Here is the registration link: https://ae.rsaconference.com/US14/portal/newreg.ww
Use one of the codes below to get your free Expo only pass. Be sure to visit the vendor whose code you used.
I will be updating them as I get them.
Duo Security - Booth #2518 - EC4DURY
F5 Networks - Booth #1801 - EC4F5NET
Proofpoint - Booth #1527 #520 and #3615 - SC4PROOFB or EC4PROOFE
APCOM - Booth # 632 - EC4APCON
OPSWAT - Booth #2531 - EC4PSWT
Here is the registration link: https://ae.rsaconference.com/US13/portal/login.ww
Use one of the codes below to get your free Expo only pass. Be sure to visit the vendor whose code you used.
AhnLab - FXE13AHN
APCON - FXE13APC
OneLogin - FXE13LOGIN
Proofpoint - FXE13PRF
Symantec - FXE13SYM
I have been fortunate enough to once again be selected as a speaker for the RSA Conference in San Francisco. This years conference (2013) will be held at the Moscone Center from February 24 though March 1. I will be hosting a Peer2Peer (P2P) session entitled "To Report, or Not To Report, Will My Job Be At Risk? That is the Question" on Wednesday February 27, in Room 110, at 10:40. I am one of only 9 P2P sessions and attendance is restricted to only 25 people. If you want to participate be sure to get there early.
During this hour long session we will discuss ways to encourage our users to report policy violations and security incidents that they wittiness. If we can be informed of issues that arise early, before they get out of control, we can deal with them and mitigate further risk.
When was your last virus outbreak? Wouldn't it have been great if the very first user called and reported it before it spread? Do you have some war stories to share? Do you have some suggestions to bring? Is there something that does/does not work for your agency?
If you have any ideas please post them to comments or email me with them. I would love to hear your ideas and to see you there!
RSA Conference 2013 registration is now open. Register before November 16, 2012 and receive a substantial discount. I have attended this conference for many years and was a speaker once. It is a great event with tons of training, networking, social opportunities.
This years event will be held on February 25 through March 1 at the Moscone Center in San Francisco California.
Main site is here
Register here
Tools to help justify your trip are here
Posted below is my abbreviated presentation from the 2012 RSA Security Conference in San Francisco. I hate watching myself on video and no, despite my swaying back and forth, it was not film on a ship in rough seas.
Garage Sale Forensics: Data Discovery Through Discarded Devices
"A review of how data storage devices can be discovered and the data left
on those devices used for unauthorized purposes. Individuals and
organizations may dispose of a device without completely purging all
data that resides or resided on it. This presentation will show where
devices can be located, how data can be recovered, and how the
organization or individual can protect themselves from loss."
Here is a podcast that I did leading up to the RSA Conference 2012 in San Francisco. I should be able to post a video of a shortened version of my presentation that I was invited to do along with my full presentation later.
http://365.rsaconference.com/community/connect/blog/2012/02/14/rsac2012-podcast-das-403-garage-sale-forensics-data-discovery-through-discarded-devices
Use the below codes and this link to register (https://ae.rsaconference.com/US12/portal/login.ww)
ProofPoint - EC12PRF
DeviceLock - EC12DVL
IronKey - EC12IRN
Symantec - SC12SYM
SF Bay InfraGrid - 1412RLPXPO
FortiNet - EC12FRT
Below is this years haul. After being there for the full week I could have gotten a lot more but didn't want to carry it around all day. Once again a great conference and I walked away with a lot more knowledge then swag. Qualys wins for best swag; those insulated cups are really nice!
RSA USA 2011 - San Francisco registration is now open. The event is to be held at the Moscone Center in San Francisco California. The dates are February 14 - February 18 2011. Early bird Full Pass registration is $1,495 and there are additional discounts for Government Employees and possibly other memberships (ISC2). This is the 20th year of this event.
As I do every year, I will post updates leading up to the event and free "Expo Only" passes when I get them.
Cybersecurity is our shared responsibility. That means everyone has the potential to make a difference and educate others. You can raise awareness within your school, your workplace, your community – or all three.
Show your support for NCSAM.
By now most everyone is familiar with the recording breaking data theft that occurred at T.J. Maxx. Hackers used poorly secured wireless access points to intercept customer records. But big business is not the only and not the most common target of wireless hacking.
The hacking technique known as wardriving is the act of scanning for wireless access points, or networks, from a moving vehicle. With the right tools the hacker has the ability to see, record, log, and locate nearly any wireless access point. Once upon a time hackers would mark the curb or street where the access point was located so that they and their cohorts could locate it again, this was known as 'chalking'. However technology has changed this and finding wireless access is a simple mouse click away.
Wigle.net is an online repository of wireless access points located all over the world. From this site anyone can simply browse an interactive Google map and locate millions of wireless access points, according to their site 19,776,866 to be exact. The information from this site does not guarantee that a hacker will be able to gain access to the networks. But is does give the would-be wireless leach a good place to start looking.
In 2004, 100 students in Seattle Washington were able to locate 5,225 wireless access points in the Seattle area. Of those 52% of them were not configured with any security and were ‘open’ for anyone to connect to. (source)
While those numbers are outdated, it is still not uncommon to find a huge number of wireless networks that use no security or poor outdated security. The ‘out of the box’ configuration of most any wireless access points would allow a hacker to not only gain access to the wireless network, but gain access to devices on that network.
Once connected the hacker could be able to intercept any communications and data. They could inject malicious code, reconfigure devices, or deny the network owner access to their own network. They could intercept banking transactions, prescription and medical information, credit card information, Social Security Numbers, and anything else traveling across the network or even stored on computer in the network.
It is important that you not simply unpack that new wireless device and plug it in without reviewing the documentation and configuring the security mechanisms on the device. Stay away from the WEP security as it is outdated and is now easily hacked. WPA or preferably WPA-2 should be your first choice in 'out of the box' configuration of your wireless access points.
Beyond configuration of the devices, think about where you are going to place the device. Things like walls, trees, insulation and other solid objects will reduce the signal of the device making it harder for someone to connect from the street or sidewalk. It may be better to place your access point in the back of your house rather than the front of your house. Some devices come with two antennas, can you remove one antenna to reduce the signal while still getting access, maybe? And it is a great idea to change that administrator password that is printed in the documentation.
Go to Wigle.net and see if your access point is recorded on that site. If you live in a populated area, the odds are, it is.
I am back from the 2010 RSA Security Conference, San Francisco. Had a great time, learned a lot of great things, and collected a bunch of cool swag. Head over to Facebook and see the photos.
Is your training budget nonexistent? You’re not alone. In these times it is very hard to find the money to invest in training or events. Luckily, many vendors have made available free Expo only passes to the RSA event in San Francisco in a couple of weeks. With these passes you get full access to the Expo and all Expo activities, access to the bookstore, keynotes, town hall meetings, and sponsored events. In the past I have gotten RSA issued bags, lanyards, USB thumb drives, and other documentation and items. And that is just from the RSA desk when you register on site. This event will be a plethora of information from hundreds of vendors on the Expo floor. And swag galore!
These passes may be in limited supply so you should act fast.
PKWare = EC10PKW (LINK)
Symantec = SC10SYM (LINK)
Qualys = SC10QLS
3Com = SC10TPP (LINK)
You can find more with a Google Search (Google)
RSA 2010 Registration (LINK)
* Update 2/26/2010: Free pass registration ends today.
The early bird coupons are starting to roll in for RSA 2009 in San Francisco. Below is a link to save $700 off the "Delegate Pass". If you are a CISSP you should see the additional $200 ($900 total) any day now. When I start getting the Free "Expo Only" passes I will pass those on.
RSA Conference 2009
