 |
|
|
 |
|
San Diego Tech-Security
Conference
|
Overview

The San Diego Tech-Security Conference will bring together
private industry, government decision makers and technical
enthusiasts in the fields of Information & Network
Security. This unique conference format will provide
several interactive high intensity training sessions
as well as tremendous networking opportunities.
Topics may include: Intrusion Detection and Prevention
Systems, Wireless Security, Web Hacking, Contingency
Planning, Vulnerability Assessments, Threat Management
Workshop, Computer/PDA & Enterprise Forensics, Password
Recovery & Disk Wiping Tools, Internet Investigation
Techniques.
You'll come away with advice and knowledge that you
can start applying to your environment immediately.
| Agenda: |
|
| 8:15am-8:45am |
Check-In
and Opening Introductions |
 |
Data
Connectors is proud to host the Tech-Security Strategies
Conference. |
| 8:45am-9:30am |
Session
One |
|

|
Comprehensive End-Point Security Solutions
- Research shows that between 75% (Aberdeen
Group, Ernst & Young) and 85% (FBI) of security
breaches are committed by authorized internal
users.
- Internal studies by a major credit card provider
concur that "all too often fraud or compromise
can be traced to either a current or former
employee."
- CIOs and Security Officers report that this
problem is at the top of their priority list
(Gartner Group), and only about 10% of these
breaches are ever detected (USA Today).
- All this, and the fact that the average cost
of an internal attack is a hefty $2 million
per incident.
For a quick and easy way to manage your networked
endpoints and servers, you'll want to learn about
clientless offerings. They're fast, don't require
software to be installed on your end-points and
don't chew up all your network bandwidth.
Come to this informative educational opportunity
and learn about Clientless Endpoint Security Management
(CESM) technology. CESM solutions enable companies
to maximize their security investment and ROI
to ensure ongoing optimal operations of their
I/T infrastructure.
A special gift will be available for all attendees
who stop by the JCS & Associates, Inc. booth
and drop off their business card, so don't forget
to bring your business cards with you to this
event.
>>
click here for the presentation
|
| 9:30am-9:45am |
Break/Vendor
Booth Time |
| 9:45am-10:30am |
Session
Two |
|

Dan Graney
|
Understanding Managed File Transfer - Insights
& Best Practices
As IT departments continually adopt new technologies
to improve the performance of their systems, productivity
of their end users and relationships with trading
partners, they are faced with numerous challenges.
One such challenge companies face today is securing
and automating large file transfers. Traditional
file transfer systems and mediums no longer meet
the needs of most organizations or their trading
partners, especially when data exposure is a concern.
Many organizations have developed in-house solutions
that are difficult to manage, lack the ability
to track and audit file transfers, and expose
the organization to security breaches. A Managed
File Transfer (MFT) solution should be secure,
easy to manage, and have the flexibility to integrate
with existing technologies.
In this presentation, you will:
- Gain a better understanding of the business
challenges and drivers of file transfers.
- Identify the security concerns around traditional
file transfer systems and mediums.
- Learn best practices to develop security architectures
for file transfers.
- Understand how a MFT solution can meet the
needs of your stakeholders.
>>
click here for the presentation
|
| 10:30am-11:15am |
Session
Three |
|

Peter Bybee, CISSP, CISA
|
Using Network Access Control (NAC) to consolidate
security layers, eliminate endpoint security threats,
manage risk, and maintain compliance.
Session Abstract: This session given by Peter
Bybee, CISSP, CISA will provide valuable insight
into the confusing array of NAC technology solutions
in the marketplace. If you've been thinking about
deploying a NAC solution, this is the independent
analysis that you've been waiting for.
As part of this discussion the following areas
will be covered:
- Understanding different approaches using Network
Access Control to secure endpoints, the internal
network environment and enforcing policies
- Explaining both pre-admission and post-admission
approaches including various solution enforcement
options offered in the marketplace
- Should you wait for 802.1x? Do you need to
upgrade your switching infrastructure?
- What are the current NAC trends in the marketplace?
What is Microsoft doing with NAP? How will what
Microsoft and Cisco are doing affect the choices
that you make?
- So once you've got NAC deployed, what kinds
of policies should you implement and enforce
that will help you manage risk?
- How do you reduce the complexity and consolidate
security layers using full-cycle NAC?
- How can you use NAC to address compliance
requirements for PCI, GLBA, SOX, HIPAA, and
others?
- What is the best way to deploy and manage
a NAC solution?
Network Access Control is perhaps the most significant
network security concept since the introduction
of the firewall, don't miss this informative and
enlightening presentation!
|
| 11:15am-11:45pm |
Break/Vendor
Booth Time |
| 11:45am-12:30pm |
Session
Four |
|

|
Current Threats and Countermeasures
Securing the information assets of an enterprise
has never been so important or so complicated.
The past several years have seen a significant
increase in the number of security incidents,
threats and vulnerabilities and significant advancements
in attack methodologies with new tools, techniques,
and attack vectors being released on a weekly
basis.
Join Accuvant for a lively, interactive discussion
to review the latest in current threats, vulnerabilities
and the tools attackers are using to compromise
the security of our enterprise and our customers
data. Through presentation and live demonstration,
attendees will learn about the latest attacks,
tools, and techniques employed by today's hackers,
as well as potential countermeasures that can
help protect against these attacks.
|
| 12:30pm-1:15pm |
Session
Five (includes lunch) |
|

Mike Waters
Regional Sales Manager - West
|
LAN Security: The Future of Network Security
Policy Enforcement
>>
click here for the presentation
|
| 1:15pm-1:30pm |
Break/Vendor
Booth Time |
| 1:30pm-2:15pm |
Session
Six |
|

Charles Tracey
|
Technology at the Perimeter
>>
click here for the presentation
|
| 2:15pm-3:00pm |
Session
Seven |
|

Scott Van Horne
|
Moving From a Reactive to a Proactive Security
Model
>>
click here for the presentation
|
| 3:00pm-3:45pm |
Session
Eight |
|

Mark Falagrady
|
Seven Steps to Delivering a Secure USB
Drives Strategy and Policy!
Businesses are increasingly putting themselves
at risk by allowing the unauthorized or unencrypted
use of portable storage devices. These devices
pose two kinds of threats: Intentional and unintentional.
They pose the risk of losing intellectual property
and/or introducing vulnerabilities into the network
by bypassing traditional perimeter defenses such
as firewalls and antivirus at the mail server.
Controlling these new risks involves a strategy
to enable Enterprise; Government and SMB companies
to remain productive while at the same time control
/ manage / monitor the use of devices. HIPAA,
GLBA, or Sarbanes-Oxley are terms that everyone
has come to know. Unfortunately, few know precisely
what they need to do or how to demonstrate compliance
in this emerging threat area. Even when used with
the best intentions, the data stored on USB drives
is generally not covered by routine company procedures
such as backup, encryption, or asset management.
We will discuss which key strategies an organization
should adopt to manage them securely as well as
where this technology is going.
>>
click here for the presentation
|
Event Sponsors/Exhibitors

|