀𝐧 𝐇𝐨𝐧𝐨𝐫 𝐭𝐨 𝐂𝐡𝐚𝐢𝐫 𝐚𝐭 𝐈𝐓𝐑𝐀𝐍𝐒’2024 I had the distinct privilege of serving as a session chair at "Meeting R&D ITRANS’2024"…
Recomendado por Islam Azeddine Mennouchi
-
Going to Lisbon? Here are some tips for all attendees of the OWASP® Foundation global application security conference June 24-28. I just returned…
Going to Lisbon? Here are some tips for all attendees of the OWASP® Foundation global application security conference June 24-28. I just returned…
Recomendado por Islam Azeddine Mennouchi
Experiencia
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
Educación
-
-
-
Networks and Distributed Systems worked on a graduation thesis entitled: Automated and context-aware navigation for autonomous and mobile agents applied on nano sized UAV (drone : crazyflie) where we used certain SLAM techniques and object recognition to make the drone able to navigate through unknown environment.
-
-
US Department of state and Coca-Cola Scholarship
-
-
Actividades y grupos:OWASP Algeria
Worked on a final project in the field of Virtual networks security working on metamorphic networks
and the migration of virtual machines inside a virtual network our work was mainly using Xen Hypervisor -
-
-
-
High School Degree (BAC) with Honor (Mention très bien)
Licencias y certificaciones
Experiencia de voluntariado
-
Chapter leader and contributor
OWASP Foundation
- actualidad 12 años 10 meses
Ciencia y tecnología
The Open Web Application Security Project (OWASP) is a 501(c)(3) worldwide not-for-profit charitable organization focused on improving the security of software. Our mission is to make software security visible, so that individuals and organizations worldwide can make informed decisions about true software security risks.
Everyone is free to participate in OWASP and all of our materials are available under a free and open software license. You'll find everything about OWASP here on or…The Open Web Application Security Project (OWASP) is a 501(c)(3) worldwide not-for-profit charitable organization focused on improving the security of software. Our mission is to make software security visible, so that individuals and organizations worldwide can make informed decisions about true software security risks.
Everyone is free to participate in OWASP and all of our materials are available under a free and open software license. You'll find everything about OWASP here on or linked from our wiki and current information on our OWASP Blog. OWASP does not endorse or recommend commercial products or services, allowing our community to remain vendor neutral with the collective wisdom of the best minds in software security worldwide. We ask that the community look out for inappropriate uses of the OWASP brand including use of our name, logos, project names and other trademark issues. -
Mentor
VC4Africa
- actualidad 10 años 6 meses
Potenciamiento económico
The Africa platform for startup funding. VC4Africa is the largest online community of entrepreneurs and investors dedicated to building game changing companies on the continent. Entrepreneurs have access to free online tools, mentorship opportunities and private deal rooms. Investor Pro Account users can set up intelligent alerts, follow progress, conduct due diligence and connect directly with the continent’s leading entrepreneurs. The community has members in 159 countries and meetups have…
The Africa platform for startup funding. VC4Africa is the largest online community of entrepreneurs and investors dedicated to building game changing companies on the continent. Entrepreneurs have access to free online tools, mentorship opportunities and private deal rooms. Investor Pro Account users can set up intelligent alerts, follow progress, conduct due diligence and connect directly with the continent’s leading entrepreneurs. The community has members in 159 countries and meetups have been hosted in more than 50 cities around the world.
-
OWASP Teacher
Hacking-Lab
- actualidad 12 años 7 meses
Ciencia y tecnología
Hacking-Lab is the world-leading IT security portal and deals with hacking and defense strategies. We believe in "Learning by Doing", but this is a hard and time consuming task in your own environment. Why not sharing a tested security lab to the community? This is what Hacking-Lab is built for. Real hands-on experience! Join Hacking-Lab today and become a Hacking-Lab member.
We also welcome you and your friends to join our Hack & Learn events! Please have a look at our upcoming events where…Hacking-Lab is the world-leading IT security portal and deals with hacking and defense strategies. We believe in "Learning by Doing", but this is a hard and time consuming task in your own environment. Why not sharing a tested security lab to the community? This is what Hacking-Lab is built for. Real hands-on experience! Join Hacking-Lab today and become a Hacking-Lab member.
We also welcome you and your friends to join our Hack & Learn events! Please have a look at our upcoming events where we provide our lab infrastracture and register today!
https://www.hacking-lab.com -
Facilitator
Startup Pirates
- 1 año 1 mes
Potenciamiento económico
Startup Pirates Constantine organization team lead and lead coordinator
-
Microsoft Student Partner Lead
Microsoft
- 2 años 9 meses
Ciencia y tecnología
A Microsoft Student Partner is a student representing Microsoft in his/her University or School by helping students community using Microsoft's technologie
Publicaciones
-
OWASP Access Control Cheat Sheet
OWASP Foundation
Ver publicaciónThis article is focused on providing clear, simple, actionable guidance for providing Access Control security in your applications. the objective is to provide guidance to developers, reviewers, designers, architects on designing, creating and maintaining access controls in web applications
-
OWASP Code review V2
OWASP Foundation
Ver publicaciónThe OWASP Code Review guide is the result of initially contributing and leading the Testing Guide. Initially, it was thought to place Code review and testing into the same guide; it seemed like a good idea at the time. But the topic called security code review got too big and evolved into its own stand-alone guide
Cursos
-
Guidance Software Advanced Internet Examination
-
-
Guidance Software Building an Investigation with EnCase
-
-
Guidance Software EnCase Forensic I
-
-
Learning From Data (introductory Machine Learning course) @ Caltech
CS1156x
Proyectos
-
OWASP ZAProxy EUA/Brazil
https://code.google.com/p/zaproxy/wiki/ZapEvangelists
https://github.com/zaproxy
https://sourceforge.net/projects/zaproxy/files/
Workshops, Talks, TreinamentosOtros creadores -
-
Dalil Project
Dalil (guide in arabic) is a navigation and object detection system for blinds that consiste of a Mobile application connected to a camera glasses
The system provides multiple features:
- object detection
- navigation in an unknown environment
- obstacle detection
- text to speech
The system provide a vocal interface for the blind to send and receive instructions from and to the systemOtros creadores -
-
Alfanous
Ver proyectoAlfanous (The Lantern - الفانوس ) is an Arabic search engine API provides the simple and advanced search in the Holy Quran , more features and many interfaces...
http://www.alfanous.org -
OWASP - Zed Attack Proxy Project
The Zed Attack Proxy (ZAP) is an easy to use integrated penetration testing tool for finding vulnerabilities in web applications.
Otros creadores -
-
Training Camp
-
Training Camp is an event of Etic Club with its 3rd edition this year. The main idea was helping our students (of the national High School of Computing Science) to gain additional skills in different fields such as the trainings organized last year which touched: .NET, Java, Marketing, Photoshop, Cisco and entrepreneurship. In this year’s edition, my main role is to bring some of the coaches ( Hamoud Mokhtar, Marketing, Harzallaoui Zaki Web Programming), Making Event's visual…
Training Camp is an event of Etic Club with its 3rd edition this year. The main idea was helping our students (of the national High School of Computing Science) to gain additional skills in different fields such as the trainings organized last year which touched: .NET, Java, Marketing, Photoshop, Cisco and entrepreneurship. In this year’s edition, my main role is to bring some of the coaches ( Hamoud Mokhtar, Marketing, Harzallaoui Zaki Web Programming), Making Event's visual identity and social media management
Otros creadores -
-
Training Camp
-
Training Camp is an event of Etic Club with its 3rd edition this year. The main idea was helping our students (of the national High School of Computing Science) to gain additional skills in different fields such as the trainings organized last year which touched: .NET, Java, Marketing, Photoshop, Cisco and entrepreneurship. In this year’s edition, my main role is to bring some of the coaches ( Hamoud Mokhtar, Marketing, Harzallaoui Zaki Web Programming), Making Event's visual…
Training Camp is an event of Etic Club with its 3rd edition this year. The main idea was helping our students (of the national High School of Computing Science) to gain additional skills in different fields such as the trainings organized last year which touched: .NET, Java, Marketing, Photoshop, Cisco and entrepreneurship. In this year’s edition, my main role is to bring some of the coaches ( Hamoud Mokhtar, Marketing, Harzallaoui Zaki Web Programming), Making Event's visual identity and social media management
Otros creadores -
-
OWTF
-
OWASP OWTF, the Offensive (Web) Testing Framework, is an OWASP+PTES-focused try to unite great tools and make pen testing more efficient, written mostly in Python
Otros creadores -
Reconocimientos y premios
-
F5 BIG IP ASM XSS bypass
F5
Reported a new XSS payload that can bypass the F5 BIG IP ASM
-
SeedStars Algeria Winner
Seedstars
Won the Seedstars Algeria competition with Dalil project and qualified to pitch at the Seedstars global summit in Switzerland along 60 other startups worldwide
-
Imagine Cup Algeria Finalist
Microsoft
Imagine Cup Algeria Finalist
-
Harvard Africa Business Conference TOP 15 Startups
Harvard Business School
Selected in the TOP 15 list of the startups in Africa by the Harvard Africa Business Conference
http://www.africabusinessconference.com/entrepreneurship-events -
Total Start-upper of the Year TOP 10 Finalists
Total
Total Start-upper of the year top 10 finalists in Algeria with Dalil Project
-
Wordpress Plugin LeagueManager multiple SQLi and XSS
-
Multiple SQLi and XSS on one of the most used plugins in sports wordpress based websites
https://wordpress.org/plugins/leaguemanager/changelog/
Check version 4.0.5
username : islamoc -
BlackBerry Acknowledgment
BlackBerry
For Discovering Multiple XSS and SQL Injections
http://global.blackberry.com/en/enterprise/products/incident-response-team.html -
Med-IT Cup Information Security 1st Place
Med-IT
Développement d'une application sécurité réseau dans les domaines ci-dessous :
- Contrôle d’Accès :
Modèles de contrôle d’accès, contrôle d’accès à base de rôle, certificats d’attributs, SPKI, XACML
- Contrôle d’Accès Réseau et les Pare-Feu :
Filtrage de paquets, passerelles applicatives, passerelles de circuits, conversion des adresses (NAT), configurations de pare-feu
- Sécurité Cryptographique pour l'Internet :
Protocoles IPsec, Oakley/ISAKMP, TLS/SSL, VPN/SSL…Développement d'une application sécurité réseau dans les domaines ci-dessous :
- Contrôle d’Accès :
Modèles de contrôle d’accès, contrôle d’accès à base de rôle, certificats d’attributs, SPKI, XACML
- Contrôle d’Accès Réseau et les Pare-Feu :
Filtrage de paquets, passerelles applicatives, passerelles de circuits, conversion des adresses (NAT), configurations de pare-feu
- Sécurité Cryptographique pour l'Internet :
Protocoles IPsec, Oakley/ISAKMP, TLS/SSL, VPN/SSL, sécurité cryptographique dans le DNS, le routage et SMTP
- Sécurité dans les Réseaux Mobiles :
EAP, Radius, Diameter, sécurité dans les réseaux sans fil, mécanismes de sécurité dans GSM, 3GPP, DECT et dans l'IP Mobile. -
GIST Tech-I competition TOP30 (TOP15 Idea Stage Finalists)
GIST Tech-I
TOP15 Projects in Global Innovation through Science & Technology, Tech-I for the Ideas track.
GIST Tech-I is an international competition organized by AAAS in partnership with the U.S. State Department.
The event took place in Marrakesh,Morroco, as part of the GES Global Entrepreneurship Summit with the presence of U.S. Vice President Joe Biden and High International officials like president of Ghana
Project: Dalil Project -
Hall Of Fame galleryproject
Galleryproject.org
Hall of fame mention for disclosing Content Injection on codex.galleryproject.org
http://codex.galleryproject.org/Bounties
Idiomas
-
Arabe
Competencia bilingüe o nativa
-
English
Competencia profesional completa
-
Français
Competencia bilingüe o nativa
Recomendaciones recibidas
6 personas han recomendado a Islam Azeddine
Unirse para verloMás actividad de Islam Azeddine
-
If you have a cousin/brother/sister passing BAC in Algeria this year, let them listen to this episode
If you have a cousin/brother/sister passing BAC in Algeria this year, let them listen to this episode
Recomendado por Islam Azeddine Mennouchi
-
ZAP 2.15.0 is now available! Read all about it: https://lnkd.in/e2y-VmHi
ZAP 2.15.0 is now available! Read all about it: https://lnkd.in/e2y-VmHi
Recomendado por Islam Azeddine Mennouchi
-
The ZAP #docker images in the OWASP® Foundation DockerHub org have now been deleted. For details of the supported images see https://lnkd.in/eJ7MVcaT
The ZAP #docker images in the OWASP® Foundation DockerHub org have now been deleted. For details of the supported images see https://lnkd.in/eJ7MVcaT
Recomendado por Islam Azeddine Mennouchi
