Los Angeles Tech-Security Conference

Comprehensive Data Protection Solutions

Do you know the hundreds of ways to lose your important data? The numbers don’t lie – more than 60% of information loss is the result of lost or stolen equipment. In short, every laptop, PC, smartphone, or USB stick is a potential weak point in your security strategy – unless you have Pointsec® software.

Come to this informative keynote session to learn about the security vulnerabilities in your organization and how Pointsec offers more data protection solutions where it really matters – from full disk encryption to port management and encryption for removable media.

Walking Through Walls - Presented by Accuvant and Imperva

There is more to securing a web application than putting it behind a firewall and enabling SSL. After all, a web application by definition accepts input from any web user and inserts it into running code on your server. Because of the unique nature of many web application vulnerabilities, traditional perimeter security measures are ineffective in protecting these critical assets and require a more focused security approach.

Learn how perpetrators begin their attacks and understand how to stop them. This application hacking workshop will demonstrate how intruders can compromise custom web applications to steal data and break into systems. Accuvant and Imperva will demonstrate exploits of the following web application vulnerabilities and discuss how to make sure these problems are not present in your web applications:

• SQL injection
• Parameter manipulation
• Error handling
• Cookie tampering
• Residual content
• Cross site scripting
  

Peter Bybee
Founder and CEO

How to Strengthen Your Incident Response Program: A Hands on Approach

• 2008 Security IT Security & Risk Outlook
  • 3 Trends that are creating more risk
  • Differentiating between Security Events vs Security Incidents

• Defining Your Information Security Incident Program
  • What you need to do before it happens
  • Incident Response Program Objectives
  • Developing your Incident Response Policy

• The 4 R's of Incident Response
  • Determining Authority, Roles & Responsibilities, Procedures, & Tools
  • Developing Awareness Training
  • Developing Your Security Incident Response Team
  • Communication with Outside Parties regarding an Incident
  • Incident Types & Prioritization
  • Risk Based Mitigation Response Methodology
  • Incident Handling Process Overview
  • How to Assess your Level of Readiness

• Outsourcing Security
• Benefits and Pitfalls of using a Managed Security Provider
• Understanding what your security provider is and is NOT responsible for
• Understanding Service Level Agreements (SLAs): What you need to Know
• How to be successful with a MSSP Partner
• When to bring it in-house