Blog

InfoSec 2009 Breakout Session Abstracts – Layer “8″ The Softer Side of Security

Posted by: tfetherling  /  Comments: 3

Application Enterprise Layer “8″ Innovations in Security

Layer “8″ The Softer Side of Security – Room #209

9:35 – 10:25
The Vendor Problem
by Winn Schwartau, President, The Security Awareness Company

Part of the Layer 8 equation is dealing with vendors. Vendors permeate our networks, but do we really know what they are doing? How they affect operations and security? Is compliance an issue, and what about international networking where the rules may not be so clear?

Vendors are inside our networks for sure… but they also are tied to our networks in Cloud, SaaS and partnering environments. Have you asked yourself the questions that can affect your compliance, security, privacy and data integrity?

Eye opening. And, as usual for Schwartau, do not expect politically correct. Just the questions you really need to think about.

10:40 – 11:30
Mad Men and Behavior Modification-Leveraging Principles of Advertising for Identity Protection
by Brandon Dunlap, Managing Director – Research, Brightfly, Inc.

Companies invest significant amounts of resources in developing, marketing and positioning their products or services within a given market, yet when it comes to promoting the protection of the business and the identities of their employees and customers, many companies fail to drive the same level of marketing internally. In this session you’ll learn about the intersection between personal and work life and how it impacts the security of individual’s identities. Specifically, we’ll discuss how we, as security professionals, are uniquely positioned to drive awareness in the user population that protects both the enterprise and their personal security, inside and outside of the organization. You will get practical advice around how to alter user behavior by using techniques borrowed from marketing and advertising (2 of the most powerful forms of behavior modification), as well as a powerful toolkit to help you achieve this in your own organization.

2:00 – 2:50
The Internet’s Underground Economy

by Ian Dawson, Director of Operations & Development, MainNerve, Inc.

This presentation gives you insight and awareness related to the crisis of identity and resource theft by hackers and miscreants that use our open systems and culture against us everyday.  They are using more and more stealthy means to compromise our systems through elaborate bots and bot-nets, and deploy malware that runs in the background of our systems to do more harm that we’ve ever imagined.  This is a great opportunity to understand the economies and systems that exist for these “bad guys” to turn resources they steal into cash.  You’ll see example after example of cases where the misuse of our systems and information turns into money for people usually thousands of miles away.  You no longer need a gun to rob a bank, nor do you even need to be in this country to steal from a bank or an individual.  Learn more at the Internet’s Underground Economy, by MainNerve.

3:00 – 3:50
Communicating with Security Metrics and Continuous Monitoring
by Ken Halley, President and Chief Executive Officer, Cofounder, Gideon Technologies

This session will address the use of continuous monitoring to drive the collection of metrics that IT and Information Security executives can use to measure and communicate their compliance and security posture, and provide visibility of risks as it relates to their business lines and applications, in near real time.

3 Comments

Leave a Reply

Your Name: (required)

Your Email: (will not be published) (required)

Your Website:

Your Message:

submit comment