SANS Institute

Secure Computing Lunch & Learn Presentation

- Wednesday, November 15th: 12:30pm - 1:15pm
- On the Frontlines in the War Against Online Transnational Organized Crime
- Dmitri Alperovitch, Principal Research Scientist

Phishing, worms, pharming, spam, botnets - the attacks are different and constantly evolving but their cause remains the same: emergence of international and transnational, extremely technically competent, and hierarchically organized online criminal enterprises with secure underground economies for sale and exchange of skills and services that help facilitate their criminal activities.

Dmitri Alperovitch serves as Principal Research Scientist for Secure Computing, the global market leader in messaging security. As one of Secure Computing's leading researchers, he manages Secure Computing's Global Research team. Alperovitch received a Masters degree in Information Security from the Georgia Institute of Technology, graduating magna cum laude in 2003.

Core Security Lunch & Learn Presentation

- Friday, November 17th: 12:30pm - 1:15pm
- Efficient Vulnerability Management with Penetration Testing
- Alex Horan, Systems Engineering Manager

This talk will be an opportunity for attendees to see a live demonstration of automated penetration-testing. In just minutes attendees will see CORE IMPACT safely exploit vulnerabilities in a target network, replicating the kinds of access an intruder could achieve, and proving actual paths of attacks that must be eliminated.

Alexander Horan is a Product Specialist for Core Security Technologies, providing training and customer support for CORE IMPACT's user base. Mr. Horan has over eight years of experience working with both software and hardware based security tools. He brings a deep knowledge and understanding of vulnerability assessment and penetration testing, systems administration, network administration, network audits, operations, customer support, technical sales, project management, network and systems design and IT management to his work at Core. Prior to working with Core, he was a Senior Consultant with Aspelle Inc. and a Novell Administrator for JP Morgan.

Net Optics Hands-On TAPS Workshop

- Friday, November 17th: 5:30pm - 6:45pm
- Tara Reeve, Major Account Executive

Net Optics Learning Center presents a short overview of Test Access Point (TAP) technology and its place in the network. Immediately following will be an extended hands-on demonstration of a variety of innovative Net Optics Taps at work in a simulated network. Light refreshments will be provided.

Tara Reeve has been with Net Optics for almost 10 years. As part of the Net Optics Customer Service Team, Tara works directly with key customers and partners on education of passive network access for secure monitoring solutions. Tara helps ensure the satisfaction of their requirements by working to provide a total solution.

LURHQ Lunch & Learn Presentation

- Sunday, November 19th: 12:30pm - 1:15pm
- Malware Attribution
- Joe Stewart, Senior Security Researcher

We see new malware released on the Internet every day, but who are the elusive authors of these threats? In this presentation, we will show how the malware's code and its behavior can reveal clues to the author's online persona, and sometimes even the author's real name and location.

Joe Stewart is Senior Security Researcher with LURHQ, a leading Managed Security Services Provider. In this role he researches unusual Internet activity to discover emerging threats. He is a frequent commentator on security issues for leading media organizations such as The New York Times, MSNBC, Washington Post, PC World and others.

LogLogic Lunch & Learn Presentation

- Monday, November 20, 2006 * 12:30pm - 1:15pm
- Selecting Your Log Management Approach.
- Anton Chuvakin, Ph.D., GCIA, GCIH, GCFA, Director of Product Management

Spend an hour with the Log Management & Intelligence leaders on best practices for selecting a Log Management & Solution. Should you build, buy, outsource or combine strategies? What are the ten most important things to ask your Log Management & Intelligence vendor? What are the best practices being used by the Fortune 500? When build and when not to build your own? When to use a combined log management strategy?

Dr Anton Chuvakin, GCIA, GCIH, GCFA is a recognized security expert and author. He is an author and contributor of several books including "Security Warrior" "Know Your Enemy II", "Information Security Management Handbook" and "Hacker's Challenge 3". Chuvakin has published numerous papers on security issues. He participates in various security industry initiatives and standards organizations.