''Interactive Testing Challenge'' Participants Face off in Hands-on Test of Software Security Skills at RSA Conference 2006.

SAN JOSE, Calif. -- Security Innovation and RSA Conference 2006 Sponsor Competition to Demonstrate the Importance of Web Application Security

Security Innovation, the authority on application security and leading independent provider of assessment and training services, and RSA(R) Conference, the world's leading information security conference and exposition group will be partnering to present the "Interactive Testing Challenge" (ITC) on Feb. 13 - 16 during the RSA Conference 2006 in San Jose, Calif. The ITC is the ultimate hands-on test of software security skills, and is designed to help security professionals of varying skill levels assess their knowledge and expertise in Web application security. The winner of the ITC will be broadcasted within the ITC area and named during the Keynote on Friday.

Participants in the ITC will test their skill in uncovering common and obscure security flaws in Web sites built expressly for the challenge. On Tuesday and Wednesday, each participant will test one of two Web sites to expose as many bugs as possible, earning points for each vulnerability located. The top two daily winners will compete head-to-head in afternoon showdowns. Each day's winner will receive a prize and progress to the final showdown on Thursday at 12:00 p.m. in the ITC area on the concourse level of the San Jose McEnery Convention Center.

What:  Interactive Testing Challenge at RSA Conference 2006
When:  Feb. 13-16, 2006

       Orientation:
       Monday, Feb. 13, 6:00 p.m.

       Testing Challenge Hours:
       Tuesday, Feb. 14, 10:30 a.m. - 3:00 p.m.
       Wednesday, Feb. 15, 10:30 a.m. - 3:00 p.m.

       Daily Face-Off:
       Tuesday, Feb. 14, 4:00 p.m.
       Wednesday, Feb. 15, 4:00 p.m.

       Final Face-Off
       Thursday, Feb. 16, 12:00 p.m.

       ITC Wrap-up and Winner Presentation:
       Thursday, Feb. 16, 1:00 p.m.

Where: Concourse Level, McEnery Convention Center, San Jose
URL:   http://2006.rsaconference.com/us/exhibition/activities.aspx#itc

"The Interactive Testing Challenge will provide a hands-on look at Web application security, allowing participants to come away with a strong understanding of the genuine vulnerability types found in Web applications, and an appreciation of the difficulty in building secure applications," said Sandra Toms LaPedis, general manager and area vice president, RSA Conference. "The Conference's special events such as the Interactive Testing Challenge provide additional educational opportunities to both participants and Conference attendees."

"The Interactive Testing Challenge will bring to light the complex challenges that application developers must address. Participants will be able to take this experience back to their organizations and conduct better internal testing," said Herbert Thompson, Ph.D., chief security strategist of Security Innovation. "With analysts estimating that more than 70 percent of security vulnerabilities exist at the application level, the RSA Conference 2006 Interactive Testing Challenge represents an opportunity for security and non-security employees to realize the critical nature of protecting data and IP through secure applications."

About Security Innovation

Security Innovation, Inc. is the authority on application security and leading independent provider of assessment and training services. Dozens of leading organizations, including Adobe, Cisco, Fidelity, Harris Corporation, IBM, ING, HP, Microsoft, VISA, SAP, Symantec, VeriSign and a number of government agencies, rely on Security Innovation's expertise in application security testing and training to develop, evaluate and deploy more secure applications. More than 60 percent of the Company's staff holds advanced degrees in computer science with 30 percent at the Ph.D. level. The Company is headquartered in Wilmington, Mass., with offices in Amsterdam, The Netherlands; Seattle, Wash.; and Melbourne, Fla. For more information about Security Innovation, visit www.securityinnovation.com or call +1.978.694.1008.

About the RSA Conference

Now in its 15th year, the RSA Conference brings together decision-makers and influencers from all major markets, including consumer, education, financial, government, computer networking, telecommunications, as well as Wall Street and the media, for the industry's premier information security and cryptography events. RSA Conference 2006 will be held February 13 - 17 in San Jose, California; April 26 - 27 in Tokyo, Japan; and October 23 - 26 in Nice, France. For more information, visit www.rsaconference.com.