18 th Annual FIRST Conference June 26 30, 2006 Baltimore, Maryland, USA
|
|
|
- Shawn Nicholson
- 8 years ago
- Views:
Transcription
1 Conference schedule June 25th (Sunday) 14:00 18:00 Registration 16:00 17:00 Program Committee Meeting 19:00 21:00 Welcome Icebreaker Reception June 26th (Monday) 09:00 09:10 The Day Ahead The Day Ahead 09:10 10:30 Exploring the Next Level of Cyber Attacks: Methodologies and Demonstration of Web Application Hacks Matt Fisher (SPI Dynamics, US) Secure Coding in C and C++ Robert Seacord (CERT/CC Carnegie 11:00 12:30 Exploring the Next Level of Cyber Attacks: Methodologies and Demonstration of Web Application Hacks (continued) Matt Fisher (SPI Dynamics, US) Secure Coding in C and C++ (continued) Robert Seacord (CERT/CC Carnegie 14:00 15:30 Evaluating CSIRT Operations Audrey Dorofee, Chris Alberts, Robin Ruefle (CERT/CC Carnegie Mellon University, US) Design Your Network to Aid Forensic Investigation Robert Sisk (IBM MSS IBM Corporation, US) 16:00 17:30 Evaluating CSIRT Operations (continued) Audrey Dorofee, Chris Alberts, Robin Ruefle (CERT/CC Carnegie Mellon University, US) Design Your Network to Aid Forensic Investigation (continued) Robert Sisk (IBM MSS IBM Corporation, US) 18:00 19:00 Pre AGM Discussions (FIRST members only) 1
2 June 27th (Tuesday) 09:00 09:10 The Day Ahead The Day Ahead 09:10 10:30 Log Data Analysis for Incident Response Anton Chuvakin (LogLogic, Inc., US) Next Steps in Bridging the Gap Gary McGraw (Cigital, Inc., US), Kenneth van Wyk (KRvW Associates, LLC, US) 11:00 12:30 Log Data Analysis for Incident Response (continued) Anton Chuvakin (LogLogic, Inc., US) Next Steps in Bridging the Gap (continued) Gary McGraw (Cigital, Inc., US), Kenneth van Wyk (KRvW Associates, LLC, US) 14:00 15:30 IT Security Teams and Outsourced Managed Security Services - working together Chris van Breda (Cyberklix, CA) Honeypot Technology: Principles and Applications Franck Veysset, Laurent Butti (France Télécom R&D, FR) 16:00 17:30 IT Security Teams and Outsourced Managed Security Services - working together (continued) Chris van Breda (Cyberklix, CA) Honeypot Technology: Principles and Applications (continued) Franck Veysset, Laurent Butti (France Télécom R&D, FR) 19:00 21:00 Birds of a Feather Sessions June 28th (Wednesday) 09:00 09:10 Welcome and Conference opening 09:10 09:50 Keynote: Computer Security Incident Response - Past, Present, Future Richard Pethia (CERT/CC Carnegie 09:50 10:30 Sharing Sensitive Information without Compromising Data Peter Allor (ISS Internet Security Systems, US) 2
3 June 28th (Wednesday) continued 11:00 12:00 CERT's Virtual Training Environment: A New Model for Security and Compliance Training James Wrubel (CERT/CC Carnegie 12:00 12:30 If You Don't Know What You Don't Know Arjen de Landgraaf (Co-Logic Security, Ltd, NZ) 14:00 14:30 Risk Analysis Methodology for New IT Service Jun Heo Yoojae Won (KrCERT/CC Korea Information Security Agency, KR) 14:30 15:00 The Impact of Honeynets for CSIRTs Jan Kohlrausch, Jochen Schönfelder (DFN-CERT DFN-CERT Services GmbH, DE) 15:00 15:30 A Strategy for Inexpensive Automated Containment of Infected or Vulnerable Systems Steven Sim Kok Leong (NUSCERT National University of Singapore, SG) Reliably Determining the Outcome of Computer Network Attacks Barry Mullins, David Chaboya, Richard Raines, Rusty Baldwin (AFCERT Air Force Institute of Technology, US) Automated Extraction of Threat Signatures from Network Flows Piotr Kijewski (CERT POLSKA Research and Academic Computer Network in Poland, PL) Behavioral Study of Bot Obedience using Causal Relationship Analysis Lari Huttunem, Pekka Pietikäinen (University of Oulu, FI) 16:00 16:30 Maximizing the Benefits of Intrusion Prevention Systems: Effective Deployment Strategies Calvin Miller, Charles Iheagwara, Farrukh Awan, Yusuf Acar (District of Columbia Government, US) 16:30 17:00 Designing and Developing an Application for Incident Response Teams Kees Leune, Sebastiaan Tesink (Tilburg University, NL) 17:00 17:30 Threats of P2P File Sharing Software - a Japanese Situation About "Winny" Keisuke Kamata, Yuichi Miyagawa (JPCERT/CC JPCERT Coordination Center, JP) A Distributed Intrusion Detection System Based on Passive Sensors Rogier Spoor (SURFnet-CERT SURFnet, NL) Netflow Tools NfSen and NFDUMP Peter Haag (SWITCH-CERT The Swiss Education and Research Network, CH) Proactive Security Monitoring in a Policy Managed Network Klaus-Peter Kossakowski (Software Engineering Institute, DE), Till Dörges (PRE-CERT PRESECURE Consulting GmbH, DE) 19:00 23:00 Evening at the Aquarium Sponsored by Co-Logic Security, Ltd. 3
4 June 29th (Thursday) 09:00 09:10 The Day Ahead 09:10 09:50 Keynote: Building Effective Relationships between CSIRTs and Law Enforcement Brian Nagel (Assistant Director, Office of Investigations, U.S. Secret Service, US) 09:50 10:30 The Underground Economy Rob Thomas (Team Cymru Team Cymru, US) 11:00 11:45 A Year's Evolution on Attacks Against Online Banking Customers Matthew Pemble (RBSG Royal Bank of Scotland, UK) 11:45 12:30 Botnets as Vehicle for Online Crime Aaron Hackworth, Nicholas Ianelli (CERT/CC Carnegie 14:00 14:30 CarmentiS - a German Early Warning Information System - Challenges and Approaches Jürgen Sander (PRE-CERT PRESECURE Consulting, GmbH, DE), Klaus-Peter Kossakowski (Software Engineering Institute, DE) 14:30 15:00 Counter-Forensic Tools: Analysis and Data Recovery Matthew Geiger (CERT/CC Carnegie Building and Deploying Billy Goat: a Worm-Detection System Diego Zamboni, James Riordan, Yann Duponchel (IBM MSS IBM Zurich Reserch Laboratory, CH) RAPIER - A 1st Responders Info Collection Tool Joseph Schwendt, Steven Mancini (IFT Intel Corporation, US) 15:00 15:30 Coffee break 15:30 17:30 FIRST Annual General Meeting 4
5 June 30th (Friday) 09:00 09:10 The Day Ahead 09:10 09:50 Keynote: Fixing Internet Security by Hacking the Business Climate Bruce Schneier (Counterpane Internet Security, Inc., US) 09:50 10:30 The Survivability and Information Assurance (SIA) Curriculum Lawrence Rogers (CERT/CC Carnegie 11:00 11:45 Legal Representatives - CERT Panel Discussion Chris Painter (Department of Justice, US), Damir Rajnovic (Cisco PSIRT Cisco Systems Co., UK), Etsuo Doi (Attorney-at-law, JP), Tara Flanagan (Cisco Systems Cisco Systems Ltd., US), Terence Palfrey (Crown Prosecution Services, UK) 11:45 12:30 VisFlowConnect-IP : A Link-Based Visualization of NetFlows for Security Monitoring William Yurcik (NCSA-IRST National Center for Supercomputing Applications, US) 14:00 14:30 Effectiveness of Proactive CSIRT Services Johannes Wiik, Jose Gonzalez (Agder University, NO), Klaus-Peter Kossakowski (Software Engineering Institute, DE) 14:30 15:00 Proposal of RSS Extension for Security Information Exchange Masato Terada (HIRT Hitachi, JP) 15:00 15:30 The Network-Centric Incident Response and Forensics Imperative Richard Bejtlich (TaoSecurity, US) Worm Poisoning Technology and Application Cui Xiang, Wu Bing, Yonglin Zhou, Zou Xin (CNCERT/CC National Computer Network Emergency Response Technical Team / Coordination Center of China, CN) A Framework for Effective Alert Visualization Jon Ramsey, Uday Banerjee (SWRX CERT SecureWorks, US) Time Signatures to Detect Multi-headed Stealthy Attack Tools Fabien Pouget (CERTA French Government, FR), Guillaume Urvoy-Keller, Marc Dacier (Institut EURECOM, FR) 15:30 16:00 Closing 5
Designing and Developing an Application for Incident Response Teams
Designing and Developing an Application for Incident Response Teams Kees Leune and Sebastiaan Tesink Tilburg University, The Netherlands FIRST 2006, Baltimore, MD, USA High-quality Internet for higher
Cyber Security & Role of CERT-In. Dr. Gulshan Rai Director General, CERT-IN Govt. of India grai@mit.gov.in
Cyber Security & Role of CERT-In Dr. Gulshan Rai Director General, CERT-IN Govt. of India grai@mit.gov.in Web Evolution Web Sites (WWW) 1993 Web Invented and implemented 130 Nos. web sites 1994 2738 Nos.
CERT-GOV-GE Activities & International Partnerships
CERT-GOV-GE Activities & International Partnerships Zurich, Switzerland 2014 CERT-GOV-GE Manager David Kvatadze www.dea.gov.ge CERT-GOV-GE - Structural unit was formed within the Information Security and
Current counter-measures and responses by CERTs
Current counter-measures and responses by CERTs Jeong, Hyun Cheol hcjung@kisa.or.kr April. 2007 Contents I. Malware Trends in Korea II. Malware from compromised Web sites III. Case Study : Malware countermeasure
Intrusion Forecasting Framework for Early Warning System against Cyber Attack
Intrusion Forecasting Framework for Early Warning System against Cyber Attack Sehun Kim KAIST, Korea Honorary President of KIISC Contents 1 Recent Cyber Attacks 2 Early Warning System 3 Intrusion Forecasting
Academic Calendar for Faculty
Summer 2013 Term June 3, 2013 (Monday) June 3-4, 2013 (Monday Tuesday) June 5, 2013 (Wednesday) June 5-6, 2013 (Wednesday Thursday) June 6, 2013 (Thursday) July 3, 2013 (Wednesday) July 4, 2013 (Thursday)
Security Officer: An NREN Secondee Perspective
Security Officer: An NREN Secondee Perspective Jan Kohlrausch, DANTE TF-CSIRT Meeting 18/19 September 2014 Rome Background About me: Senior Incident Handler and Researcher with DFN-CERT Currently member
Legislative Council Panel on Information Technology and Broadcasting. Hacking and Virus Activities and Preventive Measures
For discussion on 12 June 2000 Legislative Council Panel on Information Technology and Broadcasting Hacking and Virus Activities and Preventive Measures Purpose This paper briefs Members on the common
CERT/CC Overview & CSIRT Development Team Activities
CERT/CC Overview & CSIRT Development Team Activities Georgia Killcrece CSIRT Development Team CERT Program Software Engineering Institute Carnegie Mellon University Pittsburgh, PA 15213-3890 October 2006
RFC 2350 CSIRT-TEHTRIS [CERT-TEHTRIS]
![RFC 2350 CSIRT-TEHTRIS [CERT-TEHTRIS]](/thumbs/38/17892307.jpg "RFC 2350 CSIRT-TEHTRIS [CERT-TEHTRIS]")
RFC 2350 CSIRT-TEHTRIS [CERT-TEHTRIS] 1 Document information... 2 1.1 Date of Last Update... 2 1.2 Distribution List for Notifications... 2 1.3 Locations where this Document May Be Found... 2 1.4 Authenticating
Defining Incident Management Processes for CSIRTs: A Work in Progress
Defining Incident Management Processes for CSIRTs: A Work in Progress Chris Alberts Audrey Dorofee Georgia Killcrece Robin Ruefle Mark Zajicek October 2004 TECHNICAL REPORT CMU/SEI-2004-TR-015 ESC-TR-2004-015
Pre Conference Workshops Using AccessData Tools to Solve Computer Forensics Problems, Eric Thompson, AccessData. Free (ISC) 2 Workshop
Day 0 09:00-18:00 Saturday Free (ISC) 2 Workshop October 4th, 2003 Pre Conference Workshops Using AccessData Tools to Solve Computer Forensics Problems, Eric Thompson, AccessData MEITSEC'2003 22/09/2003-14:06
CERT 1 System and Network Security Practices i
CERT 1 System and Network Security Practices i Julia Allen Carnegie Mellon University Software Engineering Institute Networked Systems Survivability Program, CERT Coordination Center This paper was presented
Brief self-introduction
Brief self-introduction Name: Yaokai Feng Affiliation Graduate School of Information Science and Electrical Engineering, Kyushu University, Japan Bachelor and Master degrees Tianjin University, China,
Keynote: FBI Wednesday, February 4 noon 1:10 p.m.
Keynote: FBI Wednesday, February 4 noon 1:10 p.m. Speaker: Leo Taddeo Special Agent in Change, Cyber/Special Operations Division Federal Bureau of Investigation Biography: Leo Taddeo Leo Taddeo is the
honeytarg Chapter Activities
honeytarg Chapter Activities Marcelo Chaves mhp@cert.br! Computer Emergency Response Team Brazil - CERT.br Network Information Center Brazil - NIC.br Brazilian Internet Steering Committee - CGI.br Agenda
Security Information Management (SIM)
1. A few general security slides 2. What is a SIM and why is it needed 3. What are the features and functions of a SIM 4. SIM evaluation criteria 5. First Q&A 6. SIM Case Studies 7. Final Q&A Brian T.
Second-generation (GenII) honeypots
Second-generation (GenII) honeypots Bojan Zdrnja CompSci 725, University of Auckland, Oct 2004. b.zdrnja@auckland.ac.nz Abstract Honeypots are security resources which trap malicious activities, so they
Cybersecurity and Incident Response Initiatives: Brazil and Americas
Cybersecurity and Incident Response Initiatives: Brazil and Americas Cristine Hoepers cristine@cert.br Computer Emergency Response Team Brazil CERT.br http://www.cert.br/ Brazilian Internet Steering Committee
The FBI Cyber Program. Bauer Advising Symposium //UNCLASSIFIED
The FBI Cyber Program Bauer Advising Symposium October 11, 2012 Today s Agenda What is the threat? Who are the adversaries? How are they attacking you? What can the FBI do to help? What can you do to stop
Trends in Security Incidents and Hitachi s Activities
Hitachi Review Vol. 63 (2014), No. 5 270 Featured Articles Trends in Security Incidents and Hitachi s Activities About HIRT Activities Masato Terada, Dr. Eng. Masashi Fujiwara Akiko Numata Toru Senoo Kazumi
FORTHcert. Internet-Sicherheit fördern kritische Infrastrukturen schützen. Foundation for Research and Technology Hellas Institute of Computer Science
FORTHcert Foundation for Research and Technology Hellas Institute of Computer Science Internet-Sicherheit fördern kritische Infrastrukturen schützen 31 st TF-CSIRT Meeting September 2010 - Istanbul, Turkey
EC-Council Certified Incident Handler
Page 1 Certified Incident Handler Page 2 TM E CIH Certified Incident Handler Course Description The Certified Incident Handler program is designed to provide the fundamental skills to handle and respond
Country Case Study on Incident Management Capabilities CERT-TCC, Tunisia
Country Case Study on Incident Management Capabilities CERT-TCC, Tunisia Helmi Rais CERT-TCC Team Manager National Agency for Computer Security, Tunisia helmi.rais@ansi.tn helmi.rais@gmail.com Framework
Next Generation IPS and Reputation Services
Next Generation IPS and Reputation Services Richard Stiennon Chief Research Analyst IT-Harvest 2011 IT-Harvest 1 IPS and Reputation Services REPUTATION IS REQUIRED FOR EFFECTIVE IPS Reputation has become
Developing Cyber Threat Intelligence or not failing in battle.
Developing Cyber Threat Intelligence or not failing in battle. AtlSecCon 2012, 02 March 2012 Adrien de Beaupré SANS ISC Handler Intru-Shun.ca Inc. Natasha Hellberg Bell Canada About me 32+, 22+, 12+ years
The Onslaught of Cyber Security Threats and What that Means to You
The Onslaught of Cyber Security Threats and What that Means to You No End in Sight for Cyber Crime Growth Number of mobile devices affected IBM Number of accounts hacked CNN Money Number of malware samples
aecert Roadmap Eng. Mohammed Gheyath Director, Technical Affairs TRA
aecert Roadmap Eng. Mohammed Gheyath Director, Technical Affairs TRA Agenda Introduction aecert Vision & Mission The need to establish a UAE National CERT Constituent Framework & Service Catalog National
Law Firm Cyber Risk Conference: Addressing the Issues from the Top Down
Program Organizer: Please join us for a NEW Invitation Only Law Firm Cyber Risk Conference: Addressing the Issues from the Top Down Role of Firm Leadership, IT, COO, General Counsel Data Breaches Identification
How CNCERT/CC fighting to Botnets. Dr.Mingqi CHEN CNCERT/CC March 31, 2006. Beijing
How CNCERT/CC fighting to Botnets Dr.Mingqi CHEN CNCERT/CC March 31, 2006. Beijing Part 1 Content New security threats Part 2 How to detect and handle BotNets Part 3 Fighting BotNets Activities Part 4
State of the Practice of Computer Security Incident Response Teams (CSIRTs)
State of the Practice of Computer Security Incident Response Teams (CSIRTs) Georgia Killcrece Klaus-Peter Kossakowski Robin Ruefle Mark Zajicek October 2003 TECHNICAL REPORT CMU/SEI-2003-TR-001 ESC-TR-2003-001
ICT Barriers, High Tech Crime, and Police
ICT Barriers, High Tech Crime, and Police Mitchell F. Rice, Ph.D. Fellow, National Academy of Public Administration (Washington, DC) Professor of Political Science Mail Stop 4348 Texas A&M University College
CERT-GOV-GE Activities & Services
CERT-GOV-GE Activities & Services Tbilisi, Georgia 2014 CERT-GOV-GE Manager David Kvatadze www.dea.gov.ge CERT-GOV-GE - Structural unit was formed within the Information Security and Policy division of
Use of Honeypots for Network Monitoring and Situational Awareness
Use of Honeypots for Network Monitoring and Situational Awareness Cristine Hoepers cristine@cert.br Computer Emergency Response Team Brazil - CERT.br Network Information Center Brazil - NIC.br Brazilian
New York State Energy Planning Board. Cyber Security and the Energy Infrastructure
New York State Energy Planning Board Cyber Security and the Energy Infrastructure New York State Division of Homeland Security and Emergency Services Office of Cyber Security Office of Cyber Security Overview
Incident Response from a Global Enterprise Perspective Public Siemens AG 2015. All rights reserved
eco, From Detection to Response, Thomas Schreck, 19.02.2015 Incident Response from a Global Enterprise Perspective Siemens Page 2 February 2015 Corporate Technology Corporate Technology - RTC Software
MATCHDAY 1 7-9 September 2014
MATCHDAY 1 7-9 September 2014 7 September Sunday 18:00 Group D 7 September Sunday 20:45 Group D 7 September Sunday 20:45 Group D 7 September Sunday 18:00 Group F 7 September Sunday 20:45 Group F 7 September
Digital Forensics Educational Needs in the Miami Valley Region
Peterson, G.L., Raines, R.A., and Baldwin, R.O., Digital Forensics Educational Needs in the Miami Valley Region, Journal of Applied Security Research, vol. 3, no. 3-4, pp. 429-439, 2008. DOI: 10.1080/19361610801981662.
Cyber security Country Experience: Establishment of Information Security Projects.
Cyber security Country Experience: Establishment of Information Security Projects. Mr. Vincent Museminali vincent.museminali@rura.rw Internet and New media regulations Rwanda Utilities Regulatory Authority
Advanced Visibility. Moving Beyond a Log Centric View. Matthew Gardiner, RSA & Richard Nichols, RSA
Advanced Visibility Moving Beyond a Log Centric View Matthew Gardiner, RSA & Richard Nichols, RSA 1 Security is getting measurability worse Percent of breaches where time to compromise (red)/time to Discovery
Predictive Cyber Defense A Strategic Thought Paper
Predictive Cyber Defense A Strategic Thought Paper Don Adams Vice President, Chief Technology Officer, Worldwide Government TIBCO Software Federal, Inc 2 Summary The art and science of multi-sensor data
smart grids forum Intelligent power grids: How to build in Safety and Security Conference March 21 22, 2013 in Munich, Germany
smart grids forum Intelligent power grids: How to build in Safety and Security Conference March 21 22, 2013 in Munich, Germany TÜV SÜD AG Embedded Systems TÜV SÜD Akademie GmbH About the Conference To
Tunisia s experience in building an ISAC. Haythem EL MIR Technical Manager NACS Head of the Incident Response Team cert-tcc
Tunisia s experience in building an ISAC Haythem EL MIR Technical Manager NACS Head of the Incident Response Team cert-tcc 1 Agenda Introduction ISAC objectives and benefits Tunisian approach SAHER system
Security strategies to stay off the Børsen front page
Security strategies to stay off the Børsen front page Steve Durkin, Channel Director for Europe, Q1 Labs, an IBM Company 1 2012 IBM Corporation Given the dynamic nature of the challenge, measuring the
Working with the FBI
Working with the FBI WMACCA Data Privacy & Security Conference September 17, 2014 Individuals Organized Crime Syndicates Hacktivist Groups Nation States Nation-States Individuals Industry Law Enforcement
Incident Response. Information Security Incident. Georgia State University
Right of Left of Right of Response Indications & Warnings Prevent Contain, Recover, Harden Richard Baskerville Threat Information System Detect Respond Deter Georgia State University Legislate & Policy
Towards attack modelling thanks to honeypot data processing
Towards attack modelling thanks to honeypot data processing Marc Dacier Institut Eurécom Sophia Antipolis, France dacier@eurecom.fr Overview! Introduction! State of Knowledge! Contributions of ReSIST Partners!
Presentation to the Control Systems Security Outreach Coordination Meeting. Mark P. Morgan Lori Ross O Neil July 24, 2007
Presentation to the Control Systems Security Outreach Coordination Meeting Mark P. Morgan Lori Ross O Neil July 24, 2007 Areas to be addressed Current CSSP control systems security training Online Instructor
Scheduled Meetings Friday, August 8, 2014 Saturday, August 9, 2014 Sunday, August 10, 2014 Monday, August 11, 2014 Wednesday, August 13, 2014
Scheduled Meetings Friday, August 8, 2014 8:00am 5:00pm NIRMA Board Meeting Navarra Room Saturday, August 9, 2014 9:00am 5:00pm AIIM Training Galicia Sunday, August 10, 2014 NIRMA Board Meeting with Navarra
2012 CyberSecurity Watch Survey
2012 CyberSecurity Watch Survey Unknown How 24 % Bad is the Insider Threat? 51% 2007-2013 Carnegie Mellon University 2012 Carnegie Mellon University NO WARRANTY THIS MATERIAL OF CARNEGIE MELLON UNIVERSITY
CERT Polska. Przemyslaw Jaroszewski, Miroslaw Maj CERT POLSKA. info@cert.pl. TF-CSIRT Meeting, Copenhagen, 23 May 2002. http://www.cert.
CERT Polska Przemyslaw Jaroszewski, Miroslaw Maj CERT POLSKA info@cert.pl http://www.cert.pl/ TF-CSIRT Meeting, Copenhagen, 23 May 2002 Agenda A bit of history Who are we? What do we do and for whom? Who
Threats of P2P File Sharing Software
Threats of P2P File Sharing Software -- a Japanese Situation About "Winny -- JPCERT/CC is an independent non-profit organization, acting as a national point of contact for the other CSIRTs in Japan. Since
2. Exercise: Incident Handling Procedure Testing
CERT Exercises Handbook 13 13 2. Exercise: Incident Handling Procedure Testing Main Objective Targeted Audience Total Duration Time Schedule Frequency In this exercise participants will have the opportunity
The Importance of a Multistakeholder Approach to Cybersecurity Effectiveness
The Importance of a Multistakeholder Approach to Cybersecurity Effectiveness Abstract Area: ROADMAP FOR THE FURTHER EVOLUTION OF THE INTERNET GOVERNANCE ECOSYSTEM Entitled by: Cristine Hoepers, Klaus Steding-Jessen,
What legal aspects are needed to address specific ICT related issues?
What legal aspects are needed to address specific ICT related issues? Belhassen ZOUARI CEO, National Agency for Computer Security, Tunisia Head of the Tunisian Cert (tuncert), E-mail : b.zouari@ansi.tn
Information Assurance Program at West Point
Information Assurance Program at West Point Daniel-Ragsdale@usma.edu John.Hill@usma usma.edu Scott.Lathrop@usma usma.edu Gregory.Conti@usma usma.edu USMA Information Assurance Program Institutional Support
Designing and developing an Application for Incident Response Teams
Designing and developing an Application for Incident Response Teams Kees Leune and Sebastiaan Tesink {kees,sebas}@uvt.nl Tilburg University, Infolab The Netherlands May 9, 2006 Abstract Computer security
Incident Management ITU Pillars & Qatar Case Study Michael Lewis, Deputy Director
Incident Management ITU Pillars & Qatar Case Study Michael Lewis, Deputy Director 2 Thanks To the ITU for sponsoring the initiative ictqatar has worked closely with the ITU-D since the project s inception,
Korea s experience of massive DDoS attacks from Botnet
Korea s experience of massive DDoS attacks from Botnet April 12, 2011 Heung Youl YOUM Ph.D. SoonChunHyang University, Korea President, KIISC, Korea Vice-chairman, ITU-T SG 17 1 Table of Contents Overview
The Application of Intrusion Detection Systems in a Forensic Environment. (Extended Abstract)
The Application of Intrusion Detection Systems in a Forensic Environment (Extended Abstract) Peter Stephenson Netigy Corporation, San Jose, CA And Oxford Brookes University, School of Computing and Mathematical
Incident Response & Handling
Incident Response & Handling BDNOG Workshop 19 21 May 2014 Adli Wahid Security Specialist, APNIC adli@apnic.net About Me Adli Wahid Current Role Security Specialist, APNIC Previous Roles Cyber Security
A Guide to Establishing Computer Security Incident Response Team (CSIRT) For National Research and Education Network (NREN)
A Guide to Establishing Computer Security Incident Response Team (CSIRT) For National Research and Education Network (NREN) ABSTRACT Y.M. Wara Directorate of Information and Communication Technology Usmanu
ORGANIZADOR: APOIANTE PRINCIPAL:
ORGANIZADOR: APOIANTE PRINCIPAL: Miguel Gomes 912412885 luismiguel_gomes@symantec.com Alliances Portugal, Africa, Brasil Coverage One of the biggest CSP worlwide Tec. Inovator Strong Cloud Bet and investment
NFSEN - Update 13th TF-CSIRT Meeting 23. September 2004 Malta Peter Haag
NFSEN - Update 13th TF-CSIRT Meeting 23. September 2004 Malta Peter Haag 2004 SWITCH NFSEN ( NetFlow Sensor ) 12th TF-CSIRT Meeting Hamburg: 2004 SWITCH 2 NFSEN http://www.terena.nl/tech/task-forces/tf-csirt/meeting12/nfsen-haag.pdf
Supporting CSIRTs in the EU Marco Thorbruegge Head of Unit Operational Security European Union Agency for Network and Information Security
Supporting CSIRTs in the EU Marco Thorbruegge Head of Unit Operational Security European Union Agency for Network and Information Security www.enisa.europa.eu European Union Agency for Network and Information
2012 雲 端 資 安 報 告. 黃 建 榮 資 深 顧 問 - Verizon Taiwan. August 2012
2012 雲 端 資 安 報 告 黃 建 榮 資 深 顧 問 - Verizon Taiwan August 2012 1 It s All About Security Protecting assets from threats that could impact the business Protecting Assets... Stationary data Data in transit
UVic Department of Electrical and Computer Engineering
UVic Department of Electrical and Computer Engineering COURSE OUTLINE Elec 567 Advanced Network Security and Forensics Spring 2014 Instructor: Office Hours: Dr. Issa Traore Days: Monday, Thursday Phone:
Can We Become Resilient to Cyber Attacks?
Can We Become Resilient to Cyber Attacks? Nick Coleman, Global Head Cyber Security Intelligence Services December 2014 Can we become resilient National Security, Economic Espionage Nation-state actors,
National Cyber Security Strategies: United States
National Cyber Security Strategies: United States Audrey L. Plonk Director, Cybersecurity and Internet Governance Intel Corporation 1 ICSS 2013 Trends: National Cybersecurity Strategies New strategies
Data Center Security in a World Without Perimeters
www.iss.net Data Center Security in a World Without Perimeters September 19, 2006 Dave McGinnis Director of MSS Architecture Agenda Securing the Data Center What threats are we facing? What are the risks?
BBM 461: SECURE PROGRAMMING INTRODUCTION. Ahmet Burak Can
BBM 461: SECURE PROGRAMMING INTRODUCTION 1 Ahmet Burak Can COURSE MATERIAL Counter Hack Reloaded:A Step-by- Step Guide to Computer Attacks and Effective Defenses, Edward Skoudis, Tom Liston, Prentice Hall
Local Government Cyber Security:
The Local Government Cyber Security: Cyber Incident Response Guide appendix has been developed and distributed for educational and non-commercial purposes only. Copies and reproductions of this content,
Managed Intrusion, Detection, & Prevention Services (MIDPS) Why E-mail Sorting Solutions? Why ProtectPoint?
Managed Intrusion, Detection, & Prevention Services (MIDPS) Why E-mail Sorting Solutions? Why ProtectPoint? Why? Focused on Managed Intrusion Security Superior-Architected Hardened Technology Security
TRANSATLANTIC CYBER SECURITY SUMMIT
TRANSATLANTIC CYBER SECURITY SUMMIT November 27-28, 2012 Dublin, Ireland TRANSATLANTIC CYBER SECURITY SUMMIT Tuesday, November 27th Wednesday, November 28th INTRODUCTION: Mr. Tom McDermott OPENING KEYNOTE:
Trading Calendar - East Capital UCITS Funds
Trading Calendar - UCITS s The table shows i) the days the funds will be closed due to holidays and ii) which days the funds have early cut-off times (11.30am Central European Time). Please note that the
JPCERT/CC Internet Threat Monitoring Report [October 1, 2014 - December 31, 2014]
![JPCERT/CC Internet Threat Monitoring Report [October 1, 2014 - December 31, 2014]](/thumbs/27/10000068.jpg "JPCERT/CC Internet Threat Monitoring Report [October 1, 2014 - December 31, 2014]")
JPCERT-IA-2015-01 Issued: 2015/01/27 JPCERT/CC Internet Threat Monitoring Report [October 1, 2014 - December 31, 2014] 1 Overview JPCERT/CC has placed multiple sensors across the Internet for monitoring
Managing Security Risks in Modern IT Networks
Managing Security Risks in Modern IT Networks White Paper Table of Contents Executive summary... 3 Introduction: networks under siege... 3 How great is the problem?... 3 Spyware: a growing issue... 3 Feeling
Experiences of an academic CSIRT
Setting up a Grid-CERT Experiences of an academic CSIRT 19 th Annual FIRST Conference 2007 June 18-22, Seville, Spain Klaus Möller DFN-CERT Services GmbH Agenda Introduction Organisational Challenges Making
CERT.br Incident Handling and Network Monitoring Activities
CERT.br Incident Handling and Network Monitoring Activities Cristine Hoepers General Manager cristine@cert.br! Computer Emergency Response Team Brazil - CERT.br Network Information Center Brazil - NIC.br
Sustaining Operational Resiliency: A Process Improvement Approach to Security Management
Sustaining Operational Resiliency: A Process Improvement Approach to Security Management Author Richard A. Caralli Principle Contributors James F. Stevens Charles M. Wallen, Financial Services Technology
CSM-ACE 2014 Cyber Threat Intelligence Driven Environments
CSM-ACE 2014 Cyber Threat Intelligence Driven Environments Presented by James Calder Client Services Manager, Singapore 1 CONTENTS Digital criminality Intelligence-led security Shylock case study Making
Egyptian Best Practices Securing E-Services
Egyptian Best Practices Securing E-Services Dr. Sherif Hazem Nour El-Din Information Security Systems Consultant Root CA Manager, ITIDA Agenda Security Measures for E-Services Examples of E- Services Threats
Network Security SWISS GERMAN UNIVERSITY. Administration Charles Lim Charles.lims@gmail.com
Network Security SWISS GERMAN UNIVERSITY Administration Charles Lim Charles.lims@gmail.com Agenda Administrative Course Information Lecturing Information Getting to know each other Questions & Answers
Security Challenges and Solutions for Higher Education. May 2011
Security Challenges and Solutions for Higher Education May 2011 Discussion Topics Security Threats and Challenges Education Risks and Trends ACH and Wire Fraud Malware and Phishing Techniques Prevention
Security & SMEs. An Introduction by Jan Gessin. Introduction to the problem
Security & SMEs An Introduction by Jan Gessin Introduction to the problem SMEs convinced it will never happen to them. In many ways SMEs are more of a target than big business. Harsh realities of the online
PROGRAM AGENDA JUNE 3 7, 2013. (Between Amsterdam & Broadway)
Certified Portfolio Manager (CPM ) Executive Education Program Columbia University - New York, NY 10027 212-854-2942 execeducation@ieor.columbia.edu PROGRAM AGENDA JUNE 3 7, 2013 Monday, June 3 8:00 AM
Data Driven Assessment of Cyber Risk:
Data Driven Assessment of Cyber Risk: Challenges in Assessing and Mitigating Cyber Risk Mustaque Ahamad, Saby Mitra and Paul Royal Georgia Tech InformationSecurity Center Georgia Tech Research Institute
Digital War in e-business
Digital War in e-business Ricci Ieong, Secretary of ISFS, Senior Security Consultant, PrivyLink (HK) Ltd. Trend in Internet Commerce Market More Internet Commerce Market G Increase in Business to Commerce
Privacy in the Digital Age of Encryption and Anonymity Online
The Hague (NL), 19-20 May 2016 ACCESSING FILES. ACCESS DENIED! DATA ENCRYPTED. TARGET GROUP This conference is open to anyone who is dealing with privacy and security in an online environment. Europol
DISTRIBUTED LOW-INTERACTION HONEYPOT SYSTEM TO DETECT BOTNETS
DISTRIBUTED LOW-INTERACTION HONEYPOT SYSTEM TO DETECT BOTNETS GONG JIAN 2 jgong@njnet.edu.cn Jiangsu Key Laboratory of Computer Networking Technology, China, Nanjing, Southeast University AHMAD JAKALAN
Daniel Meier & Stefan Badertscher
Daniel Meier & Stefan Badertscher 1. The definition of Honeypots 2. Types of Honeypots 3. Strength and Weaknesses 4. Honeypots in action 5. Conclusions 6. Questions 7. Discussion A honeypot is an information
THE BEST WAY TO CATCH A THIEF. Patrick Bedwell, Vice President, Product Marketing
THE BEST WAY TO CATCH A THIEF Patrick Bedwell, Vice President, Product Marketing AlienVault Vision Accelerating and simplifying threat detection and incident response for IT teams with limited resources,
Exposing the Cybersecurity Cracks: A Global Perspective
Exposing the Cybersecurity Cracks: A Global Perspective Part 2: Roadblocks, Refresh and Raising the Human Security IQ Sponsored by Websense Independently conducted by Ponemon Institute LLC Publication
Cyber Threat Intelligence Move to an intelligencedriven cybersecurity model
Cyber Threat Intelligence Move to an intelligencedriven cybersecurity model Stéphane Hurtaud Partner Governance Risk & Compliance Deloitte Laurent De La Vaissière Director Governance Risk & Compliance
Pacific Islands Telecommunications Association
Pacific Islands Telecommunications Association 8 th Fl, Dominion Hse PHONE : (679) 331 1638 PO BOX 2027, Govt Bldg FAX : (679) 330 8750 SUVA, FIJI Islands E-mail: pita@connect.com.fj www.pita.org.fj INVITATION
Coordinating Attack Response at Internet Scale (CARIS)
Coordinating Attack Response at Internet Scale (CARIS) Overview and Summary Report July 2015 Kathleen Moriarty Security Area Director, IETF Kathleen.Moriarty.ietf@gmail.com Agenda Coordinating Attack Response
MANAGED SECURITY SERVICES (MSS)
MANAGED SECURITY SERVICES (MSS) THE CYBER SECURITY INITIATIVE. Cybercrime is becoming an important factor for CIOs and IT professionals, but also for CFOs, compliance officers and business owners. The
Software Security Engineering: A Key Discipline for Project Managers
Software Security Engineering: A Key Discipline for Project Managers Julia H. Allen Software Engineering Institute (SEI) Email: jha@sei.cmu.edu Sean Barnum Cigital Robert J. Ellison SEI Gary McGraw Cigital
CSIRT Description for CERT OPL
CSIRT Description for CERT OPL Table of Contents 1. Document Information 2 1.1. Date of Last Update 2 1.2. Distribution List for Notifications 2 1.3. Locations where this Document May Be Found 2 1.4. Authentication
A Database Security Management White Paper: Securing the Information Business Relies On. November 2004
A Database Security Management White Paper: Securing the Information Business Relies On November 2004 IPLocks, Inc. 441-A W. Trimble Road, San Jose, CA 95131 USA A Database Security Management White Paper: