<?xml version='1.0' encoding='UTF-8'?><rss xmlns:atom='http://www.w3.org/2005/Atom' xmlns:openSearch='http://a9.com/-/spec/opensearch/1.1/' xmlns:georss='http://www.georss.org/georss' xmlns:thr='http://purl.org/syndication/thread/1.0' version='2.0'><channel><atom:id>tag:blogger.com,1999:blog-6536699500572800975</atom:id><lastBuildDate>Sun, 26 Sep 2010 18:27:04 +0000</lastBuildDate><title>Dustin L. Fritz</title><description>CyberSecurity In Exile™</description><link>http://blog.dustinlfritz.com/</link><managingEditor>noreply@blogger.com (Dustin L. Fritz)</managingEditor><generator>Blogger</generator><openSearch:totalResults>15</openSearch:totalResults><openSearch:startIndex>1</openSearch:startIndex><openSearch:itemsPerPage>25</openSearch:itemsPerPage><item><guid isPermaLink='false'>tag:blogger.com,1999:blog-6536699500572800975.post-617477178554068926</guid><pubDate>Tue, 16 Feb 2010 23:38:00 +0000</pubDate><atom:updated>2010-02-16T18:40:12.497-05:00</atom:updated><title>The Biggest Cyber Threat?</title><description>The secret is finally out. A study commissioned by McAfee shows 600 executives in 14 countries helped put the US on the top of the list of most feared cyber threat. "The results varied widely by country, but overall, we beat out China and Russia for first place. Not surprisingly, we were the most feared nation in China and Russia, but respondents in Brazil, Spain and Mexico also put the United States at the top." Check it out for yourself and let me know what you think.&lt;br /&gt;
&lt;br /&gt;
&lt;a href="http://gcn.com/Articles/2010/02/15/Cybereye-box-cyberattacks-most-feared-country.aspx"&gt;http://gcn.com/Articles/2010/02/15/Cybereye-box-cyberattacks-most-feared-country.aspx&lt;/a&gt;&lt;div class="blogger-post-footer"&gt;&lt;img width='1' height='1' src='https://blogger.googleusercontent.com/tracker/6536699500572800975-617477178554068926?l=blog.dustinlfritz.com' alt='' /&gt;&lt;/div&gt;</description><link>http://blog.dustinlfritz.com/2010/02/biggest-cyber-threat.html</link><author>noreply@blogger.com (Dustin L. Fritz)</author><thr:total>0</thr:total></item><item><guid isPermaLink='false'>tag:blogger.com,1999:blog-6536699500572800975.post-4089545626708016360</guid><pubDate>Mon, 02 Nov 2009 03:53:00 +0000</pubDate><atom:updated>2009-11-01T23:02:57.963-05:00</atom:updated><category domain='http://www.blogger.com/atom/ns#'>Techno Forensics</category><category domain='http://www.blogger.com/atom/ns#'>cyber warfare</category><category domain='http://www.blogger.com/atom/ns#'>Cybersecurity</category><title>The 2009 Techno Forensics Conference</title><description>&lt;div class="separator" style="clear: both; text-align: center;"&gt;&lt;a href="http://4.bp.blogspot.com/_ds8bQtNb4Fk/Su5RG49EuiI/AAAAAAAAAGI/prhtDRAYHOg/s1600-h/P1100222.JPG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"&gt;&lt;img border="0" src="http://4.bp.blogspot.com/_ds8bQtNb4Fk/Su5RG49EuiI/AAAAAAAAAGI/prhtDRAYHOg/s400/P1100222.JPG" vr="true" /&gt;&lt;/a&gt;&lt;br /&gt;
&lt;/div&gt;&lt;div class="separator" style="clear: both; text-align: center;"&gt;&lt;br /&gt;
&lt;/div&gt;&lt;div class="separator" style="clear: both; text-align: left;"&gt;Tuesday October 27, 2009 at 1:00 PM I was having a great time. I had just finished lunch and started my first presentation in Lecture room C, Administration Building at the &lt;a href="http://www.nist.gov/index.html"&gt;National Institute of Standards and Technology (NIST)&lt;/a&gt;. I was attending &lt;a href="http://www.techsec.com/html/TechnoForensics2009.html"&gt;The 2009 Techno Forensics &amp;amp; Digital Investigations Conference&lt;/a&gt; in Gaithersburg, Maryland. I thought the conference went very well and a big thanks goes out to &lt;a href="http://www.techsec.com/html/ContactUs.html"&gt;Jack Wiles&lt;/a&gt; and &lt;a href="http://www.techsec.com/html/ContactUs.html"&gt;Don Withers&lt;/a&gt; for putting on yet another great conference and&amp;nbsp;allowing me to speak!&lt;br /&gt;
&lt;/div&gt;&lt;div class="separator" style="clear: both; text-align: center;"&gt;&lt;br /&gt;
&lt;/div&gt;&lt;div class="separator" style="clear: both; text-align: center;"&gt;&lt;a href="http://1.bp.blogspot.com/_ds8bQtNb4Fk/Su5XBXNT4JI/AAAAAAAAAGQ/E1hw2FgXeqI/s1600-h/P1100200.JPG" imageanchor="1" style="cssfloat: left; margin-left: 1em; margin-right: 1em;"&gt;&lt;img border="0" src="http://1.bp.blogspot.com/_ds8bQtNb4Fk/Su5XBXNT4JI/AAAAAAAAAGQ/E1hw2FgXeqI/s400/P1100200.JPG" vr="true" /&gt;&lt;/a&gt;&lt;br /&gt;
&lt;/div&gt;&lt;div align="center" class="separator" style="clear: both; text-align: left;"&gt;&lt;br /&gt;
&lt;/div&gt;&lt;div style="text-align: left;"&gt;A few days later I received an email from someone who attended my first talk called, &lt;a href="http://www.techsec.com/agenda/agenda.cgi?doc=/day&amp;amp;c=TF-2009&amp;amp;day=2"&gt;"Cyberwarfare Begins with Passion: Did Someone Awaken A Sleeping Cyber Giant?"&lt;/a&gt; The last comment on the email said, "Thanks you helped put more focus in my daily work and to get my passion back." This is what it's all about to me. I have always believed cybersecurity begins and ends with PEOPLE. I hope I was as effective with other audience members in both of my talks. If you are interested in my presentations please visit &lt;a href="http://www.thecndgroup.com/"&gt;http://www.thecndgroup.com/&lt;/a&gt;.&lt;br /&gt;
&lt;/div&gt;&lt;div class="blogger-post-footer"&gt;&lt;img width='1' height='1' src='https://blogger.googleusercontent.com/tracker/6536699500572800975-4089545626708016360?l=blog.dustinlfritz.com' alt='' /&gt;&lt;/div&gt;</description><link>http://blog.dustinlfritz.com/2009/11/techno-forensics-conference.html</link><author>noreply@blogger.com (Dustin L. Fritz)</author><media:thumbnail xmlns:media='http://search.yahoo.com/mrss/' url='http://4.bp.blogspot.com/_ds8bQtNb4Fk/Su5RG49EuiI/AAAAAAAAAGI/prhtDRAYHOg/s72-c/P1100222.JPG' height='72' width='72'/><thr:total>0</thr:total></item><item><guid isPermaLink='false'>tag:blogger.com,1999:blog-6536699500572800975.post-2696233260536314507</guid><pubDate>Fri, 18 Sep 2009 20:04:00 +0000</pubDate><atom:updated>2009-09-19T11:06:38.688-04:00</atom:updated><category domain='http://www.blogger.com/atom/ns#'>Cyber Security</category><category domain='http://www.blogger.com/atom/ns#'>cyber czar</category><category domain='http://www.blogger.com/atom/ns#'>law</category><category domain='http://www.blogger.com/atom/ns#'>white house</category><title>Lawmakers Pressure White House over Cyber-czar</title><description>&lt;div class="separator" style="clear: both; text-align: left;"&gt;&lt;a href="http://1.bp.blogspot.com/_ds8bQtNb4Fk/SrPod_jAGTI/AAAAAAAAAF4/uWlkX9374UU/s1600-h/cyber_czar.bmp" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"&gt;&lt;img border="0" iq="true" src="http://1.bp.blogspot.com/_ds8bQtNb4Fk/SrPod_jAGTI/AAAAAAAAAF4/uWlkX9374UU/s320/cyber_czar.bmp" /&gt;&lt;/a&gt;&lt;br /&gt;
&lt;/div&gt;&lt;div class="separator" style="clear: both; text-align: center;"&gt;&lt;br /&gt;
&lt;/div&gt;“I don’t think we have the luxury of a lot of time and I urge the administration to start moving forward with a plan.” –Representative Michael T. McCaul, Ranking Member on the &lt;a href="http://csis.org/programs/technology-and-public-policy/commission-cybersecurity-44th-presidency/cybersecurity-commiss"&gt;Subcommittee on Emerging Threats, Cyber Security and Science and Technology&lt;/a&gt;.&lt;br /&gt;
&lt;br /&gt;
So who wants to be the Cyber Coordinator for the White House? All applicants please send your resume to White House, 1600 Pennsylvania Avenue NW, Washington, DC 20500 or call 202-456-1111.&lt;br /&gt;
&lt;br /&gt;
Really, does anyone expect Cybersecurity to be a priority right now? Healthcare seems to be a bit more important to those on the Hill.&lt;br /&gt;
&lt;br /&gt;
To read&amp;nbsp;the&amp;nbsp;article&amp;nbsp;click &lt;a href="http://www.ethiopianreview.com/scitech/10368"&gt;&lt;span id="goog_1253303461662"&gt;&lt;/span&gt;here&lt;span id="goog_1253303461663"&gt;&lt;/span&gt;&lt;/a&gt;.&lt;div class="blogger-post-footer"&gt;&lt;img width='1' height='1' src='https://blogger.googleusercontent.com/tracker/6536699500572800975-2696233260536314507?l=blog.dustinlfritz.com' alt='' /&gt;&lt;/div&gt;</description><link>http://blog.dustinlfritz.com/2009/09/lawmakers-pressure-white-house-over.html</link><author>noreply@blogger.com (Dustin L. Fritz)</author><media:thumbnail xmlns:media='http://search.yahoo.com/mrss/' url='http://1.bp.blogspot.com/_ds8bQtNb4Fk/SrPod_jAGTI/AAAAAAAAAF4/uWlkX9374UU/s72-c/cyber_czar.bmp' height='72' width='72'/><thr:total>0</thr:total></item><item><guid isPermaLink='false'>tag:blogger.com,1999:blog-6536699500572800975.post-5192997418081011621</guid><pubDate>Tue, 30 Jun 2009 23:01:00 +0000</pubDate><atom:updated>2009-06-30T20:15:24.323-04:00</atom:updated><category domain='http://www.blogger.com/atom/ns#'>authority</category><category domain='http://www.blogger.com/atom/ns#'>Dale W. Meyerrose</category><category domain='http://www.blogger.com/atom/ns#'>czar</category><category domain='http://www.blogger.com/atom/ns#'>James Bamford and Thomas M. Davis</category><category domain='http://www.blogger.com/atom/ns#'>responsibility</category><category domain='http://www.blogger.com/atom/ns#'>cyberczar</category><category domain='http://www.blogger.com/atom/ns#'>Cyber</category><title>The Puzzle Palace, 1st DNI CIO and a Cyber Czar?</title><description>&lt;a href="http://video.vdat.com/playfile.asp?brand=VN&amp;amp;file=108102_109476.asf&amp;amp;stream=w"&gt;&lt;img style="margin: 0px auto 10px; text-align: center; width: 400px; display: block; height: 210px;" id="BLOGGER_PHOTO_ID_5353263786978769490" alt="" src="http://2.bp.blogspot.com/_ds8bQtNb4Fk/SkqdDSvU-lI/AAAAAAAAAFw/ak7BFJaZrtI/s400/blog.JPG" border="0" /&gt;&lt;/a&gt; &lt;p style="margin: 0in 0in 0pt;" class="MsoNormal"&gt;&lt;a href="http://www.visualwebcaster.com/imageslides/59747/Speaker%20Bio%20Meyerrose.pdf"&gt;&lt;span&gt;Dale W. Meyerrose&lt;/span&gt;&lt;/a&gt;&lt;span&gt;, &lt;/span&gt;&lt;a href="http://www.visualwebcaster.com/imageslides/59747/Speaker%20Bio%20Bamford%20Long%20CV.pdf"&gt;&lt;span&gt;James Bamford&lt;/span&gt;&lt;/a&gt;&lt;span&gt; and &lt;/span&gt;&lt;a href="http://www.visualwebcaster.com/imageslides/59747/Speaker%20Bio%20Hon%20Tom%20Davis%20.pdf"&gt;&lt;span&gt;Thomas M. Davis&lt;/span&gt;&lt;/a&gt;&lt;span&gt; talk about the cyber czar's first 100 days in office. You have to watch and listen to this panel discuss issues with authority and responsibility of the soon to be appointed cyber czar. Listen and watch Tom closely as a news reporter asks him if he has been interviewed for the cyber czar position...it's interesting to say the least. What do you think about the cyber czar position and cyber command? Is this going to work? To view the talk click the image above.&lt;/span&gt;&lt;/p&gt;&lt;br /&gt;&lt;div&gt;&lt;/div&gt;&lt;div class="blogger-post-footer"&gt;&lt;img width='1' height='1' src='https://blogger.googleusercontent.com/tracker/6536699500572800975-5192997418081011621?l=blog.dustinlfritz.com' alt='' /&gt;&lt;/div&gt;</description><link>http://blog.dustinlfritz.com/2009/06/dale-w.html</link><author>noreply@blogger.com (Dustin L. Fritz)</author><media:thumbnail xmlns:media='http://search.yahoo.com/mrss/' url='http://2.bp.blogspot.com/_ds8bQtNb4Fk/SkqdDSvU-lI/AAAAAAAAAFw/ak7BFJaZrtI/s72-c/blog.JPG' height='72' width='72'/><thr:total>4</thr:total></item><item><guid isPermaLink='false'>tag:blogger.com,1999:blog-6536699500572800975.post-3881069673657120265</guid><pubDate>Mon, 29 Jun 2009 02:42:00 +0000</pubDate><atom:updated>2009-06-28T23:56:55.892-04:00</atom:updated><category domain='http://www.blogger.com/atom/ns#'>Threat</category><category domain='http://www.blogger.com/atom/ns#'>US</category><category domain='http://www.blogger.com/atom/ns#'>Russia</category><category domain='http://www.blogger.com/atom/ns#'>Cyber</category><title>US, Russia Disagree On Approach To Cyber Threats</title><description>&lt;a href="http://images.google.com/url?source=imgres&amp;amp;ct=tbn&amp;amp;q=http://images.ientrymail.com/securitypronews/noaa_russian_hackers.jpg&amp;amp;usg=AFQjCNFywjanJ5hyEGPuFrs7bSDJ6zvv-g"&gt;&lt;img style="DISPLAY: block; MARGIN: 0px auto 10px; WIDTH: 336px; CURSOR: hand; HEIGHT: 200px; TEXT-ALIGN: center" alt="" src="http://images.google.com/url?source=imgres&amp;amp;ct=tbn&amp;amp;q=http://images.ientrymail.com/securitypronews/noaa_russian_hackers.jpg&amp;amp;usg=AFQjCNFywjanJ5hyEGPuFrs7bSDJ6zvv-g" border="0" /&gt;&lt;/a&gt; US and Russia disagree on an approach to cyber threats? Are you serious? Of course they do. If a &lt;a href="http://archives.chicagotribune.com/2008/dec/26/business/chi-russia-hackers2_rodriguezdec26"&gt;December 2008 report by the Chicago Tribune&lt;/a&gt; can’t spell it out any clearer I don’t know what to say, “Russian hackers target U.S., Europe for profit and politics.” Yes Russia is hacking the US and guess what…they can’t agree on how to fix it! First rule of international hacking, 1) International hacking does not exist. Yes this is the game we are playing right now…"The Cyber Fight Club" almost like Fight Club, right? We are going to see a lot more of these types of news reports as President Obama talks more about cybersecurity and you will notice that everyone has their own idea of how to fix cyberspace. Why? Because every nation is now in the game of cyber-whatever! Replace whatever with your choice term; crime, espionage, attack, war, stalking, etc... How do you feel about this exclusive club of disagreement?&lt;br /&gt;&lt;p&gt;--Article Begin--&lt;br /&gt;&lt;/p&gt;&lt;p&gt;&lt;a href="http://www.redorbit.com/news/technology/1712606/us_russia_disagree_on_approach_to_cyber_threats/"&gt;US, Russia Disagree On Approach To Cyber Threats&lt;/a&gt;&lt;br /&gt;Posted on: Sunday, 28 June 2009, 11:45 CDT&lt;br /&gt;&lt;/p&gt;&lt;p&gt;The United States and Russia are locked in a fundamental dispute over how to counter the growing threat of cyberattacks that could be disastrous for computer systems and the Internet, according to the New York Times. In less than two weeks, President Barack Obama will be meeting with Russian leaders to try to come to an agreement on how to deal with the threats. The newspaper cited an unnamed senior State Department official as saying that both nations were in agreement that cyberspace is an emerging battleground. So far, that is all they can agree on. &lt;/p&gt;&lt;p&gt;Both sides are expected to address the subject when Obama visits Russia next month as well as at the General Assembly of the United Nations in November. &lt;/p&gt;&lt;p&gt;Russia wants an international treaty similar to those negotiated for chemical weapons and has continually promoted that approach in a series of meetings this year, the report said. And from where they stand, the absence of a treaty is allowing a form of an arms race that could have dangerous consequences. &lt;/p&gt;&lt;p&gt;The United States argues that a treaty is not necessary, but rather advocates improved cooperation among international law enforcement groups is what is needed. &lt;/p&gt;&lt;p&gt;U.S. officials say the disagreement over approach has fettered international law-enforcement cooperation, especially considering that a substantial amount of the attacks against American government targets are originating in China and Russia. &lt;/p&gt;&lt;p&gt;"We really believe it’s defense, defense, defense," The Times quotes the State Department official as saying, who requested anonymity. "They want to constrain offense. We needed to be able to criminalize these horrible 50,000 attacks we were getting a day." &lt;/p&gt;&lt;p&gt;Any agreement on cyberspace poses challenges because of the many implications of censorship of the Internet, sovereignty and participants who might not be subject to a treaty. China is already under a lot of scrutiny for its ever-encroaching control and supervision over the Internet and its content. &lt;/p&gt;&lt;p&gt;Many countries have developed cyber weaponry such as “logic bombs”, “botnets”, and microwave radiation devices to contend with the growing threats. Logic bombs can be hidden in computers to interrupt them at crucial times or damage circuitry, and "botnets" can disable or spy on websites and networks, and microwave radiation devices are used to burn out computer circuits from miles away, the paper said. &lt;/p&gt;&lt;p&gt;The United States is trying to improve cybersecurity by building relationships among international law-enforcement agencies. State Department officials hold out as a model the Council of Europe Convention on Cybercrime, which took effect in 2004 and has been signed by 22 nations, including the United States but not Russia or China. &lt;/p&gt;&lt;p&gt;Russia argues that the European convention on cybercrime gives the police the authority to open investigations of suspected online crime originating in another country without first informing local authorities, which infringes on traditional ideas of sovereignty. &lt;/p&gt;&lt;p&gt;The United States and China have yet to hold high-level talks on cyberwar issues, but there is some evidence that the Chinese are being sought out by Russia for support of an arms control treaty for cyberspace, according to specialists. &lt;/p&gt;&lt;p&gt;Whichever approach prevails, arms control experts believe major governments are heading down the path toward a cyber arms race. &lt;/p&gt;&lt;p&gt;Obama is expected to be in Russia on July 6-8 on his third major foreign trip to hopefully improve relations with Russia that had been terribly strained under the former administration of George W. Bush. &lt;/p&gt;&lt;p&gt;Source: redOrbit Staff &amp;amp; Wire Reports &lt;/p&gt;&lt;p&gt;--Article End--&lt;/p&gt;&lt;div class="blogger-post-footer"&gt;&lt;img width='1' height='1' src='https://blogger.googleusercontent.com/tracker/6536699500572800975-3881069673657120265?l=blog.dustinlfritz.com' alt='' /&gt;&lt;/div&gt;</description><link>http://blog.dustinlfritz.com/2009/06/us-russia-disagree-on-approach-to-cyber.html</link><author>noreply@blogger.com (Dustin L. Fritz)</author><thr:total>0</thr:total></item><item><guid isPermaLink='false'>tag:blogger.com,1999:blog-6536699500572800975.post-5014368307969705025</guid><pubDate>Sat, 20 Jun 2009 19:30:00 +0000</pubDate><atom:updated>2009-06-20T15:32:54.884-04:00</atom:updated><category domain='http://www.blogger.com/atom/ns#'>cybesecurity</category><category domain='http://www.blogger.com/atom/ns#'>cyberczar</category><title></title><description>&lt;span style="font-size:100%;"&gt;&lt;a onblur="try {parent.deselectBloggerImageGracefully();} catch(e) {}" href="http://img.timeinc.net/time/daily/2009/0906/cyber_war_0618.jpg"&gt;&lt;img style="margin: 0px auto 10px; display: block; text-align: center; cursor: pointer; width: 525px; height: 294px;" src="http://img.timeinc.net/time/daily/2009/0906/cyber_war_0618.jpg" alt="" border="0" /&gt;&lt;/a&gt;&lt;/span&gt;&lt;span style="font-size:100%;"&gt;West Point students, from left, Lieut. Colonel Robert Fanelli and cadets Nathan Larsen, Mark Evinger (seated) and Marc Abbott participate in National Security Agency cyberwar games. Photo by Michael Falco from The New York Times, Redux.&lt;br /&gt;&lt;span style=";font-family:georgia;" &gt;&lt;br /&gt;&lt;/span&gt;&lt;/span&gt;&lt;span style="font-size:100%;"&gt;The interesting thing about information security is that almost anyone can do it...or at lease can look like they are doing it. Time.com released an article about &lt;a href="http://www.time.com/time/nation/article/0,8599,1905822,00.html"&gt;President Obama's next choice for Cyberczar&lt;/a&gt;. What's more important an information security expert or a professional politician as the leader for cybersecurity for the free world as we know it? Think about this question as you read the article. Let me know what you think!&lt;br /&gt;&lt;br /&gt;---Article Begin---&lt;br /&gt;&lt;br /&gt;Tom Davis, a moderate Republican from Virginia, has emerged as a leading candidate for the Obama Administration's newly created position of cybersecurity czar. Sources familiar with the White House's deliberations on the subject say Obama officials feel a Washington power player would make a better candidate than a tech guru. "They want someone who understands technology issues, but more importantly, knows how to get things done in Washington," says a cybersecurity expert who has been consulted by the White House. "There are very few people who have that combination of skills, and Davis is at the top of that short list."&lt;br /&gt;&lt;br /&gt;Davis, who served in the House of Representatives for seven terms before retiring last fall, is a Hill veteran with extensive experience in technology policy. He authored the Federal Information Security Management Act in 2002, chaired the Subcommittee on Technology and Procurement Policy and was a co-chair of Congress's Information Technology Working Group. (He also led the powerful House Committee on Oversight and Government Reform and is popular on both sides of the aisle in Congress.) Crucially, Davis also has good connections to the IT private sector. His district, the 11th, is bristling with technology companies. Since retiring from Congress, Davis has joined the consulting firm Deloitte. Davis was not available for comment. (Read about Chinese cyberspies.)&lt;br /&gt;&lt;br /&gt;Obama announced last month that he would personally pick the cybersecurity czar, who would report to the National Security Council and the National Economic Council. The cybersecurity community has for weeks been speculating about who will get the job. Many experts agree the President should not limit his search to tech gurus. "You don't need a doctor running health care, and you don't need a technologist running cybersecurity," says retired Major General Dale Meyerrose, of the consulting firm Harris Corp., who until recently was chief information officer for the Director of National Intelligence.&lt;br /&gt;&lt;br /&gt;Meyerrose says the challenges facing the President's nominee will be more administrative than technological. "The questions he will be asking are: What's the role of government? What's the role with our allies and other nations? What's the role of the public?" he says. "Most of the issues have nothing to do with technology and everything to do with getting things done in a bureaucracy and making things known to the public."&lt;br /&gt;&lt;br /&gt;Rod Beckstrom, a Silicon Valley entrepreneur, points out that Obama's nominee will need political skills to deal with the many voices that will want to be heard on cybersecurity, including many government departments — the Pentagon, various intelligence agencies and the Department of Homeland Security, among others — and private-sector bodies. "There's a lot of rice in this particular rice bowl," Beckstrom says. He knows from personal experience how difficult that can be: earlier this year, he quit as Director of the National Cybersecurity Center in March, citing interdepartmental politics.&lt;br /&gt;&lt;br /&gt;Davis is not the only candidate with Washington cred. Another leading candidate is Melissa Hathaway, who led Obama's 60-day cybersecurity review and previously advised President George W. Bush on cybersecurity issues. Also in the running are Frank Kramer, who was assistant defense secretary for international security affairs under President Bill Clinton, and Howard Schmidt, another adviser to Bush on cyberspace security and protection of critical infrastructure. Schmidt also has extensive private-sector experience, including stints with eBay and Microsoft, where he was chief security officer.&lt;br /&gt;&lt;br /&gt;Others in contention include Paul Kurtz, an Obama adviser who served in the National Security Council under both Bush and Clinton, and former FBI intel boss Maureen Baginski. Dark horses from the private sector include Sun Microsystems' Susan Landau and Scott Charney, currently head of Microsoft's cybersecurity division.&lt;br /&gt;&lt;br /&gt;The White House has not indicated when it will announce Obama's nominee, but a decision is widely expected in the next few weeks.&lt;br /&gt;&lt;br /&gt;---Article End---&lt;/span&gt;&lt;div class="blogger-post-footer"&gt;&lt;img width='1' height='1' src='https://blogger.googleusercontent.com/tracker/6536699500572800975-5014368307969705025?l=blog.dustinlfritz.com' alt='' /&gt;&lt;/div&gt;</description><link>http://blog.dustinlfritz.com/2009/06/west-point-students-from-left-lieut.html</link><author>noreply@blogger.com (Dustin L. Fritz)</author><thr:total>2</thr:total></item><item><guid isPermaLink='false'>tag:blogger.com,1999:blog-6536699500572800975.post-363557725388642537</guid><pubDate>Tue, 21 Apr 2009 23:56:00 +0000</pubDate><atom:updated>2009-04-21T22:23:11.777-04:00</atom:updated><category domain='http://www.blogger.com/atom/ns#'>Cyber Security</category><category domain='http://www.blogger.com/atom/ns#'>counterintelligence</category><category domain='http://www.blogger.com/atom/ns#'>Breach</category><category domain='http://www.blogger.com/atom/ns#'>Computer</category><category domain='http://www.blogger.com/atom/ns#'>CWIF</category><category domain='http://www.blogger.com/atom/ns#'>Cyber Warfare Forum Initiative</category><category domain='http://www.blogger.com/atom/ns#'>Spies</category><category domain='http://www.blogger.com/atom/ns#'>Marcus J. Ranum</category><category domain='http://www.blogger.com/atom/ns#'>Fighter-Jet Project</category><title>Computer Spies Breach Fighter-Jet Project</title><description>This news report from &lt;a href="http://online.wsj.com/article/SB124027491029837401.html"&gt;The Wall Street Journal&lt;/a&gt; comes at a very interesting time in history. I rant and rave below so let me know what you think!&lt;br /&gt;&lt;br /&gt;&lt;br /&gt;&lt;a onblur="try {parent.deselectBloggerImageGracefully();} catch(e) {}" href="http://4.bp.blogspot.com/_ds8bQtNb4Fk/Se5ppntJ80I/AAAAAAAAAFI/ACaZJclBy8g/s1600-h/F-35_Lightning_II.JPG"&gt;&lt;img style="margin: 0px auto 10px; display: block; text-align: center; cursor: pointer; width: 400px; height: 267px;" src="http://4.bp.blogspot.com/_ds8bQtNb4Fk/Se5ppntJ80I/AAAAAAAAAFI/ACaZJclBy8g/s400/F-35_Lightning_II.JPG" alt="" id="BLOGGER_PHOTO_ID_5327311572979807042" border="0" /&gt;&lt;/a&gt;&lt;br /&gt;“…several terabytes of data…” At what point should you detect information leakage? 2 Gigabytes, 100 Gigabytes, 500 Gigabytes? I am serious. This is a lot of ones and zeros moving across the network for someone not to notice…right?&lt;br /&gt;&lt;br /&gt;“…infiltrated by spies abroad…” Where is &lt;a href="http://vimeo.com/3519680"&gt;Marcus J. Ranum&lt;/a&gt;? I need someone to tell me this is really not cyber war! Wanna hear something funny? “In addition, while the spies were able to download sizable amounts of data related to the jet-fighter, they weren't able to access the most sensitive material, which is stored on computers not connected to the Internet.” “…the plane's most vital systems -- such as flight controls and sensors -- are physically isolated from the publicly accessible Internet” Oh okay, so this might help out our enemies a bit more…most sensitive material not on the Internet…now they can be sure. So if this is the case what is the sensitivity of the rest of the fighter-jet schematics data and US Air Forces air traffic control systems?&lt;br /&gt;&lt;br /&gt;“…because it is easy to mask identities online…” Oh right, forgot about that. Internet = easy to mask identities. If it's so easy to hide your identity, then how is it possible that the &lt;a href="http://www.usdoj.gov/criminal/cybercrime/index.html"&gt;FBI is catching cyber criminals&lt;/a&gt; left and right? “The U.S. has no single government or military office responsible for cyber security.” That’s nice. See &lt;a href="http://www.linkedin.com/groups?gid=1836487"&gt;Cyber Warfare Forum Initiative (CWIF)&lt;/a&gt; on Linkedin for further details and see what people are doing about this!&lt;br /&gt;&lt;br /&gt;“…7.5 million lines of computer code…” Does anyone know how long that would take to review? “…The intruders entered through vulnerabilities in the networks of two or three contractors helping to build the high-tech fighter jet…” Oh okay, well at least we know how to protect our most sensitive data in the future…I wonder if the contractors have to pay for all the damage caused by the intrusions? I wonder what the security policies are regarding “contractor computers” connecting up to the government networks. Are they FISMA compliant? I am sure they must be, so A +. Good job guys!&lt;br /&gt;&lt;br /&gt;“…Mr. Brenner, the U.S. counterintelligence chief, issued a veiled warning about threats to air traffic in the context of Chinese infiltration of U.S. networks. He spoke of his concerns about the vulnerability of U.S. air traffic control systems to cyber infiltration, adding "our networks are being mapped." He went on to warn of a potential situation where "a fighter pilot can't trust his radar.”&lt;br /&gt;&lt;br /&gt;The bottom line here is that without national and international laws addressing the context of these types of international spy or criminal cyber activities and outlining a direct course of action in response to this kind of cyber activity, we cannot even begin to stop it because we have no grounds to do so lawfully.&lt;br /&gt;&lt;br /&gt;Can someone say Uniting and Strengthening America by Providing Appropriate Tools Required to Intercept and Obstruct Cyber War (PATRIOCW)?&lt;br /&gt;&lt;br /&gt;Please let me know what you think!&lt;div class="blogger-post-footer"&gt;&lt;img width='1' height='1' src='https://blogger.googleusercontent.com/tracker/6536699500572800975-363557725388642537?l=blog.dustinlfritz.com' alt='' /&gt;&lt;/div&gt;</description><link>http://blog.dustinlfritz.com/2009/04/computer-spies-breach-fighter-jet.html</link><author>noreply@blogger.com (Dustin L. Fritz)</author><media:thumbnail xmlns:media='http://search.yahoo.com/mrss/' url='http://4.bp.blogspot.com/_ds8bQtNb4Fk/Se5ppntJ80I/AAAAAAAAAFI/ACaZJclBy8g/s72-c/F-35_Lightning_II.JPG' height='72' width='72'/><thr:total>1</thr:total></item><item><guid isPermaLink='false'>tag:blogger.com,1999:blog-6536699500572800975.post-5340840647766534828</guid><pubDate>Sun, 19 Apr 2009 19:17:00 +0000</pubDate><atom:updated>2009-04-21T20:52:37.137-04:00</atom:updated><category domain='http://www.blogger.com/atom/ns#'>Dustin L. Fritz</category><category domain='http://www.blogger.com/atom/ns#'>Matt Fisher</category><category domain='http://www.blogger.com/atom/ns#'>Chris Harbin</category><category domain='http://www.blogger.com/atom/ns#'>Chris Burton</category><category domain='http://www.blogger.com/atom/ns#'>Marcus J. Carey</category><category domain='http://www.blogger.com/atom/ns#'>That Security Show</category><category domain='http://www.blogger.com/atom/ns#'>Joe McCray</category><category domain='http://www.blogger.com/atom/ns#'>Johnny Long</category><category domain='http://www.blogger.com/atom/ns#'>Ron Gula</category><title>That Security Show</title><description>&lt;div&gt;&lt;div&gt;&lt;div&gt;&lt;div&gt;&lt;a href="http://blog.marcusjcarey.com/"&gt;Marcus J. Carey&lt;/a&gt; &lt;a href="http://twitter.com/marcusjcarey"&gt;@marcusjcarey&lt;/a&gt; films the first ever &lt;a href="http://www.thatsecurityshow.com/"&gt;"That Security Show"&lt;/a&gt; pilot with some awesome people like &lt;a href="http://www.nessus.org/nessus/"&gt;Ron Gula&lt;/a&gt; &lt;a href="http://api.twitter.com/RonGula"&gt;@rongula&lt;/a&gt;, &lt;a href="http://johnny.ihackstuff.com/"&gt;Johnny Long&lt;/a&gt; &lt;a href="http://twitter.com/ihackstuff"&gt;@ihackstuff&lt;/a&gt;, &lt;a href="http://mattfisher.wordpress.com/"&gt;Matt Fisher&lt;/a&gt;, &lt;a href="http://www.learnsecurityonline.com/index.php"&gt;Joe McCray&lt;/a&gt; &lt;a href="http://twitter.com/j0emccray"&gt;@j0emccray&lt;/a&gt;, &lt;a href="http://howisthatassuranceevidence.blogspot.com/"&gt;Chris Burton&lt;/a&gt; &lt;a href="http://twitter.com/cyberhiker"&gt;@cyberhiker&lt;/a&gt;, &lt;a href="http://twitter.com/drigoat"&gt;Chris Harbin&lt;/a&gt; &lt;a href="http://twitter.com/drigoat"&gt;@drigoat&lt;/a&gt; and I guess I'll include myself here too...me &lt;a href="http://www.thecndgroup.com/"&gt;Dustin L. Fritz&lt;/a&gt; &lt;a href="http://twitter.com/dustinlfritz"&gt;@dustinlfritz&lt;/a&gt;. Here is a picture that Joe McCray's girl friend took for the group that contributed to "&lt;a href="http://www.thatsecurityshow.com/"&gt;That Security Show&lt;/a&gt;."&lt;br /&gt;&lt;br /&gt;&lt;/div&gt;&lt;br /&gt;&lt;div&gt;&lt;a href="http://3.bp.blogspot.com/_ds8bQtNb4Fk/Set5fcH4KsI/AAAAAAAAADo/JgXlrOZ_mQo/s1600-h/that_security_show_crew.JPG"&gt;&lt;img id="BLOGGER_PHOTO_ID_5326484565327882946" style="margin: 0px auto 10px; display: block; width: 400px; height: 226px; text-align: center;" alt="" src="http://3.bp.blogspot.com/_ds8bQtNb4Fk/Set5fcH4KsI/AAAAAAAAADo/JgXlrOZ_mQo/s400/that_security_show_crew.JPG" border="0" /&gt;&lt;/a&gt;&lt;/div&gt;&lt;br /&gt;&lt;div&gt;&lt;/div&gt;&lt;br /&gt;&lt;div&gt;"That Security Show" was set in Anne Arundel County with a nice big green screen so Marcus can do magical things! Can't wait to see the final product!&lt;/div&gt;&lt;br /&gt;&lt;div&gt;&lt;br /&gt;&lt;/div&gt;&lt;img id="BLOGGER_PHOTO_ID_5326497331073852210" style="margin: 0px auto 10px; display: block; width: 400px; height: 226px; text-align: center;" alt="" src="http://1.bp.blogspot.com/_ds8bQtNb4Fk/SeuFGgO5IzI/AAAAAAAAAEQ/u6cnxywNog8/s400/set_that_security_show_01.JPG" border="0" /&gt;&lt;br /&gt;&lt;br /&gt;Here's Joe McCray letting it all out! Joe really had some good comments on the Twitter XSS vulnerability. &lt;em&gt;So...Joe, what did you say about Apple's botnet activity&lt;/em&gt;? I guess we are just going to have to wait until "That Security Show" is released.&lt;br /&gt;&lt;div&gt;&lt;br /&gt;&lt;/div&gt;&lt;br /&gt;&lt;div&gt;&lt;img id="BLOGGER_PHOTO_ID_5326494592386122098" style="margin: 0px auto 10px; display: block; width: 400px; height: 267px; text-align: center;" alt="" src="http://4.bp.blogspot.com/_ds8bQtNb4Fk/SeuCnF02wXI/AAAAAAAAADw/RjQsRmrqtEM/s400/joe_mccray_that_security_show_01.JPG" border="0" /&gt;&lt;/div&gt;&lt;br /&gt;&lt;br /&gt;&lt;p&gt;&lt;img id="BLOGGER_PHOTO_ID_5326495224011782210" style="margin: 0px auto 10px; display: block; width: 400px; height: 267px; text-align: center;" alt="" src="http://2.bp.blogspot.com/_ds8bQtNb4Fk/SeuDL20JeEI/AAAAAAAAAD4/fRSd7AubJds/s400/joe_mccray_that_security_show_04.JPG" border="0" /&gt;&lt;/p&gt;&lt;/div&gt;&lt;br /&gt;&lt;div&gt;I took a picture while Joe McCray was taping his part. There through the sound room glass window you can see Matt Fisher, Chris Burton, Chris Harbin, and Marcus J. Carey.&lt;/div&gt;&lt;br /&gt;&lt;div&gt;&lt;/div&gt;&lt;br /&gt;&lt;div&gt;&lt;img id="BLOGGER_PHOTO_ID_5326496865271912690" style="margin: 0px auto 10px; display: block; width: 400px; height: 267px; text-align: center;" alt="" src="http://2.bp.blogspot.com/_ds8bQtNb4Fk/SeuErY_DmPI/AAAAAAAAAEA/Q7Vpfjyh4mo/s400/P1040554.JPG" border="0" /&gt; &lt;/div&gt;&lt;br /&gt;&lt;div&gt;&lt;/div&gt;&lt;br /&gt;&lt;div&gt;Johnny Long is leaving the CONUS for one year to Uganda with his family to pursue his charity work. This interview by Joe McCray might just be his last public appearance in the US for awhile. I was really touched by Johnny's journey from his old school hacker days through to his decision to move to Uganda in July 2009. Hit up Johnny's site and please contribute to &lt;a href="http://johnny.ihackstuff.com/"&gt;Hackers for Charity&lt;/a&gt;, this truly is saving peoples' lives!!&lt;/div&gt;&lt;br /&gt;&lt;div&gt;&lt;br /&gt;&lt;/div&gt;&lt;img id="BLOGGER_PHOTO_ID_5326497157255365602" style="margin: 0px auto 10px; display: block; width: 400px; height: 226px; text-align: center;" alt="" src="http://4.bp.blogspot.com/_ds8bQtNb4Fk/SeuE8YtVg-I/AAAAAAAAAEI/eWGdfMFZIGM/s400/joe_mccray_johnny_long_interview.JPG" border="0" /&gt; &lt;/div&gt;&lt;br /&gt;&lt;div&gt;&lt;/div&gt;&lt;br /&gt;&lt;div&gt;This is one of the most talented cinematographers in the world…well not really, but David J. Bruhn @dave_19777 is a really good friend of mine that came down with me on a last minute notice and really helped me produce some good content for That Security Show. Thanks Dave! By the way, change your twitter handle!&lt;/div&gt;&lt;br /&gt;&lt;div&gt;&lt;br /&gt;&lt;/div&gt;&lt;img id="BLOGGER_PHOTO_ID_5326498002278084034" style="margin: 0px auto 10px; display: block; width: 400px; height: 226px; text-align: center;" alt="" src="http://4.bp.blogspot.com/_ds8bQtNb4Fk/SeuFtkqc7cI/AAAAAAAAAEY/slQS20vjYlc/s400/dave_bruhn_that_security_show_01.JPG" border="0" /&gt; &lt;/div&gt;&lt;br /&gt;&lt;br /&gt;&lt;div&gt;So I finally got the green light to record my content for "That Security Show." As you can see in the picture below I am waiting patiently...seems I was moving around so much that Marcus had to readjust the camera a few times. Sorry Marcus - first time in a studio...the whole green screen behind me was kind of freaky.&lt;br /&gt;&lt;br /&gt;&lt;div&gt;&lt;br /&gt;&lt;/div&gt;&lt;img id="BLOGGER_PHOTO_ID_5326498331942983474" style="margin: 0px auto 10px; display: block; width: 400px; height: 226px; text-align: center;" alt="" src="http://1.bp.blogspot.com/_ds8bQtNb4Fk/SeuGAwwsFzI/AAAAAAAAAEg/0bMH5nxDEHs/s400/dustin_l_fritz_that_security_show_02.JPG" border="0" /&gt;&lt;/div&gt;&lt;br /&gt;&lt;div&gt;&lt;/div&gt;&lt;br /&gt;&lt;div&gt;Oh yeah, this was my first time putting on a lapel microphone too. For some reason I just couldn't get it right! Marcus came to the rescue.&lt;/div&gt;&lt;br /&gt;&lt;br /&gt;&lt;img id="BLOGGER_PHOTO_ID_5326498465847693586" style="margin: 0px auto 10px; display: block; width: 400px; height: 226px; text-align: center;" alt="" src="http://3.bp.blogspot.com/_ds8bQtNb4Fk/SeuGIjmD0RI/AAAAAAAAAEo/tAW1RRE52As/s400/dustin_l_fritz_that_security_show_01.JPG" border="0" /&gt;&lt;br /&gt;&lt;br /&gt;&lt;div&gt;&lt;/div&gt;Here is the whole group brainstorming some more great ideas for "That Security Show." I can't wait until the next recording.&lt;br /&gt;&lt;br /&gt;&lt;div&gt;&lt;br /&gt;&lt;/div&gt;&lt;img id="BLOGGER_PHOTO_ID_5326498726039394690" style="margin: 0px auto 10px; display: block; width: 400px; height: 226px; text-align: center;" alt="" src="http://2.bp.blogspot.com/_ds8bQtNb4Fk/SeuGXs4mGYI/AAAAAAAAAEw/AJDjELidCng/s400/P1040569.JPG" border="0" /&gt;&lt;br /&gt;&lt;br /&gt;Finally we got everyone together and Joe's awesome girlfriend offered to take our picture. What a bunch of funny looking hackers!&lt;br /&gt;&lt;br /&gt;&lt;br /&gt;&lt;img id="BLOGGER_PHOTO_ID_5326498924965250162" style="margin: 0px auto 10px; display: block; width: 400px; height: 226px; text-align: center;" alt="" src="http://4.bp.blogspot.com/_ds8bQtNb4Fk/SeuGjR8NxHI/AAAAAAAAAE4/yg3Phj-q92U/s400/group_that_security_show_02.JPG" border="0" /&gt;&lt;br /&gt;Keep tabs on the release date at  &lt;a href="http://www.thatsecurityshow.com/"&gt;http://www.thatsecurityshow.com/&lt;/a&gt;&lt;div class="blogger-post-footer"&gt;&lt;img width='1' height='1' src='https://blogger.googleusercontent.com/tracker/6536699500572800975-5340840647766534828?l=blog.dustinlfritz.com' alt='' /&gt;&lt;/div&gt;</description><link>http://blog.dustinlfritz.com/2009/04/that-security-show.html</link><author>noreply@blogger.com (Dustin L. Fritz)</author><media:thumbnail xmlns:media='http://search.yahoo.com/mrss/' url='http://3.bp.blogspot.com/_ds8bQtNb4Fk/Set5fcH4KsI/AAAAAAAAADo/JgXlrOZ_mQo/s72-c/that_security_show_crew.JPG' height='72' width='72'/><thr:total>0</thr:total></item><item><guid isPermaLink='false'>tag:blogger.com,1999:blog-6536699500572800975.post-1780705233661843462</guid><pubDate>Sat, 04 Apr 2009 20:15:00 +0000</pubDate><atom:updated>2009-04-06T16:28:15.634-04:00</atom:updated><category domain='http://www.blogger.com/atom/ns#'>Rob Fuller</category><category domain='http://www.blogger.com/atom/ns#'>DojoSec Monthly Briefing</category><category domain='http://www.blogger.com/atom/ns#'>Capitol College</category><category domain='http://www.blogger.com/atom/ns#'>Marcus J. Carey</category><category domain='http://www.blogger.com/atom/ns#'>Learn Security Online</category><category domain='http://www.blogger.com/atom/ns#'>Information Security</category><category domain='http://www.blogger.com/atom/ns#'>Joe McCray</category><category domain='http://www.blogger.com/atom/ns#'>Sourcefire</category><category domain='http://www.blogger.com/atom/ns#'>Matt Watchinski</category><category domain='http://www.blogger.com/atom/ns#'>hacking</category><title>DojoSec Monthly Briefing April 2, 2009</title><description>&lt;a href="http://blog.marcusjcarey.com/"&gt;Marcus J. Carey&lt;/a&gt; hosted another great &lt;a href="http://www.dojosec.com/"&gt;DojoSec Monthly Briefing&lt;/a&gt; on Thursday April 2, 2009. &lt;a href="http://www.room362.com/"&gt;Rob Fuller&lt;/a&gt;, &lt;a href="http://learnsecurityonline.com/"&gt;Joe McCray&lt;/a&gt; (2 X DMB Speaker), and &lt;a href="http://www.linkedin.com/pub/0/8b9/362"&gt;Matt Watchinski&lt;/a&gt; blasted their way into DojoSec history.&lt;br /&gt;&lt;div&gt;&lt;div&gt;&lt;br /&gt;&lt;div&gt;&lt;/div&gt;&lt;img id="BLOGGER_PHOTO_ID_5320937462479935090" style="margin: 0px auto 10px; display: block; width: 400px; height: 267px; text-align: center;" alt="" src="http://3.bp.blogspot.com/_ds8bQtNb4Fk/SdfEbjsvVnI/AAAAAAAAABw/I-l_vsPZqiE/s400/DMB%40CapitolCollege.JPG" border="0" /&gt;&lt;br /&gt;&lt;div&gt;A new location for DMBs - &lt;a href="http://www.capitol-college.edu/"&gt;Capitol College&lt;/a&gt; &lt;a href="http://www.capitol-college.edu/studentlife/facilities/auditorium.shtml"&gt;Avrum Gudelsky Memorial Auditorium&lt;/a&gt;. &lt;a href="http://www.capitol-college.edu/cicpc/"&gt;Critical Infrastructures and Cyber Protection Center Assistant Dean and Director for Distance Learning Services Allan Berg&lt;/a&gt; introduced Marcus at the beginning of the talks. I really think this new relationship with Capitol and DojoSec Monthly Briefings is going to be very fruitful for Capitol and the information security community! Did you know &lt;a href="http://suntzudata.com/about.htm"&gt;Marcus&lt;/a&gt; got his MSc from Capitol? Below is a picture of Marcus thanking Allan as the audiences' applause fill the auditorium. Thanks again Allan for such a great place to host DMB!!! See you next month.&lt;/div&gt;&lt;div&gt;&lt;/div&gt;&lt;br /&gt;&lt;div&gt;&lt;img id="BLOGGER_PHOTO_ID_5320943903844193058" style="margin: 0px auto 10px; display: block; width: 400px; height: 267px; text-align: center;" alt="" src="http://4.bp.blogspot.com/_ds8bQtNb4Fk/SdfKSfpp0yI/AAAAAAAAAB4/zb-QKIYtfxc/s400/Allen_and_Marcus.JPG" border="0" /&gt;&lt;/div&gt;&lt;/div&gt;&lt;/div&gt;&lt;br /&gt;&lt;div&gt;&lt;/div&gt;&lt;div&gt;So &lt;a href="http://twitterfall.com/dojosec"&gt;twitterfall.com/dojosec&lt;/a&gt; and &lt;a href="http://ustream.tv/dojosec"&gt;ustream.tv/dojosec&lt;/a&gt; where in action during April's DojoSec Monthly Briefing. As you can see below on the big projector we had twitterfall and in the foreground is one of the three ustream live broadcasts. It was fun to interact with ustream viewers and the twitts online during the briefings. Looking forward to next month's briefings and upping the ante on the concept of live broadcasts!&lt;/div&gt;&lt;br /&gt;&lt;div&gt;&lt;/div&gt;&lt;br /&gt;&lt;div&gt;&lt;/div&gt;&lt;img id="BLOGGER_PHOTO_ID_5320945721198271602" style="margin: 0px auto 10px; display: block; width: 400px; height: 267px; text-align: center;" alt="" src="http://3.bp.blogspot.com/_ds8bQtNb4Fk/SdfL8R0oXHI/AAAAAAAAACA/3VDsqWu2b_8/s400/Twitter_Deck_and_Ustream.JPG" border="0" /&gt;&lt;br /&gt;So first up to speak was &lt;a href="http://www.room362.com/about"&gt;Rob Fuller&lt;/a&gt;, aka &lt;a href="http://www.twitter.com/mubix"&gt;Mubix&lt;/a&gt;. Rob talked about something you should really really care about...how to hack your career! I really believe something Mubix said, if you don't like your job, LEAVE! There are so many people in the security field that just sit back and wait for something to happen instead of taking control and making things happen. Awesome talk Mubix thanks!&lt;br /&gt;&lt;p&gt;&lt;img id="BLOGGER_PHOTO_ID_5320957007614311218" style="margin: 0px auto 10px; display: block; width: 400px; height: 267px; text-align: center;" alt="" src="http://3.bp.blogspot.com/_ds8bQtNb4Fk/SdfWNO_5-zI/AAAAAAAAACQ/zLVdbPb1M7o/s400/mubix%40dmb_3.JPG" border="0" /&gt;&lt;/p&gt;&lt;br /&gt;&lt;p&gt;&lt;img id="BLOGGER_PHOTO_ID_5320958366446215874" style="margin: 0px auto 10px; display: block; width: 400px; height: 267px; text-align: center;" alt="" src="http://2.bp.blogspot.com/_ds8bQtNb4Fk/SdfXcVCrYsI/AAAAAAAAACg/Iz0BdnviH2c/s400/mubix_and_marcus_1.JPG" border="0" /&gt; &lt;/p&gt;&lt;br /&gt;&lt;p&gt;Everybody loves this next speaker. Well maybe not everyone! Joe McCray, co-founder of &lt;a href="http://learnsecurityonline.com/"&gt;Learn Security Online&lt;/a&gt; and consultant at &lt;a href="http://www.rapid7.com/"&gt;Rapid7&lt;/a&gt;. Joe has really been a good friend to me, he gives me priceless advice and mentors me along this windy road some people call "The Security Community." Joe's talk was cracking me up. At one point he was imitating a server that had just been exploited saying, "I don't normally do this." Funny and technically savvy talk! Awesome Joe thanks!&lt;/p&gt;&lt;img id="BLOGGER_PHOTO_ID_5320961545446717874" style="margin: 0px auto 10px; display: block; width: 400px; height: 267px; text-align: center;" alt="" src="http://4.bp.blogspot.com/_ds8bQtNb4Fk/SdfaVXvdebI/AAAAAAAAAC4/dk2AIHoQf8g/s400/joe%40dmb_4.JPG" border="0" /&gt;&lt;br /&gt;&lt;img id="BLOGGER_PHOTO_ID_5320959814659426722" style="margin: 0px auto 10px; display: block; width: 400px; height: 267px; text-align: center;" alt="" src="http://3.bp.blogspot.com/_ds8bQtNb4Fk/SdfYwoDnSaI/AAAAAAAAACo/HDQuUv5BTgE/s400/joe%40dmb.JPG" border="0" /&gt;&lt;br /&gt;&lt;div&gt;&lt;img id="BLOGGER_PHOTO_ID_5320960155828984146" style="margin: 0px auto 10px; display: block; width: 400px; height: 267px; text-align: center;" alt="" src="http://4.bp.blogspot.com/_ds8bQtNb4Fk/SdfZEfAxmVI/AAAAAAAAACw/LrfVaBTw7Gs/s400/joe%40dmb_2.JPG" border="0" /&gt;&lt;/div&gt;&lt;br /&gt;&lt;p&gt;&lt;a href="http://www.linkedin.com/pub/0/8b9/362"&gt;Matt Watchinski&lt;/a&gt;, Directory of &lt;a href="http://www.sourcefire.com/products/snort/vrt"&gt;Sourcefire Vulnerability Research Team (VRT)&lt;/a&gt; was the last speaker at April's DMB. Matt kicked butt and really opened my eyes to how the black and white exploit market works. Matt identified and demonstrated how he and his team discovered the recent Adobe vulnerability (&lt;a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0658"&gt;CVE-2009-0658&lt;/a&gt;, &lt;a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0927"&gt;CVE-2009-0927&lt;/a&gt;, &lt;a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0193"&gt;CVE-2009-0193&lt;/a&gt;, &lt;a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0928"&gt;CVE-2009-0928&lt;/a&gt;, &lt;a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1061"&gt;CVE-2009-1061&lt;/a&gt;, and &lt;a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1062"&gt;CVE-2009-1062&lt;/a&gt;). I really enjoyed meeting him and his team. Thanks Matt for an awesome presentation!&lt;br /&gt;&lt;/p&gt;&lt;p&gt;&lt;img id="BLOGGER_PHOTO_ID_5320964781251292994" style="margin: 0px auto 10px; display: block; width: 400px; height: 267px; text-align: center;" alt="" src="http://4.bp.blogspot.com/_ds8bQtNb4Fk/SdfdRuDY70I/AAAAAAAAADA/5qbrVxfHI3Y/s400/matt%40dmb_1.JPG" border="0" /&gt;Matt started his talk by explaining day zero all the way to the day Adobe finally released their patch. &lt;img id="BLOGGER_PHOTO_ID_5321013685498849890" style="margin: 0px auto 10px; display: block; width: 267px; height: 400px; text-align: center;" alt="" src="http://2.bp.blogspot.com/_ds8bQtNb4Fk/SdgJwUkmqmI/AAAAAAAAADg/1BbP4oQJyDo/s400/matt%40dmb_2.JPG" border="0" /&gt;&lt;/p&gt;&lt;p&gt;The picture below shows Matt describing how McAfee released the adobe vulnerability, but nobody caught it, except Sourcefire VRT! Adobe claims VRT released the vulnerability first but as you can see on the slide, McAfee did!&lt;/p&gt;&lt;p&gt;&lt;img id="BLOGGER_PHOTO_ID_5321013418555559826" style="margin: 0px auto 10px; display: block; width: 267px; height: 400px; text-align: center;" alt="" src="http://1.bp.blogspot.com/_ds8bQtNb4Fk/SdgJgyIXT5I/AAAAAAAAADY/pGgvCi2KWwY/s400/matt%40dmb_3.JPG" border="0" /&gt;&lt;/p&gt;&lt;div&gt; &lt;p&gt;DojoSec Monthly Briefings this past Thursday was nothing less than inspiring and brilliant. I met a lot of new people and caught up with some friends. Thanks Marcus for another outstanding learning experience!&lt;/p&gt;&lt;/div&gt;&lt;div class="blogger-post-footer"&gt;&lt;img width='1' height='1' src='https://blogger.googleusercontent.com/tracker/6536699500572800975-1780705233661843462?l=blog.dustinlfritz.com' alt='' /&gt;&lt;/div&gt;</description><link>http://blog.dustinlfritz.com/2009/04/dojosec-monthly-briefing-april-2-2009.html</link><author>noreply@blogger.com (Dustin L. Fritz)</author><media:thumbnail xmlns:media='http://search.yahoo.com/mrss/' url='http://3.bp.blogspot.com/_ds8bQtNb4Fk/SdfEbjsvVnI/AAAAAAAAABw/I-l_vsPZqiE/s72-c/DMB%40CapitolCollege.JPG' height='72' width='72'/><thr:total>0</thr:total></item><item><guid isPermaLink='false'>tag:blogger.com,1999:blog-6536699500572800975.post-4893848745613950156</guid><pubDate>Mon, 30 Mar 2009 00:10:00 +0000</pubDate><atom:updated>2009-03-31T18:54:29.911-04:00</atom:updated><category domain='http://www.blogger.com/atom/ns#'>Dustin L. Fritz</category><category domain='http://www.blogger.com/atom/ns#'>UMBC</category><category domain='http://www.blogger.com/atom/ns#'>Cyber Security</category><category domain='http://www.blogger.com/atom/ns#'>Joe McCray</category><category domain='http://www.blogger.com/atom/ns#'>Cyber War</category><category domain='http://www.blogger.com/atom/ns#'>CISSP</category><title>Cyber War at UMBC</title><description>Last Wednesday, March 25, 2009 &lt;a href="http://www.linkedin.com/in/joemccray"&gt;Joe McCray&lt;/a&gt; invited me to talk about information warfare for his CISSP class at &lt;a href="http://www.umbc.edu/"&gt;University of Maryland Baltimore County&lt;/a&gt; in Halethorpe, Maryland. So I sat down at home and put together a presentation that would make CISSP'ers cry...well maybe not cry but at least pose some hard hitting questions that they should consider when they return to work. In this talk I give a brief overview of my cyber security experiences from my 2005 deployment to Dubai, UAE, Hong Kong, China, Philippines, and the Northern Arabian Gulf (NAG) region. (video below)&lt;br /&gt;&lt;br /&gt;&lt;br /&gt;&lt;img id="BLOGGER_PHOTO_ID_5318768548673966786" style="DISPLAY: block; MARGIN: 0px auto 10px; WIDTH: 320px; CURSOR: hand; HEIGHT: 240px; TEXT-ALIGN: center" alt="" src="http://2.bp.blogspot.com/_ds8bQtNb4Fk/SdAP0KI7UsI/AAAAAAAAABY/hDL4LxovEYY/s400/cyberwar%40umbc_0002.jpg" border="0" /&gt; &lt;p&gt;Here is Joe helping me set up my presentation and then running away! Well I don't blame him, there was one gentleman in the crowd who asked me not to film him. I guess he was worried that someone would find out he was trying to learn something about information security...or maybe he was a spy...hmmm.&lt;/p&gt;&lt;p&gt;&lt;img id="BLOGGER_PHOTO_ID_5318771756154144178" style="DISPLAY: block; MARGIN: 0px auto 10px; WIDTH: 240px; CURSOR: hand; HEIGHT: 320px; TEXT-ALIGN: center" alt="" src="http://4.bp.blogspot.com/_ds8bQtNb4Fk/SdASu27yxbI/AAAAAAAAABg/R8A6ZjybU8Q/s320/white_house_wireless.bmp" border="0" /&gt;&lt;/p&gt;&lt;p&gt;&lt;a href="http://www.f0rb1dd3n.com/author.php"&gt;Jayson E. Street&lt;/a&gt; took a great picture that I just had to use for my introduction. As you can see above it speaks louder then words. I met Jayson via Joe McCray (Thanks Joe!) and I already learned a lot from him. If you didn't already know, Jayson is about to publish a book that will change the way your cyber security works in your organization. Check it out, it's called &lt;a href="http://www.f0rb1dd3n.com/"&gt;F0rb1dd3n.&lt;/a&gt; It is on its way to being released as soon as the final touches from the publishing company are completed.&lt;/p&gt;&lt;p&gt;&lt;img id="BLOGGER_PHOTO_ID_5318775121386020642" style="DISPLAY: block; MARGIN: 0px auto 10px; WIDTH: 320px; CURSOR: hand; HEIGHT: 240px; TEXT-ALIGN: center" alt="" src="http://3.bp.blogspot.com/_ds8bQtNb4Fk/SdAVyvZmHyI/AAAAAAAAABo/jRP6tJPlqho/s320/oil_platform7.jpg" border="0" /&gt;&lt;/p&gt;&lt;p&gt;&lt;/p&gt;&lt;p&gt;So in my presentation I talk about something that I haven't heard anyone else talk about yet - How vulnerable are the world's oil platforms? Well check out my talk below and let me know what you think.&lt;/p&gt;&lt;p&gt;&lt;br /&gt;&lt;/p&gt;&lt;p align="center"&gt;&lt;object height="378" width="504"&gt;&lt;param name="allowfullscreen" value="true"&gt;&lt;param name="allowscriptaccess" value="always"&gt;&lt;param name="movie" value="http://vimeo.com/moogaloop.swf?clip_id=3914073&amp;amp;server=vimeo.com&amp;amp;show_title=1&amp;amp;show_byline=1&amp;amp;show_portrait=1&amp;amp;color=00ADEF&amp;amp;fullscreen=1"&gt;&lt;embed src="http://vimeo.com/moogaloop.swf?clip_id=3914073&amp;amp;server=vimeo.com&amp;amp;show_title=1&amp;amp;show_byline=1&amp;amp;show_portrait=1&amp;amp;color=00ADEF&amp;amp;fullscreen=1" type="application/x-shockwave-flash" allowfullscreen="true" allowscriptaccess="always" width="504" height="378"&gt;&lt;/embed&gt;&lt;/object&gt;&lt;/p&gt;&lt;p align="center"&gt;If you want to download the presentation please visit &lt;a href="http://www.thecndgroup.com/"&gt;http://www.thecndgroup.com/&lt;/a&gt;&lt;/p&gt;&lt;div class="blogger-post-footer"&gt;&lt;img width='1' height='1' src='https://blogger.googleusercontent.com/tracker/6536699500572800975-4893848745613950156?l=blog.dustinlfritz.com' alt='' /&gt;&lt;/div&gt;</description><link>http://blog.dustinlfritz.com/2009/03/cyber-war-at-umbc.html</link><author>noreply@blogger.com (Dustin L. Fritz)</author><media:thumbnail xmlns:media='http://search.yahoo.com/mrss/' url='http://2.bp.blogspot.com/_ds8bQtNb4Fk/SdAP0KI7UsI/AAAAAAAAABY/hDL4LxovEYY/s72-c/cyberwar%40umbc_0002.jpg' height='72' width='72'/><thr:total>0</thr:total></item><item><guid isPermaLink='false'>tag:blogger.com,1999:blog-6536699500572800975.post-1656079365457767043</guid><pubDate>Mon, 16 Mar 2009 05:18:00 +0000</pubDate><atom:updated>2009-03-16T02:40:24.589-04:00</atom:updated><category domain='http://www.blogger.com/atom/ns#'>cyber warfare</category><category domain='http://www.blogger.com/atom/ns#'>cyber defense</category><category domain='http://www.blogger.com/atom/ns#'>ATT Tech Channel</category><category domain='http://www.blogger.com/atom/ns#'>Cyber Terrorism</category><category domain='http://www.blogger.com/atom/ns#'>Mikko Hypponen</category><category domain='http://www.blogger.com/atom/ns#'>Andrew Colarik</category><category domain='http://www.blogger.com/atom/ns#'>Dean Turner</category><category domain='http://www.blogger.com/atom/ns#'>Nicole Greco</category><category domain='http://www.blogger.com/atom/ns#'>Marcus J. Ranum</category><category domain='http://www.blogger.com/atom/ns#'>Sami Saydjari</category><title>Cyber Terrorism Roundtable</title><description>AT&amp;amp;T Tech Channel Spotlight: 'Cyber Terrorism Roundtable' with &lt;a href="http://www.cyberdefenseagency.com/about-team.php"&gt;Sami Saydjari&lt;/a&gt;, &lt;a href="http://www.ranum.com/"&gt;Marcus J. Ranum&lt;/a&gt;, &lt;a href="http://www.symantec.com/about/news/resources/press_kits/bio.jsp?bioid=dean_turner"&gt;Dean Turne&lt;/a&gt;&lt;a href="http://www.blogger.com/Dean%20Turner"&gt;r&lt;/a&gt; and hosted by &lt;a href="http://www.linkedin.com/pub/6/143/b57"&gt;Nicole Greco&lt;/a&gt;. Discussion on cyber warfare, cyber terrorism, cyber defense and interviews with &lt;a href="http://mikko.hypponen.com/"&gt;Mikko Hypponen &lt;/a&gt;and &lt;a href="http://www.andrewcolarik.com/"&gt;Andrew Colarik&lt;/a&gt;. Key issues on Estonia, China, Russia. Aired in November 2007.&lt;br /&gt;&lt;br /&gt;Marcus J. Ranum really made it uncomfortable for Sami and Dean to counter his points about Cyber War. If you didn't already know, Marcus has some ideas about Cyber War that do not get him a lot of cheers in the crowd. Right or wrong I really love watching people try to disprove Marcus' points.&lt;br /&gt;&lt;br /&gt;This video has Sami and Dean squeamishly trying to defend their point of view. Their jobs really depend on it! If the federal government was convinced that they didn't need a Cyber Warfare capability to fight a Cyber War all that money (I guess it’s our money, the good old tax payers) would be put toward another endeavor...umm like climate change, right?&lt;br /&gt;&lt;br /&gt;So check out this 25 minute show and post your comments! Keep an eye on how Sami tries to steer the conversation back his way (time 19:26) and watch Dean's right foot start to wiggle (time 17:13) when he tries to respond to a point Marcus just made as Nicole says, "Dean is this fear mongering?" It's awesome!&lt;br /&gt;&lt;br /&gt;&lt;embed id="VideoPlayback" src="http://video.google.com/googleplayer.swf?docid=-8782826940542798535&amp;hl=en&amp;fs=true" style="width:400px;height:326px" allowFullScreen="true" allowScriptAccess="always" type="application/x-shockwave-flash"&gt; &lt;/embed&gt;&lt;div class="blogger-post-footer"&gt;&lt;img width='1' height='1' src='https://blogger.googleusercontent.com/tracker/6536699500572800975-1656079365457767043?l=blog.dustinlfritz.com' alt='' /&gt;&lt;/div&gt;</description><link>http://blog.dustinlfritz.com/2009/03/cyber-terrorism-roundtable.html</link><author>noreply@blogger.com (Dustin L. Fritz)</author><thr:total>0</thr:total></item><item><guid isPermaLink='false'>tag:blogger.com,1999:blog-6536699500572800975.post-6821829711827133010</guid><pubDate>Sat, 14 Mar 2009 19:02:00 +0000</pubDate><atom:updated>2009-03-14T16:55:55.716-04:00</atom:updated><category domain='http://www.blogger.com/atom/ns#'>Splunk</category><category domain='http://www.blogger.com/atom/ns#'>SIEM</category><category domain='http://www.blogger.com/atom/ns#'>DojoSec Monthly Briefings</category><category domain='http://www.blogger.com/atom/ns#'>CALUG</category><category domain='http://www.blogger.com/atom/ns#'>Sean Wilkerson</category><category domain='http://www.blogger.com/atom/ns#'>Daniel Deighton</category><category domain='http://www.blogger.com/atom/ns#'>Aplura</category><category domain='http://www.blogger.com/atom/ns#'>Columbia-Area Linux Users Group</category><title>Columbia-Area Linux Users Group (CALUG) Thursday March 11, 2009</title><description>I decided to become a first time LUG member at the &lt;a href="http://www.calug.org/"&gt;Columbia-Area Linux User Group (CALUG).&lt;/a&gt; It was pretty comfortable in &lt;a href="http://www.tenablesecurity.com/"&gt;Tenable Network Security's&lt;/a&gt; lunch room with the salt and pepper shakers only an arms length away.&lt;br /&gt;&lt;br /&gt;&lt;a onblur="try {parent.deselectBloggerImageGracefully();} catch(e) {}" href="http://www.thecndgroup.com/CALUG/2009/March/pictures/Sean_Wilkerson_CALUG_01.jpg"&gt;&lt;img style="margin: 0px auto 10px; display: block; text-align: center; cursor: pointer; width: 448px; height: 336px;" src="http://www.thecndgroup.com/CALUG/2009/March/pictures/Sean_Wilkerson_CALUG_01.jpg" alt="" border="0" /&gt;&lt;/a&gt;&lt;br /&gt;Sean Wilkerson, one of the leading experts in centralized log management was present that night and was the guest speaker. I met a lot of cool people and got the chance to watch &lt;a href="http://www.linkedin.com/in/sdwilkerson"&gt;Sean Wilkerson&lt;/a&gt; talk about "Centralizing Security Data" using &lt;a href="http://www.splunk.com/"&gt;Splunk&lt;/a&gt;. Sean co-founded an LLC called &lt;a href="http://www.aplura.com/"&gt;Aplura&lt;/a&gt; with &lt;a href="http://www.linkedin.com/pub/6/579/ba8"&gt;Daniel Deighton,&lt;/a&gt; where they provide various &lt;a href="http://www.aplura.com/consulting.html"&gt;information security consulting services&lt;/a&gt;. I tried to talk with Sean after the meeting but there was a line! Really, like 5 people rushed up after he finished! So I decided to introduce myself to Daniel, co-founder of Aplura. Daniel and I talked about some possible business opportunities and how exciting the information security field has been. I think Sean and Daniel are great professionals and hope to do business with them very soon. Their company portfolio is very impressive, check it out - &lt;a href="http://www.aplura.com/customers.html"&gt;here.&lt;/a&gt;&lt;br /&gt;&lt;br /&gt;&lt;a onblur="try {parent.deselectBloggerImageGracefully();} catch(e) {}" href="http://www.thecndgroup.com/CALUG/2009/March/pictures/Sean_Wilkerson_CALUG_02.jpg"&gt;&lt;img style="margin: 0px auto 10px; display: block; text-align: center; cursor: pointer; width: 448px; height: 336px;" src="http://www.thecndgroup.com/CALUG/2009/March/pictures/Sean_Wilkerson_CALUG_02.jpg" alt="" border="0" /&gt;&lt;/a&gt;&lt;br /&gt;Here Sean is explaining &lt;a href="http://www.splunkbase.com/"&gt;Splunk's&lt;/a&gt; ROI compared to other Security Information and Event Management (SIEM) tools he has deployed in the past. Sean was also interviewed by Splunk on Tuesday January 27, 2009 - check out the video &lt;a href="http://www.splunk.com/view/SP-CAAAC8A"&gt;here&lt;/a&gt;.&lt;br /&gt;&lt;br /&gt;I look forward to seeing Sean at &lt;a href="http://www.dojosec.com/"&gt;DojoSec Monthly Briefings&lt;/a&gt; very soon! &lt;a href="http://www.dojosec.com/?page_id=37"&gt;Register Now for DojoSec Monthly Briefings!&lt;/a&gt;&lt;div class="blogger-post-footer"&gt;&lt;img width='1' height='1' src='https://blogger.googleusercontent.com/tracker/6536699500572800975-6821829711827133010?l=blog.dustinlfritz.com' alt='' /&gt;&lt;/div&gt;</description><link>http://blog.dustinlfritz.com/2009/03/columbia-area-linux-users-group-calug.html</link><author>noreply@blogger.com (Dustin L. Fritz)</author><thr:total>0</thr:total></item><item><guid isPermaLink='false'>tag:blogger.com,1999:blog-6536699500572800975.post-5721537287173664140</guid><pubDate>Fri, 06 Mar 2009 07:00:00 +0000</pubDate><atom:updated>2009-03-14T14:37:11.904-04:00</atom:updated><category domain='http://www.blogger.com/atom/ns#'>Snort IDS forensics tool</category><category domain='http://www.blogger.com/atom/ns#'>DojoSec Monthly Briefings</category><category domain='http://www.blogger.com/atom/ns#'>David Warren</category><category domain='http://www.blogger.com/atom/ns#'>Marcus J. Carey</category><category domain='http://www.blogger.com/atom/ns#'>jailbreaking</category><category domain='http://www.blogger.com/atom/ns#'>DMB</category><category domain='http://www.blogger.com/atom/ns#'>Cyber War</category><category domain='http://www.blogger.com/atom/ns#'>iPhone Forensics</category><category domain='http://www.blogger.com/atom/ns#'>Walter Barr</category><category domain='http://www.blogger.com/atom/ns#'>Marcus J. Ranum</category><category domain='http://www.blogger.com/atom/ns#'>Sean Morrissey</category><title>DojoSec Monthly Briefing (DMB) March 5, 2009</title><description>Every seat was filled and I couldn’t even get around to meeting everyone I wanted to because there were so many awesome people at DMB this past Thursday. Marcus J. Carey did it again! Awesome &lt;a href="http://www.dojosec.com/" target="_blank"&gt;DojoSec Monthly Briefing&lt;/a&gt;.&lt;br /&gt;&lt;br /&gt;&lt;a onblur="try {parent.deselectBloggerImageGracefully();} catch(e) {}" href="http://thecndgroup.com/DMB/2009/March/pictures/audience_marcus.jpg"&gt;&lt;img style="margin: 0px auto 10px; display: block; text-align: center; cursor: pointer; width: 514px; height: 386px;" src="http://thecndgroup.com/DMB/2009/March/pictures/audience_marcus.jpg" alt="" border="0" /&gt;&lt;/a&gt;&lt;br /&gt;Walter Barr and Sean Morrissey went back and forth about Jailbreaking iPhones when they did their talk on iPhone Forensics.  To say the least, my wife the cashier that evening, went home and thought about jailbreaking her iPhone!&lt;p&gt;&lt;a onblur="try {parent.deselectBloggerImageGracefully();} catch(e) {}" href="http://thecndgroup.com/DMB/2009/March/pictures/audience_plus_Walte%20Barr_Sean_Morrissey_iPhoneForensics2.jpg"&gt;&lt;img style="margin: 0px auto 10px; display: block; text-align: center; cursor: pointer; width: 514px; height: 385px;" src="http://thecndgroup.com/DMB/2009/March/pictures/audience_plus_Walte%20Barr_Sean_Morrissey_iPhoneForensics2.jpg" alt="" border="0" /&gt;&lt;/a&gt;&lt;/p&gt;&lt;p&gt;David Warren from CSC did a very interesting talk on how to use Snort IDS as a forensics tool.&lt;/p&gt;&lt;p&gt;&lt;a onblur="try {parent.deselectBloggerImageGracefully();} catch(e) {}" href="http://thecndgroup.com/DMB/2009/March/pictures/David_Warren_plus_slide.jpg"&gt;&lt;img style="margin: 0px auto 10px; display: block; text-align: center; cursor: pointer; width: 514px; height: 385px;" src="http://thecndgroup.com/DMB/2009/March/pictures/David_Warren_plus_slide.jpg" alt="" border="0" /&gt;&lt;/a&gt;&lt;/p&gt;&lt;p&gt;And my favorite talk of the evening was from Marcus J. Ranum, CSO of Tenable Network Security. Marcus talked about the Problem with Cyber War.&lt;/p&gt;&lt;p&gt;&lt;a onblur="try {parent.deselectBloggerImageGracefully();} catch(e) {}" href="http://thecndgroup.com/DMB/2009/March/pictures/Marucs_Ranum.jpg"&gt;&lt;img style="margin: 0px auto 10px; display: block; text-align: center; cursor: pointer; width: 514px; height: 385px;" src="http://thecndgroup.com/DMB/2009/March/pictures/Marucs_Ranum.jpg" alt="" border="0" /&gt;&lt;/a&gt;&lt;/p&gt;&lt;p&gt;To sign up for updates on the next &lt;a href="http://www.dojosec.com/" target="_blank"&gt;DojoSec Monthly Briefings&lt;/a&gt; visit &lt;a href="http://www.dojosec.com/"&gt;http://www.dojosec.com/&lt;/a&gt; and click the Registration tab.&lt;/p&gt;&lt;p&gt;Here are the recorded talks from Thursday March 5, 2009. Can you see me and my wife in the front row?&lt;/p&gt;&lt;div&gt;&lt;object classid="clsid:d27cdb6e-ae6d-11cf-96b8-444553540000" codebase="http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab#version=6,0,40,0" width="400" height="307"&gt;&lt;param name="width" value="400"&gt;&lt;param name="height" value="307"&gt;&lt;param name="src" value="http://vimeo.com/moogaloop.swf?clip_id=3522336&amp;amp;server=vimeo.com&amp;amp;show_title=1&amp;amp;show_byline=1&amp;amp;show_portrait=0&amp;amp;color=&amp;amp;fullscreen=1"&gt;&lt;param name="allowscriptaccess" value="always"&gt;&lt;param name="allowfullscreen" value="true"&gt;&lt;embed type="application/x-shockwave-flash" src="http://vimeo.com/moogaloop.swf?clip_id=3522336&amp;amp;server=vimeo.com&amp;amp;show_title=1&amp;amp;show_byline=1&amp;amp;show_portrait=0&amp;amp;color=&amp;amp;fullscreen=1" allowscriptaccess="always" allowfullscreen="true" width="400" height="307"&gt;&lt;/embed&gt;&lt;/object&gt;&lt;/div&gt;&lt;p&gt;&lt;a href="http://vimeo.com/3522336"&gt;DojoSec Monthly Briefings - March 2009 - Wally Barr &amp;amp; Sean Morrissey&lt;/a&gt; from &lt;a href="http://vimeo.com/marcuscarey"&gt;Marcus Carey&lt;/a&gt; on &lt;a href="http://vimeo.com/"&gt;Vimeo&lt;/a&gt;. &lt;/p&gt;&lt;object classid="clsid:d27cdb6e-ae6d-11cf-96b8-444553540000" codebase="http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab#version=6,0,40,0" width="400" height="300"&gt;&lt;param name="width" value="400"&gt;&lt;param name="height" value="300"&gt;&lt;param name="src" value="http://vimeo.com/moogaloop.swf?clip_id=3518311&amp;amp;server=vimeo.com&amp;amp;show_title=1&amp;amp;show_byline=1&amp;amp;show_portrait=0&amp;amp;color=ff9933&amp;amp;fullscreen=1"&gt;&lt;param name="allowscriptaccess" value="always"&gt;&lt;param name="allowfullscreen" value="true"&gt;&lt;embed type="application/x-shockwave-flash" src="http://vimeo.com/moogaloop.swf?clip_id=3518311&amp;amp;server=vimeo.com&amp;amp;show_title=1&amp;amp;show_byline=1&amp;amp;show_portrait=0&amp;amp;color=ff9933&amp;amp;fullscreen=1" allowscriptaccess="always" allowfullscreen="true" width="400" height="300"&gt;&lt;/embed&gt;&lt;/object&gt;&lt;p&gt;&lt;a href="http://vimeo.com/3518311"&gt;DojoSec Monthly Briefings - March 2009 - Dave Warren&lt;/a&gt; from &lt;a href="http://vimeo.com/marcuscarey"&gt;Marcus Carey&lt;/a&gt; on &lt;a href="http://vimeo.com/"&gt;Vimeo&lt;/a&gt;. &lt;/p&gt;&lt;object classid="clsid:d27cdb6e-ae6d-11cf-96b8-444553540000" codebase="http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab#version=6,0,40,0" width="400" height="300"&gt;&lt;param name="width" value="400"&gt;&lt;param name="height" value="300"&gt;&lt;param name="src" value="http://vimeo.com/moogaloop.swf?clip_id=3519680&amp;amp;server=vimeo.com&amp;amp;show_title=1&amp;amp;show_byline=1&amp;amp;show_portrait=0&amp;amp;color=ff9933&amp;amp;fullscreen=1"&gt;&lt;param name="allowscriptaccess" value="always"&gt;&lt;param name="allowfullscreen" value="true"&gt;&lt;embed type="application/x-shockwave-flash" src="http://vimeo.com/moogaloop.swf?clip_id=3519680&amp;amp;server=vimeo.com&amp;amp;show_title=1&amp;amp;show_byline=1&amp;amp;show_portrait=0&amp;amp;color=ff9933&amp;amp;fullscreen=1" allowscriptaccess="always" allowfullscreen="true" width="400" height="300"&gt;&lt;/embed&gt;&lt;/object&gt;&lt;p&gt;&lt;a href="http://vimeo.com/3519680"&gt;DojoSec Monthly Briefings - March 2009 - Marcus J. Ranum&lt;/a&gt; from &lt;a href="http://vimeo.com/marcuscarey"&gt;Marcus Carey&lt;/a&gt; on &lt;a href="http://vimeo.com/"&gt;Vimeo&lt;/a&gt;.&lt;/p&gt;&lt;div class="blogger-post-footer"&gt;&lt;img width='1' height='1' src='https://blogger.googleusercontent.com/tracker/6536699500572800975-5721537287173664140?l=blog.dustinlfritz.com' alt='' /&gt;&lt;/div&gt;</description><link>http://blog.dustinlfritz.com/2009/03/dojosec-monthly-briefing-dmb-march-5.html</link><author>noreply@blogger.com (Dustin L. Fritz)</author><thr:total>0</thr:total></item><item><guid isPermaLink='false'>tag:blogger.com,1999:blog-6536699500572800975.post-2177236084095472397</guid><pubDate>Fri, 06 Mar 2009 06:59:00 +0000</pubDate><atom:updated>2009-03-14T14:41:27.773-04:00</atom:updated><category domain='http://www.blogger.com/atom/ns#'>DojoSec Monthly Briefings</category><category domain='http://www.blogger.com/atom/ns#'>Jesse Varsalone</category><category domain='http://www.blogger.com/atom/ns#'>live demo</category><category domain='http://www.blogger.com/atom/ns#'>wep encryption</category><category domain='http://www.blogger.com/atom/ns#'>wireless hacking</category><title>Jesse Varsalone at DojoSec Monthly Briefing</title><description>&lt;p&gt;I met Jesse when we both spoke at &lt;a href="http://www.dojosec.com/" target="_blank"&gt;DojoSec Monthly Briefing&lt;/a&gt; on February 5, 2009. In the video below Jesse talks about wireless hacking and does a live demo! It's a very good talk for those wondering how easy it really is to crack WEP 128bit encryption.&lt;/p&gt;&lt;div&gt;&lt;object classid="clsid:d27cdb6e-ae6d-11cf-96b8-444553540000" codebase="http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab#version=6,0,40,0" width="400" height="300"&gt;&lt;param name="width" value="400"&gt;&lt;param name="height" value="300"&gt;&lt;param name="allowscriptaccess" value="always"&gt;&lt;param name="allowfullscreen" value="true"&gt;&lt;param name="src" value="http://vimeo.com/moogaloop.swf?clip_id=3410674&amp;amp;server=vimeo.com&amp;amp;show_title=1&amp;amp;show_byline=1&amp;amp;show_portrait=0&amp;amp;color=&amp;amp;fullscreen=1"&gt;&lt;embed type="application/x-shockwave-flash" allowscriptaccess="always" allowfullscreen="true" src="http://vimeo.com/moogaloop.swf?clip_id=3410674&amp;amp;server=vimeo.com&amp;amp;show_title=1&amp;amp;show_byline=1&amp;amp;show_portrait=0&amp;amp;color=&amp;amp;fullscreen=1" width="400" height="300"&gt;&lt;/embed&gt;&lt;/object&gt;&lt;/div&gt;&lt;br /&gt;&lt;a href="http://vimeo.com/3410674"&gt;DojoSec Monthly Briefings - February 2009 - Jesse Varsalone&lt;/a&gt; from &lt;a href="http://vimeo.com/marcuscarey"&gt;Marcus Carey&lt;/a&gt; on &lt;a href="http://vimeo.com/"&gt;Vimeo&lt;/a&gt;.&lt;div class="blogger-post-footer"&gt;&lt;img width='1' height='1' src='https://blogger.googleusercontent.com/tracker/6536699500572800975-2177236084095472397?l=blog.dustinlfritz.com' alt='' /&gt;&lt;/div&gt;</description><link>http://blog.dustinlfritz.com/2009/03/jesse-varsalone-at-dojosec-monthly.html</link><author>noreply@blogger.com (Dustin L. Fritz)</author><thr:total>0</thr:total></item><item><guid isPermaLink='false'>tag:blogger.com,1999:blog-6536699500572800975.post-8333193258197498199</guid><pubDate>Mon, 02 Mar 2009 05:17:00 +0000</pubDate><atom:updated>2009-03-14T14:37:47.909-04:00</atom:updated><category domain='http://www.blogger.com/atom/ns#'>Rearguardsecurity</category><category domain='http://www.blogger.com/atom/ns#'>DojoSec Monthly Briefings</category><category domain='http://www.blogger.com/atom/ns#'>Marcus Ranum</category><category domain='http://www.blogger.com/atom/ns#'>Cyber War is Bullshit</category><title>Cyber War is Bull$*&amp;t coming to DojoSec Monthly Briefings March 5, 2009</title><description>&lt;div&gt;Malaysia 2008, &lt;a href="http://www.ranum.com/" target="_blank"&gt;Marcus Ranum&lt;/a&gt; spoke about a very interesting topic…Cyber War. A topic that I presented at &lt;a href="http://vimeo.com/3414471" target="_blank"&gt;DojoSec Monthly Briefings&lt;/a&gt;, a security conference in Columbia, MD. If you weren’t there you are going to just have to watch the video posted on my homepage, www.thecndgroup.com. You will notice that there might be some conflicting ideological arguments between what I presented and what Marcus presented at his keynote for Hack in the Box Conference 2008 Malaysia. If you missed Marcus’s talk on Cyber War is Bull$*&amp;amp;t don’t worry he will speaking Thursday March 5th, 2009 at &lt;a href="http://www.dojosec.com/" target="_blank"&gt;DojoSec Monthly Briefings&lt;/a&gt;.&lt;br /&gt;&lt;br /&gt;So Marcus’ title of the presentation is, “Cyber War is Bullshit.” Very appealing, right? But as Richard Bejtlich points out from &lt;a href="http://taosecurity.blogspot.com/2008/11/response-to-marcus-ranum-hitb-cyberwar.html" target="_blank"&gt;taosecurity.blogspot.com&lt;/a&gt;, “…I don't think ‘cyberwar is bullshit,’ but I'm guessing neither does Marcus if you discuss it in the proper context.”&lt;br /&gt;&lt;br /&gt;Kinetic weapons versus non-kinetic weapons…or is it a debate solely on the definitions of cyber war versus cyber terrorism, cyber criminal, and cyber espionage? As it stands now cyber is such a new idea in our national leader’s minds that we have not officially defined these terms, therefore we will continually debate the differences between cyber war and cyber attack.&lt;br /&gt;&lt;br /&gt;If you listened to Marcus on &lt;a href="http://rearguardsecurity.com/" target="_blank"&gt;rearguardsecurity.com&lt;/a&gt; and then watch him speak you will start to notice that he is on to something. The notion that if cyber war was ever conducted it would be like WWIII and everything would be wiped out is scary. Marcus believes who ever uses cyber war will ultimately be the victor.&lt;br /&gt;&lt;br /&gt;Check out his presentation and let me know what you think!&lt;br /&gt;&lt;br /&gt;&lt;/div&gt;&lt;div&gt;&lt;object classid="clsid:d27cdb6e-ae6d-11cf-96b8-444553540000" codebase="http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab#version=6,0,40,0" width="400" height="300"&gt;&lt;param name="width" value="400"&gt;&lt;param name="height" value="300"&gt;&lt;param name="src" value="http://vimeo.com/moogaloop.swf?clip_id=3359439&amp;amp;server=vimeo.com&amp;amp;show_title=1&amp;amp;show_byline=1&amp;amp;show_portrait=0&amp;amp;color=&amp;amp;fullscreen=1"&gt;&lt;param name="allowfullscreen" value="true"&gt;&lt;param name="allowscriptaccess" value="always"&gt;&lt;embed type="application/x-shockwave-flash" src="http://vimeo.com/moogaloop.swf?clip_id=3359439&amp;amp;server=vimeo.com&amp;amp;show_title=1&amp;amp;show_byline=1&amp;amp;show_portrait=0&amp;amp;color=&amp;amp;fullscreen=1" allowfullscreen="true" allowscriptaccess="always" width="400" height="300"&gt;&lt;/embed&gt;&lt;/object&gt;&lt;/div&gt;&lt;br /&gt;&lt;a href="http://vimeo.com/3359439"&gt;Cyber War is Bull$*&amp;amp;t&lt;/a&gt; from &lt;a href="http://vimeo.com/user1349205"&gt;Dustin Fritz&lt;/a&gt; on &lt;a href="http://vimeo.com/"&gt;Vimeo&lt;/a&gt;.&lt;div class="blogger-post-footer"&gt;&lt;img width='1' height='1' src='https://blogger.googleusercontent.com/tracker/6536699500572800975-8333193258197498199?l=blog.dustinlfritz.com' alt='' /&gt;&lt;/div&gt;</description><link>http://blog.dustinlfritz.com/2009/03/test.html</link><author>noreply@blogger.com (Dustin L. Fritz)</author><thr:total>0</thr:total></item></channel></rss>