Northeast Ohio Information Security Forum

—< NORTHEAST OHIO INFORMATION SECURITY FORUM MEETING
—< Wednesday February 15, 2012
—< 6:30 PM – 8:00 PM
—< Pizza and social start 6:00 PM
—< Location: Park Center Plaza #1, 6100 Oak Tree Blvd, off Rockside Road, Independence, Ohio
—< Open to everyone and free as always

The Northeast Ohio Information Security Forum will hold our monthly meeting at the above date and time. It will be held in the lower level of the Park Center Plaza #1 building (in the large room on lower level) off of Rockside Road in Independence. I’ve included links to maps and directions in this email.

Talks (descriptions below):

DMARC by Michael Hammer

Michael Hammer will provide an overview of a recently released specification called DMARC (Domain-based Message Authentication, Reporting & Conformance) which provides authentication feedback loop reporting as well as the ability for domain owners to make policy assertions (quarantine/reject) for messaging claiming to be from their domains. While not a magic bullet, DMARC is a significant step forward in providing additional email authentication transparency for senders as well as mitigating certain types of abuse.

There will also be a special announcement at the meeting!!!!!

Don’t forget to come early, starting at 6:00 PM, for pizza and pop courtesy of NEOISF (http://www.neoisf.org/).

Another great meeting from NEO Info Sec Forum – we hope to see you there!
– NEOISF Board –
Follow us on Twitter: http://twitter.com/neoisf
Our website: http://www.neoisf.org

———————————————————————————-
[Location]
Park Center Plaza 1
6100 Oak Tree Blvd
Google maps link: http://bit.ly/ndIDBZ

[Directions]
1. I-77
2. Rockside Road exit
3. West on Rockside Road
4. 2nd light go South onto Oak Tree Blvd
5. Pull into the 3rd driveway on the right
6. Go to lower level
Signs will be posted on the building.

—< NORTHEAST OHIO INFORMATION SECURITY FORUM MEETING
—< Wednesday January 18, 2011
—< 6:30 PM – 8:00 PM
—< Pizza and social start 6:00 PM
—< Location: Park Center Plaza #1, 6100 Oak Tree Blvd, off Rockside Road, Independence, Ohio
—< Open to everyone and free as always

The Northeast Ohio Information Security Forum will hold our monthly meeting at the above date and time. It will be held in the lower level of the Park Center Plaza #1 building (in the large room on lower level) off of Rockside Road in Independence. I’ve included links to maps and directions in this email.

Talks (descriptions below):

Security Economics and the Battle Against Patience by Rockie Brockway
More TBA

Don’t forget to come early, starting at 6:00 PM, for pizza and pop courtesy of NEOISF (http://www.neoisf.org/).

Another great meeting from NEO Info Sec Forum – we hope to see you there!
– NEOISF Board –
Follow us on Twitter: http://twitter.com/neoisf
Our website: http://www.neoisf.org

———————————————————————————-
[Location]
Park Center Plaza 1
6100 Oak Tree Blvd
Google maps link: http://bit.ly/ndIDBZ

[Directions]
1. I-77
2. Rockside Road exit
3. West on Rockside Road
4. 2nd light go South onto Oak Tree Blvd
5. Pull into the 3rd driveway on the right
6. Go to lower level
Signs will be posted on the building.

————————————-
Security Economics and the Battle Against Patience by Rockie Brockway

This talk focuses on many of the latest attack trends and goals, the parties responsible and the responsibility of the InfoSec community in not only protecting our own direct business assets but associative economic impact of doing so on our collective national economies. Alternate methodologies of protecting the business model will be presented and open to discussion/debate.

—< NORTHEAST OHIO INFORMATION SECURITY FORUM MEETING
—< Wednesday December 21, 2011
—< 6:30 PM – 8:00 PM
—< Pizza and social start 6:00 PM
—< Location: Park Center Plaza #1, 6100 Oak Tree Blvd, off Rockside Road, Independence, Ohio
—< Open to everyone and free as always

The Northeast Ohio Information Security Forum will hold our monthly meeting at the above date and time. It will be held in the lower level of the Park Center Plaza #1 building (in the large room on lower level) off of Rockside Road in Independence. I’ve included links to maps and directions in this email.

Talks planned (abstracts and bios at bottom of this email)…

• Homemade Hardware Keylogger/PHUKD Hybrid by Irongeek
• The Penetration Testing Execution Standard (PTES) – Changing an Industry by Dave Kennedy

Don’t forget to come early, starting at 6:00 PM, for pizza and pop courtesy of NEOISF (http://www.neoisf.org/).

Another great meeting from NEO Info Sec Forum – we hope to see you there!
— NEOISF Board —
Follow us on Twitter: http://twitter.com/neoisf
Our website: http://www.neoisf.org

———————————————————————————-
[Location]
Park Center Plaza 1
6100 Oak Tree Blvd
Google maps link: http://bit.ly/ndIDBZ

[Directions]
1. I-77
2. Rockside Road exit
3. West on Rockside Road
4. 2nd light go South onto Oak Tree Blvd
5. Pull into the 3rd driveway on the right
6. Go to lower level
Signs will be posted on the building.
———————————————————————————-

– – – – – – – – – – –
TALK INFORMATION

TALK TITLE : Homemade Hardware Keylogger/PHUKD Hybrid
SPEAKER    : Irongeek

ABSTRACT:
He has been doing some work recently on making homemade keyloggers of both the USB and PS/2 persuasion that will take keystrokes, record/replay them, and modify programmable HID payloads accordingly.  This hardware and software is not exactly ready for prime time, but he figured he would share it with you.

Here are just a few of the possibilities:
    * Log all the keys using a MicroSD card
    * Vary payloads based on keystrokes
    * Log username/password and use them later
    * Screw with the person who is typing

————————————————–
TALK TITLE : The Penetration Testing Execution Standard (PTES) – Changing an Industry
SPEAKER    : Dave Kennedy, CISO @ Diebold Inc.

ABSTRACT:
The Penetration Testing Execution Standard (PTES) was just released in its first draft form at DerbyCon 2011. Since then, there has been an overwhelming amount of input placed on changing the way the industry does Penetration Testing. This talk will cover what defines a penetration test, what they are used for, and how you can change the industry for the better.

BIO:
Dave Kennedy (ReL1K) is a Vice President and Chief Security Officer at Diebold Incorporated. Dave is responsible for ensuring the overall physical and logical security of a Fortune 1000; publicly traded company. Dave also runs the security consulting practice at Diebold which is focused on enhancing and building security for large and mid-sized organizations. Dave is the creator of the Social-Engineer Toolkit (SET), an open-source penetration testing tool for social-engineering. Dave is the co-founder of DerbyCon, a large-scale security conference located in Louisville Kentucky. Dave is the co-author of Metasploit: The Penetration Testers Guide book which has been number one in security on Amazon for over 6 months. Prior to Diebold, Dave worked for the United States Marine Corps (USMC) and the intelligence field working on information warfare activities.

————————————————–

—< NORTHEAST OHIO INFORMATION SECURITY FORUM MEETING ---< Wednesday August 17, 2011 ---< 6:30 PM - 8:00 PM ---< Pizza and social start 6:00 PM ---< Location: Park Center Plaza #1, 6100 Oak Tree Blvd, off Rockside Road, Independence, Ohio ---< Open to everyone and free as always The Northeast Ohio Information Security Forum will hold our monthly meeting at the above date and time. It will be held in the lower level of the Park Center Plaza #1 building (in the large room on lower level) off of Rockside Road in Independence. I've included links to maps and directions in this email. Talks planned (abstracts and bios at bottom of this email)... Topic TBA by Rob Hartstein Breach Laws by Glenn Brzuziewski Don't forget to come early, starting at 6:00 PM, for pizza and pop courtesy of NEOISF (http://www.neoisf.com/training). Another great meeting from NEO Info Sec Forum - we hope to see you there! -- NEOISF Board -- ---------------------------------------------------------------------------------- [Location] Park Center Plaza 1 6100 Oak Tree Blvd Google maps link: TinyURL link http://tinyurl.com/neoisfmtg [Directions] 1. I-77 2. Rockside Road exit 3. West on Rockside Road 4. 2nd light go South onto Oak Tree Blvd 5. Pull into the 3rd driveway on the right 6. Go to lower level Signs will be posted on the building. ---------------------------------------------------------------------------------- -- Follow us on Twitter: http://twitter.com/neoisf Our website: http://www.neoisf.org ============================================================ You are receiving this because you are on the Northeast Ohio Information Security Forum mailing list. To unsubscribe or edit your subscription send an email to board@neoisf.org ============================================================ - – - – - – - – - – - TALK ABSTRACT: TBA SPEAKER BIO: Rob Hartstein Rob's experience in the network security industry began approximately 20+ years ago during the infancy of Corporate America's initial roll out of Internet access to their end users as well as protecting WAN network traffic traveling between remotely disparate locations over POTS lines. Over the years since then he has transitioned from IT Manager on the corporate side to "hands on" management of Technical Support organizations for vendors of encryption technology and network security appliances and is now National Accounts Sales Engineer at WatchGuard Technologies. Breach Laws Glenn Brzuziewski TALK ABSTRACT: In light of the recent Epsilon and Sony breaches, Congress is at it again. Congress once again is considering a bill that will unify the patchwork of state breach notification laws. Plus, they just completed hearings grilling Epsilon executives and talking about the need for a federal statute covering breach notification & data security. I'm sure you all saw this on CSPAN on June 2 🙂 This talk will present and discuss the state of breach notification laws, including examples & stories of state legislation, federal industry egulations and caselaw. In talking to security managers & CSO's, this is an area creating much anxiety. This talk will attempt to clarify the myriad of legal things revolving around PII and breaches. This is not a technical talk, but promises get your head spinning and be every bit as confusing as any technical presentation at NEOISF. SPEAKER BIO: TBA