Salt Lake City Tech-Security Conference

Peter Bybee, CISSP, CISA
President/CEO

7 Top Data Sources for Security Monitoring

This session given by Peter Bybee, CISSP, CISA will provide valuable insight to the top data sources for security monitoring and designing a security monitoring solution. He will discuss how to use the information being reported, or logged, to improve the security posture of the organization.

As part of this discussion the following areas will be covered:

• How to filter superfluous data before its processed and analyzed
• How to Optimize Monitoring Value
• Applying Context Monitoring Priorities to:
  • Network IDS/IPS Alerts
  • Firewall Alerts
  • Host & Client Based Alerts
  • Network Devices with ACLs
  • Server & Application Logs
  • Wireless Alert Data
  • Vulnerability Scan Data

   

>> click here for the presentation

Mark Priester
SE Manager

Endpoint Security: Protecting Sensitive and Confidential Information

The risk of information exposure is well known today, but have we really understood the lessons taught? Today we are faced with increasing amounts of data, overwhelming storage methods, and new changing methods of corporate data access. Whether we are focused on protecting classified government documents, corporate secrets, or sensitive personal information about employees, partners, or customers, we face new hurdles and every day. Come and listen to how you can protect your sensitive desktop information by blending full disk encryption, access control, removable media encryption and port management.

>> click here for the presentation

Jim Shaeffer
President

Developing, Implementing and Enforcing an Internet Acceptable Use Policy (IAUP)

The Internet can be a wonderful source of information that can enhance employee productivity and increase the bottom line of your organization.

It can also provide access to a vast amount of purely entertainment-related materials that can threaten your organization.

Find out how you can easily develop an Internet Acceptable Use Policy, communicate that policy to your employees and monitor their use of the internet.

A baseline Network Quality Assurance Assessment is the first step to providing clear, empirical metrics that will allow you to develop a policy for your organization.

Productivity will increase with an IAUP in place, coupled with enforcement using PC and Internet activity Employee Monitoring Software.

With an IAUP backed by effective PC and Internet activity monitoring software, employees will be more focused and on task, arrive to work earlier and stay later, take fewer breaks during the day, and rarely - if ever - use PCs for frivolous or inappropriate nonwork-related activity.

>> click here for the presentation

Matt Bossom

Current Threats and Countermeasures - Wireless

This presentation will guide the audience through the current attack vectors being used against 802.11x wireless networking solutions. This presentation will cover traditional attacks against infrastructure solutions, advanced attacks against client systems/devices, and cover the latest hybrid attacks against today's "recommended" enterprise wireless solutions. This presentation will include live demonstrations and illustrations of these various attack vectors and provide guidance on minimizing the impact these threats can pose to the audience's environments.

>> click here for the presentation

David Butcher, PMP CSDP
Sr. Systems Engineer

Understanding Managed File Transfer - Insights & Best Practices

As IT departments continually adopt new technologies to improve the performance of their systems, productivity of their end users and relationships with trading partners, they are faced with numerous challenges. One such challenge companies face today is securing and automating large file transfers. Traditional file transfer systems and mediums no longer meet the needs of most organizations or their trading partners, especially when data exposure is a concern. Many organizations have developed in-house solutions that are difficult to manage, lack the ability to track and audit file transfers, and expose the organization to security breaches. A Managed File Transfer (MFT) solution should be secure, easy to manage, and have the flexibility to integrate with existing technologies.

In this presentation, you will:

• Gain a better understanding of the business challenges and drivers of file transfers.
• Identify the security concerns around traditional file transfer systems and mediums.
• Learn best practices to develop security architectures for file transfers.
• Understand how a MFT solution can meet the needs of your stakeholders

Mikko Valimaki
Chief Scientist, Blue Coat Systems

Evolving Web Threats and Countermeasures

Despite over $7 billion a year being spent on anti-virus and other security software, the dangers of becoming a victim of cybercrime are increasing. What was once the hobby of amateur hackers has become the business of organized groups around the world. Cyberthieves want your identity and financial information, and they aren't just going through shady websites to get it.

This presentation discusses the evolution of the web itself as well as the evolution of the web borne threats. Web 2.0 impact, rogueware, malware, phishing, proxy avoidance are discussed and then counter measures and practical approaches to protecting corporate networks as well as individuals are presented.

Seven Steps to Delivering a Secure USB Drives Strategy and Policy!