Northeast Ohio Information Security Forum

—< NORTHEAST OHIO INFORMATION SECURITY FORUM MEETING
—< Wednesday March 21, 2012
—< 6:30 PM – 8:00 PM
—< Pizza and social start 6:00 PM
—< Location: Park Center Plaza #1, 6100 Oak Tree Blvd, off Rockside Road, Independence, Ohio
—< Open to everyone and free as always

The Northeast Ohio Information Security Forum will hold our monthly meeting at the above date and time. It will be held in the lower level of the Park Center Plaza #1 building (in the large room on lower level) off of Rockside Road in Independence. I’ve included links to maps and directions in this email.

Talks:

Cracking Passwords with Rainbow Tables by David Lauer

A quick demo of how easy it is to configure a flash drive to crack
passwords. When I say fast I mean fast. No death by PowerPoint here.
Just a quick intro to the concepts and on to the demo!

OSM (Awesome) Botnet Communications by Stephen Mather

What are the theoretical vulnerabilities of versioned geospatial datasets, e.g. for use as bot communications?  Multiple methods for providing wiki-style versioned geospatial datasets exist, from Versioned Web Feature Service (WFS) to OpenStreetMap’s (OSM) infrastructure, to proprietary approaches, and emerging standards, e.g. GeoGit.  Vulnerabilities to abuse these systems as encoding structures may be subtler than twitter bot net encoding.  This talk will briefly introduce OSM, WFS, and GeoGit, and solicit thoughts on ways versioned geospatial wiki style infrastructure may be vulnerable to abuses.

Don’t forget to come early, starting at 6:00 PM, for pizza and pop courtesy of SecureState (http://securestate.com/).

Another great meeting from NEO Info Sec Forum – we hope to see you there!
– NEOISF Board –
Follow us on Twitter: http://twitter.com/neoisf
Our website: http://www.neoisf.org

———————————————————————————-
[Location]
Park Center Plaza 1
6100 Oak Tree Blvd
Google maps link: http://bit.ly/ndIDBZ

[Directions]
1. I-77
2. Rockside Road exit
3. West on Rockside Road
4. 2nd light go South onto Oak Tree Blvd
5. Pull into the 3rd driveway on the right
6. Go to lower level
Signs will be posted on the building.

—< NORTHEAST OHIO INFORMATION SECURITY FORUM MEETING
—< Wednesday February 15, 2012
—< 6:30 PM – 8:00 PM
—< Pizza and social start 6:00 PM
—< Location: Park Center Plaza #1, 6100 Oak Tree Blvd, off Rockside Road, Independence, Ohio
—< Open to everyone and free as always

The Northeast Ohio Information Security Forum will hold our monthly meeting at the above date and time. It will be held in the lower level of the Park Center Plaza #1 building (in the large room on lower level) off of Rockside Road in Independence. I’ve included links to maps and directions in this email.

Talks (descriptions below):

DMARC by Michael Hammer

Michael Hammer will provide an overview of a recently released specification called DMARC (Domain-based Message Authentication, Reporting & Conformance) which provides authentication feedback loop reporting as well as the ability for domain owners to make policy assertions (quarantine/reject) for messaging claiming to be from their domains. While not a magic bullet, DMARC is a significant step forward in providing additional email authentication transparency for senders as well as mitigating certain types of abuse.

There will also be a special announcement at the meeting!!!!!

Don’t forget to come early, starting at 6:00 PM, for pizza and pop courtesy of NEOISF (http://www.neoisf.org/).

Another great meeting from NEO Info Sec Forum – we hope to see you there!
– NEOISF Board –
Follow us on Twitter: http://twitter.com/neoisf
Our website: http://www.neoisf.org

———————————————————————————-
[Location]
Park Center Plaza 1
6100 Oak Tree Blvd
Google maps link: http://bit.ly/ndIDBZ

[Directions]
1. I-77
2. Rockside Road exit
3. West on Rockside Road
4. 2nd light go South onto Oak Tree Blvd
5. Pull into the 3rd driveway on the right
6. Go to lower level
Signs will be posted on the building.

—< NORTHEAST OHIO INFORMATION SECURITY FORUM MEETING
—< Wednesday January 18, 2011
—< 6:30 PM – 8:00 PM
—< Pizza and social start 6:00 PM
—< Location: Park Center Plaza #1, 6100 Oak Tree Blvd, off Rockside Road, Independence, Ohio
—< Open to everyone and free as always

The Northeast Ohio Information Security Forum will hold our monthly meeting at the above date and time. It will be held in the lower level of the Park Center Plaza #1 building (in the large room on lower level) off of Rockside Road in Independence. I’ve included links to maps and directions in this email.

Talks (descriptions below):

Security Economics and the Battle Against Patience by Rockie Brockway
More TBA

Don’t forget to come early, starting at 6:00 PM, for pizza and pop courtesy of NEOISF (http://www.neoisf.org/).

Another great meeting from NEO Info Sec Forum – we hope to see you there!
– NEOISF Board –
Follow us on Twitter: http://twitter.com/neoisf
Our website: http://www.neoisf.org

———————————————————————————-
[Location]
Park Center Plaza 1
6100 Oak Tree Blvd
Google maps link: http://bit.ly/ndIDBZ

[Directions]
1. I-77
2. Rockside Road exit
3. West on Rockside Road
4. 2nd light go South onto Oak Tree Blvd
5. Pull into the 3rd driveway on the right
6. Go to lower level
Signs will be posted on the building.

————————————-
Security Economics and the Battle Against Patience by Rockie Brockway

This talk focuses on many of the latest attack trends and goals, the parties responsible and the responsibility of the InfoSec community in not only protecting our own direct business assets but associative economic impact of doing so on our collective national economies. Alternate methodologies of protecting the business model will be presented and open to discussion/debate.

—< NORTHEAST OHIO INFORMATION SECURITY FORUM MEETING
—< Wednesday December 21, 2011
—< 6:30 PM – 8:00 PM
—< Pizza and social start 6:00 PM
—< Location: Park Center Plaza #1, 6100 Oak Tree Blvd, off Rockside Road, Independence, Ohio
—< Open to everyone and free as always

The Northeast Ohio Information Security Forum will hold our monthly meeting at the above date and time. It will be held in the lower level of the Park Center Plaza #1 building (in the large room on lower level) off of Rockside Road in Independence. I’ve included links to maps and directions in this email.

Talks planned (abstracts and bios at bottom of this email)…

• Homemade Hardware Keylogger/PHUKD Hybrid by Irongeek
• The Penetration Testing Execution Standard (PTES) – Changing an Industry by Dave Kennedy

Don’t forget to come early, starting at 6:00 PM, for pizza and pop courtesy of NEOISF (http://www.neoisf.org/).

Another great meeting from NEO Info Sec Forum – we hope to see you there!
— NEOISF Board —
Follow us on Twitter: http://twitter.com/neoisf
Our website: http://www.neoisf.org

———————————————————————————-
[Location]
Park Center Plaza 1
6100 Oak Tree Blvd
Google maps link: http://bit.ly/ndIDBZ

[Directions]
1. I-77
2. Rockside Road exit
3. West on Rockside Road
4. 2nd light go South onto Oak Tree Blvd
5. Pull into the 3rd driveway on the right
6. Go to lower level
Signs will be posted on the building.
———————————————————————————-

– – – – – – – – – – –
TALK INFORMATION

TALK TITLE : Homemade Hardware Keylogger/PHUKD Hybrid
SPEAKER    : Irongeek

ABSTRACT:
He has been doing some work recently on making homemade keyloggers of both the USB and PS/2 persuasion that will take keystrokes, record/replay them, and modify programmable HID payloads accordingly.  This hardware and software is not exactly ready for prime time, but he figured he would share it with you.

Here are just a few of the possibilities:
    * Log all the keys using a MicroSD card
    * Vary payloads based on keystrokes
    * Log username/password and use them later
    * Screw with the person who is typing

————————————————–
TALK TITLE : The Penetration Testing Execution Standard (PTES) – Changing an Industry
SPEAKER    : Dave Kennedy, CISO @ Diebold Inc.

ABSTRACT:
The Penetration Testing Execution Standard (PTES) was just released in its first draft form at DerbyCon 2011. Since then, there has been an overwhelming amount of input placed on changing the way the industry does Penetration Testing. This talk will cover what defines a penetration test, what they are used for, and how you can change the industry for the better.

BIO:
Dave Kennedy (ReL1K) is a Vice President and Chief Security Officer at Diebold Incorporated. Dave is responsible for ensuring the overall physical and logical security of a Fortune 1000; publicly traded company. Dave also runs the security consulting practice at Diebold which is focused on enhancing and building security for large and mid-sized organizations. Dave is the creator of the Social-Engineer Toolkit (SET), an open-source penetration testing tool for social-engineering. Dave is the co-founder of DerbyCon, a large-scale security conference located in Louisville Kentucky. Dave is the co-author of Metasploit: The Penetration Testers Guide book which has been number one in security on Amazon for over 6 months. Prior to Diebold, Dave worked for the United States Marine Corps (USMC) and the intelligence field working on information warfare activities.

————————————————–