Agenda

Presented by SANS:

Intro to Application Security Testing (Technical Track)

This session describes fundamental steps with application testing, with examples in Web technologies. We demonstrate against a live web store several of the issues. We also look at defenses built into the application but fail, and how an attacker could circumvent them and how they can be fixed.

3 CPE Credits Available

Instructor:  Jim Shewmaker

James has over 15 years' experience in IT. He is a SANS certified instructor and is one of the first certified GSE-Malware experts. He graduated with a BS in computer science from the University of Idaho. James is a founder and active consultant for Bluenotch Corporation, which focuses on investigations, penetration testing, and analysis. He develops applications and appliances for broadcast radio, Internet, and satellite devices. James also contributes to the FreeBSD project and is a port maintainer. He presents at various security and IT conferences, is a courseware contributor, and is actively involved in the COINS program.

Lunch

Presented by SANS:

Seven Deadly Security Sins of IT (Management Track)

This topic covers the seven most common IT issues that aggravate the security posture of an organization.

3 CPE Credits Available

Instructor:  Jim Shewmaker

Thursday, March 4, 2010  (Day 1)

Open Plenary and Keynote

Data Security Breaches: An Unstoppable Epidemic?

Dr. Eugene Schultz, PhD, CISM, CISSP

Network Security, Chief Technology Officer & Chief Information Security Officer of High Tower Software

9:45am - 10:45am

Concurrent Sessions I  (Abstracts)

• People, not Products!
• An Application Service Model for Network Security Applications
• Virtual Tabletop Exercises

11:15am - 12:15pm

Concurrent Sessions II   (Abstracts)

• Security Policy Management
• Hyper-V Security
• Teaching Network Forensics: A Laboratory View

12:15pm - 1:45pm

Lunch and Keynote Speaker

Cybersecurity in California State Government

Mr. Mark Weatherford, Executive Officer and CISO

California Office of Information Security

2:00pm - 3:00pm

Concurrent Sessions III   (Abstracts)

• The 1 Risk Most Security Folks Ignore: PAPER
• An Outside-In Approach To Wireless Security
• Securely Implementing Section 508: R.I.S.S.C.s and Rewards

3:30pm - 4:30pm

Concurrent Sessions IV   (Abstracts)

• Desktop Security...the Virtual Frontier
• Server and Cloud Virtualization Security
• The Cyberspace Policy Review and Education

Keynote Presentation and Reception

The Evolving Threat Landscape
Chris Valasek, X-Force Advanced R&D Manager, IBM

Friday, March 5, 2010  (Day 2)

Breakfast and Keynote Speaker

Security and IT In Higher Education

Mr. Stephen R. Kovac, Area Vice President

Verizon Global Services, Federal, Government, and Education Markets, Security and IT Services

Concurrent Sessions V   (Abstracts)

• The eDiscovery Dilemma: How Much Is Enough?
• Server Virtualization Security…Have you Updated your Security Procedures for your Expanding Virtual Environment?
• Electronic Crime Taskforce

11:15am - 12:15pm

Concurrent Sessions VI   (Abstracts)

• eDiscovery in the Trenches
• PCI Compliance
• Academic Opportunities in Information Assurance

1:00pm - 2:15pm

Keynote

eDiscovery Roundtable Panel Discussion