Home > INTERFACE Event Schedule > INTERFACE Phoenix Seminar Schedule

INTERFACE Phoenix Seminar Schedule

It’s critical to stay current with the technology that runs your organization and secures your operational infrastructure. INTERFACE addresses these IT issues through informative, non-sales oriented, educational seminars customized to the specific needs of the local business community. Using case studies and best practice examples, these vendor-presented sessions offer you the solutions needed to address your technology challenges and achieve your organizational goals.

The NEWSRoom

To help them build strong new business relationships, attendees and vendors can network and enjoy complimentary food and beverage between seminars in the NEWSRoom; to enhance Networking and Education With Successful Results.

KEYNOTE ADDRESS

2:00pm — Theater #1

"Hidden Agenda: Ten IT Threats Nobody Talks About"

Presenter
Andrew M. Plato, CISSP, CISM
President and Principal Consultant
Anitian Enterprise Security

Overview: This presentation addresses ten rarely discussed problems that threaten the stability and security of IT departments. These threats are grinding away at your ability to run an optimal IT organization. This discussion is followed by three salient concepts you can use to combat the ten threats and get on the road to a optimal security and IT operations. This presentation will challenge your perceptions and make you reconsider your IT operations.

Among the threats to be discussed:

How Arguments over technology sap productivity
Why you should never leave a nerd or a cop in charge of security
Demanding unrealistic characteristics of IT staff degrades security

About the Presenter:
Andrew M. Plato is the founder and President of Anitian Enterprise Security. Anitian is one of the largest information security consultancies with offices throughout the western United States. Mr. Plato is most widely known for his involvement with the development of the BlackICE Intrusion Prevention System from NetworkICE. From 1998-2000, Mr. Plato helped shape the design and marketing of this revolutionary product, until Internet Security Systems (ISS) purchased NetworkICE in 2000. While at NetworkICE, Mr. Plato is credited with inventing the term “Intrusion Prevention System” (IPS). In 1999, Anitian deployed the world’s first working, in-line IPS in Seattle, WA. IPS has since become a prevalent security technology with companies such as Cisco, Symantec, 3Com and Juniper all selling IPS products.

Mr. Plato is a highly sought speaker and trainer on information security issues, particularly on matters of intrusion prevention and protection. Mr. Plato has also authored over a dozen white papers, articles, and manuals on information security including “Hardening Windows 2000,” “A Practical Guide to Intrusion Prevention Systems” and “Fundamentally Insecure: Debunking 10 Myths of Information Security.”

Some of the nation’s largest public and private organizations rely on Mr. Plato for advice and guidance on matters of information security and corporate governance. Mr. Plato serves as a member of numerous local and international security groups, including the Information Systems Security Association (ISSA). Mr. Plato holds a Bachelor of Arts degree from the University of Arizona in English, Humanities and Biology. He resides in Portland, Oregon.

THEATER #1

9:45am

"Current Threats and Countermeasures"

Securing the information assets of an enterprise has never been so important or so complicated. The past several years have seen a significant increase in the number of security threats and vulnerabilities and significant advancements in attack methodologies with new tools, techniques, and attack vectors being released on a weekly basis.

Join Accuvant for a lively, interactive discussion to review the latest in current vulnerabilities and tools for ensuring security. Through presentation and live demonstration, attendees will learn about the latest attacks, tools, and techniques employed by today’s hackers, as well as countermeasures that can help protect against these attacks.

Topics of discussion:

Password security

Google hacking (data mining)

Exploit and attack frameworks

Wireless insecurities (WEP and WPA cracking)

Application attacks from Information Gathering to SQL Injection

Physical security (key bumping)

VoIP hacking and games

RFID cloning and threats

Ideas and resources for combating vulnerabilities

Presented by: Accuvant

10:30am

"Creating an Infrastructure to Support Incident Response"

In today's environment security breaches are common. In addition, many regulations and standards, such as state disclosure laws or Payment Card Industry (PCI), require consumer notification or have hefty fines. Though many organizations apply preventative security measures, it is uncommon to see an organization run a structured, well-organized incident response program. SunGard Availability Services will describe how to properly set up an incident response program and set up the network infrastructure to facilitate incident response.

Presented by: SunGard Availability Services

11:15am

"Mobile NAC - Extending Device Protection to the Mobile User"

Today’s NAC products promise a powerful line of defense against viruses, malware and hackers in order to protect the network but they don’t address the “mobile blindspot” – which refers to remote workers. Fiberlink has introduced network access control for companies with large numbers of mobile or remote workers through an implementation of its Extend360 Mobility Platform 2.0. This solution, called Mobile NAC, streamlines the management of endpoint security applications and access services for mobile workers. It also provides IT with a management dashboard that offers granular visibility into the security compliance posture of corporate laptops.

Presented by: Fiberlink Communications

12:30pm

"Combating Wireless Security Vulnerabilities"

Portability. Accessibility. Ease of use. Lower Costs. There are numerous reasons why wireless networking technology is so attractive. But the main obstacle to its adoption has been concerns about security. This session will share strategies for helping organizations reap the benefits of wireless technology without compromising their network's security.

Please join Aruba Networks as they review the latest in wireless vulnerabilities and tools for ensuring security. Attendees will learn about some of the latest wi-fi attacks and techniques used by hackers today, as well as countermeasures that can help protect against these attacks.

Topics of Discussion:

The current make up of the wi-fi landscape

Emerging 802.11 wireless threats and attack frameworks

Understand how data encryption, authentication, access control and intrusion prevention techniques can be used to secure a wireless network

Techniques for building a high performance, scalable, and secure wireless network

Presented by: Aruba Networks

1:15pm

"The Image Spam Epidemic and Advanced Defenses"

Spam has substantially evolved over the past several years into a very serious threat for organizations both large and small. The threat is more difficult now than ever as the sources of spam and techniques used by spammers have become much harder to identify. This discussion will focus primarily on the most prevalent technique being used today (image spam) and the scientific approaches required to stop it.

Presented by: Secure Computing

THEATER #2:

9:45am

"Conquering Your Vista Migration Fears"

The cost and complexity associated with any migration can be managed through an automated deployment strategy -- whether the migration is done over time or in one rapid "forklift" project. An automated strategy can reduce costs by up to 75%; reduce end user downtime; eliminate the need to deploy PCs to a staging area and manually configure; and eliminate manual installations and configurations. An OS migration is the prefect time to standardize desktop PCs and systems management processes. By starting with a clean slate, organizations can obtain an accurate inventory and put in place the tools needed to keep inventories accurate and PCs up-to-date and in compliance standards.

Presented by: Symantec / Altiris, Inc.

10:30am

"Security Frameworks & the Structure of Security Organizations"

In a recent survey, one third of companies surveyed stated they have over 10 major regulatory requirements. Further complicating this is the rising number of business partners that companies rely on today. The future of compliance to an increasing number of regulations and providing assurance to business partners requires a more scalable and repeatable approach than the current alphabet soup of PCI, SOX, GLBA, HIPAA and others. ISO 27001 may be that standard, allowing you to develop once, comply often.

Presented by: FishNet Security

11:15am

"Data De-Duplication: Increasing the Power of Disk-Based Backup"

In this session, conference attendees will learn about the concept of data de-duplication. This emerging technology is playing an important role across the distributed enterprise of large companies and in the disk-based backup, recovery and archive practices of medium sized businesses. The presenter will explain what de-duplication is, how it improves upon existing models for disk-based backup, and how it can completely change the economics of backup at remote office or regional data center locations.

Presented by: Quantum Corporation

12:30pm

"Consolidated Log Analysis - What to Look for & How to Find It"

For the past three years, RCI has been presenting at INTERFACE on how to build a consolidated log analysis system using open source tools. Many attendees have followed this advice and now have consolidated logs. Whether you have an existing consolidated log analysis system or are considering one, this presentation will help you determine what to look for and how to find it. Using open source, freely available tools, we will begin your journey into really understanding your logs. Learn valuable techniques and resources to master the log analysis process.

From several perspectives, including network security, network operations and audit/regulatory compliance, consolidated logs are in invaluable tool. Challenges in gleaning all you can from the logs include the sheer volume of logging messages, the lack of clear standards, lack of established regulatory requirements and of course, the lack of time from your qualified network and security engineers. RCI will introduce you to tips and tools you can use right away.

Presented by: Resource Computing, Inc.

1:15pm

"TBA"

Details of this presentation will be announced soon.

Presented by: Anitian Enterprise Security

Review the floor plan and list of vendors for INTERFACE Phoenix or the map and driving directions.