Kris' Life

Hi all,

I'm Kris Philipsen, 28 years old, living in Belgium and working in the Grand-Duchy of Luxembourg. I live two lives.. In the first I'm Principal Consultant at Verizon Business Security Solutions, whom I've been with for over 8 years now. In the second life I am a traveler only know by the pseudonym of Kris ;) Yes, I took the red pill :P Anyways, I like to travel around the world and the following sections link to pictures of the various places I've been. I'm also author of a few IT/network security projects which may be of interest to you: issPolicy Project and PIX Logging Architecture Project. I like playing with computers, visiting new places and meeting people from different cultures however my #1 passion in life is my fiancée Viviane that I can't live without!

>> You can contact me on kris@sequenced.org.
>> Drop me a message and sign my guestbook!


You can also drop me messages or tweets on Facebook and Twitter:

   

Kris' Blog

You can check out my blog and leave me some comments at http://blog.sequenced.org.

Kris' Security Stuff

[security projects]
I'm the author and developer of several network security projects:


• issPolicy - Convert ISS Proventia Inline Appliance & RealSecure Network Sensor Policies into HTML
• PIX Logging Architecture - Parse, Correlate, Search and Graph Traffic, IDS and Informational (Audit) logs for Cisco PIX, FWSM & ASA
• ISNProber v1.02 Static Source Port (SSP) Patch - Patch for Static Source Port settings in ISNProber (developed in relation to Symantec Weak ISN vulnerability). ISNProber v1.02 Source Code can be found here.

[security papers]
I've written the following papers on IT Security:


• Web Application Vulnerability Assessment - Discovering and Mitigating Security Issues in Web Applications [PDF/1181Kb]
• Symantec Weak ISN Vulnerability: The theory and practice of hijacking TCP connections throughout an Internet-wide environment [PDF/875Kb]

[security advisories]
I've discovered several security issues in various security software products and released the following security advisories:


• Symantec Raptor Firewall Weak ISN Vulnerability [TXT] [SecurityFocus: BID 5387]
• Computalynx CProxy Server Multiple Remote Vulnerabilities [TXT] [SecurityFocus: BID 12722]
• RSA Ace Web Agent Cookie Information Disclosure Vulnerability [TXT]

[security speeches]
I've given lectures and speeches at various IT security conferences and events:


• Hack.lu 2005 Security Conference - "Web Application Vulnerability Assessment - Discovering and Mitigating Security Issues in Web Applications"
  - Hack-LU_2005_-_Kristof_Philipsen_-_WAVA_-_Full.pdf (Full Presentation Slides) [PDF/1230Kb]
  - Hack-LU_2005_-_Kristof_Philipsen_-_WAVA_-_Scaled.pdf (Scaled Down Presentation Slides) [PDF/807Kb]



• Luxembourg BlackBerry Security Conference - "E-Mail & Mobility: A Security Issue?"
  - Kris_Philipsen_-_BlackBerry_Security.pdf (Full Presentation Slides) [PDF/754Kb]
  
  
  
• Les Assises de Securite (Monte Carlo, Monaco) - "Risk and Threat Management within the Extended Enterprise"
  - (Presentation not yet available)
  

[security stuff]
Some interesting security related stuff I though I'd share with you:


• Hack.lu 2005 Capture The Flag - Ethical Hacking Contest - As part of a four man Ubizen/Cybertrust Application and Network Security team, I entered into a 6 hour ethical hacking competition against 3 other teams. We managed to best secure our own systems and compromise (ethically hack:P) more systems than the other teams. Here are the results: http://2005.hack.lu/wiki/index.php/CaptureTheFlag_Results



• Interviews with various IT-related Papers and Journals:
  - I was interviewed by Network World Fusion magazine regarding the critical security flaw I discovered in Symantec's Velociraptor and Gateway Security Firewalling devices. Link: "Flaw discovered in Symantec firewall" - by Ellen Messmer
  - I was interviewed by ZDNet's eWeek Magazine regarding the critical security flaw I discovered in Symantec's Velociraptor and Gateway Security Firewalling devices. Link: "Security Hole Found in Symantec's Firewall" - by Dennis Fisher



[security certifications]
Some certifications I have obtained:


• CISSP - Certified Information Systems Security Professional [ISC(2)]
• HISP - Holistic Information Security Practitioner [HISPI]
• GCIH - GIAC Certified Incident Handler [GIAC]
• ISSP - INFOSEC Security Professional [NSA / CNSS]
• CCNP - Cisco Certified Network Professional [Cisco Systems]
• CCSP - Cisco Certified Security Professional [Cisco Systems]
• CCSA - CheckPoint Certified Security Administrator [CheckPoint]
• CCSA - CheckPoint Certified Security Expert [CheckPoint]

Kris' Travel and Pictures

• Lisbon, Portugal (July 1998)
• Outer Banks, North Carolina, USA (August 1998)
• Charlottesville, Virginia, USA (August through December 1998)

• Charlottesville, Virginia, USA (January through June 1999)
• Temecula, California, USA (June through December 1999)
• New York City, New York, USA (December 1999)
• Washington, DC, USA (December 1999)

• Temecula, California, USA (January through December 2000)
• Lake District, United Kingdom (June 2000)
• Washington, DC, USA (July 2000)
• Las Vegas, Nevada, USA (August 2000)
• Palm Springs, California, USA (October 2000)
• Denver, Colorado, USA (November 2000)
• New York City, New York, USA (December 2000)

• Munich, Germany (October 2001)
• Newcastle, United Kingdom (December 2001)

• Madrid, Spain (February 2002)
• Milan, Italy (June 2002)

• Paris, France (January 2003)
• London, United Kingdom (January 2003)
• Milan, Italy (February 2003)
• London, United Kingdom (February 2003)
• Manchester, United Kingdom (February 2003)
• Munich, Germany (May 2003)
• Milan, Italy (May 2003)
• Barcelona, Spain (May 2003)
• London, United Kingdom (July 2003)
• Manchester, United Kingdom (July 2003)
• Berlin, Germany (August 2003)
• St. Louis, Missouri, USA (December 2003)

• Zurich, Switzerland (January 2004)
• Monte Carlo, Monaco (January 2004)
• Dublin, Ireland (February 2004)
• Paris, France (February 2004)
• Kaprun, Austria (April 2004)
• Vancouver, Province of British Columbia, Canada (April 2004)
• New Jersey/New York, USA (April through November 2004)
• New York City, New York, USA (May 2004)
• Reston, Virginia, USA (June 2004)
• Wilmington, North Carolina, USA (October 2004)
• Amsterdam, The Netherlands (November 2004)
• Paris, France (December 2004)
• London, United Kingdom (December 2004)
• Montreal, Province of Quebec, Canada (December 2004)

• Quebec City, Province of Quebec, Canada (January 2005)
• Madrid, Spain (January 2005)
• Munich, Germany (January 2005)
• Madrid, Spain (February 2005)
• Amsterdam, The Netherlands (February 2005)
• Solden, Austria (March 2005)
• Innsbruck, Austria (March 2005)
• Amsterdam, The Netherlands (April 2005)
• Vancouver, Province of British Columbia, Canada (May 2005) and Michael's Pictures of Vancouver (May 2005)
• Whistler, Province of British Columbia, Canada (May 2005)
• Victoria & Vancouver Island, Province of British Columbia, Canada (May 2005)
• Toronto, Province of Ontario, Canada (September 2005)
• Niagara Falls, Province of Ontario, Canada (September 2005)
• Montreal, Province of Quebec, Canada (September 2005)
• Ottawa, Province of Ontario, Canada (September 2005)
• Kirchberg, Grand Duchy of Luxembourg (October 2005) [Hack.lu/2005 IT Security Conference]
• New York City and Upstate NY, New York, USA (October 2005)
• Prague, Czech Republic (December 2005)

• Curitiba, Parana, Brazil (March 2006)
• Iguassu Falls, Parana, Brazil (March 2006)
• Vancouver, Province of British Columbia, Canada (April 2006) and Michael's Pictures of British Columbia, Canada (April 2006)
• Whistler, Province of British Columbia, Canada (April 2006)
• Johannesburg, Gauteng Province, South Africa (April 2006)
• Maui, Hawaii, USA (May 2006)
• Sao Paulo, Sao Paulo, Brazil (July 2006)
• Curitiba, Parana, Brazil (July 2006)
• Vila Velha and Ponta Grossa, Parana, Brazil (July 2006)
• Amsterdam, The Netherlands (September 2006)
• Curitiba, Parana, Brazil (October 2006)
• Morretes, Parana, Brazil (October 2006)
• Amsterdam, The Netherlands (October 2006)
• Paris, France (November 2006)
• Prague, Czech Republic (December 2006)
• Brussels, Belgium (December 2006)
• Antwerp, Belgium (December 2006)
• Bruges, Belgium (December 2006)

• Strasbourg, France (January 2007)
• Bouillon, Belgium (January 2007)
• Moscow, Russian Federation (January 2007)
• Johannesburg, Gauteng Province, South Africa (January 2007)
• Florianopolis, Santa Catarina, Brazil (February 2007)
• Porto Alegre, Rio Grande do Sul, Brazil (February 2007)
• Gramado & Canela, Rio Grande do Sul, Brazil (February 2007)
• Curitiba, Parana, Brazil (February 2007)
• Paris, France (April 2007)
• Florianopolis, Santa Catarina, Brazil (April 2007)
• Curitiba, Parana, Brazil (May 2007)
• London, United Kingdom (May 2007)
• Amsterdam, The Netherlands (June 2007)
• Amsterdam, The Netherlands (July 2007)
• Heidelberg, Germany (July 2007)
• Innsbruck, Austria (July 2007)
• Neuschwanstein, Germany (July 2007)
• Helsinki, Finland (July 2007)
• Tallinn, Estonia (July 2007)
• Leuven, Belgium (July 2007)
• Luxembourg City, Luxembourg (July 2007)
• Frankfurt, Germany (August 2007)
• London, United Kingdom (August 2007)
• Budapest, Hungary (September 2007)
• Paris, France (September 2007)
• Amsterdam, The Netherlands (September 2007)
• Copenhagen, Denmark (September 2007)
• London, United Kingdom (September 2007)
• Washington, DC, USA (September 2007)
• Curitiba, Parana, Brazil (October 2007)
• Sao Paulo, Sao Paulo, Brazil (October 2007)
• Moscow, Russian Federation (December 2007)
• Curitiba, Parana, Brazil (December 2007)

• Buenos Aires, Argentina (January 2008)
• Johannesburg, Gauteng Province, South Africa (January 2008)
• Cape Town, Western Cape, South Africa (January 2008)
• London, United Kingdom (January 2008)
• Paris, France (February 2008)
• Vienna, Austria (February 2008)
• Geneva, Switzerland (February 2008)
• Fribourg, Switzerland (February 2008)
• Washington, DC, USA (March 2008)
• Munich, Germany (March 2008)
• Washington, DC, USA (March 2008)
• Salvador, Bahia, Brazil (April 2008)
• Costa do Sauipe, Bahia, Brazil (April 2008)
• Copenhagen, Denmark (April 2008)
• Frankfurt, Germany (April 2008)
• Paris, France (May 2008)
• Stockholm, Sweden (May 2008)
• Paris, France (May 2008)
• Bucharest, Romania (May 2008)
• Amsterdam, The Netherlands (May 2008)
• Florianopolis, Brazil (July 2008)
• Curitiba, Brazil (July 2008)
• London, United Kingdom (August 2008)
• Pilsen, Czech Republic (September 2008)
• Prague, Czech Republic (September 2008)
• Copenhagen, Denmark (September 2008)
• London, United Kingdom (September 2008)
• Paris, France (September 2008)
• London, United Kingdom (September 2008)
• Curitiba, Brazil (October 2008)
• Monte Carlo, Monaco (October 2008)
• Manchester, United Kingdom (October 2008)
• Geneva, Switzerland (October 2008)
• Paris, France (November 2008)
• Oranjestad, Aruba (Dutch Carribean) (November 2008)
• Curitiba, Brazil (December 2008)
• Florianopolis, Brazil (December 2008)
• Buenos Aires, Argentina (December 2008)

• Washington, DC, USA (January 2009)
• Birmingham, United Kingdom (January 2009)
• Milton Keynes, United Kingdom (January 2009)
• London, United Kingdom (January 2009)
• Bern, Switzerland (January 2009)
• Geneva, Switzerland (January 2009)
• Paris, France (February 2009)
• Toulouse, France (February 2009)
• Geneva, Switzerland (February 2009)
• Brussels, Belgium (February 2009)
• Curitiba, Brazil (February 2009)
• London, United Kingdom (March 2009)
• Paris, France (March 2009)
• London, United Kingdom (March 2009)
• Willemstad, Curacao (Dutch Carribean) (March 2009)
• Oranjestad, Aruba (Dutch Carribean) (March 2009)
• Rotterdam, The Netherlands (March 2009)
• Arnhem, The Netherlands (March 2009)
• London, United Kingdom (April 2009)
• Utrecht, The Netherlands (April 2009)
• Curitiba, Brazil (April 2009)
• Copenhagen, Denmark (May 2009)
• Washington, DC, USA (June 2009)
• Stockholm, Sweden (June 2009)
• Malmo, Sweden (June 2009)
• Copenhagen, Denmark (June 2009)

Kris' Future Travels

• Mauritius
• Victoria Falls, Zambia

• Beijing, China
• Kuala Lumpur, Malaysia
• Maldives

• Australia (mainland)
• Fiji
• New Zealand
• Tasmania
• New Caledonia

• Baltic States (Estonia, Latvia and Lithuania)
• Greenland
• Iceland
• St. Petersburg, Russia

• Alaska
• Cascade Mountains, Washington
• Crater Lake, Oregon
• Maine
• Newfoundland, Canada
• Nova Scotia, Canada
• Yukon, Canada

• Amazon Rainforest, Brazil
• Lake Titicaca, Bolivia/Peru
• Ouro Preto, Brazil
• Patagonia, Argentina
• Serra dos Órgãos, Brazil

Kris' Friends Sites

• Douglas Ferguson
• Kimberley Vanvaeck
• Maarten Van Horenbeeck
• Peter Boutzev
• Wence Vandermeersch