Creating Critical Resiliency in Metropolitan Washington, DC INCMA consists of a growing membership of professionals who are creating a more resilient Critical Infrastructure in the Washington, DC metro area. These include defense industrial base, water supply systems, electrical energy, emergency services, law enforcement, health systems, gas and oil, storage and delivery, transportation, banking, and telecommunications. Our membership is voluntary yet exclusive and is comprised of individuals from both the public and private sector. The main goal of the Washington, DC Nations Capital Chapter of InfraGard is to promote ongoing dialogue, education, community outreach and timely communication between public and private members. Furthermore, to achieve and sustain risk-based target levels of capability to prevent, protect against, respond to, and recover from all hazards or events, and to minimize their impact on lives, property, and the economy. http://InfraGardNationsCapital.org

THIS EVENT IS LIMITED TO THE FIRST 25 MEMBERS WHO SIGN UP...REGISTRATION IS NOW CLOSED AND STAY POSTED FOR OUR NEXT EVENT IN MID-SEPTEMBER 09.

Please join your fellow INCMA members for an exclusive members only meeting.

This Member Only Event and Tour will be held at the FBI Academy

The FBI Academy is located on the United States Marine Corps Base at Quantico, Virginia. The Facility, which opened in the Summer of 1972, is situated on 385 wooded acres of land providing the security, privacy, and safe environment necessary to carry out the diverse training and operations functions for which the FBI is responsible. The DEA also has their training academy at Quantico, Virginia.

The main training complex has three dormitory buildings, a dining hall, library, a classroom building, a Forensic Science Research and Training Center, a 1,000-seat Auditorium, a chapel, administrative offices, a large gymnasium and outside track, along with a fully equipped garage. In addition to the main complex, there is a mock city known as Hogans Alley, which consists of facades replicating a typical small town. The Hogans Alley facades are primarily used for FBI and DEA New Agent Training, while behind the facades are fully functioning classrooms, audiovisual facilities, storage areas, and administrative and maintenance offices. Just beyond Hogans Alley is a 1.1 mile pursuit/defensive driving training track. The extensive firearms training provided to all FBI/DEA and other law enforcement officers is conducted at the indoor firing range, the eight outdoor firing ranges, four skeet ranges, or the 200-yard rifle range.

The FBI Academy is a secured facility and, as such, is not open to the public for tours. We will send the directions and where to meet a few days before the event via the email you register with.

Please Read: 

Due to the fact that we are meeting at a secure facility and their policy requires advance information we urge you to please register in advance. PLEASE do not register unless you are a current cleared member in good standing. As a courtesy to our sponsor, please DO NOT register unless you are certain you can attend the event.

If you or your organization would like to sponsor this or a future event please let us know and we will be in contact with you directly.

Please note out new EARLIER start time, to accommodate those who don’t want to stay in the city til all hours.

We’re going to start at 5 PM on the back deck, and we may migrate upstairs later, depending on how the evening is going.

CapSec DC
Wednesday June 24th 5:00 PM

Stetson’s
1610 U St NW
Washington DC 20009

Hope to see you there!

Do not leave this event to go back to your normal sequestered existence, the information security industry needs you. There are people dying for you to mentor them and the key to success in our industry is the sharing of information. After this event the attendees should go back into the local security communites and lead.

In this talk attendees will learn how Marcus started the most well attended monthly security professional meetup in the country. You will learn how that meetup has gained considerable international buzz in the information security industry. Together with the SANS Institute events, local information security professionals can keep the fire burning throughout the year by going hyper-local.

Marcus J. Carey is passionate about mentoring our current and next generation of security professionals. In Marcus’ 15 year information security career, he has worked in Navy Cryptology, at NSA, at DoD Cyber Crime Center, and currently engineers solutions for a federal agency. Marcus created DojoSec to mentor and facilitate knowledge transfer amongst information security professionals. Marcus’ skillset includes network exploitation, data forensics, secure network architecture, and log analysis. Marcus earned a Master of Science in Network Security from Capitol College in Laurel, Maryland. Marcus is also a contributor to the PaulDotCom Security Weekly Podcast and Blog.

Date: June 4, 2009
Time: 6:00 – 9:30 PM
Entry Fee: $1
Location: Capitol College – Avrum Gudelsky Memorial Auditorium

Register: http://www.dojosec.com/?page_id=37
Directions: http://www.capitol-college.edu/visit-campus/directions-campus

–

WHAT TO DO WITH THE UNKNOWN?

Alain Zidouemba, Sourcefire – http://www.sourcefire.com

DESCRIPTION:

Clam AntiVirus is an open source anti-virus toolkit for UNIX systems. The main purpose of this software lies in the integration with mail servers enabling mail attachment scanning before the end user receives a virus. Like other anti-virus software, the engine for ClamAV has pattern matching technology at it’s heart. Updates to the malware signatures are released on a regular basis by ClamAV Researchers. When no signatures are available however, or when updates are not coming fast enough the only option is to create signatures. Fortunately, ClamAV signatures are open and this enables the administrator to fill in the gap for themselves.

BIO:

Alain Zidouemba was born in Ouagadougou, Burkina Faso. He studied Mathématiques Supérieures and Mathématiques Spéciales at the Lycée Jacques Amyot in France and Electrical and Computer Engineering at Howard University in the US. He worked in the area of network modelling and simulation at OPNET Technologies before taking a position at PestPatrol as a Spyware Researcher. He later joined Computer Associates to work on intrusion prevention and behavioral malware analysis. Alain recently became part of the Vulnerability Research Team (VRT) at Sourcefire and performs research in the areas of intrusion prevention and anti-malware.

–

HOW NOT TO GET PWND BY YOUR CLIENTS

Richard Goldberg, Esq. - http://www.goldberglawdc.com

DESCRIPTION:

In your service and employment contracts, there are certain things you should never agree to, and there are certain protections you always need. Otherwise you’re essentially betting your future, and the future of your company, on the hope that nothing will go wrong. Ever.

This talk will tell you how to keep yourself out of trouble. Topics will include dealing with “standard” contracts and “standard” provisions; what it means to “indemnify” someone else; how to protect your intellectual property and confidential information; and other dangers, including warranties and audit-rights provisions. It will also cover some negotiation strategies.

BIO:

Richard is a Java architect-turned lawyer. Having worked in software beginning in the mid-90s with commercial customers and federal/DOD contractors and agencies, Richard has represented small information security companies and some of the largest names in OpenSource.

–

GETTING PHYSICAL WITH MOBILE DEVICES

Eoghan Casey, cmdLabs

DESCRIPTION:

Acquiring and analyzing physical memory is one the more challenging aspects of mobile device forensics, but can also be one of the most rewarding. Delving into deleted data on a mobile device can uncover valuable information, particularly when an individual took steps to conceal his activities.

This seminar covers various techniques and tools for dumping and analyzing physical memory from mobile devices, including Flasher boxes. In addition, we will provide examples of items recovered from physical memory that are not accessible using most forensic tools.

As we become more adept at obtaining deleted data from physical memory, some manufacturers are taking steps to enhance the security of their devices. We will discuss potential approaches to circumventing these security measures, with the hope that we can continue to improve our abilities to recover useful information from mobile devices.

BIO:

Eoghan Casey is founding partner of cmdLabs (www.cmdlabs.com), author of the foundational book Digital Evidence and Computer Crime, and coauthor of Malware Forensics. For over a decade, he has dedicated himself to advancing the practice of incident handling and digital forensics. He helps client organizations handle security breaches and analyzes digital evidence in a wide range of investigations, including network intrusions with international scope. He has testified in civil and criminal cases, and has submitted expert reports and prepared trial exhibits for computer forensic and cyber-crime cases.

Eoghan has performed thousands of forensic acquisitions and examinations, including e-mail and file servers, mobile devices, backup tapes, database systems, and network logs. He has performed vulnerability assessments, deployed and maintained intrusion detection systems, firewalls and public key infrastructures, and developed policies, procedures, and educational programs for a variety of organizations. In addition, he conducts research and teaches graduate students at Johns Hopkins University Information Security Institute, is editor of the Handbook of Digital Forensics and Investigation, and is Editor-in-Chief of Elsevier’s International Journal of Digital Investigation.

CapSec DC
Wednesday May 27th 7:00 PM

Stetson’s
1610 U St NW
Washington DC 20009

Hope to see you there!

Please register by clicking the registration tab.

Title: Void Your Warranty

Speaker: Sean Wilkerson, Co-Founder Aplura

Description:

Typical enterprise network security architecture includes many solutions
(software and hardware) designed to do things such as enhance
visibility/detection of threats or stop unwanted traffic. Billions of
dollars are spent each year on security products which keep color graphs
on our executives desks, security managers at relative peace, and the
vendors in business, but what are these products missing?

The average IT Security administrator is slowly losing control of their
network with each appliance or turn-key solution they install. We will
discuss how to get back this control, hold your vendors and staff
accountable, and why this is critical.

This won’t be nearly as dramatic as a Fox exclusive: “When Security
Products go Bad,” however; we will discuss the larger problem and what
you can (and should) do to inspect, audit, and enhance your security
solutions.

Speaker Bio:

Sean is co-founder, partner, and consultant for Aplura, a DC-area
security consulting company. Sean has spent the last decade managing IT
and Information Security systems. For the last half of that time, Sean
has traveled to several continents for many entities, with a typical
objective to enhance network visibility and reduce analyst reaction time.

–

Title: FISMA: It doesn’t bite

Speaker: Dan Philpott, Founder FISMApedia.org

Description:

In this seminar Dan Philpott will discuss the Federal Information Security Management Act (FISMA) and the compliance regime created for it. Starting with a high level overview of FISMA the problems and possibilities, fallacies and future of the FISMA framework will be explored. The goal of this talk is to present the FISMA framework as it is intended, not a mindless exercise at paper compliance, but as guidance and method to achieve functional security scoped to the risk of operation.

Speaker Bio:

Daniel Philpott is an Information Security Consultant with OnPoint Consulting where he specializes in FISMA compliance. Daniel is founder of the FISMApedia.org wiki, a guest blogger at Guerilla-CISO.com and a FISMA instructor with Potomac Forum.

–

Title: Shining Flashlights in Dark Corners: The evolving role of information security on campus

Speaker: Eric Weakland, Director of Network Security, American University

Eric Weakland will trace his rise through the ranks of an emerging security organization, starting out in the late 1990s and continuing on into the increasingly regulated and formal security environment of the last few years. As concrete examples, Weakland will describe how the AU security team has approached more recent challenges such as encryption and web application security on campus. This interactive talk will include technical lessons learned from over a decade of practice with increasingly sophisticated tools, as well as valuable management lessons on how to best serve multiple, competing constituencies, in a chaotic campus IT environment.

Speaker Bio:

Eric Weakland is the Director of Network Security at American University in Washington DC. Eric has extensive experience in planning strategic initiatives to serve emergent information security needs in the Higher Education market. He holds a Bachelors degree from Carnegie Mellon University and a Masters of Science in Information Technology Management from American University’s Kogod School of Business.

Hope to see you there!

*TOPIC: Your Network Security Isn’t Good Enough Anymore Today’s threats—and networks—are dynamic. Unfortunately, most security offered to date has been static—leaving you blind to the network. *

In this seminar, Martin Roesch, Founder and CTO of Sourcefire® and Creator of Snort® will clearly show why /today’s network security isn’t getting the job done/. He will point out why network security must be /intelligent/ to be effective—providing full network visibility, relevant context, and automated impact assessment and IPS tuning. Mr. Roesch will also show why network security must adapt to dynamic networks and threats in real time. Finally, he will share some of his vision on where network security is heading in the future.

Your network security solution may be new, but chances are it is based on outdated assumptions. How can you truly protect your network if you can’t see what is running on it, don’t know what to protect, and can’t identify the threats facing you?

Don’t you owe it to yourself and your organization to attend this seminar and then audit your network security capabilities?

Come see Martin on May 7th in McLean, VA. Register at:

http://www.sourcefire.com/news/webinars/

Nessus 4 features major performance improvements, greater scalability and reduced memory usage.

You can download Nessus 4 at http://www.nessus.org/download/

Sourcefire is the world leader in real-time adaptive network security, giving organizations maximum knowledge to protect against attacks. The company was founded in January 2001 by Martin Roesch, author of open source Snort®, the world’s most downloaded intrusion detection and prevention technology with over 3.7 million downloads to date. In response to increased demand for a commercial version of the popular software, the company developed the Sourcefire 3D® System—Discover, Determine, Defend—a systematic network defense system built on Snort and designed to adapt to dynamic networks and threats in real-time. With 6 patents awarded and 37 patents pending Sourcefire has a strong commitment to innovation and continues to break new ground.

CapSec DC is in two weeks!

CapSec DC
Wednesday April 29th 7:00 PM

Stetson’s
1610 U St NW
Washington DC 20009

Hope to see you there!

DojoSec Monthly Briefings – April 2009 – Matthew Watchinski from Marcus Carey on Vimeo.

Speaker: Joseph McCray

Title: Hacking Big Companies Without Getting Caught

Description:

This talk will focus on identifying and bypassing enterprise class security solutions such as Load Balancers, Intrusion Prevention Systems (IPSs), and Web Application Firewalls (WAFs).

Speaker Bio:

Joseph McCray is a leader when it comes to penetration testing. Joseph currently acts as Assessment Practice Manager at Rapid7 and is the founder of LearnSecurityOnline.com. At Rapid7, he manages and performs Blackbox & Whitebox, Wireless, and VoIP Penetration Testing, as well as performing Social Engineering.

CapSec DC is only two weeks away.

CapSec DC
Wednesday March 25th, 7:00 PM

Stetson’s
1610 U St NW
Washington DC 20009

Stetson’s
1610 U St NW
Washington DC 20009

We return to Stetson after a many month absence. We will now be at the UPSTAIRS bar, go past the bouncer and up the stairs when you come in the door. We’ll have access to pitchers and wings as before, just a new, slightly more isolated (and quieter) environment.

I’ll try to wear a “hacker” t-shirt as I often do, look around for various “con” or geek shirts mixed in with people in govvie-wear to find the right crowd.

We reserve the right to change venues as the evening wears on — previously we have walked down U Street, other venues might include The Saloon or DC9. Call/email/twitter someone if you are showing up very late to check where we are.

Please RSVP here or on Upcoming if you know ahead of time that you can make it. For those of you Metro-ing, it’s 3.5 blocks from the U street Metro on the Green and Yellow lines (U Street Cardoza) Station. It’s a tad further from Dupont Circle on the Red Line, but quite doable.

Location will be announced soon, we’re donig some research on locations still (we hope to be back at Stetson’s, but with some guaranteed space).

January 28th, 7 PM
Buffalo Billiards in Dupont Circle
1330 19th Street Washington, D.C

Please RSVP on Upcoming

We’re going to try to meet up in the back bar there.

When you walk in, be nice to the bouncer, then head straight back and slightly to the right. There will be a set of doors past the pool tables next to the bar. We’ll be back there.