Nov

Atlanta, GA

Atlanta Information Security Forum

Overview Agenda Speakers Sponsors Steering Pricing & Location

November 19-20
Hyatt Regency Atlanta
Atlanta, GA

The Atlanta Information Security Forum brings together experienced IT and information security practitioners for confidential information sharing on the industry's most important issues, technologies, and trends. The two-day Forum includes keynote addresses, technical and strategic roundtable discussions led by IANS' Faculty, networking events, and the opportunity to learn about new technologies.

Why Attend

Gain tangible, real world insights on best practices and lessons learned directly from your peers
Stay current with emerging technologies and early-stage deployments
Connect with the industry's leading minds
Network and connect with other influential senior IT managers and business leaders
Earn 16 Continuing Education Credits

Atlanta Information Security Forum

The Information Security Forum curriculum is driven by our Steering Committee, our network of industry experts, and by our 2013 content agenda.

Click here to download a copy of the agenda.

TRACK 1: INFORMATION PROTECTION

Information Protection is a fast-growing market driven by a new wave of technology, business, and regulatory trends as well as new threats. A top concern with security professionals is the ongoing proliferation of employee-owned devices in the workplace and the realization that, to date, there is no tool that can stop leakage or data from being stolen. While our industry cannot be 100 percent prepared, hope is not lost. Having a good handle on what attackers might want, where your data resides, and who manages protection of it, and what to do when a breach is identified is a good baseline. Layer on top of that industry-leading tools and skilled professionals who understand attackers’ ideologies and you are creating a top notch information protection strategy. During the roundtable discussions, experts will walk attendees through a series of strategic exercises that challenge them to think more like an attacker in order to better prepare for the inevitable – some form of corporate data loss.

How Compliance Drives Budgets... And Sets us up to Fail
Security Control Commoditization: Really Getting More for Your money?
Mobile Security Deficiencies: Driving Data Loss and Impacting Bottom Lines
MDM, MAM, M?M: Mobile Security Alphabet Soup - What Really Works?

TRACK 2: INCIDENT RESPONSE & PLANNING

If asked, most enterprise information security teams would claim that their incident response (IR) strategy is firmly in place. However, when digging deeper into the specificity of the programs that comprise an overall IR plan, even the most mature teams grapple with various elements. Business alignment is key to navigating audit and logging, metrics, and malware response. So too is having the right resources – people, process, and technology – mapped out in advance of any need, be it a board meeting, an external audit, or a full blown security incident. The roundtable sessions of the Incident Response & Planning track will provide attendees actionable insights they can take away to improve their audit and logging function, metrics, and malware response programs.

Incident Postmortem and Forensics
Developing Your Security Team: Power-ups for Your Staff
Tactical Techniques: Problem Solving on the Fly
Security Metrics: The Quest for Meaning

TRACK 3: THREAT MANAGEMENT

The Threat Management track is a mixed bag of topics ranging from how to prepare your team, to learning best practices for responding to an incident, and everything in between. One key theme that runs through the whole track is: Be prepared! Use past experiences to guide future learning, think proactively rather than reactively, and understand exactly what is at stake every time you make an information security decision for the entire organization. At the end of the Forum, you will come away with ideas that are new and out-of-the-box rather than thinking about security in the same way they have for years.

New Penetration Testing Tools and Techniques
Security Awareness: Educating and Arming End Users
Social Engineering StrategiesApplication
Adaptation and Defense: Are Self-Defending Applications Possible?

TRACK 4: RISK AND COMPLIANCE

This track will bring attendees up-to-date on some of the more pressing legal matters that affect information security teams. It’s enough that the infosec community has security processes, technology, and teams to manage, but add to it the growing list of laws and regulatory demands and security professionals are inundated and overwhelmed by the amount of boxes that must be ticked off on a daily basis. Though laws and government involvement are often negatively perceived among the security community, this track will explain how security professionals can turn the negative into a positive in order to better protect themselves from a policy, contractual, and technological standpoint.

Noncompliance & Case law: What Happens When Things Go Wrong?
The Cloud 2013: Same as it Ever Was?
What Would You Do? A Tabletop Exercise
Conflicts of Interest: Data Protection and Privacy in a Global Economy

Keynote Speakers

Peter Kuper

IANS

Faculty

Peter Kuper is a Partner with In-Q-Tel, the strategic investing firm that identifies, adapts, and delivers innovative technologies to support the missions of the US Intelligence Community. Peter actively seeks and works with private companies with a particular focus on security and enterprise software. Previously, Peter was the lead software analyst for Morgan Stanley where he published industry leading investment reports and led over 18 public transactions. In total, Peter was a Wall Street analyst for 15 years offering him the opportunity to work with some of the most talented executives of both public and private companies and the world’s leading investment professionals. As a visible voice for the software industry, Kuper has given numerous presentations to professional and government groups and has been interviewed on CNBC, Bloomberg Television, and quoted in The Wall Street Journal, BusinessWeek, and The Financial Times. He has also published articles in IEEE Magazine. Peter currently serves as an advisor to the Pacific Northwest National Lab and is a Faculty Member for IANS.

David Etue

IANS

Faculty

David Etue brings experience including security program leadership, management consulting, product management, and technical implementation. David is the vice president of corporate development strategy at SafeNet, where he is responsible for SafeNet's strategic decisions regarding product and solution partnerships, as well as mergers and acquisitions. He was previously the cyber security practice lead at management consultancy PRTM, VP of Products & Markets at Fidelis Security Systems, led General Electric's global computer security program, and held various positions in technology strategy, operations and product management. He is a Certified Information Privacy Professional, a graduate of GE’s Information Management Leadership Program, and a certified Six Sigma Green Belt.

Speakers

Bill Dean

Industry Experience:

Bill Dean is the director of computer forensics and security assessments for Sword & Shield Enterprise Security, Inc. Bill has worked in the technical field his entire career with more than 15 years of experience in roles such as programmer, systems support, enterprise systems design and engineering, virtualization, digital forensics, and information security. In 2005, Bill was recognized as the primary architect for an Intel virtualization/server consolidation project and was awarded Network World’s “Enterprise All Star” and “InfoWorld’s Top 100 Projects.” Since that time, Bill has focused his career on the specialties of information security, electronic discovery, digital forensics, and incident response. Bill served as the technical expert and provided Federal Court testimony in the 7th largest eDiscovery case in 2007 and is an expert witness involving a wide variety of issues involving computer forensics.

Bill is a frequent speaker, technical instructor, and published author on the topics of computer security, incident response, digital forensics, and electronic discovery for numerous legal and technical associations. Bill possesses an associate degree in Computer Science and a baccalaureate degree in Information Technology from East Tennessee State University. Additionally, Bill is a Certified Computer Examiner, GIAC Certified Incident Handler, GIAC Certified Penetration Tester, and GIAC Certified Forensic Analyst. Bill is also an active member of the International Society for Forensic Computer Examiners and InfraGard.

Dave Lewis

Industry Experience:

Dave Lewis has over 15 years industry experience. He has extensive experience in IT operations and management. Currently, Dave works in the information security practice for Advanced Micro Devices. Dave is the founder of the popular security site Liquidmatrix Security Digest.

Prior to his current role, Dave worked in the finance, healthcare, entertainment, and critical infrastructure verticals. He has worked for a defense contractor as a security consultant to clients such as the FBI, US Navy, Social Security Administration, US Postal Service, and the US Department of Defense.

Marcus Ranum

Industry Experience:

Marcus J. Ranum is a world-renowned expert on security system design and implementation. He is recognized as an early innovator in firewall technology and the implementor of the first commercial firewall product. Since the late 1980's, he has designed a number of groundbreaking security products including the DEC SEAL, the TIS firewall toolkit, the Gauntlet firewall, and NFR's Network Flight Recorder intrusion detection system. He has been involved in every level of operations of a security product business, from developer, to founder and CEO of NFR. Marcus has served as a consultant to many Fortune 500 firms and national governments, as well as serving as a guest lecturer and instructor at numerous high-tech conferences. In 2001, he was awarded the TISC "Clue" award for service to the security community and the ISSA Lifetime Achievement Award. Marcus is chief of security for Tenable Security, Inc., where he is responsible for research in open source logging tools and product training. He serves as a technology advisor to a number of start-ups, established concerns, and venture capital groups.

Randy Sabett

Industry Experience:

Randy V. Sabett, J.D., CISSP, is counsel at ZwillGen. He advises clients on information security, privacy, IT licensing, and intellectual property. Randy has over 20 years of infosec experience, including as an NSA crypto engineer and a CISSP. He works closely with companies in helping them develop strategies to protect and exploit their information and IP based on various evolving business models, including SaaS, mobile applications, cloud, and more traditional client/server architectures. Specific areas on which he focuses include federated identity, digital and electronic signatures, state and federal information security and privacy laws, venture capital, legislative matters, government contracting, identity theft, and data breaches. He also drafts and negotiates a variety of technology transaction agreements.

Randy served as a commissioner for the Commission on Cyber Security for the 44th Presidency and has been recognized as a leader in privacy and data security in the 2007 – 2011 editions of Chambers USA: America's Leading Lawyers for Business. He has been recognized as one of the Top 50 Under 45 by the American Lawyer’s “IP Law and Business” and is listed in the International Who’s Who of Business Lawyers. He also maintains an active security clearance. Randy teaches Information Policy as an adjunct professor at George Washington University and is on the faculty of IANS. Randy also participates on the advisory boards of various information security start-up companies. He holds two U.S. patents, one in the area of information security (U.S. Patent No. 6,981,149) and the other in the area of active noise cancellation (U.S. Patent No. 5,440,642). He is also a frequent lecturer and author on issues involving information security, and has appeared on or been quoted in a variety of national media sources.

Mike Saurbaugh

Industry Experience:

Mike Saurbaugh is an information security manager at Corning Federal Credit Union, a financial institution serving members worldwide, and with assets under management of $1.5 billion. Mike has over 16 years of experience in information technology and in a variety of disciplines and leadership roles. Mike’s leadership positions have been in information security, technology services, eCommerce, and technical operations. To name a few, he has lead and implemented online banking multifactor authentication, PCI, data loss prevention, web security gateway, intrusion prevention, SIEM, change management, security awareness, and social engineering programs. Additionally, Mike has conducted many online threat and security awareness speaking engagements to diverse companies ranging from Fortune 500, aerospace, hospital executive leadership, higher education, current employer board of directors, and security summits.

Mike holds a Master of Science in Information Assurance (MSIA) from Walsh College as well as CISSP, CISM, and CRISC certifications. In addition, Mike has obtained technical certificates from Rochester Institute of Technology and additional training from Carnegie Mellon University’s CERT/CC and the SANS Institute. Mike has contributed content to SANS - Securing The Human, as well as Syngress Publishing’s CISSP Study Guide. In addition, Mike is also a member of the Websense TRITON Advisory Board, SANS OUCH! community review board, and Alfred State College’s information technology curriculum advisory committee.

Dave Shackleford

Industry Experience:

Dave Shackleford is Lead Faculty at IANS. He is the founder and principal consultant with Voodoo Security, and has consulted with hundreds of organizations in the areas of security, regulatory compliance, and network architecture and engineering. Dave is also a SANS analyst, instructor, and course author, as well as a board member with the SANS Technology Institute. He is a VMware vExpert, and has extensive experience designing and configuring secure virtualized infrastructures. He's the author of the Sybex book "Virtualization Security: Protecting Virtualized Environments", leads the Atlanta chapter of the Cloud Security Alliance, and co-chairs the CSA Top Threats to Cloud Working Group. Dave has previously worked as CSO for Configuresoft, CTO for the Center for Internet Security, and has also worked as a security architect, analyst, and manager for several Fortune 500 companies.

Aaron Turner

Industry Experience:

Aaron Turner is a recognized expert in mobile security and information protection. He is currently the president of IntegriCell, a mobile risk management consultancy. Prior to IntegriCell, Aaron was the co-founder and CEO of RFinity, a mobile security technology startup formed as the result of research conducted at the U.S. Department of Energy’s Idaho National Laboratory (INL). While at INL, he collaborated with a team of information security experts to design the world’s first large-scale testing effort to evaluate how critical infrastructure has become dependent on computing systems and the resulting vulnerabilities that those dependencies cause.

Aaron’s focus on critical infrastructure and technology began while working for over seven years at Microsoft in many of the company’s security divisions. Significant projects that Aaron worked on while at Microsoft included creating and deploying the company’s first global information security readiness curriculum, facilitating interactions between Microsoft technologists and US Law Enforcement, participating in the resolution of global-scale security incidents such as Code Red, Slammer and Blaster, and working with security experts in more than 25 countries around the world to develop information security programs.

Platinum

Sophos

We help organizations keep data safe and block the growing number of complex threats. We protect everywhere and offer complete security with our full range of endpoint, encryption, email, web, network security and UTM products. We make our products easy to install and use so you spend less time managing security.

Session: The Role of Anti-Virus in Today’s Enterprise

Blocking the latest threats is more difficult than ever. This session will be an open discussion on the role anti-virus plays in your enterprise today, where it is most effective and how you supplement it to better fortify your defenses.

Product Categories: Data Leak Prevention,Data Protection,Messaging/Email Security,Mobile

See our video: http://youtu.be/x0LL63rXc6E

Gold

Bromium

Bromium is re-inventing endpoint security to protect users across the enterprise from advanced threats. Rather than relying on signatures to prevent cyber attacks, Bromium leverages hardware-enforced isolation to protect endpoints from known and unknown threats. Bromium also provides unprecedented threat behavior intelligence that enables security teams to bolster security defenses. Bromium also provides unprecedented visibility and analysis of attack behavior, enabling security teams to bolster security defenses. For more information on Bromium, visit www.bromium.com.

Session: Re-inventing Endpoint Security

Bromium has pioneered new endpoint security technologies that protect enterprises from advanced threats. Rather than relying on detection to prevent attacks, Bromium leverages hardware-enforced isolation to protect endpoints from even “undetectable” threats, while providing actionable intelligence on malware behavior - enabling IT to understand attack intents and bolster existing defenses.

Product Categories: Data Protection,Incident Response/Forensics,Threat Management

See our video: http://youtu.be/8iOY9laRKBk

Silver

Corero

Corero Network Security, an organization's First Line of Defense, is an international network security company and the leading provider of Distributed Denial of Service (DDoS) defense and next generation security solutions. As the First Line of Defense, Corero's products and services stop DDoS and server targeted attacks, protect IT infrastructure and eliminate downtime.

Session: DDoS in the Enterprise: Defending against an evolving threat landscape

If you are attending this forum, you rely on the Internet to conduct business. This makes you a DDoS target. DDoS attacks, volumetric and application layer, can take your business down and compromise confidential information. Learn why traditional technologies, including firewalls, won’t protect against DDoS and how to stop them.

Product Categories: Data Protection,Firewall,IDS/IPS,Threat Management

See our video: http://youtu.be/H5xtjbqy7JM

Cyber-Ark

Cyber-Ark® Software is a global information security company that specializes in protecting and managing privileged users, applications and sensitive information to improve compliance, productivity and protect organizations against insider threats and advanced external threats. With its award-winning Privileged Identity Management, Sensitive Information Management and Privileged Session Management Suites, organizations can more effectively manage and govern data center access and activities, whether on-premise, off-premise or in the cloud, while demonstrating returns on security investments.

Session: ID Weaknesses in Your Privileged Accounts

Did you know that more than 90% of advanced attacks involve the compromise of privileged accounts? Are yours protected? In this session, learn how a comprehensive privileged account security strategy enables organizations to defend against external attacks and insider exploits, detect malicious behavior as it is happening, and mount an immediate, effective response.

Product Categories: Data Leak Prevention,Data Protection,Insider Threats

See our video: http://youtu.be/kyvGmofozko

ForeScout

ForeScout delivers automated solutions for Network Access Control, mobile security, threat prevention and endpoint compliance. We offer a range of BYOD solutions including an integrated approach combining both network and endpoint security. Over 1,400 global enterprises and military installations rely on ForeScout to protect their networks and sensitive data.

Session: Dynamic Monitoring & Remediation

Compliance frameworks require endpoint integrity, host defenses and access controls. You’ve invested in systems and security management to reduce exposures, but diverse devices, threats, access and state changes challenge IT capacity. This session examines a reference architecture for dynamic monitoring and remediation, and shares how NAC facilitates IT responsiveness and continuous compliance.

Product Categories: IDS/IPS,Insider Threats,Mobile,Threat Management

See our video: http://youtu.be/VpZM2v6aUig

Fortinet

Fortinet, a global provider of IT security, delivers customer-proven solutions that protect and control the IT infrastructure, thus reducing threats, optimizing performance, improving business processes, and reducing costs.

Session: Combating APT with Unified Threat Management

Today’s advanced persistent threats (APTs) are challenging both IT personnel and network security vendors. While the signature approach to malware abatement is not going away overnight, additional, dynamic safeguards need to be implemented now in order to effectively combat these threats at all layers in rapid fashion.

Product Categories: Application Security,Firewall,IDS/IPS,Insider Threats

See our video: http://youtu.be/qMvV2L6pXMw

Invincea

Invincea is the premier innovator in malware threat detection, end-user threat protection, and pre-breach forensic analysis. Invincea provides enterprise network coverage against the largest attack surface for cyber-breach – spear-phishing, watering hole attacks, poisoned search results, and user-initiated infections.

Session: Stop Malware in Its Tracks

How Invincea's unique, secure virtual containers create a malware airlock on every end point. Invincea's unique approach to behavioral based malware detection that kills zero-days in their tracks. How Invincea's protection for the web browser, PDF reader, complete Office suite, .zip and .exes can stop all types of attacks against your users. How real-time capture of forensic information related to the breaches Invincea stops can better inform your security teams.

Product Categories: Data Protection,Incident Response/Forensics,Threat Management

See our video:

PhishMe

PhishMe.com provides organizations the ability to train their employees and customers about the risks of spear phishing. With over 3.5 million individuals trained, PhishMe has proven that its trainings can reduce the threat of employees and customers falling victim to phishing attacks by up to 80 percent.

Session: Thwarting Advanced Threat Actors - A Holistic Approach

Recently, there has been an uptick in the news filled with successful spear phishing attacks. People, we believe, are a critical part of an organization's security posture. PhishMe will discuss a holistic strategy for thwarting the advanced threat actors and how to conduct security awareness programs that focus on employee behavior modification.

Product Categories:

See our video:

RedSeal Networks

RedSeal Networks is the leading provider of security risk management solutions that enable businesses and government agencies to visualize their security posture, continuously audit and monitor IT compliance and eliminate cyber threats. Using patented network visualization and predictive threat modeling, the RedSeal Platform helps enterprises prioritize vulnerability remediation efforts, cut compliance costs and optimize security architecture.

Session: Continuously Measure the Efficiency of Your Security Programs

More complexity, ever-changing business demands, targeted threats and evolving compliance requirements make it imperative to know how well your layered defenses are protecting critical assets – and precisely where that protection may be falling short. Learn how RedSeal enables your IT organization to continuously measure the efficiency of security programs

Product Categories: Configuration Management,Mobile,Threat Management

See our video:

Sourcefire

Sourcefire®, Inc. is world leader in intelligent cybersecurity solutions. Trusted by organizations and government agencies in more than 180 countries, Sourcefire’s solutions, including industry-leading next-generation network security appliances and advanced malware protection, provide customers with Agile Security® for continuous protection in a world of continuous change.

Session: Network Protection for Sophisticated Threats

The network security paradigm for 2013 will center around two emerging trends: controlling applications and identifying and stopping malware. This session demonstrates how Sourcefire technologies leverage both device-based and network-based sources to give administrators visibility and control over malware and applications before, during, and after an attack.

Product Categories: Application Security,IDS/IPS,Incident Response/Forensics,Threat Management

See our video: http://youtu.be/l5lHkEr9uB8

Varonis

Varonis is the leading provider of comprehensive data governance software with installations worldwide that span firms in financial services, government, healthcare, energy, media, education, manufacturing and technology. Varonis gives organizations visibility and control over their data, ensuring only the right users have access to the right data at all times.

Session: Eliminating Data Security Threats

Though many have successfully implemented robust authentication solutions, Information Security organizations have traditionally struggled with manual authorization processes, auditing actual access activity, and implementing associated detective controls. Varonis Systems, a global leader in data governance presents a universal methodology to eliminate data security threats through authentication, authorization, auditing, and alerting.

Product Categories: Data Protection,Insider Threats,Messaging/Email Security,SIM/SIEM

See our video: http://youtu.be/_MJNJb49rTY

Search

Atlanta Information Security Forum

Keynote Speakers

Speakers

The Steering Committee

Steering Committee

Location Information

Next Event

Upcoming Events

Latest Research

Free Research

Group Discounts	Group discounts are available for groups of 4 or more. Contact Dave Peisach at (617) 948-5749 or email dpeisach@iansresearch.com for more information.