text:
Sessions & Workshops
Monday, February 27, 2012
Stress and Burnout in the Information Security Community
Stress, burnout, rage, despair- all common experiences to many in the information security community. This panel will discuss the issues, compare and contrast them to other industries including…Jack Daniel - Strategist, Tenable Network SecurityGal Shpantzer - CEO, Security Outliers, Inc.Ken Yerrid - ., Independent ConsultantMartin McKeay - Senior Security Advocate, Akamai TechnologiesStacy Thayer - Executive Director, SOURCE Conference
Smart Investments: Workforce Development Programs Working for You
An information security professional's work never ends. With constant demands of new technology, sophisticated threats and a challenging economy—how do you stay current and keep up with work demands?…Rosa Ayer - IT Specialist, Department of Veterans Affairs
Making a Career Move, Developing Your Approach.
Starting a job search can be a daunting task and many job seekers don't know how to put their best foot forward. This session will give an overview on how hiring managers and recruiters evaluate…Jeff Combs - Founder, J. Combs Search Advisors
Becoming a Change Agent in a World Where Change Never Ends
What we have been doing in security isn't working. A paradigm shift is needed to recognize how integral security, privacy and risk management should be in business decisions. Security and privacy…Lisa Lee - Chief Security Advisor, MicrosoftAimee Larsen Kirkpatrick - Director of Communications & Outreach, National Cyber Security AllianceMichelle Dennedy - Chief Privacy Officer, CiscoPamela Warren - Independent Consultant, SS8Patricia Titus - Chief Information Security Officer and Chief Privacy Officer, Markel Corporation
Tuesday, February 28, 2012
Making Sense of Software Security Advice: Best vs. Practiced Practices
There's no shortage of software security advice out there. How do you make sense of it and apply it to your work? Organizations such as SAFECode promote software security best practices. Others like…Reeny Sondhi - Chief of Product Security, Autodesk, Inc.David Ladd - Principal Security Program Manager, MicrosoftGary McGraw - CTO, CigitalGary Phillips - Senior Director, R&D, Symantec CorporationKyle Randolph - Senior Manager, Security & Privacy, Adobe
Security is Dead. Long Live Rugged DevOps: IT at Ludicrous Speed
Cloud IT velocity is breathtaking: while most IT struggle with monthly releases, agile IT businesses routinely conjure thousands of AWS servers, performing over 10 deploys per day. This agility…Gene Kim - Author, IT Revolution
Invited Talk I
The impact of cryptography on platform security.Ernie Brickell - Security CPT Architecture, Intel
Behind Velvet Ropes: Access Government Services While Safeguarding Data
Have you ever wanted to go behind the velvet ropes and have an all access pass to one of those top secret, closed door meetings where key government and private-industry leaders shared their working…Keir Breitenfeld - Senior Director Experian Decision Analytics & Fraud, ExperianDaniel Buttafogo - Head of Financial Crime a& Transaction Risk Management for the Citibank Cards Portfolio, CitiDeborah Gallagher - Chair, Federal PKI Policy Authority, General Services AdministrationJoni Brennan - President, DIACCNick Piazzola - Director of Government Authentication, Symantec Corporation
Deconstructing the Breach – Miscreants, Their Malware, Our Response
Data breaches are constant front-page news with growing security spending and vendor innovation eclipsed only by criminal profits. Learn who's behind the breaches, how they are beating us, what the…Pattrick Peterson - Chief Executive Officer, AgariDavid Dagon - Fellow, Georgia TechJoe Stewart - Director of Malware Research, Dell SecureWorksMartin Nystrom - Senior Manager, Cisco Managed Threat DefenseRichard Howard - CSO, Palo Alto Networks
Risk Management Smackdown II: The Wrath of Kuhn
Risk Management (RM) is as contentious as ever. We've once again assembled a stellar panel of experts to argue the merits and faults of RM. This will be a highly interactive session, so come and join…David Mortman - Contributing Analyst, SecurosisAlex Hutton - Vice President Information Security, Systemically Important Financial InstitutionAllison Miller - Product Manager, Security & Privacy, GoogleAndy Ellis - CSO, Akamai TechnologiesBob Blakley - Global Head of Information Security, Citigroup
Joining Forces: The Public-Private Imperative in Cybersecurity
IT. It's pervasive. It's essential. Which explains why so many are determined to attack it. The public and private sectors must meet the growing threat with a truly integrated approach to…Howard Schmidt - Partner, Ridge-SchmidtDebora Plunkett - Former Director of Information Assurance, NSAMark Weatherford - Global Information Security Strategist, Booking HoldingsPatrick Gallagher - U.S. Department of Commerce Under Secretary and NIST Director, National Institute of Standards and TechnologyRichard Hale - Deputy Chief Information Officer for Cybersecurity, DoD CIO
Top Strategies for Detecting and Combating Advanced Persistent Threats
Attributions of network compromises associated with advanced persistent threats (APT) have increased due to better security intelligence, improved incident management processes and general industry…Joshua Ray - Director of Intelligence, VeriSign, Inc.Ron Ritchey - Chief Scientist Information Security, Bank of AmericaWilliam Cole - VP, Professional Services, McAfee an Intel Company
Lightning Round: Mobile Infrastructure Security: Licensed Spectrum Eavesdropping and GSM Threats
This lightning round covers cellular communications infrastructure risks. Round 1: Licensed Spectrum Eavesdropping - How Real is the Risk? Understanding and Managing Vulnerabilities Round 2: Exploring…Aaron Turner - CEO, Hotshot TechnologiesRob Malan - Co-Founder & Chief Technology Officer, Arbor Networks
Just Because They're Authenticated Doesn't Mean You Should Trust Them
A confluence of errors—a health clinic allowed their employees' computers to be contaminated with malware; a certification authority issued a certificate to a knave; and a blood-testing laboratory let…Hoyt Kesterson - Senior Security Architect, Terra VerdeAndrew Peck - United States Magistrate Judge, United States District Court Southern District of New YorkAnne Rogers - Director, Information Safeguard, Waste ManagementJohn Facciola - United States Magistrate Judge, U.S. District Court for the District of ColumbiaStephen Wu - Partner, Cooke Kobrick & Wu LLP
Good Security on a Government Budget? Government CISOs Do More with Less
CISOs in government are currently facing one of the most challenging fiscal environments. How are they coping with limited funding and hiring freezes in the face of evolving threats and continuing…Hord Tipton - Executive Director, (ISC)2Brent Conran - Vice President Information Technology and Chief Information Security Officer, Intel CorporationChristopher Ipsen - CIO, Nevada Desert Research InstituteMatthew McCormack - Chief Information Security Officer, Defense Intelligence AgencyPatrick Howard - Chief Information Security Officer, US Nuclear Regulatory Commission
Give Me My Cloud Back: Panel Discussion of Data Privacy Concerns
Threats to data in the cloud, no matter how sensitive or what kind of data it is are unique. When the data doesn't physically exist, within the confounds of a company owned facility, new and…Maria Lewis Kussmaul - Co-Founder & Partner, America's Growth CapitalJeffrey Schmidt - Vice President-BT Advise, US&C, BT Global ServicesJonathan Q Nguyen-Duy - Director of Global Security Services Product Management, Verizon BusinessNils Puhlmann - CTO, EndgamePatrick Foxhoven - CTO & VP, Emerging Technologies, Zscaler
Optimizing Security for Situational Awareness
Situational awareness is an organizational necessity in today's world of insider and targeted threats. Amplifying this necessity are pressures to embrace new trends in IT such as mobility, cloud and…Brian Kenyon - Senior Director, Solution Architecture, McAfee an Intel Company
Exploring Converged Access of IT Security and Building Access - Today, Tomorrow and the Future
When HID Global acquired ActivIdentity, the acquisition strategy was driven by the growing convergence between the two worlds of IT security and Buildings Access control. This session will discuss the…John Fenske - Vice President, Product Marketing, HID GlobalJulian Lovelock - Vice President, Product Marketing, ActivIdentity, part of HID Global
Firewalls: Security, Access, The Cloud - Past, Present and Future
Even stable security tools like firewalls have been shown to be vulnerable. The cloud and virtualization promise even more challenges for firewall deployment. Next gen firewalls need management to…Jody Brazil - President and CTO, FireMonChristofer Hoff - Vice President and Security Chief Technology Officer, Juniper NetworksManny Rivelo - Sr VP, Security & Strategic Solutions, F5 NetworksVikram Phatak - Chief Technology Officer, NSS Labs, Inc.
Revocation Checking for Digital Certificates: Why Won't It Work?
Digital certificates are essential for TLS security on the Internet, but are only reliable if there is effective certificate revocation checking to tell consumers not to trust a bad certificate. This…Kirk Hall - Director Policy and Compliance - SSL, Entrust DatacardAdam Langley - Senior Staff Software Engineer, GoogleHåvard Molland - Software Developer, Opera SoftwareSid Stamm - Lead Privacy Engineer, Mozilla
Software Security Goes Mobile
Mobile devices and the risk posed by vulnerabilities in the software that runs them are proliferating. This talk will scrutinize challenges faced in securing mobile apps and contrast them with legacy…Jacob West - Chief Architect, Security Products, NetSuite
When the Cloud Goes Bust: Data Breaches in the Cloud
As businesses continue to move portions of their operations to the cloud, it becomes important to ensure the confidentiality, availability and integrity of this data. What about when the cloud is…Dr. Christopher Pierson - Founder and CEO, BLACKCLOAKJames Shreve - Partner and Chair of the Cybersecurity Practice, Thompson Coburn LLP
Side Channel Attacks I
Cryptographic algorithms today are designed to withstand a great deal of cryptanalytic efforts. Side channel attacks, as the ones discussed in this session, are methods to attack insecure…Benedikt Gierlichs - Postdoctoral researcher, KU Leuven, COSICJosep Balasch - Ph.D. Student, K.U.Leuven ESAT/COSIC
The First 24: Responding to an Attack within the Critical First Day
You uncover an intrusion and your security team must spring into decisive action. One erroneous move could do more harm than good, destroying mission-critical data—or even "tipping off" your every…David Amsler - Chief Executive Officer, Foreground Security
New Threats to the Internet Infrastructure
Today's Internet threats are not technical; they're social and political. They aren't criminals, hackers, or terrorists. They're the government and corporate attempts to mold the Internet into what…Bruce Schneier - Fellow and Lecturer, Harvard Kennedy School
Taking Information Security Risk Management Beyond Smoke & Mirrors
There has been a lot of published work on how to perform risk assessments and various analysis methods, but they never tell you how to actually build a Risk Management Program from scratch and…Evan Wheeler - CISO, Financial Engines
BYOD(evice) without BYOI(nsecurity)
The session presents the real life drama of running a BYOPC program without neutering security. As your workforce transitions to a mobile workforce, how do you meet the imperative while providing a…Dan Houser - Sr. Security & Identity Architect, Cardinal HealthDaniel DeSantis - Security Specialist, CiscoGoran Avramov - Senior Infrastructure Architect, Cardinal Health IncNasrin Rezai - SVP and Global Chief Information & Product Cyber Security Officer, General Electric
Surviving Lulz: Behind the Scenes of LulzSec
On Thursday, June 2, 2011, LulzSecurity.com registered for CloudFlare. Over the next 3 weeks, from behind our network, LulzSec wreaked havoc on the Internet. Meanwhile, rival hackers launched attacks…Matthew Prince - Co-founder, CloudFlare
SSL and the Future of Authenticity
This talk will provide an in-depth examination of the current problems with authenticity in SSL, discuss some of the recent high-profile SSL infrastructure attacks in detail and cover some strategies…Moxie Marlinspike - Founder, Signal
The Dark Side of a Payment Card Breach
The fallout of a payment card breach doesn't stop when it is contained. From working with an incident assessor, to dealing with the payment processor and navigating the card brand rules and PCI, many…David Navetta - Co-Chair, Data Protection, Privacy & Cybersecurity Practice, Norton Rose FulbrightDr. Branden Williams - Director, Cyber Security, Union BankSerge Jorgensen - Founding Partner/CTO, Sylint Group
The US Cyber Challenge: National Competitions to Find New Cyber Experts
How can the nation meet the needs of military, government and industry for highly technical cybersecurity experts? The U.S. Cyber Challenge has engaged thousands of young people and found surprisingly…Karen Evans - National Director, US Cyber ChallengeAlan Paller - Research Director and Founder, SANS InstituteAlex Levinson - Student, Rochester Institute of Technology
Getting to "Like": Real-world Enterprise Use Cases for Social Applications
The ubiquity of social media and networking tools in the enterprise leaves ever-larger numbers of IT practitioners struggling to strike a balance between enabling access and mitigating risk. This…Rene Bonvanie - Vice President, Worldwide Marketing, Palo Alto NetworksJustin Kwong - Chief Information Security Officer & Senior Director, IT Operations and Security, 24 Hour FitnessMike Wade - Network System Engineer, Summa Health SystemPaul Carugati - Converged Security Architect & Manager (Information/Physical), Motorola SolutionsSam Ghelfi - Chief Information Security and Privacy Officer, Raymond James Financial
Information Protection in Today's Changing Mobile and Cloud Environments
While mobility and greater access to information through cloud-based services can result in increased productivity, cybercriminals are more determined than ever to expose vulnerabilities and steal…Art Gilliland - Senior Vice President & General Manager of Enterprise Security Products, HPBill Phelps - Executive Director, North America Practice, Lead Security Consulting, Accenture
Looking Ahead - The Path to Moving Security into the Cloud
The evolving threat landscape, as well as the need to protect users across a myriad of devices and locations, requires rethinking our security and malware defense mechanisms. This presentation will…Gerhard Eschelbeck - Vice President Security Engineering, Google
What Happens in Vegas Goes on YouTube: Using Social Networks Securely
Social networks simultaneously offer huge business benefits and unheard of security risks. How can enterprises effectively use social networks while not putting their security and data at risk?Ben Rothke - Principal Security Consultant, Nettitude
Stop the Maelstrom: Using Endpoint Sensor Data in a SIEM to Isolate Threats
This session will take an in-depth look at a new way of deploying SIEM (Security Information Event Management) that leverages endpoint sensor data in combination with network data. We will discuss how…Jody Patilla - Senior Information Assurance Analyst, The Johns Hopkins University
Staying Secure in an Agile World
This panel will discuss agile development methodologies and how rapid innovations in web frameworks support the interactive web experiences. The panel will also analyze the application security…Dr. Chenxi Wang - Founder, Rain CapitalIdo Breger - Product Manager, F5 NetworksJeremiah Grossman - Chief of Security Strategy, SentinelOneJoel Scambray - Principal, Cigital
Lightning Round: Data Confidentiality and Integrity in the Cloud
This lightning round provides approaches to achieve security and compliance for multi-tenant and multi-level cloud customers. Round 1: Data Confidentiality in the Cloud: Laser Gunfight at the O.K. …Davi Ottenheimer - Product Security, mongoDBMiguel Correia - Professor, Technical University of Lisbon / INESC-ID
Digital Signatures I
Digital signatures with various properties including intricate privacy and key management characteristics are some of the most useful cryptographic primitives. This season is dedicated to advances in…Carla Ràfols - Postdoc at the Ruhr-Universität Bochum, Universitat Rovira i Virgili and Unesco Chair in Data PrivacyPhilippe Camacho - Ph.D. Student, University of Chile
Big Data and Security: The Rules Have Changed
Industry focus has shifted to put as much emphasis on broad threat awareness as it has on prevention. However, conventional security technologies don't innately have the intelligence to deal with…Bill Brenner - Senior Editor, CSO Magazine / CSO OnlineAdam O'Donnell - Chief Architect, Cloud Technology Group, SourcefireAndrew Jaquith - Chief Technology Officer, SilverSkyJohn Adams - Security Operations Engineer, TwitterRich Mogull - Analyst & CEO, Securosis
The Six Most Dangerous New Attack Techniques and What's Coming Next
Two recent attacks changed the game for many security experts, demonstrating just how powerful attacks can be when money is unlimited. In this session, two people in unique positions to understand the…Alan Paller - Research Director and Founder, SANS InstituteEd Skoudis - Instructor, SANS InstituteJohannes Ullrich - Dean of Research, SANS Technology Institute
Digital Policy Management: Be Part of the Solution, Not the Problem
Are you challenged to move from RBAC to advanced policy-based or even "risk-adaptive" models? Would you benefit from machine-readable renderings of HIPAA and SOX? The panelists at this session cross…Susan Joseph - Principle Security Systems Engineer, Van Dyke Technology GroupAndrea Westerinen - Senior Technical Expert, SAICJeffrey Bradshaw - Senior Research Scientist, Florida Institute for Human and Machine Cognition (IHMC)Peter Sell - System Engineer, National Security AgencySandi Roddy - Technical Director, Information Assurance, DOD/DISA
Elephant in the Room: Intellectual Property Hacking
No matter what you call it: APTs, Advanced Threats or Intellectual Property (IP) hacking, it's the elephant sitting in the boardroom of many companies. After an IP breach, many remain silent, some go…Dr. Hugh Thompson - RSA Conference Program Chair, RSA ConferenceDavid Burg - Principal, PricewaterhouseCoopers LLPJon Murchinson - Vice President, EdelmanMatt Todd - Administrative Partner, Novak Druce + Quigg LLPThomas P. Heiser - President, RSA, The Security Division of EMC
Vulnerability Panel: Is it ZERO Day or ZERO Care?
Vulnerability Databases have provided information about security vulnerabilities for over 10 years. This enables analysis on trends and changes in the security industry. This session will examine…Jake Kouns - CISO, Risk Based SecurityCarsten Eiram - Chief Research Officer, Risk Based SecurityDan Holden - Director, HP DVLabs, HPKatie Moussouris - Founder and CEO, Luta Security, Inc.Steve Christey - Principal Information Security Engineer, MITRE
Defending Behind the Device: Mobile Application Risks
Risks to mobile devices are similar to those of traditional software applications and a result of insecure coding practices. However, mobile devices aren't just small computers. They are designed…Chris Wysopal - CTO, Veracode
eDiscovery and Forensics: Working Together for the Winning Solution
An actual case study will be presented with a short discussion about the elements of the eLitigation and the digital evidence used. The attendees will be grouped into a workshop structure and assisted…Jon Stanley - Consultant/President, Colliding Variables Consulting Services.Serge Jorgensen - Founding Partner/CTO, Sylint Group
How to Attack the Supply Chain (the Securing of)
The supply chain challenge has been discussed globally in policy circles, among industry technology companies and even on Sixty Minutes. This session will discuss the rationale for an organizational…Andras Szakal - Vice President & Chief Technology Officer IBM Federal, IBM CorporationDaniel Reddy - Senior Consultant Product Manager, EMC CorporationEdna Conway - Chief Security Officer, Global Value Chain, Cisco Systems IncJon Boyens - Manager, Security Engineering & Risk Management Group, National Institute of Standards and Technology
Cutting the Cord: Enabling Smartphones & Tablets without Risking Security
Worldwide smartphone shipments exceed that of PCs, and smartphones today have a gamut of business and personal data. The result: mobile devices have become a prime target for hackers. Join experts…Jonathan Penn - Director of Strategy, AVAST SoftwareAmit Sinha - Chief Technology Officer, Zscaler, Inc.Francisco Ginel - Director Security Product Marketing, Telefonica DigitalHadi Nahari - Founder, R62 SecurityNathan King - Senior Manager, United Airlines
Update Your Software or Die
Recent highly publicized data breaches beg the questions: why are we so vulnerable and what can be done to prevent such "advanced" attacks? This session will explore recent threat vectors and show…Rodrigo Rubira Branco - Director of Vulnerability & Malware Research, Qualys, Inc.Wolfgang Kandek - Chief Technical Officer, Qualys
Dormant Malware Attacks - What's Next?
Over the past few years, we have seen numerous APT attacks that leave behind new malware that has never been seen before and thus can't be detected. We find ourselves in a situation where most…Daniel Frye - Assistant Vice President, Corporate Security, CedarCrestonePaul Southerington - Security Architect, nTelos
Combating Advanced Persistent Threats (APTs): No Enterprise is an Island
Given the rise of advanced persistent threats (APTs), we need to get serious about sharing threat intelligence and defensive strategies across enterprises. This panel will share insights on the threat…Liesyl Franz - Vice President, Cybersecurity & Global Public Policy, TechAmericaDave Martin - VP & Chief Security Officer, EMCMarene Allison - VP, Worldwide Information Security, Johnson & JohnsonRoland Cloutier - Staff VP, Global Chief Security Officer, ADPTimothy McKnight - Vice President & Chief Information Security Officer, Northrop Grumman
Targeted Exploits & Spear Phishing – Will it be the Demise of Trusted Email?
Email continues to be the attack vector of choice by cybercriminals. This session will review how email authentication and the use of IETF standards (SPF and DKIM) can aid the enterprise in detecting…Craig Spiezle - Chairman Emeritus, OTA / AgelightAndy Steingruebl - Manager of Internet Standards & Governance, PayPal, Inc.John Scarrow - General Manager – Safety Services, MicrosoftMichael Hammer - Web Operations Security, AG Interactive/American Greetings
Cyber Security School Challenge: Information Security Professionals Needed
Today's connected world creates new safety risks for kids. Kids need volunteers, like you to teach them how to use the Internet in ways that won't jeopardize their privacy or damage their reputations. …
Wednesday, February 29, 2012
War Stories: The Good, Bad and the Ugly of Application Security Programs
Despite the increasing awareness that vulnerabilities at the application level are behind some of the most dangerous attacks, application security remains a small and largely untapped market. This…Dr. Chenxi Wang - Founder, Rain CapitalDoug Cavit - Principle Security Strategist, Trustworthy Computing, MicrosoftJames Routh - Managing Director & Global Head of Application, Internet and Mobile Security, JPMorgan Chase & Co.
CISOs Check the Weather: Beyond the Hype of Cloud Security
Cloud security is all over the news, and pushed by many vendors. But some say it's over-hyped; making it hard to separate the technology from the story. So, what are cloud security vendors doing…Jim Reavis - CEO, Cloud Security AllianceChuck Deaton - Director of Enterprise Information Security, Humana, Inc.Dave Cullinane - Chief Information Security Officer & Vice President, eBay Global Fraud, Risk & Security, eBay Inc.Jason Witty - CISO, JP Morgan ChaseJerry Archer - Chief Security Officer, Sallie Mae
Public-Key Encryption I
Public key encryption, being one of the cornerstones of modern cryptography, is a very active research topic with continuous need for improvements in terms of efficiency and security. In this session, …Colin Walter - Director of Distance Learning, Royal Holloway University of LondonNicolas Estibals - Ph.D. Student, University of LorraineTakanori Yasuda - Researcher, Institute of Systems, Information Technologies and Nanotechnologies
Can Data Breaches Be Stopped, Really?
The spate of recent data breaches has many wondering if it's truly possible to stop them. When even large well-known brands are suffering data loss, it's a valid question. This panel session will…Larry Ponemon - Founder, The Ponemon InstituteJohn Townsend - Manager of Information Protection & Security, DTE EnergyJon Oltsik - Senior Principal Analyst & ESG Fellow, Enterprise Strategy GroupRich Dandliker - Director of Product Management, Symantec Corporation
Cyber Battlefield: The Future of Conflict
Panel of leading experts in the field will explore complex policy issues tied to conflict in cyberspace. The session will discuss the current state of nation-state espionage, armed reconnaissance and…Dmitri Alperovitch - Co-Founder & CTO, CrowdStrikeAdam Segal - Director of the Digital and Cyberspace Policy Program, Council on Foreign RelationsEric Rosenbach - Co-Director, Belfer Center for Science and International Affairs, Harvard Kennedy SchoolJames Lewis - Senior Vice President, Center for Strategic International Studies (CSIS)Martin Libicki - Senior Scientist, RAND
Lightning Round: Security Risk Management: Insurance and Legal Responsibilities
This lightning round focuses on the insurance and legal side of risk management. Round 1: Cyber Liability Insurance - Who pays when your data goes missing? A behind the scenes look into Cyber…Jake Kouns - CISO, Risk Based SecurityJill Feagans - Senior Network Engineer, Network Design Associates Inc.
Embedded Insecurity: What Lies Beneath
From cell phones to voting machines to pace makers to printers: embedded devices are everywhere. Many are network enabled but in some cases security has been ignored. Over the past year we've seen…Bob Sullivan - Columnist, NBC NewsAng Cui - Chief Scientist, Red Balloon SecurityCharlie Miller - Security Engineer, Uber ATCDr. Salvatore Stolfo - CTO, Allure Security Technology, Inc.John Viega - Executive Vice President, Products, Strategy, Engineering, SilverSky
Cyber War: You're Doing it Wrong!
No matter how you slice it, cyber war is technologically and militarily impractical. We've been talking about it a long time but the discussion has been (and still is) misleading and inaccurate. …Marcus Ranum - Consultant, Independent
That Doesn't Actually Work: Hard Truths About Cryptographic Innovations
Passwords don't work -- this we know. But passwords are not alone. From database crypto to credit card handling, from browser cookie policy to the tortured attempts at anonymity inside of BitCoin, …Daniel Kaminsky - Chief Scientist, DKH
Whose Fault is it that I Didn't Know it Wasn't You—an Update
Two recent judicial decisions were announced on customer claims that their banks processed fraudulent fund transfer requests. A bench verdict found for the customer that the bank did not act in good…Hoyt Kesterson - Senior Security Architect, Terra VerdeDavid Navetta - Co-Chair, Data Protection, Privacy & Cybersecurity Practice, Norton Rose FulbrightDr. Ken Baylor - Head of Compliance, UberJohn Facciola - United States Magistrate Judge, U.S. District Court for the District of ColumbiaJoseph Burton - Partner, Duane Morris LLP
Secure the Smart Grid from Cyber Attacks to Avoid Putting Us Back 200 Years
Industrial control systems are under massive cyber attacks. While government and industry scramble, the next wave of electric utilities, known as the smart grid, are being readily deployed. Despite…Dr. Phyllis Schneck - Former Deputy Under Secretary for Cybersecurity and Communications, Former US Department of Homeland SecurityDonna Dodson - NIST Fellow and Cybersecurity Advisor, NISTJason Healey - Senior Research Scholar, Columbia University, School of Public and International AffairsJenny Menna - Senior Vice President, US BankKevin Gronberg - Visiting Fellow at the Atlantic Council and Director of Policy and Government Affairs, MandiantStewart Baker - Partner, Steptoe & Johnson LLP
Innovation and Technology Transfer in Security: From the Lab to General Use
Where do security technologies come from? Grants are proposed by academics and funded by the government. Startups move technologies across the "valley of death" to early adopters. Global corporations…Gary McGraw - CTO, CigitalBrian Chess - Founder & Chief Scientist, Fortify Software, an HP companyCarl Landwehr - Director of the Trustworthy Computing Program, National Science FoundationPaul Kocher - Independent ResearcherPeter Denning - Distinguished Professor of Computer Science, Naval Postgraduate School
Blending Embedded Hardware OTP, SSO, and Out of Band Auth for Secure Cloud Access
Today users are accessing cloud applications from a variety of devices and locations. This distributive environment demands pairing or layering of several technologies (in/out of band Soft OTP +…Jesper Tohmo - Chief Technology Officer, Nordic Edge an Intel CompanyVikas Jain - Director of Product Management, Intel
Separation and Isolation: Towards a Proactive Approach for Information Security
Sustainable IT requires a consequent proactive approach, addressing threats by design and adequate security architecture. The panel will discuss the best-practice of two Trusted Cloud projects, the…Bernd Kowalski - Head of Department, Federal Office for Information SecurityAmmar Alkassar - CEO, Rohde & Schwarz CybersecurityDr. Kai Martius - CTO, secunet Security Networks AGJosef Kohn - Marketing and Program Manager Platform Security, Infineon Technologien AG
Application Access Control - Taming the Wild West
It's been said that app stores are the number one malware delivery mechanism ever created by mankind. So even if you want to stick your head in the ground and believe apps are being code reviewed…Eric Green - EVP, Business Development, Mobile Active DefenseElias Manousos - Co-Founder and Chief Executive Officer, Risk IQMatthew Dosmann - Emerging Technologies Team Chief, U.S. ArmyMike Convertino - Director, Network Security, MicrosoftWard Spangenberg - Director of Security Operations, Zynga Game Network
30 Years and 500 Trillion Messages Later – Fixing the Email Plague
1982 brought us Internet email (SMTP) but 30 years and 500 trillion messages later the spam, phishing, malware and targeted attack plague remains. Join the world's largest financial institutions and…Pattrick Peterson - Chief Executive Officer, AgariMark - Managing Director, JPMorgan ChaseMichael Adkins - Messaging Engineer, Facebook, Inc.Michael Barrett - President, The FIDO Alliance
Minding the App Store - Protecting Software and Device Features
With "app store" business models, shiny new platform capabilities can be unleashed with simple enablement messages. But when locked features are valuable, platform attacks follow. Learn developer…Benjamin Jun - CEO, HVF Labs
Taking to the Skies: IT Flight Plan for Cloud Security
Launching a cloud security solution at a global billion dollar enterprise is not something done overnight. With dozens of global facilities, and thousands of employee endpoints, the security ecosystem…Todd Holloway - Senior Manager IT Security, Marvell
Cryptographic Protocols I
Cryptographic protocols are a composition of several primitives, offering various functionalities and capabilities. There is a constant need to answer new challenges, improve the efficiency of…Eiichiro Fujisaki - Senior Research Scientist, NTT CorporationJean Paul Degabriele - Ph.D. Student, Royal Holloway University of London
Three Ways to Lose Data and One Way to Stop It
This session will present case studies of data theft by three different attackers – insiders, outsiders and malware. Our findings reveal that these attackers employed similar techniques that defenders…Juan Montelibano - Team Lead, Insider Threat Technical Solutions & Standards, CERT
Modern Cyberthreats: The Changing Face Behind the Keyboard
While the threat landscape is always changing, it is always important to remember that there is a real criminal at the other end of the keyboard who is persistent and will keep coming back. In this…Greg Hoglund - Independent Consultant
Adversary ROI: Why Spend $40B Developing It, When You Can Steal It for $1M?
The security community has spent years on failed approaches to Return On Investment (ROI) on security offerings and Return On Security Investment (ROSI). It's failed as it evaluates from the wrong…David Etue - VP, Managed Security Services, Rapid7
Breaking News! Up to the Minute Hacking Threats
You won't find slides for this session online. We don't even know what topics it will cover. This session is dedicated to the hottest trends and most pressing threats as of the conference week. Join…Uri Rivner - Head of Cyber Strategy, BioCatchDavid Litchfield - Chief Security Architect, AccuvantJohnathan Tal - President & CEO, TAL Global CorporationKevin Mahaffey - Co-Founder, CTO, LookoutRoel Schouwenberg - Senior Researcher, Kaspersky Lab
Earth vs. the Giant Spider: Amazingly True Stories of Real Pen-Tests
Earth vs. the Giant Spider: Amazingly True Stories of Real Pen-Tests brings the RSA Conference 2012 audience the most massive collection of weird, downright bizarre, freaky and altogether unlikely…Rob Havelt - Director of Penetration Testing at Trustwave's SpiderLabs, TrustwaveWendel G. Henrique - Security Consultant at Trustwave'sSpiderLabs, Trustwave
Corporate Espionage for Dummies: The Hidden Threat of Embedded Web Servers
Today, everything from TVs to photocopiers have embedded web servers (EWSs) for device administration. In this session, we will walk through numerous case studies detailing how attackers can gain…Michael Sutton - CISO, Zscaler
Should I Sue? The Perils of Litigation in the Age of Anonymous
While lawsuits have always been a public relations risk for companies, the latest trends go beyond bad press. In several cases, companies seeking to enforce their rights in court have found themselves…Gib Sorebo - Security Consulting Senior Manager, AccentureMarcia Hofmann - Attorney, Law Office of Marcia HofmannTanya Forsheit - Founding Partner, InfoLawGroup LLP
NSA's Secure Mobility Strategy
The intelligence community and Department of Defense need the ability to communicate anytime, anywhere, regardless of the classification level. They also want the ability to communicate securely using…Margaret Salter - Technical Director, NSA
CXO Perspective on Addressing Cyber Threats and Opportunities
Moderated by CSC CIO, David McCue, an industry panel of Cyber Security CXO Council members will candidly discuss current issues of greatest concern and efforts to address them – APTs, mobile devices, …David McCue - Vice President & Chief Information Officer, CSCBill Phelps - Executive Director, North America Practice, Lead Security Consulting, AccentureDave Cullinane - Chief Information Security Officer & Vice President, eBay Global Fraud, Risk & Security, eBay Inc.Gary McAlum - Senior Vice President, Chief Security Officer, USAA
From the Bottom to the Top: The Evolution of Application Monitoring
Inexorable trends are pushing security to the application layer. Web apps are low-hanging fruit for attackers, and the move to cloud and mobile computing increases the criticality of application…Narayan Makaram - Director, Security Solutions, HP Enterprise Security, HP
Doing More with Less: Detailed, Highly Efficient Network Security Policies
As the consumerization of IT continues to sweep through enterprises, threat and network environments have become increasingly sophisticated. Learn how context-aware security is helping one enterprise…Rajneesh Chopra - Vice President Products, NetskopeLawrence Belton - AVP, Information Security Engineer; Endpoint Security Engineering, Wells Fargo BankNick Young - Network Support Manager, Four Seasons Health Care
Can We Reconstruct How Identity is Managed on the Internet?
Security pros have known for a long time that the way identities are managed on the Internet is broken. The question remains how identity can be made a component of the Internet without having a…Merritt Maxim - Director-Product Marketing, CA Technologies
Deploying IPv6 Securely
IPv4 addresses have run out and this has caused the deployment of IPv6 to start. While IPv6 is very similar to IPv4, it presents its own security challenges. This includes the parts of the protocol…Danny McPherson - Chief Security Officer, VeriSign, Inc.Robert Hinden - Check Point Fellow, Check Point Software
Never Waste a Crisis --- Necessity Drives Software Security Improvements
Security practitioners struggle with the predicament: How do I get the engineering teams to wake up and start taking software security seriously? Rapid, dramatic change is most quickly achieved via a…
How to Launch a Secure Cloud Initiative: NASA's Jet Propulsion Laboratory
Organizations in all sectors embrace the efficiencies and cost-savings of cloud computing. But they're frequently challenged by the task of ensuring data security and privacy in the cloud. This…Eric Chabrow - Executive Editor, ISMGTomas Soderstrom - Chief Technology Officer, NASA JPL
Invited Talk II
Attacks on Advanced Encryption Standard: Results and PerspectivesDmitry Khovratovich - Research Assistant, University of Luxembourg, Luxembourg
Base64 - the Security Killer
Base64 encoding can be used to bypass DLP, to attack web apps and even to attack end users while bypassing firewalls and IDS systems. Its use can also result in the disclosure of sensitive information…Kevin Fiscus - Security Practice Director, NWN Corporation
Friending Your Life Away: How Social Networks Cause Long Term Damage to Individuals and Organizations
Clearly social networking is the latest killer app that has changed society as we know it. From helping long lost loves get back together to better organizing the London riots to alerting criminals…Ira Winkler - President, Secure Mentem
The Metric System: Why Meaningful Metrics Matter
Are security metrics bunk, or can meaningful metrics be gathered to drive improvements in enterprise security? This presentation proposes that both qualitative and quantitative data exists, as well as…John Johnson - Senior Advisory Manager, Industrial Cybersecurity & IoT, Deloitte & Touche, LLPAlex Hutton - Vice President Information Security, Systemically Important Financial InstitutionAndrew Jaquith - Chief Technology Officer, SilverSkyArian Evans - Vice President of Operations, White Hat Security
Hacking Exposed: Mobile RAT Edition
The world of mobile devices is exploding. As these mini-computers evolve, adversaries continue to refine their tactics, techniques, and procedures to compromise your shiny new smartphone and tablets. …Dmitri Alperovitch - Co-Founder & CTO, CrowdStrikeGeorge Kurtz - CEO, CrowdStrike
The Psychology of a Cyber Predator; Decoding the Deviate Mind
As the boundaries of our world shrink through the ever-expanding Internet, cyber crime explodes. Have you ever wondered what motivates a person to cause harm to another, whether it be for money, sex…Janice Niederhofer - President, Peerage Consulting Inc.
Cloud and Control: Any Program on 2000 or 2 Machines
There have been other presentations on operating 'in the cloud': Running Jobs in EC2. This talk is about controlling 2000 machines as easily as 2 using BOINC, the open source software behind SETI@Home…Tom Ritter - Security Consultant, iSec Partners
Data Breach Laws: Will They Save or Sink You in a Massive Attack?
To address the problem of escalating data breaches, nearly all states have passed data breach laws and HITECH covers health records. Using recent massive breaches as case studies, legal and encryption…Lucy Thomson - Attorney, Livingston PLCEric Hibbard - CTO, Security and Privacy, Hitachi Data Systems Corp.Robert Thibadeau - Senior Vice President, Wave SystemsTom Smedinghoff - Partner, Edwards Wildman Palmer LLP
Government Workforce – We're Moving Mobile
Mobile devices, phones, tablets on cellular, Wi-Fi and government networks are being used to support the mission. What are the current threats and attacks to the mobile technology? How do we balance…Mischel Kwon - CEO, MKACyberHolly Ridgeway - Deputy Chief Information Security Officer and Director, Justice Security Operations Center, Department of JusticeRobert Brese - Deputy Chief Information Officer, Department of EnergyThomas Schankweiler - Information Security Officer, Center for Medicare and Medicaid (CMS)
Security Enters the Boardroom: How Does Security Articulate Business Value?
Business executives today understand the importance of having a strong security infrastructure. However, in today's challenging economy, CIOs need to see and be able to articulate true business value…Rick Miller - Director, IBM Managed Security Services - Global Technology Services, IBM Corporation
Compliance, Audits and Fire Drills: In the Way of Real Security?
Meeting compliance obligations, passing audits, and dealing with incidents real or perceived can all distract a security organization from its core mission – maintaining the security and privacy of…John Howie - Senior Director of Technical Security Services, MicrosoftMark Estberg - Senior Director, Microsoft
The Social Web: Business vs. Security - How to Be a Winner
Employees today expect access to social media in the workplace. However, there is a global gap in corporate social media security leaving organizations vulnerable to security threats. Hear from…Albert Gore - Director, IT Operations, The John F. Kennedy Center for the Performing ArtsPatrik Runald - Senior Manager, Security Research, Websense Labs, Websense Inc.
The CERT Top 10 List for Winning the Battle Against Insider Threats
The CERT Insider Threat Center has studied insider threat for ten years. We have worked with federal law enforcement, psychologists, cyber analysts, visionary sponsors, academics and practitioners in…Dawn Cappelli - VP Global Security and CISO, Rockwell Automation
Building a Security Operations Center (SOC)
A Security Operations Center (SOC) is designed to be the nucleus of all your information security and Internet security operations, providing continuous prevention, protection, detection, response…Ben Rothke - Principal Security Consultant, Nettitude
Midmarket Application Security—Defend like a Fortune 500…or Better
Midmarket enterprises are making significant strides in the development of comprehensive application security programs as a response to the increasing scrutiny coming from their Fortune 1000…Maria Cirino - Co-Founder and Managing Partner, .406 VenturesGeorge Baker - Director Information Security, ExostarRex Timbs - Chief Technology Architect, HealthMediaYaron Baitch - Manager of Technology, Bobs Stores
Crowdsourcing Access Control in the Cloud
Cloud based elasticity lets us build apps that are supposed to scale to arbitrary numbers of users. Alas, even though these apps may scale their horsepower seamlessly, they use traditional access…Marc Stiegler - Research Scientist, Hewlett-Packard
Secure Implementation Methods
Security is a complex thing to achieve. One has to use secure algorithms, but at the same time, one has to implement the algorithm such that no security breaches will be introduced in the…Dan Page - Lecturer, University of BristolHoussem Maghrebi - Ph.D. Student, Telecom ParisTech
Data Breaches and Web Servers: The Giant Sucking Sound
An analysis of recent data breach events shows a large number of events occur via web servers. Barracuda, Epsilon, Citigroup, eHarmony, Sony and the State of Texas are just a few of the names in the…Guy Helmer - Chief Technology Officer, Palisade Systems, Inc.
The Role of Security in Company 2.0
Facebook, LinkedIn and Zynga represent a new generation of high-growth Internet businesses with broad global consumer reach. What are the new emerging security threats and what are the key security, …Asheem Chandna - Partner, Greylock PartnersDJ Patil - Data Scientist in Residence, Greylock PartnersJoe Sullivan - Chief Security Officer, UberNils Puhlmann - CTO, Endgame
PCI Security as a Lifecycle: How to Plan for PCI in 2012 and Beyond
This session will provide an update on PCI standards, guidance and resources for 2012 and strategies on how to effectively use these tools to plan ahead for PCI by building a security lifecycle into…Bob Russo - General Manager, PCI Security Standards Council
Human Hacking Exposed: 6 Preventative Tips That Can Save Your Company
The potential chink in your network's armor is now human weaknesses. Adversaries are using both technical skills and their ability to deceive well-intentioned employees. This session focuses on the…Christopher Hadnagy - Chief Human Hacker, Social-Engineer, Inc
Why is Search Engine Poisoning Still the #1 Web Malware Vector?
Search Engine Poisoning is still the #1 vector used by the Malware Delivery Networks (MDNs) that we track, in spite of efforts by the major search engines to keep these links out of their search…Chris Larsen - Senior Researcher, Symantec
Live Forensics of a Malware Infection
A malware infection today is often complex and consists of many components. To assess the extent of the intrusion, minimize the resulting damage and prevent future infections, it's important to be…Antti Tikkanen - Director of Security Response, F-Secure CorporationPaolo Palumbo - Senior Researcher, F-Secure Corporation
Tackling the Identity Management Liability Problem
This session will address what many consider to be the single most important legal hurdle to developing a viable online federated identity management system – the problem of potential legal liability. …Tom Smedinghoff - Partner, Edwards Wildman Palmer LLPJeremy Grant - Senior Executive Advisor, Identity Management, NIST (US Commerce Department)Randy Sabett - Special Counsel, CooleyScott David - Partner, K&L Gates LLP
Continuous Monitoring for Federal Agencies: Challenges and Opportunities
For years government agencies have complained that federal government security requirements were nothing but paper drills that did little to improve security. Now there is renewed emphasis on…Gib Sorebo - Security Consulting Senior Manager, AccentureAndy Ozment - Assistant Secretary for Cybersecurity and Communications, Department of Homeland SecurityJasvir Gill - Founder and CEO, AlertEnterprise, Inc.Ron Ross - Fellow, National Institute of Standards and Technology (NIST)Scott Cogan - Strategic Alliances, RSA
Security 2012: A Handbook for Cyber Security
2011 was great if you were a hacker. With mega-breaches at Epsilon and Sony, a massive increase in malicious mobile apps, LulzSec, Anonymous, APT and the collapse of News of the World, 2011 may well…Amichai Shulman - Chief Technology Officer, ImpervaRob Rachwald - Senior Director of Research, FireEye, Inc
Collecting and Sharing Security Metrics - The End of "Security by Obscurity"
Collecting and sharing reliable, fact-based security metrics is a struggle in the enterprise specifically, and the security community in general. The fear of transparency and accountability has…Jim Acquaviva - Vice President Product Strategy, nCircle
Biometrics and Access Token Technology, 10 Years Later…
This year RSA was hacked and numerous companies are trying to take advantage of this event. A number of these companies are proposing biometrics, token technologies and other things. It has been over…Michael Angelo - Chief Security Architect, Micro FocusRonald LaPedis - Principal, Seacliff Partners International, LLC
The Keys to the Cloud: How Aetna Addresses Certificate and Key Management
Aetna sees key management as an enabler of private and public clouds. But before it leaps into the promising world of flexible services that come with the allure of minimal startup costs, the Fortune…Tim Tompkins - Manager, Security Analytics, Aetna
Thursday, March 1, 2012
What Motivated My Company to Invest in a Secure Development Program?
Behind every company that has a significant emphasis on secure software development lies a great story on how it all got started. Come hear the real-world war stories of what put five major software…Gary Phillips - Senior Director, R&D, Symantec CorporationGunter Bitz - Senior Manager Legal Compliance, SAP SEJanne Uusilehto - Director, Head of Nokia Product Security, Nokia CorporationSteven Lipner - Executive Director, SAFECode
Symmetric Key Primitives
Symmetric key primitives such as hash functions and message authentication codes are fast algorithms that are widely used and deployed. This session is concerned with new symmetric-key constructions…Gaetan Leurent - Postdoctoral Researcher, University of LuxembourgTakanori Yasuda - Researcher, Institute of Systems, Information Technologies and NanotechnologiesVirendra Kumar - Graduate Research Assistant, Georgia Institute of Technology
Always-On SSL: A Necessity to Deal with an Inconvenient Truth
A growing number of high-profile account hijacking attacks on prominent websites have highlighted that while we routinely employ countermeasures to deal with sophisticated attacks, most organizations…Craig Spiezle - Chairman Emeritus, OTA / AgelightAlex Rice - Co-founder and CTO, HackerOneAndy Steingruebl - Manager of Internet Standards & Governance, PayPal, Inc.Bob Lord - Chief Security Officer, DNCJohn Scarrow - General Manager – Safety Services, MicrosoftQuentin Liu - Senior Director Engineering, Symantec
Worm: The First Digital World War
In late 2008, the Internet was suddenly hit by what bestselling author Mark Bowden (Black Hawk Down) calls "a worldwide digital blitzkrieg." Disaster was averted thanks to "The Cabal," a group of…Mark Bowden - Author, Grove/Atlantic, Inc.Hassen Saidi - Data Flow Analyst, SRI InternationalPaul Vixie - Chief Executive Officer, Farsight Security, Inc.Phil Porras - Program Director, SRI InternationalRick Wesson - Chief Executive Officer, Support Intelligence
Balancing Business Agility and its Risk in Today's Evolving IT Environments
While companies want to support devices, software and applications that enable employees to get the job done, they must do so while carefully monitoring and managing business risks related to the use…Ram Krishnan - VP Risk and Compliance, Symantec CorporationDave Cullinane - Chief Information Security Officer & Vice President, eBay Global Fraud, Risk & Security, eBay Inc.Jerry Archer - Chief Security Officer, Sallie MaeMyrna Soto - SVP and CIISO, ComcastTammy Moskites - Managing Director, Accenture
Code Red to Zbot: 10 Years of Tech, Researchers and Threat Evolution
Windows XP just recently reached end of life. Bill Gates' TwC is now ten years old. The threat landscape has constantly evolved in dramatic and unexpected ways, changing the character of Internet risk…Jeff Jones - Director, Microsoft CorporationTim Rains - Chief Security Advisor, WW Cybersecurity & Data Protection, Microsoft
Lightning Round: SAP Application Security
This lightning round addresses vulnerabilities and threats in the SAP environment . Round 1: Final Call - ABAP Security Condensed Insights gained from eight years of SAP security testing, including…Andreas Wiegenstein - Chief Technology Officer, Virtual Forge GmbHFrederik Weidemann - Senior Consultant, Virtual Forge GmbHMariano Nunez - Chief Executive Officer, Onapsis Inc.
Hot Topics in Information Security Law 2012
The legal risk and regulatory environment for information security is in a state of constant flux. New regulations, lawsuits and compliance obligations arise on a regular basis. This panel, put on by…Michael Aisenberg - Principle Cyber Policy Counsel, The MITRE CorporationBenjamin Wilson - Senior Vice President Industry Relations and General Counsel, DigiCertBen Tomhave - Principal, Falcon's View Consulting, LLCPeter McLaughlin - Of Counsel, Morrison Foerster
Mobile Device Security: Is the Enterprise Up for the Challenge?
Enterprise IT is under siege from a relentless end user onslaught demanding mobile device access in the enterprise. The tough and controversial mobile device security issues often create a no-win…Ryan Naraine - Senior Security Evangelist, Kaspersky LabAndrew Hay - Chief Operating Officer, LARESAndrew Storms - Vice President, Security Services, New ContextMichael Dahn - Director, PricewaterhouseCoopers LLPTyler Shields - Senior Analyst, Forrester
International Cyber Crime Arrests through Private/Public Collaboration
Cyber crime arrests through private/public intel sharing! This session examines the NCFTA's information sharing model through actual cases where shared cyber crime threat information from cross sector…Dr. Phyllis Schneck - Former Deputy Under Secretary for Cybersecurity and Communications, Former US Department of Homeland SecurityChristopher Krebs - Director, Cybersecurity and Infrastructure Security Agency (CISA)John Stewart - Vice President & Chief Security Officer, Corporate Security Programs Organization, CiscoMichael Welch - Deputy Assistant Director, Cyber Division, Federal Bureau of InvestigationRonald Plesco - Chief Executive Officer, NCFTA
Partly Cloudy: Top Security Weathermen Forecast the Cloud
Many organizations are adopting the cloud to complement or replace traditional security solutions, but many are still on the fence. This discussion explores how CEOs of top security vendors are…Lawrence Orans - Research Director, GartnerGene Hodges - Chief Executive Officer, Websense Inc.Jay Chaudhry - Chief Executive Officer, Zscaler, Inc.Philippe Courtot - Chairman and Chief Executive Officer, Qualys, Inc.Sanjay Beri - Chief Executive Officer, Netskope
Managing Advanced Security Problems Using Big Data Analytics
Current approaches to advanced threat management fail due to lack of event context and constraints in traditional IT architecture. Most data breaches occur because of gaps associated with this lack of…John Kindervag - VP, Principal Analyst, Forrester ResearchJon Oltsik - Senior Principal Analyst & ESG Fellow, Enterprise Strategy GroupNeil MacDonald - VP, Distinguished Analyst and Gartner Fellow Emeritus, GartnerScott Crawford - Research Director, Enterprise Management Associates
Firewall Fail: Live Test of Top Next-Gen Firewall to Expose Its Breaking Points
Vendor promises ring hollow after a next-gen security device is deployed. Performance, security and stability are all going to change when faced with your unique traffic. How can you replace that…Michael Hamilton - Director, Global Systems Engineering, BreakingPoint Systems, Inc.Philip Trainor - Security Solutions Architect for APAC, Ixia Communications
Trust Framework Model: Origins, FICAM, NSTIC, Missing Link And Evolution
The Trust Framework Model emerged and is now evolving as one solution to laying the foundation for a scalable identity ecosystem. We'll spend a short while discussing the artifacts of the Trust…Eve Maler - VP Innovation & Emerging Technology, ForgeRockJoni Brennan - President, DIACCProfessor Jane Winn - Professor, University of WashingtonRainer Hoerbe - Consultant, IndividualRichard Wilsher - Chief Executive Officer, Zygma
Rising to the Challenge of Vulnerability Management in an IPv6 World
IPv6 networks challenge the most basic of the security strategies. With the huge proliferation of IP addresses, traditional vulnerability scanning techniques are defeated by large numbers. Join a…Alan Shimel - CEO, DevOps.com and Security BoulevardHD Moore - Chief Security Officer, Rapid 7Misha Govshteyn - Vice President Emerging Products, Alert LogicRon Gula - Chief Executive Officer and Chief Technical Officer, Tenable Network SecurityTas Giakouminakis - Co-Founder and Chief Technology Officer, Rapid7Tim Keanini - Chief Research Officer, nCircle
Remediation Statistics: What Does Fixing Application Vulnerabilities Cost?
This session presents analysis of data drawn from fifteen software security remediation projects. Data is presented both on the time required to remediate specific classes of vulnerabilities as well…Dan Cornell - CTO, Denim Group
Side Channel Attacks II
Cryptographic algorithms today are designed to withstand a great deal of cryptanalytic efforts. Side channel attacks, as the ones discussed in this session, are methods to attack insecure…Johann Heyszl - Scientific Employee, Fraunhofer Research Institution AISECShivam Bhasin - Research Engineer, Telecom ParisTech
Message in a Bottle - Finding Hope in a Sea of Security Breach Data
Breach data is now available from a wide variety of sources and perspectives. This session will explore issues like why some industries receive more attention yet see fewer breaches and how to…Davi Ottenheimer - Product Security, mongoDB
Hacking Exposed: Embedded - The Dark World of Tiny Systems and Big Hacks
The embedded world has been around for decades but security (as usual) has been an afterthought. As a result we have the age old phenomenon of too many products, too little security. We will explore…Stuart McClure - Chairman and CEO, Blackberry Cylance
The Hidden Risks: Managing Risks in Outsourcing Contract Relationships
This session will present a multi tiered approach to managing the myriad of risks associated with third parties in outsourcing relationships. This presentation will focus on the tools Kodak uses to…Brian O'Connor - Chief Security & Privacy Officer and Director of Worldwide Corporate Security, KodakBruce Jones - Global IT Security, Compliance, Data Privacy & Risk Manager, Kodak
PenTesting People: Social Engineering Integration
Social engineering attacks are extremely effective and simple steps can be taken to immediately and consistently reduce the threat. Learn about the psychology of an attack and walk away with…Ryan O'Horo - Senior Security Consultant, IOActive, Inc
Advanced (Persistent) Binary Planting
Those of you familiar with binary planting and DLL hijacking already know that hundreds of applications can be tricked into executing DLLs and executables from remote servers. However, there's much…Mitja Kolsek - CEO and Co-Founder, 0patch and ACROS Security
3 "C" Words You Need to Know: Custody - Control - Cloud
In the rush to reduce expenses in tough economic times, your company moves to the cloud to save money and increase efficiencies. How will you meet the 2006 e-discovery amendments to the FRCP? How will…Bradley Schaufenbuel - Chief Information Security Officer, Paylocity Corporation
Vetting Mobile Apps for the Warfighter
This panel will explore the security challenges of the mobile apps revolution, and the state of the art practices and technologies that address those challenges. The panel will summarize current…Timothy Grance - Senior Computer Scientist, NISTAngelos Stavrou - Assistant Professor, Computer Science, George Mason UniversityJohn Viega - Executive Vice President, Products, Strategy, Engineering, SilverSky
eHealth: Securing Patient Records
A cornerstone of the Administration's efforts to reform America's healthcare system is the widespread introduction of health IT–promoting the meaningful use of electronic health records and creating…Timathie Leslie - Vice President, Booz Allen HamiltonDebbie Wolf - Executive Advisor, Booz Allen HamiltonDeven McGraw - Director, Health Privacy Project, Center for Democracy and TechnologyJoy Pritts - Chief Privacy Officer, Office of the National Coordinator, Department of Health & Human Services
The Virtualization Security Landscape: What's Changed?
The security community started paying attention to virtualization technology around 2006. Many new threats were discussed (some real, some hypothetical), attack vectors were described, and vendors…Dave Shackleford - Sr. Faculty, SANS Institute
SSL Identifiers - Keeping Your Lines of Communication Open and Secure
SSL VPNs today use SSL Gateways to filter their data traffic; there are no direct connections between servers and clients. So how do the servers know if whoever is calling is a friend or a threat? How…Aidan Gogarty - Technology Evangelist, HOB Inc.
How Can a CIO Secure a Moving Target with Limited Resources?
Empirical results of correlating security information with typical corporate software portfolios will be presented. Patches are an effective means to escape the arms race with cybercriminals and the…Stefan Frei - Research Analyst Director, Secunia
Large Scale Cloud Forensics
There are many problems to solve with large scale cloud forensics but two of the most important are: how to acquire the forensic data and how to interpret the data while working with the privacy laws…Edward Haletky - President, The Virtualization PracticeSam Curry - Chief Security Officer, Cybereason
Critical Infrastructure: The IPv6 Transition Challenge
As Internet stakeholders clear the way for IPv6, enterprises will need to prepare for the transition from IPv4 and the cyber security disruptors that come along with it. This session will discuss the…Danny McPherson - Chief Security Officer, VeriSign, Inc.Robert Hinden - Check Point Fellow, Check Point Software
How to Create a Software Security Practice
In this presentation IBM's Ryan Berg and Jack Danahy share best practices and tactical advice for organizations looking to develop software security as an internal or revenue generating expertise.Jack Danahy - Director for Advanced Security & IBM Security Systems, IBM CorporationRyan Berg - Fellow, Alert Logic
Digital Signatures II
Digital signatures with various properties including intricate privacy and key management characteristics are some of the most useful cryptographic primitives. This session is dedicated to advances in…Jonas Kölker - Ph.D. Student, Aarhus UniversityShota Yamada - Doctor Course Student, University of Tokyo
Exploiting a PCI Compliant Network: A How-To Guide
The simple truth is that it is entirely possible to compromise a fully PCI compliant network, and this session will show you how. This talk will present research across several hundred organizations…Rob Havelt - Director of Penetration Testing at Trustwave's SpiderLabs, Trustwave
Terrorist Groups in the Online World
Extremist groups such as al-Qaeda are growing more sophisticated in their use of the Internet to plan, organize, communicate and carry out their attacks. Citing new data and recent real-world…Mikko Hypponen - Chief Resource Officer, F-Secure
Compliance Fatigue: How to Stop Chasing Compliance and Move on to Business
Why do some organizations get stuck on the compliance treadmill while others run free? What is the difference between a compliant organization and a highly effective one? This session focuses on…Michael Dahn - Director, PricewaterhouseCoopers LLPPieter Penning - Senior Director, PricewaterhouseCoopers LLP
Modern Cyber Gangs: Well-Organized, Well-Protected, and a Smart Adversary
The bad guys have changed gears - evolving to develop an illicit economy with services and products designed by the bad guys for the bad guys. This session provides live demos of their tools &…James Lyne - Director of Research, SANS Institute
Cracking Open the Phone: An Android Malware Automated Analysis Primer
Automating the analysis of unknown programs is the only way a modern anti-malware company can keep up with the volume of unknown programs. While the volume of Android apps is relatively small in…Armando Orozco - Senior Threat Research Analyst, WebrootGrayson Milbourne - Security Intelligence Director, Webroot
Social Media in Marketing and the Workplace: Legal and Regulatory Compliance
The past few years have witnessed an explosion of legal and regulatory activity involving social and other new media. This session will examine several key areas, including copyright, trademark and…Behnam Dayanim - Partner, Global Co-Chair Privacy and Cybersecurity Practice, Paul Hastings LLPDavid Adler - Attorney/Founder, Adler Law Group
BYOD: Securing Mobile Devices You Don't Own
As billions of people around the world use their phones as PCs, hackers are paying attention. In the workplace, personally owned phones and tablets are rapidly becoming the norm, making the…Kevin Mahaffey - Co-Founder, CTO, LookoutAlex Stamos - Chief Information Security Officer, YahooJeff Moss - Vice President and Chief Security Officer, ICANN (Internet Corporation for Assigned Names and Numbers)Michael Mosher - Director, T-MobileMike Convertino - Director, Network Security, Microsoft
Cyber Incidents Centers: Information Sharing
Attention has focused on cyber operation center capabilities, but what about disseminating the intelligence gathered from these centers and other challenges in actionable information sharing?…Michael Brown - VP and GM RSA Global Public Sector, RSADavid Lacquement - J3 Director of Operations, United States Cyber Command, Department of DefenseLee Rock - Case Coordinator, MicrosoftMary Robidoux - Chief of Technology, Development and Support, NTOCPete Cordero - Asst Section Chief, Cyber Criminal Section, Federal Bureau of Investigation
Making World Class Cloud Security the Rule, not the Exception
Box CEO and co-founder, Aaron Levie, will discuss why cloud security and reliability are the biggest hurdles to mainstream adoption in the enterprise. The session will address how the most trusted…Aaron Levie - Chief Executive Officer & Co-Founder, Box.netJason Hengels - VP of Security, Box.net
Attacks 2011: How Complexity Evaded Defenses and Strategies for Prevention
At the end of each year, when we look back at the year in review and the attacks that happened, despite new technologies and more security, we see yet another banner year for the attackers. Something…Tomer Teller - Senior Security Research PM, Microsoft
Security Best Practices: SSL Certificate Management at TD Bank and MoneyGram
Third-party trust is critical in an intercommoned, global economy. Increased threats have led to a proliferation of SSL certificates, whose security is as important as their availability. TD Bank and…Jeff Lauer - Senior Director, West & Central Region Sales, Venafi, Inc.Gary Kimmel - AVP Head of Enterprise Strategic Architecture, TDBankJeremiah Cruit-Salzberg - Senior Security Architect, MoneyGram International
Offensive Countermeasures: Making Attackers' Lives Miserable
The current threat landscape is shifting. We need to develop new strategies to defend ourselves. Even more importantly, we need to better understand who is attacking us and why. Consider what we…John Strand - Owner, Black Hills Information SecurityPaul Asadoorian - Founder & CEO, Security Weekly
Security Data Deluge- Zions Bank's Hadoop Based Security Data Warehouse
Zions Banks' Hadoop based security data warehouse is a massive minable database used to aggregate event data across their entire enterprise; for long term large-scale security, fraud and forensic…Preston Wood - Chief Information Security Officer, Zions BancorporationAaron Caldiero - Data Scientist, Zions BancorporationKelly White - Director of Information Security, Zions BancorporationMichael Fowkes - Senior Vice President, Fraud Prevention and Security Analytics, Zions Bancorporation
Privacy by Design: Baking Privacy into Business and Product Development
The Federal Trade Commission, European Commission and data protection officials in Canada have all called on companies to build Privacy by Design (PbD) into the corporate policies and the software…Brendon Lynch - Chief Privacy Officer, Microsoft Corporation
Cryptographic Protocols II
Cryptographic protocols are a composition of several primitives, offering various functionalities and capabilities. There is a constant need to answer new challenges, improve the efficiency of…Gert Mikkelsen - Research & Innovation Scientist, The Alexandra Institute Inc.Pooya Farshim - Postdoctoral Research Assistant, Darmstadt University of Technology
Job Performance Model for Advanced Threat Responders
In this session, you will learn what a group of experts in this field believe are the best practices for the development of monitoring, detection, prevention, response and policy approaches to address…Michael Assante - Director of Industrials and Infrastructure, Lead for the ICS Curriculum, SANS InstituteRobert Huber - Vice President, iSIGHT Partners
Grilling Cloudicorns- Mythical Cloudsec Tech You Can Consume Today
Intel TXT? Software defined networks? Hypervisor DLP? Automagic deployment and configuration of large application stacks? The mythical juju of yesteryear is now edible today. Our predictions in the…Christofer Hoff - Vice President and Security Chief Technology Officer, Juniper NetworksRich Mogull - Analyst & CEO, Securosis
Collective Defense: How the Defenders Can Play to Win
Modern software security response is complex, requiring defenders from across industries to collaborate. Critics, though, claim the offensive side is better coordinated, and "winning." This talk shows…Maarten Van Horenbeeck - Senior Program Manager Lead, Microsoft
A Timeline of Disaster
When the Earthquake and Tsunami hit Japan, it wasn't long before individuals exploited the situation for personal gain. A wide-range of scams preying upon users' emotions and desire to contribute to…Christopher Boyd - Senior Threat Researcher, GFI Software
Showcase Showdown: Browser Security Edition
At no other point in the evolution of computing has user experience (as well as attack surface) been so defined by a single piece of software as it is today. Still, no authoritative picture of the…Shawn Moyer - Practice Manager, Research Consulting, AccuvantChris Valasek - Security Engineer, Uber ATCJoshua Drake - Senior Research Consultant, AccuvantPaul Mehta - Senior Research Scientist, Accuvant
Mobile Devices: A Privacy & Security Check-In
The use of mobile devices can raise an avalanche of privacy and security issues. Our diverse panel of privacy gurus will provide practical suggestions to address some significant privacy and security…Demetrios Eleftheriou - Senior Counsel, EMC CorporationAshkan Soltani - Independent Consultant, Soltani LLCLaura Berger - Attorney, Federal Trade CommissionNicole Ozer - Technology and Civil Liberties Policy Director, American Civil Liberties Union of Northern CaliforniaRebecca Matthias - Senior Counsel, Privacy and Data Protection, VMware, Inc.
Smartphones: Placing Enterprise Security into the Hands of the Users
Mobile technology is increasingly enabling people to work anywhere at any time, creating new efficiencies for businesses – and new opportunities for hackers. We must act now to stay one step ahead of…Dr. Edward Amoroso - CEO, TAG Cyber
Hacking the Vote?
There is a wave of interest in Internet voting that is sweeping the U.S. today. At first glance it seems like a good idea, affording convenience to military voters and maybe someday to everyone. In…Ronald Rivest - Professor, Massachusetts Institute of TechnologyDavid Jefferson - Computer Scientist, Lawrence Livermore Nat'l LabsJ Alex Halderman - Assistant Professor, University of Michigan
Achieving Operational Excellence in Security
Information security is under attack and many reported breaches are related to operational failures. In this session, panelists will explore how they have successfully used techniques from lean…Frederick Scholl - President, Monarch Information NetworksAaron Martin - Director of Risk Management Services, HCABruce Jones - Global IT Security, Compliance, Data Privacy & Risk Manager, KodakGene Kim - Author, IT RevolutionStuart Berman - IT Security Architect, Steelcase
Automated Certificate Lifecycle Management and How it Improved Business Agility and Security: Case Studies at Citi and United Airlines
Citi and United Airlines leverage PKI extensively for the benefits of securing their data centers, private clouds, and even mobile devices. As both companies' security infrastructures grew, it became…Paul Turner - Vice President, Product and Customer Solutions, Venafi, Inc.Brian Bone - Sr.. Engineer of IT Risk Management, United AirlinesMike Bass - VP Data Protection, Citi
Legal & Ethical Considerations of Offensive Cyber-Operations?
Certainly nations have the right and in some cases obligation to use cyberspace tools in an offensive manner to defend themselves. What about businesses, do they also have this right? This session…Ben Tomhave - Principal, Falcon's View Consulting, LLCDavid Willson - Attorney and Risk Management and Cyber Security Consultant, Titan Info Security Group, LLC
ChromeOS vs. iCloud - a New Frontier in Security Challenges
Cloud-centric platforms have become the next big thing. Google and Apple have rolled out ChromeOS and iCloud respectively that rely on all data being stored in the cloud. We'll dive into the security…Roel Schouwenberg - Senior Researcher, Kaspersky Lab
Friday, March 2, 2012
Engineering Smart Grid Security
You are only as strong as your weakest link. Smart Grid technology and Automated Metering Infrastructure (AMI) introduce a new set of threats and vulnerability concerns. How do you protect this…David Baker - Vice President of Services, IOActive, Inc
(ISC)2's SSO Program – Bringing Cybersecurity Experts to the Classroom
With the proliferation of mobile devices, social networking and the cloud, children are more susceptible than ever to online dangers. It is of utmost importance to teach them how to be safe and…Dan Waddell - Managing Director, North America, (ISC)2Julie Peeler - Foundation Director, (ISC)2
Getting Your Session Proposal Accepted
Improve your chances of becoming a speaker at RSA Conference 2013! Get the inside track on the Conference requirements and how to make your submission stand out.Bill Burns - Chief Trust Officer, InformaticaJeanne Friedman - Content Director, RSA Conference
Public-Key Encryption II
Public key encryption being one of the cornerstones of modern cryptography is a very active research topic with continuous need for improvements in terms of efficiency and security. In this session, …Sébastien Canard - Research Engineer, Orange LabsYutaka Kawai - Ph.D. Student, University of Tokyo
Hacks, Flacks And Attacks: Collaborating on Communications During a Breach
Widely publicized data breaches have caused significant reputational damage and regulatory liabilities to the companies involved. Beyond technical solutions, security professionals must consider and…Harlan Loeb - Executive Vice President, U.S. Crisis Practice Director, Edelman
Web Breaches in 2011-"This is Becoming Hourly News and Totally Ridiculous"
In 2011, attitude towards hacks shifted from "It happens," to "It is happening." A poorly coded website and web application is all that's needed to wreak havoc – expensive firewall, pervasive anti-virus…Jeremiah Grossman - Chief of Security Strategy, SentinelOne
Adding a Security Assurance Dimension to Supply Chain Practices
Classical supply chain practices are quite mature at measuring risk to an enterprise, but only along certain legacy dimensions—supplier ability to perform, deliver on time, business stability and…John Whited - Principal Security Engineer, RaytheonRandall Brooks - Engineering Fellow, Raytheon
The Faces of Fraud: An Inside Look at the Fraudsters and Their Schemes
From remote pockets of the world, they strike—organized rings that target ATMs, point-of-sale devices, payment cards and bank accounts. Today's fraudsters are sophisticated, organized and persistent. …Erik Rasmussen - Special Agent, U.S. Secret ServiceTom Field - Vice President Editorial, Information Security Media Group
Victimless Malware - How Blackhats Make a Killing Targeting Companies
This session will focus on malware campaigns which generate value and revenue for the attacker without harming the end-user through the typical account take over or scam—instead the target is…Elias Manousos - Co-Founder and Chief Executive Officer, Risk IQ
Fraud and Data Exfiltration: Defending Against the Mobile Explosion
Mobile devices offer numerous opportunities for wrongdoers to commit fraud or steal data. What are the risks of targeted mobile service fraud, who are the players, and what can organizations do about…Aaron Turner - CEO, Hotshot TechnologiesRandy Sabett - Special Counsel, Cooley
Is Your Mobile Device Radiating Keys?
Is your mobile device's EM emissions leaking your keys? A mobile app can inadvertently radiate secret data as cryptographic processing is done by the CPU. We'll use a simple antenna and radio to…Benjamin Jun - CEO, HVF LabsGary Kenworthy - Senior Principal Engineer, Cryptography Research, Inc.
Can DNS Protect Intellectual Property and Free Speech at the Same Time?
The U.S. Senate is considering the PROTECT IP Act which would allow courts to block offending sites using DNS filtering. Seemingly straightforward, not so. This panel brings together experts at both…Paul Mockapetris - Chief Scientist, Nominum, Inc.George Ou - Analyst, High Tech ForumPaul Vixie - Chief Executive Officer, Farsight Security, Inc.
CYA in a BYOD World
Mobile is recasting the IT landscape just like the PC did two decades ago. The invasion of smart phone and tablet personal devices (Bring Your Own Device - BYOD) into the enterprise has made secure…Philippe Winthrop - Managing Director, The Enterprise Mobility FoundationAhmed Datoo - Chief Product Management & Marketing Officer, ZenpriseRobert Smith - CTO, Mobile Active DefenseRob Greer - VP, Endpoint and Mobility, Symantec Corporation
Building Robust Security Solutions Using Layering and Independence
Critical systems and data demand robust protection. Building solutions with multiple layers of security components can meet this need. Defense-in-depth approaches compose different security functions. …Frederick Roeper - Technical Director, NSANeal Ziring - Technical Director for the National Security Agency's Capabilities Directorate, National Security Agency (NSA)
SCADA and ICS Security in a Post-Stuxnet World
A panel discussion on why energy utilities in a post-Stuxnet world need to secure both enterprise and ICS environments, and the challenges of meeting that goal. Talking points include: unique…Andrew Hay - Chief Operating Officer, LARESEric Knapp - Chief Engineer, Director of Innovation, HoneywellJohn Duronio - Senior Risk Management Consultant, Verizon Business
Hacking's Gilded Age: How APIs Will Increase Risk and Foment IT Chaos
Organizations are rushing to open their systems by offering Internet APIs. But are they increasing their risk profile exponentially by doing so? APIs have different security requirements than…Scott Morrison - Chief Technology Officer & Chief Architect, Layer 7 Technologies
The Security Professional as Data Steward: Understanding Privacy
This session explores the trends shaping the privacy landscape, how it relates to security and what security professionals need to know to navigate these interconnected issues.
Service Organization Controls (SOC) Reports - The 'New' SAS-70s
Do you outsource parts of your operation to third-party vendors? How can you rely on their processes and controls? A service level agreement is not enough. Service Organization (SOC) Reports are the…Stephen Shofner - CEO, The Shofner Group, LLC
Side Channel Attacks III
Cryptographic algorithms today are designed to withstand a great deal of cryptanalytic efforts. Side channel attacks, as the ones discussed in this session, are methods to attack insecure…Annelie Heuser - Ph.D. Student, Darmstadt University of TechnologyLejla Batina - Assistant Professor, Radboud University Nijmegen
Data Loss Prevention: The Evolving Landscape of Mobile Enterprise Threats
As many popular personal devices – like iPhone, Android, or tablets – become more work-capable, employees are demanding that companies support the devices they choose regardless to what IT has to say…Nicko van Someren - Chief Technology Officer, The Linux Foundation
Zero Day: A Non-Fiction View
Last year, Mark Russinovich published the cyber thriller 'Zero Day' chronicling a terrorist scheme to unleash a cyber-apocalypse. In this session, Russinovich explains the scenario, tools, and…Mark Russinovich - Chief Technology Officer, Azure, Microsoft
The Vendor Management Challenge: Doing More with Less
The skyrocketing volume of outsourcing and the complexity of the deals translate into increasing importance of vendor management. In-house resources available for this task, however, have at most…Boris Segalis - Partner, InfoLawGroup LLPMegan Hertzler - Assistant General Counsel & Director of Data Privacy, Xcel Energy
The Three Myths of Cyberwar
Many sources for cyber strategy, and the policies that affect those strategies, focus on three facets of the cyber domain: cyber attacks are asymmetric, cyber attacks are unattributable and cyber…Dave Aitel - Chief Executive Officer, Immunity, Inc.
The Art of Breaking and Designing CAPTCHAS
CAPTCHAs--the squiggly-word or noisy-audio puzzles that everyone encounters on the Web-- are used to thwart automated attacks because they are supposed to be much easier for people to solve than…Elie Bursztein - Anti-Abuse Research Lead, Google
Updating the Law on Government Access to User Data in the Cloud
The Electronic Communications Privacy Act of 1986 established rules for law enforcement access to email and other electronic communications and transactional data held by service providers. The law…James Dempsey - Executive Director, Berkeley Center for Law & Technology, UC Berkeley School of LawRichard Salgado - Director Law Enforcement and Information Security, Google Inc.
iOS Security Internals
In this talk, two of the leading iOS experts will take you though the iOS security architecture. They will outline the way iOS protects itself from malware and exploitation, including memory…Charlie Miller - Security Engineer, Uber ATCDino Dai Zovi - CTO, Capsule8
Does Defining Privacy Matter?
Although web content providers may debate how privacy is defined or what constitutes a breach of privacy, a recent study revealed that users commonly identify several key privacy attributes that can…Ryan Getek - Secure Storage Lead, Trusted Computing Division, National Security Agency
Zero Trust: Case Studies and Lessons Learned
Old security models are like an M&M, a hard outside and soft center, trusting that attackers won't get past the perimeter. But today's advanced attacks easily pierce these shells. We must eliminate…John Kindervag - VP, Principal Analyst, Forrester ResearchGary Long - Director, Information Security, Cerner CorporationPaul Carugati - Converged Security Architect & Manager (Information/Physical), Motorola Solutions
Enteprise Access Control Patterns for REST and Web API
Exposing service oriented connectivity points using Web APIs, REST creates new security challenges to the enterprise. This presentation will make sense of SAML, OAuth, OpenID, API keys, HMAC, custom…Francois Lascelles - Director, Solutions Engineering, Layer 7 Technologies
Strategies for the Eroding Network Perimeter: Defend the Perimeter or Retreat to Higher Ground
An analysis of real world examples that discuss the implications of an eroding network perimeter. We will explore contributory factors and evolving trends such as off-shoring, cloud computing and…Kenneth Haertling - CSO and VP, TELUS
Identifying and Exploiting Cryptographic Padding Oracles
This presentation will discuss how to identify and exploit cryptographic padding oracle vulnerabilities in custom web applications. Through a series of live demonstrations, the presentation will cover…Brian Holyfield - Director, Gotham Digital Science
Secure Multiparty Computation
This session is dedicated to advances in secure multiparty computation. Such protocols enable the computation of specific or general classes of functions between multiple parties in such a manner that…Saeed Sadeghian - Ph.D. Student, University of CalgarySeung Geol Choi - Postdoctoral Researcher, University of Maryland
Garage Sale Forensics: Data Discovery Through Discarded Devices
A review of how data storage devices can be discovered and the data left on those devices used for unauthorized purposes. Individuals and organizations may dispose of a device without completely…John Wright - Senior Information Systems Analyst, County of Butte
From Technology to Psychology: Understanding the Social Psychology of Hackers
The number of hackers around the world is set to proliferate coinciding with the mass migration to mobile devices. Building on 200 hours of interviews with hackers, this session reveals who they are, …Misha Glenny - Author & Journalist, Independent
Convergence of BCM and Information Security at Direct Energy
We begin with the identification of synergies between BCM, Information Security and IT Audit/Controls. The evolution of operational risk within Direct Energy will be discussed. Examples of cost…Karen Kemp - Director, Operational Risk, Direct Energy
Estimating the Likelihood of Cyber Attacks When There's "Insufficient Data"
Standard statistical techniques are inadequate for estimating the likelihood of future cyber attacks. Yet risk assessments and security planning urgently need this. This talk will outline the…Scott Borg - Director and Chief Economist, US Cyber Consequences Unit
Evil Through the Lens of Web Logs
Web logs can be analyzed with specific attention to Internet Background Radiation (IBR). Two bands of the IBR spectrum include scanning and misconfiguration where details about attacker and victim…Russ McRee - Manager, Security Incident Management & Pentesting Services, Microsoft
Negotiating Privacy and Security Agreements: Potential Obligations Security Professionals Should Know About
We all know that there are laws requiring the safeguarding of personal data. But you should know about contractual requirements that often go above and beyond statutory requirements. Two privacy…Anjli Garg - Senior Vice President, Assistant General Counsel, Citi Institutional Clients GroupDemetrios Eleftheriou - Senior Counsel, EMC CorporationMcLean Sieverding - Associate, Willkie Farr & Gallagher LLP
Applying the NFC Secure Element in Mobile Identity Apps
Since everyone is carrying a mobile phone anyway, why not use it as a second authentication factor for identity applications? NFC standards are bringing a new solution to that challenge—the secure…Randy Vanderhoof - Executive Director, Smart Card Alliance
20 in 2012: The Top Privacy Issues to Watch
Privacy has long been an important part of any information protection program; however, new potential laws and shifts in the landscape are creating new challenges and business imperatives for…
Evolution of IT Security – Why the Status Quo is Already Extinct
How will changes in technology brought about by cloud computing, improved mobility and social media change the landscape of enterprise security? Security visionary and inventor of SSL, Dr. Taher…Derek Brink - Vice President & Research Fellow for IT Security & IT GRC, Aberdeen Group, a Harte-Hanks CompanyAndrew Caspersen - CISO, SchwabDr. Taher Elgamal - Chief Technology Officer for Security, Salesforce.comMichael Barrett - President, The FIDO Alliance
CISO View: Top 4 Major Imperatives for Enterprise Defense
Where do enterprises focus limited resources to keep up with the ever-changing threat landscape? What is a CISO to do to keep up with new innovations? This session focuses on the top 4 major…Gary Terrell - Chief Information Security Officer, Adobe
SSL and Browsers: The Pillars of Broken Security
Recent attacks on browsers and certificate authorities for SSL have shown how fragile these systems are, yet we all depend on them while using the Internet on a daily basis. This talk will explore the…Ivan Ristic - Director of Engineering, Qualys, Inc.Wolfgang Kandek - Chief Technical Officer, Qualys


text:
Coming soon
Everything worked.
We can't wait to show you Trōv. We'll get back to you when we're in your neck of the woods.
Check your phone, because we just sent you an SMS.
Something went wrong.
It looks like you're trying to reach the Trōv mobile app. You can do so by opening the link again from your mobile device!
* required
* required
{{ notes === null ? 0 : notes.length }}/99
* required
* required
* required
{{ selectedDescription === null ? 0 : selectedDescription.length }}/80
{{ valueError }}
This form of coverage only available for new items purchased in the last 90 days.
Have an older item?
Search our catalogue.
* required

subset: commoncrawl


text:
After an extraordinary week of hearings last month before the Sandy Hook Advisory Commission, the three working groups of the General Assembly's Bipartisan Task Force on Gun Violence Prevention and Child Safety and the full task force in Newtown, legislators must now tackle the issue of gun violence.
Although differing in some respects, the mass shootings at Columbine, Virginia Tech, Tucson, Aurora and Newtown share an essential feature: All were carried out by young men with very serious psychological problems who had access to rapid-fire guns, high-capacity ammunition magazines and large amounts of ammunition.
At Sandy Hook, Adam Lanza, armed with his mother's semiautomatic rifle and at least a half-dozen 30-round ammunition magazines, fired more than 150 rounds in less than seven minutes.
Part of the response must involve substantial improvement in the mental health resources available to the towns and cities to identify and treat young people with serious psychological problems and ensure that those who pose a threat to others receive treatment.
The response also must involve ensuring that those who present a risk to others are not able to purchase or have access to guns and ammunition. This means improving the state's porous firearm permit process, extending it to the purchase of ammunition, and facilitating the flow of information from mental health providers to the law enforcement personnel who conduct background checks.
And another part of the response — undoubtedly the most contested — involves strengthening the state's laws concerning guns and ammunition. Compared with those of most states, Connecticut's gun laws are quite good. Indeed, the California-based Law Center to Prevent Gun Violence ranks the state's laws fourth, after those of California, Massachusetts and New Jersey. The Brady Campaign to Prevent Gun Violence ranks the state fifth, after California, New Jersey, Massachusetts and New York.
But there are some glaring shortcomings. The state doesn't limit the capacity of ammunition magazines. California, New Jersey and Massachusetts prohibit the sale or possession of magazines holding more than 10 rounds. Last month, New York lowered the maximum capacity to seven rounds and Massachusetts will soon do the same.
Connecticut doesn't require that anyone buying ammunition have a firearms permit. California, New Jersey and Massachusetts do. We don't require those selling ammunition to keep records of their sales. California and Massachusetts do. Further, Connecticut doesn't limit the bulk purchase of firearms or ammunition.
Although the state prohibits the sale and possession of assault weapons, it excludes from the definition semi-automatic rifles such as the one used at Newtown that have a detachable ammunition magazine and one "military" feature. California, New Jersey and New York include such rifles in their definitions.
Connecticut waives the two-week waiting period for delivery of a firearm other than a pistol or revolver if the buyer has a pistol permit or a hunting license. That means anyone with a firearm permit obtained five years earlier — permits are good for five years — or who is at least 18 and has a hunting license — can obtain a semiautomatic rifle immediately without waiting for a background check.
State legislators are rightly focused on what happened in Newtown. But it's important that they not forget that gun violence occurs in the state every day. The Centers for Disease Control report that in 2008-10, the latest three-year period for which data are available, there were 263 homicides by firearm in Connecticut. The vast majority occurred in the state's largest cities; in 2010-12, there were more than 200 homicides in Bridgeport, Hartford and New Haven; almost all were committed with a firearm.
The creation of shooting task forces in Hartford in 2011 and New Haven last year led to 50 percent reductions in the number of homicides in both cities last year. But there are still many gun-related homicides and non-fatal shootings.
No one is so naive as to imagine that, in a nation awash in guns that can and do move easily across state boundaries, strengthening the state's laws will end gun violence here. But the state owes it to the families who lost their children and loved ones at Newtown, and to all the families who have lost a loved one because of gun violence, to at least try.
David R. Cameron is a professor of political science at Yale.


text:
Shrimp Species
Crayfish Species
Snail Species
Aegla Species
Site Search
Members Window
Forum LoginNot a member? Register
Welcome to Planet Inverts.com
An online portal for freshwater aquatic invertebrate hobbyists worldwide
3-06-12 New Salty Shrimp Line at Alpha Pro Breeders -------------------------------------------------------------------------------- We are now very happy to announce that were carrying the Salty shrimp line of Products. Salty Shrimp for Sulawesi 7.5 Salty Shrimp for Sulawesi 8.5 Were also very excited about this new product. Bee-Shrimp Mineral GH+ http://www.alphaprobreeders.com/categories/Shrimp-and-aquatic-supplies/
1-15-12 We are now in our new facility (Still a lot of work to do) adding new tanks and terriums every week. Many new items are being added every week, and our plant selection is starting to increase. Look for new plants to be added every few weeks, with most of them at a great price od $2.99
9-01-11 In the next few weeks we should be in our new and much larger commercial facility. We would like to to thank all of our great customers for their support that has made this move necessary. We will be expanding our product line quite a bit and are very excited about our new live plant section for aquariums and terrariums! We have also expanded our breeding facility quite a bit and will be offering even more quality Shrimp, frogs and ets.than ever before. http://www.alphaprobreeders.com/live-plants/
3-26-11 We are very proud to announce that we will be carrying Shirakura products, should be in stock by April 4, 2011 Here is the link to order http://www.alphaprobreeders.com/categories/Shrimp-%26-Fish-food/ .
Planet Inverts now carries supplies for your Inverts 2-17-11
We are now carrying a full line of supplies for all of your needs. Our product listings are growing daily so keep checking back for great new items. If their is something in paticular your looking for send me a email at email@example.com and let me know.
Breeding Facility 12-16-10
We are doing a major overhaul on our shrimp breeding facility. This is causing a lot of shortages of shrimp now, but hope this will increase our success and quality quite a bit in the near future.
Site News
2-9-10 Follow us on Twitter
2-2-10 High Quality Shrimp Breeders Wanted
We are looking for a few quality High end shrimp producers to help supplement our current inventory. Since I took over this site 1-18-2010 the response has been fantastic. Please send Pictures and wholesale prices to email@example.com
Breaking News:
1-18-2010 Ron McGee of Alpha Pro Breeders www.alphaprobreeders.com has just purchased the Planet Inverts web site. Alpha Pro Breeders has the highest degree of integrity and reputation in the business. Truly a name you can trust! We were previously Alpha Fish Farm, but did a name change due to our expanding exotic frog portion of our business. We are very excited to grow and expand this site, we have always considered this site the industry standard for information on freshwater invertabrates. If you have any articles you would like published here please submit them to email@example.com
Planet Inverts Store Is now Alpha Pro Breeders:
The Planet Inverts Store is now owned and operated by Alpha Pro Breeders
New Videos Added:
Two new videos have been added to the Videos page. One video of the Cardinal Shrimp and another video of the Bright Yellow Skinned Sulawesi Snail. You can purchase these and other invertebrates at the Planet Inverts Store. Definitely check out the videos.
Updated Black Tiger Shrimp Page:
I updated the Black Tiger Shrimp Page with new photos as well as new information. This is a relatively new shrimp to the hobby, sometimes called the Black Diamond Shrimp. It is rare and expensive.
Newcomer Packet Added:
After receiving a lot of emails from new hobbyists, and others interested in joining the hobby, I decided to create a Newcomer Packet. It basically outlines the resources available on this website and forum. This should help guide anyone new to the freshwater invertebrate hobby in the right direction. If you are new I recommend you read this page at some point.
Overhauled Crystal Red Shrimp Grading Guide Page:
Completely overhauled the Crystal Red Shrimp Grading Guide page for the Crystal Red Shrimp. The page includes new features as well as more photos that can be enlarged by clicking on them. Also created a new QUICK Grading Guide and a new QUICK Features Guide to make it easier to grade without having to scroll through the entire page.


text:
We use Cookies – by using this site or closing this message you're agreeing to our Cookie Policy.
Top Info Across the Auto Web
At any one time we have over 70,000 used cars available for sale right here on Autoweb.
This makes us one of the largest motoring websites anywhere in the UK, and means that we are ideally placed to offer you unprecedented levels of choice and availability across a huge range of used cars for sale.
No matter what your budget, there's a car for everyone here on Autoweb.co.uk
Unlike other motoring websites, the cars we advertise are all quality used cars which are available at great prices.
Our network of trusted dealers only buy and sell the highest quality motors. Want more advice on what to look out for when buying a used car?
Jump on over to the Autoweb Car Clinic for some great tips and advice!
Only the best and most trusted dealers get to advertise with us here on Autoweb.
Our simple, step by step process for finding your perfect used car simply takes the hassle out of buying a new motor.
A great starting point is to visit our Car Clinic, where you'll find all kinds of useful advice to help guide you in the right direction.
Finding your next car on Autoweb is just moments away! If you know what make or model of car you're looking for, you can skip straight up to the used car search at the top of this page and start looking, or click one of the direct links below - Good Luck!


text:
Level: Intermediate.
All classes are free, no registration required.
Led by a Spanish speaking Library volunteer.
Call 703-228-5996 or email email@example.com for more information.
- Date:
- Thursday, June 7, 2018 Show more dates
- Time:
- 7:00pm - 8:00pm
- Location:
- Staff Room at Central
- Location:
- Central Library
- Categories:
- Language Learning
- Calendar:
- Central
About Our Events
Library events may be photographed or videotaped by staff for archival or promotional purposes.
Please email or call 703-228-5993 one week in advance.