Matt will present a lecture and lab on assessing and securing wireless networks.  The session is intended for both management and technical security individuals.  In this lab participants will learn basic information about 802.11 networks, how to locate and assess wireless access points using open source tools and tips on securing 802.11 networks. This two hour session will include both a lecture and hands-on lab.

• Lab participants should bring a wireless enabled laptop to the class with an SSH or telnet client installed.
• Current CISSPs can receive CPE credit for this event if they are registered members of ISSA.
• Seating is limited for this free event, so you must be registered in order to attend.

What: Assessing Wireless Security Using Open Source Tools

When: Wednesday, September 8th, 2010 – Presentation starts at 6:00pm, Refreshments at 5:30pm

Where: Harrisburg University of Science & Technology (Click here for directions)

Street parking is typically free after 5:00pm. Harrisburg University (HU) has a parking garage and the parking fees are typically between $4.00 to $6.00. Upon arrival at HU, you should proceed directly to the Security Desk and ask to be directed to the ISSA meeting and presentation. Please note that elevator access via the HU parking garage is restricted to go to the ground floor only.

When: Wednesday, May 12, 2010 – Presentation starts at 6:00pm, Refreshments at 5:30pm

Where: Harrisburg University of Science & Technology (Click here for directions)

*Current CISSPs can receive CPE credit for this event.

The Central Pennsylvania Chapter of the Information Systems Security Association invites you to a free presentation!  The event begins with socializing and networking at 5:30pm followed by the presentation entitled, Comprehensive Vulnerability Management at the Database Level, from Mark Trinidad, Product Manager at Application Security, Inc.  

Presentation Overview
Risks to the database can come in a variety of forms; whether it is an insider attack, a rogue database that IT or a security team is unaware of, an un-patched or mis-configured database, or an attack on a database through a web-facing application. The results can be catastrophic however the breach happens, yet many organizations today still rely on manual processes, still perform infrequent scans, and lack the formalized policies and technology controls necessary to protect vulnerable database assets.

At the database level, information assets are increasingly exposed, particularly where access is granted to employees, contractors and partners.  With more entry points on any network, the past few years have seen dramatic increases in the theft and abuse of data at the database level. 

With the capacity to harm a company through manipulation of corporate databases, a rise in inappropriate user activity from inside an organization has remained largely unaddressed and difficult to prevent.  As an organization goes through various stages of growth, its data environment expands, and its data management and security needs change as well – which means as new technologies are deployed, there can be gaps in securing data, and that’s where a comprehensive vulnerability management plan can help bridge that gap, and monitoring usage and vulnerability policies.

In response to this growing problem, security professionals are proactively seeking ways to combat the threats.  This presentation will discuss: 

• The threat landscape and how to identify database vulnerabilities.
• How to use vulnerability assessment results to ensure comprehensive data protection and achieve database security goals.
• Importance of a comprehensive database vulnerability management program.
• Methodologies and best practices on how to implement actionable plans to protect enterprise database assets.

About the Speaker
Mark Trinidad  is responsible for the direction of AppDetectivePro and the development and maintenance of the vulnerability knowledgebase. Mark is a veteran at AppSecInc and has established trusted partnerships with its vast variety of customers and user base.  He focuses on understanding all the database audit controls reviewed by IT auditors and security and risk professionals.  Mark has extensive knowledge on industry and regulatory compliance, with keen focus on DIACAP, PCI DSS, HIPAA, and HiTECH.  He is an active member of the ISACA and ISSA New York Metro chapters, and has spoken at ISSA, ISACA, and OWASP chapters across the country.  Mark holds a BS from Drexel University.

Please RSVP to info@issa-pa.org if you plan on attending. Socializing and refreshments 5:30pm, Presentation 6:00pm, ISSA-PA business meeting 7:00pm. All meetings of ISSA-PA are held at the Harrisburg University of Science and Technology.

Directions, Parking and other information:

Click here for directions  The address for Harrisburg University is 326 Market Street, Harrisburg, PA  17101.

Street parking is typically free after 5:00pm.  Harrisburg University (HU) has a parking garage and the parking fees are typically between $4.00 to $6.00. Upon arrival at HU, you should proceed directly to the Security Desk and ask to be directed to the ISSA meeting and presentation. Please note that elevator access via the HU parking garage is restricted to go to the ground floor only.

The Lois Lehrman Grass Foundation made a pledge of $100,000 to CONNECT: The Campaign for Harrisburg University of Science and Technology.  The gift will enable Harrisburg University to award four non-endowed “Lois Lehrman Women in Science Scholarships” in each of five years.

“This gift will help to ensure that women have full access to educational opportunities in science, technology, engineering, and mathematics, which are known as the STEM disciplines.  As the only STEM-focused comprehensive university between Philadelphia and Pittsburgh, we are committed to the academic success of individuals historically under-represented in applied science and technology fields,” said Harrisburg University President Mel Schiavelli.

The University has raised $35.8 million toward its $40 million fund-raising drive, CONNECT: The Campaign for Harrisburg University, which was launched July 1, 2006 and is scheduled to conclude by June 30, 2011.  Entering the final 15-month home stretch of the five-year campaign, the University is optimistic that – with continued community support – it will reach its ambitious goal.

Having received national accolades for its success in enrolling women into the STEM disciplines, Harrisburg University’s freshman class in the fall of 2009 was 53 percent female.

“This gift will help ensure that women enjoy the high-paying, high-growth careers that a STEM education can provide,” said Kevin J. McNamara, Vice President for Institutional Advancement.  “More than half of the jobs that will be created over the next decade will require a STEM education. Additionally, the number of science-related career positions will increase at a rate faster than the current national average between now and 2016.” 

For more information on the CONNECT campaign, contact Kevin J. McNamara, Vice President for Institutional Advancement, at 717.901.5145 or CONNECT@HarrisburgU.edu

Founded in 2001 to address Central Pennsylvania’s need to meet the demand for careers in the science, technology, engineering and math (STEM) fields, Harrisburg University is an innovative and ambitious private institution.  It has begun to produce graduates who provide increased competence and capacity in science and technology disciplines for Pennsylvania and the nation.  Harrisburg University ensures institutional access for under-represented students and links learning and research to practical outcomes.  As a private University serving the public good, Harrisburg University remains the only STEM-focused comprehensive university between Philadelphia and Pittsburgh.

For more information on the University’s demand-driven undergraduate, graduate and certificate programs in applied science and technology fields, call 717.901.5146 or email Connect@HarrisburgU.edu.

What: Real Business Threats! Don’t be a Hacker’s Unsuspecting Target

When: Wednesday, April 14, 2010 – Presentation starts at 6:00pm

Where: Harrisburg University of Science & Technology

(Click here for directions)

*Current CISSPs can receive CPE credit for this event.

The newly re-organized Central Pennsylvania Chapter of the Information Systems Security Association invites you to a free presentation on preventing hackers and other cyber attacks scheduled for 5:30 p.m., Wednesday, April 14, at the Harrisburg University of Science and Technology. If you are a current, former or prospective member of the Information Systems Security Association, then we invite you to come out to see this and future events we have scheduled.

The event begins with socializing and networking at 5:30pm followed by the presentation entitled, Real Business Threats! Don’t be a Hacker’s Unsuspecting Target, from Mark Villinski, Manager of Field Marketing at Kaspersky Lab.

The event is timely as today’s malware imposes significant business risks due to the highly organized nature of attacks – applications, web sites and social networks are all subject to attacks and vulnerabilities. Hackers are highly organized and motivated; they can control vast networks of systems and are able to precisely target an unsuspecting victim, including many small businesses and their employees. Users may not even realize his/her machine has been compromised for days, weeks or even months due to the nature of these attacks.

During this talk, Mr. Villinski will examine what this means for business owners and what IT managers need to look for to stay on top of these threats.

Mr. Villinski brings more than 12 years of technology sales and marketing experience to Kaspersky. He leads Field Marketing efforts for the East Coast and is responsible for increasing awareness and demand for Kaspersky’s Open Space Security Produce Line. Prior to joining Kaspersky, he served as Director of Worldwide Channel Operations for Enterasys Networks, where he was responsible for the strategy and day to day operation of the Secure Advantage Partner Program. Prior to that role he held a number of channel and field marketing roles at Enterasys and Cabletron Systems. He started his high tech career in sales at Cabletron Systems.

Please RSVP to info@issa-pa.org if you plan on attending. Socializing and networking 5:30pm, Presentation 6:00pm, ISSA-PA business meeting 7:00pm. All meetings of ISSA-PA are held at the Harrisburg University of Science and Technology.

Everyone who attends will get a free one year copy of the Kaspersky Home AV product. Kaspersky will also have a business card raffle for a $50 Best Buy gift card.

Directions, Parking and other information:

Click here for directions

Street parking is typically free after 5:00pm.

Harrisburg University (HU) has a parking garage and the parking fees are typically between $4.00 to $6.00. Upon arrival at HU, you should proceed directly to the Security Desk and ask to be directed to the ISSA meeting and presentation. Please note that elevator access via the HU parking garage is restricted to go to the ground floor only.