Archive for October 2008
Software and Hardware Security Risks
Dear Colleague:
There are just a few days left to take advantage of the ICCS 2009 discounted early registration rate of $250! In just four days, the ICCS 2009 registration fee will jump to $350, so act quickly to receive this discount.
Come join the Federal Bureau of Investigation and Fordham University as we team up to bring together the world's foremost experts in cyber threat analysis and enforcement. On January 6, 2009 the two organizations will launch the first International Conference on Cyber Security (ICCS 2009) in New York City.
This Weeks ICCS 2009 Featured Topic:
SOFTWARE AND HARDWARE SECURITY RISKSManaging your business information technology infrastructure is no easy task, especially knowing that hackers would love to gain access to your sensitive information. Your software and hardware are critical for conducting business, but can they also pose significant risks? Join us at ICCS 2009 as we discuss, IT NETWORKS – RISK BASED COUNTERMEASURES, with Mr. Mark De Bels of the National Security Agency (NSA), Fort Meade, Maryland. IT NETWORKS – RISK BASED COUNTERMEASURES |
Reserve your spot now and receive the ICCS 2009 early registration rate of $250. There are just four days left to take advantage of this early registration discounts; after November 17, 2008, the registration fee will increase to $350. Registrations are handled on a first-come, first-served basis. For more information on other confirmed speakers, registration, accommodations, schedules, presentations or to join the official ICCS 2009 email distribution list, we invite you to take a moment to visit the official ICCS 2009 website at: http://www.iccs.fordham.edu.
If you think your colleagues would appreciate an invitation to ICCS 2009, please feel free to pass this invitation along. Click here to tell a friend.
We hope you can join us at ICCS 2009.
Sincerely,
ICCS 2009 Organizing Committee
Federal Bureau of Investigation and Fordham University
BOTNETS and Infection Detection
Dear Colleague:
Come join the Federal Bureau of Investigation and Fordham University as we team up to bring together the world's foremost experts in cyber threat analysis and enforcement. On January 6, 2009 the two organizations will launch the first International Conference on Cyber Security (ICCS 2009) in New York City.
This Weeks ICCS 2009 Featured Topic:
BOTNETS and INFECTION DETECTIONAs you may know, a BOTNET is a network of zombie computers – thousands surreptitiously are infected with code that allows an unauthorized user to control them via the Internet. The computers can be used to steal your business information, launch malicious attacks, and continue the spread of spam. We've watched BOT armies grow at a bizarre rate, is some cases, as large as 550,000 machines. Typical BOT army sizes range between 10,000 machines and 200,000 machines, but it only takes an army of 200 to take down a corporate network. Join us at ICCS 2009 as we discuss, INFECTION DETECTION, with Nasir Memon, Ph.D., professor of computer science, Polytechnic Institute of New York University, New York, N.Y. INFECTION DETECTION is a new approach to detecting compromised hosts from the network by passively observing host communications behavior. Detection from the network has many advantages: in particular host access is not needed, and the passive nature of the observation means the malware does not know how it is being observed and can not defeat the detection process by deleting log entries, among other strategies. To read more about INFECTION DECTECTION and other ICCS 2009 lectures, please visit the official ICCS 2009 website at http://www.iccs.fordham.edu. |
Reserve your spot now! There is still time to take advantage of early registration discounts. Register now and receive the ICCS 2009 early registration rate of $250. After November 17, 2008, the ICCS 2009 registration fee will increase to $350. Registrations are handled on a first-come, first-served basis. For more information on other confirmed speakers, registration, accommodations, schedules and presentations, we invite you to take a moment to visit the official ICCS 2009 website at: http://www.iccs.fordham.edu.
If you think your colleagues would appreciate an invitation to ICCS 2009, please feel free to pass this invitation along. Click here to tell a friend.
We hope you can join us at ICCS 2009.
Sincerely,
ICCS 2009 Organizing Committee
Federal Bureau of Investigation and Fordham University
The National Security Agency (NSA) Confirms
Sandra Stanar-Johnson
Senior Executive, National Security Agency, Fort Meade, Maryland
Ms. Stanar-Johnson is Deputy Special Assistant to the Director NSA/CSS for Cyber, a position she has held since May 2007. Prior to engaging in the Comprehensive National Cybersecurity Initiative, she served on the Director's Technical Architecture Governance Team which resulted in the establishment of both the new Chief Technology Officer and Technology Directorateat NSA. Ms. Stanar-Johnson graduated from Ohio University in 1977 with a Bachelor of Arts degree in Journalism, specializing in Middle East studies. She received a Master's Degree in 1985 in Islamic History with a minor in Arabic and Turkish from Ohio State University that included a Fulbright-Hayes scholarship to Princeton and another to Bosagi University in Istanbul. At NSA, she has developed and taught courses on the Middle East/North Africa and on Intelligence Support to Law Enforcement. Hired in 1986 as a linguist/analyst, Ms. Stanar-Johnson began developing customer relationships to increase actionable intelligence. She served as Executive Assistant to Chief of Staff for Intelligence. Ms. Stanar-Johnson served as the first NSA Representative to the FBI, working from New York's National Security Division, for which she received the Civilian Meritorious Service Medal in 1999. She returned from the field to develop and lead the Customer Gateway, an organization providing a focal point for SIGANT requirements, products and services. For her support to customers and warfighters during Operation Iraqi Freedom, she received the Exceptional Civilian Service Medal in 2004. She also served as an Issue Manager for Latin America/International Crime and Narcotics. Ms. Stanar-Johnson began her career in 1977 as a foreign correspondent in Cairo, Egypt, where she reported on Anwar Sadat's historic mission to Jerusalem, the resultant Palestinian rioting, and eventually Sadat's assassination. Covering the Iranian hostage crisis from the U.S. was her final journalistic assignment before returning to graduate school where she studied, lectured, and wrote about the rising tide of Islamic fundamentalism. Ms. Stanar-Johnson is the wife of Father Duane Johnson, an Eastern Orthodox Priest who serves at the Orthodox Church of St. Matthew inColumbia, MD. They have two children. She and her husband write and speak extensively on suffering and recovering from grief as a result of the death their six year old son, Andrew, in a car accident in 1993.
Ms. Stanar-Johnson will discuss THE UNITED STATES COMPREHENSIVE NATIONAL CYBERSECURITY INITIATIVE. The National Security Agency (NSA), as one of 22 Federal departments and agencies that developed the Comprehensive National Cybersecurity Initiative, will present an unclassified briefing on the initiative to include its purpose, goals, and strategic focus areas.
Team Cymru Confirms
Jerry Martin
Chief Financial Officer & Research Fellow, Team Cymru, Burr Ridge, Illinois
Mr. Martin is the Chief Financial Officer and Research Fellow for Team Cymru. Additionally, he teaches a graduate course in Network Security Fundamentals at George Mason University, Fairfax, Virginia. The course covers recognizing, preventing, and recovering from cyber attacks. During his final assignment with the United States Air Force, Jerry served as Director, Technical Analysis Branch at the Joint Task Force for Computer Network Operations (JTF-CNO). He has authored papers for a number of senior government officials and has been a presenter at many different forums.
Mr. Martin will discuss THE UNDERGROUND ECONOMY. The cyber underground economy is, like its physical counterpart, just as seedy and illegal. The primary objective of those who operate there is money. The National Cyber Security Alliance published some data a while ago that concisely describes the problem: 1) 61% of US computers are infected with spyware. 2) Americans say they lost more than US $336 million last year to online fraud. These figures are largely based on self-reporting, which is often suspect, and therefore the accuracy of them may be skewed. Given the enormous quantity of data witnessed on numerous Internet Relay Chat (IRC) channels, both numbers may be underreported. Given these staggering numbers, one might ask what is being done to address this criminal activity. Lamentably, not much is the answer. The popular school of thought is that finding and prosecuting these perpetrators of financial fraud and outright theft is too costly, too resource intensive, just too hard. This lecture will expose the infrastructure the miscreants have established; the open arrogance the buyers, sellers, traders, and cashiers exhibit; the activities and alliances the underground denizens are involved in; the method they receive their ill-gotten goods; the blatant manner in which they advertise; and the personal data that is harvested every single hour of every day of the year. Numerous snippets of captured IRC chatter will illustrate the points raised, although the nicknames and the information harvested are obfuscated. The miscreants can make a handsome living through these activities. Even those without great skills can barter their way into large quantities of money they would never earn in the physical world. It is important to note that these miscreants are located all over the globe, and thus may be earning well above the average income for their areas.
The National Center for Supercomputing Applications (NCSA) Confirms
Von S. Welch, Ph.D.
Co-Director, Cyber Security Directorate, National Center for Supercomputing Applications, University of Illinois, Champaign, Illinois
Von Welch is the Co-Director for Cyber Security at the National Center for Supercomputing Application (NCSA)/University of Illinois, Champaign, Illinois. In this role he leads development and application of security technology for clientele spanning the science, engineering, law enforcement and corporate communities. Mr. Welch has worked in cyber security for the past decade, developing new standards and methodologies for distributed and federated security architectures. Prior to working in cyber security, Mr. Welch worked on high-performance networking and networking applications. Mr. Welch is a 1992 graduate of the University of Illinois with a degree in Computer Engineering.
Dr. Welch will discuss APPLING HIGH-TECH SCIENCE AND ENGINEERING SOLUTIONS TO CYBER CRIME INVESTIGATIONS. Funded by the National Science Foundation as one of the premier open supercomputer centers, the National Center for Supercomputing Applications (NCSA) at the University of Illinois has over 20 years of experience in developing and deploying state of the art high-performance computing, data, network and cyber infrastructure systems for the nation’s scientists and engineers. Due to its vast Internet “store front” and required open nature, NCSA has developed extensive experience working with law enforcement on investigating and responding to cybercrimes. Recently, NCSA has extended the scope of its community engagement to work closely with law enforcement on applying the same technologies and techniques to aid with cybercrime investigations that have solved large-scale computing problems for scientists and engineers. This talk will focus on two such applied research efforts. The first being an USB-based software tool to allow law enforcement officers without cyber expertise to effectively respond to routine cyber incidents they encounter in the course of their job. The second effort is the application of scientific workflow to forensic investigation to allow an investigator to have an accurate record of their investigative activities and to reproduces those activities even after a significant time has elapsed.

