Agenda

Presentations are hyperlinked below.

Pre-Conference Workshops presented by SANS Institute

• Research: Developing Exploits for Penetration Testers and Research

As zero-day vulnerabilities are discovered more frequently, malicious
computer attackers are constantly writing exploits to attack them. But
when a new flaw is discovered, it is often difficult to determine whether it is truly exploitable, making an analysis of business risk difficult, if not impossible. Things get even murkier when the flaw is discovered in home-grown applications supporting an enterprise. Yet until now, only a small, self-selected, high-tech "priesthood" of security researchers have had the skills to determine whether a given flaw can lead directly to exploitation.
Do you want to join the skilled security researcher elite and stop relying on others to find your application's vulnerabilities and start writing your own Proof of Concept (POC) code?

Instructor: Peter Szczepankiewicz,
BIO: Formerly working with the military, Peter responded to network
attacks, and worked with both defensive and offensive red teams.  Currently, Peter is a Senior Security Engineer with IBM. People lead
technology, not the other way around. He works daily to bring actionable
intelligence out of disparate security devices for customers, making
systems interoperable.
CPE: Three CPE Credits

• Operational Security: Defending Wireless Networks

Wireless technology fundamentally changes accepted security paradigms.
With the pervasive deployment of wireless technology, attackers have
latched on with sophisticated and effective techniques to exploit
wireless systems at work, at home, or on the road. Despite the
significant threats, organizations are deploying WiFi, Bluetooth, and
proprietary wireless technology at a break-neck pace. This can expose
internal networks and client systems, often allowing attackers to bypass
intrusion detection systems and other defenses.  To be a wireless security expert, you need to have a comprehensive understanding of the technology, the threats, the exploits, and the defense techniques along with hands-on experience in evaluating and attacking wireless networks.

Instructor, Jim Shewmaker:
BIO: James has over 15 years' experience in IT. He is a SANS certified
instructor and is one of the first certified GSE-Malware experts. He
graduated with a BS in computer science from the University of Idaho.
James is a founder and active consultant for Bluenotch Corporation, which
focuses on investigations, penetration testing, and analysis. He develops
applications and appliances for broadcast radio, Internet, and satellite
devices. James also contributes to the FreeBSD project and is a port
maintainer. He presents at various security and IT conferences, is a
courseware contributor, and is actively involved in the COINS program. He
holds many certifications including the GCIA, GCIH, and GCFA.
CPE: Three CPE Credits

• Security Management: Security Leadership Essentials

This track is designed to empower advancing managers who want to get up to speed fast on information security issues and terminology. You don't
just learn about security, you learn how to manage security. Lecture
sections are intense; the most common student comment is that it's like
drinking from a fire hose. The diligent manager will learn vital, up-to-date knowledge and skills required to supervise the security component of any information technology project. Additionally, the course has been engineered to incorporate the NIST Special Papers 800 guidance so that it can be particularly useful to US Government managers and supporting contractors.

Instructor: Peter Szczepankiewicz
BIO: Formerly working with the military, Peter responded to network
attacks, and worked with both defensive and offensive red teams.
Currently, Peter is a Senior Security Engineer with IBM. People lead
technology, not the other way around. He works daily to bring actionable
intelligence out of disparate security devices for customers, making
systems interoperable.

• Operational Security: Hacker Exploits

By helping you understand attackers' tactics and strategies in detail,
giving you hands-on experience in finding vulnerabilities and discovering intrusions, and equipping you with a comprehensive incident handling plan, the in-depth information in this course helps you turn the tables on computer attackers. This course addresses the latest cutting-edge insidious attack vectors and the "oldie-but-goodie" attacks that are still so prevalent, and everything in between. Instead of merely teaching a few hack attack tricks, this course includes a time-tested, step-by-step process for responding to computer incidents, a detailed description of how attackers undermine systems so you can prepare, detect, and respond to them, and a hands-on workshop for discovering holes before the bad guys do. Additionally, the course explores the legal issues associated with responding to computer attacks, including employee monitoring, working with law enforcement, and handling evidence.

Instructor: Jim Shewmaker
BIO: James has over 15 years' experience in IT. He is a SANS certified
instructor and is one of the first certified GSE-Malware experts. He
graduated with a BS in computer science from the University of Idaho.
James is a founder and active consultant for Bluenotch Corporation, which
focuses on investigations, penetration testing, and analysis. He develops
applications and appliances for broadcast radio, Internet, and satellite
devices. James also contributes to the FreeBSD project and is a port
maintainer. He presents at various security and IT conferences, is a
courseware contributor, and is actively involved in the COINS program. He
holds many certifications including the GCIA, GCIH, and GCFA.
CPE: Three CPE credits

Thursday, March 5, 2009

Keynote Speaker, Stefano Zanero, PhD

"WOMBAT: Building a Worldwide Observatory of Malicious Behavior and Attack Threats"

• OMG: There's A Hacker In My Friend's List

• Teaching Intrusion Detection and intrusion Prevention on the Virtual

  Platform: Hands-On Laboratory E

• Protecting Your Data in a Dangerous World

Friday, March 6, 2009

Keynote Speaker, Julia H. Allen, Senior Researcher

"Making the Business Case for Software Assurance"

• Payment Card Standards: Unique Challenges, Unique Risks for Higher Education

• Student Perceptions of IT Security Knowledge Learned in a CIS Degree

  Program

• The Five Biggest Application Security Vulnerabilities: The Importance of

  Integrating Application Security Testing Within the QA Lifecycle