June 2018 - Monthly Meeting

June 2018 Monthly Meeting

Session 1 - Exfiltrating Data through IoT

Abstract:

This talk will provide insights based on research/analysis of data exfiltration vulnerabilities found in IoT protocols (i.e. SSDP, P25, Zigbee, Z-Wave, Wi-Fi, uPnP). With an eye toward mitigating weaknesses in current protocols and to impact future protocol designs to eliminate them.

From an information Security professional perspective, we will raise the awareness of these vulnerabilities and weaknesses. The second part of the session will delve into the details and demo data exfiltration using IoT protocols.

The application of this knowledge will allow you to assess and mitigate these risks as you integrate IoT technologies into your production systems, as well as making informed decisions regarding IoT device and protocol selection.

Speakers: Garry Drummond and Aaron Davidson, Solutions Architect

Garry Drummond, CEO & Founder, 802 Secure

Mr. Drummond is a Wartime CEO. From his humble beginnings in Pleasanton, California, he boot-strapped his start-up company, 802 Secure Inc. from his garage. Mr. Drummond has conceptualized, designed and delivered cyber security products for both Critical Infrastructure, Enterprise and Government clients around the world.

Mr. Drummond is a Certified Information System Security Professional (CISSP) and is passionate about wireless cyber security. With the recent explosion of Internet of Things, (IoT) device enablement as well as mobile adoption - wireless has now become the easiest way to back-door the wired-side of the network. Wireless technologies do not follow the traditional guidelines of security and new methodologies are required in order to secure digital assets. Only through new thought leadership and innovation using software-defined-radios with big data analytics can these new broader spectrum attack vectors be identified.

Most recently, in 2017, Mr. Drummond was awarded Most Innovative CEO of the Year.

Aaron Davidson, Solutions Architect, 802 Secure

Mr. Davidson is 802 Secure’s Solution Architect working with clients in understanding their issue(s) and providing solutions in meeting their security needs. His experiences stretch from technical support, system admin, network engineering & architecture, quality assurance, security engineering, sales engineering and personnel management. His technical sales skills and bonding with deeply technical individuals as well as creating relationships at management, senior executives, VP and C level have provided effective solutions in meeting the demands of their industry segments.

Session 2 - Cybercrime Tactics and Techniques Report

Abstract:

Don’t get too comfortable—might seem that it was a slow quarter for malware, but new players are making themselves known and wreaking havoc everywhere. Join Malwarebytes Labs for a look at Cybercrime Tactics and Techniques: Q1 2018 Report.

Speaker:

Adam Kujawa, Director, Malware Intelligence, Malwarebytes

Adam is the Head of Malware Intelligence at Malwarebytes, with 10 years of experience fighting malware behind the scenes and on the front lines. Adam has analyzed APT/state-sponsored threats, as well as threats to government and private industry. In addition to research and analysis, Adam has provided conference talks and developed technical courses on topics from basic malware analysis to malware evolution and threat intelligence. He has had articles published in SC Magazine, TechCrunch, and other notable tech publications and is frequently quoted on computer security matters by news organizations.

Cancellation / Refund Policy:

ISACA Silicon valley aims to keep the costs minimum for such events. Also due to prior payments made to conference venue and instructor, no cash refund will be provided. If you cancel your registration one day prior to the event, a credit will be given to attend a future event in 2018 (Meeting / Training). No credit will be given for the cancellation request on the day of the event or later.

ISACA SV Job Portal: Looking for your next career move? Search for jobs at http://www.isaca.org/chapters8/Silicon-Valley/Resources/Pages/Jobs%20Board.aspx

Do you have an opening in your company/team? ISACA helps you reach 3000+ members and non-members including ISACA certified professionals working on Information Security/ Internal Audit/ Risk Management. Post your job opening at ISACA Silicon Valley website. Send us the job opening details to marketingdirector@isaca-sv.org

Join our LinkedIn Group: https://www.linkedin.com/groups/114346

Follow us on Twitter: https://twitter.com/isacasv

ISACA Membership Renewal:

If you haven't done already, please log on to www.isaca.org to renew your 2018 ISACA annual membership. We appreciate everyone who have renewed their membership!

ISACA Certification Renewal:

To complete your certification renewal, visit www.isaca.org/reportCPE to submit CPEs.

Where

When