Archive for the ‘Events’ Category

Avoiding Data Disasters: Managing Risk from Undiscovered Sensitive Data

Wednesday, August 30th, 2006

Where does sensitive data exist in your organization? Where is it hiding, how does it flow through your systems, and who really has access? If you think you know the answers, think again.

In most companies, recognized data represents just the tip of the iceberg, while undiscovered sensitive data lurks below—posing a serious but preventable compliance risk.

Join this one-hour Webinar to explore what you can do to prevent costly and embarrassing data breaches.

Topics that will be covered:

  • How unintended data exposure happens, including case examples
  • Risk concepts every technie should be able to discuss with business users
  • Specific compliance requirements including PCI, Gramm-Leach-Bliley, and HIPAA
  • Checks and balances even small organizations must have in place to protect sensitive data
  • Capital costs and risks stemming from sensitive data exposure
  • Best practices for data relationship discovery and de-identification

(more…)

The 5th Annual Philippine IT Security Conference - MANILACON 2006: Progress@Risk

Tuesday, August 29th, 2006

5th Annual Philippine IT Security Conference
September 11- 12, 2006
Hotel Intercontinental
Makati City, Philippines 

This year’s 5th Information Systems Security conference and exhibit is dubbed: “ManilaCon 2k6:progress@risk” and is organized by the Information Systems Security Society of the Philippines (ISSSP), in cooperation with the Commission on Information and Communications Technology (CICT) and the National Security Council (NSC) towards the development and implementation of a National Cyber Security Strategy.

We need one to ensure the integration of public and private efforts to counter threats and institutionalize the protection of national and local cyber infrastructures and businesses.

We expect all security concerned CEOs, CIOs, Security Officers and Systems Administrators/Programmers to be more vigilant in securing cyberspace, not just for the protection of their respective enterprises but for the protection and security of all those existing and doing business in cyberspace.

This conference and exhibit is designed to kick-start this national effort and concern.

To join, please see below, details of the program schedule and delegate fees.

For registration or more information, please call Ellen at the ISSSP Secretariat telefax no. 750-3742 or mobile 0920-2413954. Or send email to isssphil[at]yahoo.com. You may also visit http://www.isssp.org.ph/ for other details of this conference and exhibit and/or to register online.

Signed: 

AMADO A. MALACAMAN, JR., President – ISSSP             

Angelo Timoteo M. Diaz De Rivera,  Commissioner – CICT

(more…)

Global Security Week 2006 — Identity Theft

Sunday, August 27th, 2006

Global Security Week 2006, the week leading up to September 11th each year, is an opportunity to join forces with other security professionals worldwide and promote security to the masses. The theme for Global Security Week 2006 is identity theft. Find out about the truth behind the headlines. Is “phishing” a genuine threat? What are the banks doing about it? What can ordinary members of the public do about it? Participate in Global Security Week to help spread the word about identity theft and encourage ordinary law-abiding citizens to be on their guard.

http://www.globalsecurityweek.com/index.html

Security Solutions Virtual Tradeshow

Friday, August 25th, 2006

Security Solutions Virtual Tradeshow
Balancing the Need for Heightened Security and Increased Access

Wednesday, September 13 & Thursday September 14, 2006 Today’s CIOs and IT managers face a daunting task: protect their network from viruses, spyware and the latest threat du jour—phishing and keyloggers to ransomware and cyberextortion. They must also ensure that their IT spending helps their company comply with legislation, maintain internal and perimeter security, and protect information assets and personal data. But, it doesn’t end there–IT executives must contend with an increased reliance on wireless networks, smart phones, instant messenger, P2P and VoIP.  That is the mandate and there is no way getting around it.

New tools and technologies provide widespread access to enterprise users, but they also demand improved security strategies and policies. As IT managers develop more sophisticated security strategies, more complex and damaging threats will be unleashed that drain time and resources. It’s an uphill battle and it’s all in a day’s work for an already overtaxed IT department.

(more…)

Hacking Teams to Vie for Honours

Wednesday, August 23rd, 2006

Hack In The Box Sdn Bhd (HITB) announced that it will once again host the region’s best-known Capture The Flag hacking competition during the upcoming HITBSecConf2006 to be held from Sept 18-21 at The Westin Hotel, Kuala Lumpur.  

Capture The Flag, or CTF as it is better known, is a team-based competition where teams of three to five players pit their skills in defending a server against computer security attacks from other teams. At the same time, these teams will be attacking the servers of other teams in order to gain points.  

Held over two days, teams will be scored on their ability to defend their servers in the wake of exploitable software as well as their ability to exploit security bugs on the servers of their competitors. At the end of the competition, the team with the most points will be adjudged the winner.  

(more…)

SANS Webcast: Proactive Security - Eliminating Vulnerabilities Before Attackers Know They Exist

Tuesday, August 22nd, 2006

Proactive Security - Eliminating Vulnerabilities Before Attackers Know They Exist
Featuring: Dave Shackleford and Thomas Maufer
Thursday, September 07, 2006 at 1:00 PM EDT (1700 UTC/GMT) :: Friday, September 08, 2006 at 1 AM (Philippines) 

To date, security technologies and techniques have been largely reactive in nature. Even technologies that are considered proactive by today’s standards are still reacting to known threats, and defending known vulnerabilities. Zero-day threats are becoming more and more frequent, however, as attackers learn new ways to exploit systems and software. A new approach is required - testing the interaction between technologies by manipulating the protocols in use, as well as modifying known attacks and vulnerabilities. This webcast will present a new way of approaching security for system developers, device manufacturers, and enterprise security teams who need to validate technology before buying it and putting it into production.

(more…)