SANS @Night

Cyber Issues: Internet Threats

- Special Agent A.J. Singh
- Dallas FBI Division
- October 29, 5:15pm - 6:45pm

This fast paced presentation by the FBI uses studies of actual intrusions to present a high-level view of hackers' targets, current investigations, and policy issues. Using a re-creation of an actual intrusion as a backdrop, the supervisor of the Dallas Cyber Squad will examine current and past cyber cases, discuss securing confidential information, and review the current issues faced by businesses in the US and around the world. He will provide a high-level view regarding hackers' specific targets, intrusion tools, and methodologies, global cyber crime trends, and policy issues. The presentation is framed by actual cases, past and current that have been investigated by the FBI.

Texas IT Security Professional Networking: Birds of a Feather

- Scott Weil
- Monday, October 29th, 2007, 7:00pm - 8:00pm

This BoF is open to InfoSec organization members, including InfraGard, ISACA, and ISSA, and SANS Houston 2007 students. Especially for IT Security Professionals in Texas, this BoF will include networking opportunities and an open discussion about the most significant security issues and challenges you face. Area InfoSec organizations are also invited to make a 2-minute introduction, focused on a specific educational chapter event, to update all participants on Houston and Dallas area learning opportunities.

Windows PowerShell Crash Course
- Jason Fossen, Enclave Consulting, SANS Fellow
- Wednesday, October 31, 7:00 pm

PowerShell is Microsoft's long-awaited replacement for the CMD shell, plus a Perl-like scripting language to go along with it. Exchange Server 2007, for example, has a GUI management tool, but this is really just a wrapper for PowerShell commands, and Microsoft has promised that many more server products will be PowerShell-ized too, such as IIS, SQL Server and Active Directory. The future of command-line administration of Windows is PowerShell, and you can install it now for free on Windows XP/2003/Vista/2008 (http://www.microsoft.com/powershell/). This course is a fun dive into PowerShell's built-in tools (called "cmdlets") and a quick taste of how you can use WMI and the .NET Class Library from within the shell, in fact, PowerShell itself is built on top of the .NET Framework! For sample scripts and more free PowerShell resources, visit http://www.WindowsPowerShellTraining.com

Top 5 Firewall Leaks
- Chris Brenton, Consultant, SANS Fellow
- Thursday, November 1, 7:00 pm

Attack techniques have evolved to where traditional packet filtering firewalls, proxies, and even intrusion prevention systems are dramatically less effective at securing a corporate network. The common flaw in most perimeters is that they are designed to thwart inbound session establishment, while being relatively permissive in what they pass towards the Internet. This presentation will discuss the top five traffic patterns that currently breach most network perimeters. A round table discussion will follow this talk.

Google™ Driving: Mapping & Assessing Wireless Networks Using Google Earth
- James Tarala, Consultant, Enclave Hosting, LLC
- Friday, November 2, 7:00 pm

With the proliferation of wireless access points, and the constant threat of rogue access points creeping onto corporate networks, even companies without an official strategy for deploying 802.11 wireless are at risk to wireless threats. Well-meaning employees or devious outsiders with access to the physical network and a cheap, off-the-shelf wireless access point can create a back door into a corporate network potentially more dangerous than a rootkit or Trojan malware.

To defend against this threat, organizations need to consider a regimented approach to searching for rogue access points to detect and respond to the threat. In this presentation, James Tarala will be discussing how to use freeware tools, easily available on the Internet, a simple GPS receiver, and a laptop to scan for rogue access points and convert those scans into satellite maps showing access points locations, using Google Earth. From this talk, students will learn the step-by-step approach for setting up a Windows laptop to perform these scans, create Google Earth maps, and have all the skills necessary to set up a program for assessing their own facilities for rogue access points.