From: The SANS Institute (Webcastsans.org)
Date: Sun Feb 03 2008 - 14:16:50 CST

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Please join us the upcoming weeks for the following informative, free
SANS webcasts that you won't want to miss!

WEBCAST 1

SANS Special Webcast: The SANS Database and Compliance Survey
WHEN: Tuesday, February 5, 2008 at 1:00 PM EST (1800 UTC/GMT)
FEATURED SPEAKER: Barb Filkins
http://www.sans.org/info/22989
Sponsored By: Lumigent http://www.lumigent.com/

How many organizations really understand their data privacy rules well
enough to know where and how to protect their regulated data with proper
audit?
What are their perceptions of data privacy regulations, and how are they
integrating compliance into their data management practices, starting
at the database?
These and other questions will be answered when, on Feb. 5, SANS analyst
Barbara Filkins uncovers the findings in the SANS Database Auditing and
Compliance Survey. Conducted over three months, 348 respondents answered
a variety of questions ranging from their perceptions of compliance
issues to security frameworks and roles and responsibilities for data
privacy protection inside their organizations.

We will also be announcing the $250 American Express card winner from
among nearly 200 respondents who signed up for our drawing.

WEBCAST 2

SANS Special Webcast: A Brief History of Hacking with Dave Shackleford
WHEN: Wednesday, February 6, 2008 at 1:00 PM EST (1800 UTC/GMT)
FEATURED SPEAKER: Dave Shackleford
http://www.sans.org/info/22994
Sponsored By: Core Security http://www.coresecurity.com/

Quick quiz: What do Phreaking, Captain Crunch, Blue boxes, LoD and MoD have
in common?
Answer: They were all milestones in the evolution of hacking and
information security.

Please join Dave Shackleford, CTO at the Center for Internet Security
and SANS certified instructor, for a look at the evolution of hacking
and hackers.

You'll hear Dave's take on lessons learned from hacking milestones,
including:

The early days of phone phreaks and bulletin boards The growth of hacker
gangs and 2600: The Hacker Quarterly The 75-cent accounting error that
led to an international crime investigation Bill Cheswick's evening with
"Berferd" The first malware and Trojan horse programs

At the same time, Dave will give his predictions for the coming year of
hacking - and discuss which hacker movies are most realistic (if any)!

WEBCAST 3

WhatWorks Webcast: WhatWorks in Intrusion Detection and Prevention:
Improving Network Visibility at GraceKennedy
WHEN: Tuesday, February 12, 2008 at 1:00 PM EST (1800 UTC/GMT)
FEATURED SPEAKERS: Alan Paller and Gregory Henry
http://www.sans.org/info/22564
Sponsored By: Sourcefire http://www.sourcefire.com/

A need for increased visibility into its diverse network prompted
GraceKennedy's security team to seek an intrusion detection system. They
found a solution that met all their needs and offered great tech
support, as well as a component that could establish a network activity
baseline and another that included a top vulnerability scanner for the
same price as other solutions they tried. GraceKennedy is one of the
Caribbean's largest and most dynamic corporate entities. The company
started in Jamaica in 1922 as a small trading establishment and wharf
founder. It has expanded and diversified over the years, changing from
a privately-owned enterprise to a public company listed on the stock
exchanges of Jamaica, Trinidad, Barbados and the Eastern Caribbean.
Today, the GraceKennedy Group comprises a varied network of some 60
subsidiaries and associated companies located across the Caribbean, in
North and Central America and the United Kingdom. The group's operations
span the food distribution, financial services, insurance, remittance,
hardware retailing and food-processing industries.

WEBCAST 4

Ask the Expert: You've Collected the Logs, Now What? Reducing Risk through
Integrated Log Management, Database Monitoring and Real-time Event
Management
WHEN: Thursday, February 14, 2008 at 1:00 PM EST (1800 UTC/GMT
FEATURED SPEAKER: Dave Shackleford
https://www.sans.org/webcasts/show.php?webcastid=91773
Sponsored By: netForensics http://www.netforensics.com/

So you've collected event logs from security devices and other critical
systems and stored them away - great. Check the compliance box. Now
what?

Logs are important... but only if you are doing something with them.

They provide valuable, credible, accurate information about what is
going on in your inter-connected environment. But if your logs are not
being analyzed regularly and in real-time, how can you tell if data
isn't seeping out of your databases and other critical applications?
Manually glancing through logs may be enough to "check the box" for
compliance purposes, but it is definitely not enough to detect data
theft or other malicious activity.

WEBCAST 5

Ask the Expert: Host Based Behavioral Intrusion Detection - A valuable tool
in a security professionals arsenal
WHEN: Thursday, February 21, 2008 at 1:00 PM EST (1800 UTC/GMT)
FEATURED SPEAKERS: Dave Shackleford and A.N. Ananth
http://www.sans.org/info/23009
Sponsored By: Prism MicroSystems http://www.prismmicrosys.com/

A behavioral model to IDS/IPS offers many advantages, but along with it
comes serious management challenges. Attend this informative webinar to
learn the pros and cons of this approach. After the concept has been
described, learn how EventTracker from Prism Microsystems used
behavioral analysis alerting to provide many of the real advantages of
behavioral IDS, while mitigating many of the management challenges.

WEBCAST 6

Tool Talk Webcast: A Practical Approach to Cyber Security within Control
System Environments
WHEN: Tuesday, February 26, 2008 at 1:00 PM EST (1800 UTC/GMT)
FEATURED SPEAKER: Brian Contos
http://www.sans.org/info/23014
Sponsored By: ArcSight http://www.arcsight.com/

Recently there has been substantial media hype surrounding cyber attacks
against critical infrastructure: oil and gas, power and energy,
chemical, etc. Few disagree that systems controlling critical
infrastructure make valuable targets for a wide range of attackers and
pursuits; but the FUD sometimes shadows the facts. So rather than debate
the threat level, this webcast will focus on empirical findings derived
from multiple, federally funded research projects. These collaborative
projects have brought together federal agencies, academia, control
system vendors, IT security vendors like ArcSight, and industry
representatives to research and test practical cyber incident
prevention, detection and response.

********************************************************************
SANS is pleased to announce our new Training and Events Calendar - an
easy way to see what opportunities are available to you during the
coming month! The current calendars are now available for download from
http://www.sans.org/info/7926.

To change your subscription, address, or other information, visit
http://portal.sans.org. If you wish to have your name removed from our
mailing list, visit the site above, click on "update your account" and
check the box "Do not send any email."

********************************************************************

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]