Archive for month: February, 2013

You are here: / / February

ShmooCon 2013 Officially Starts Today

ShmooCon 2013 officially starts today, Friday, February 15, 2013 at 2:30 pm EST with opening remarks from the founder of The ShmooCon Group, Bruce Potter (@gdead). Other talks that are scheduled to follow today are WIPE THE DRIVE!!! – Techniques for Malware Persistence

By Mark Baggett and Jake Williams, as well as Bringing The Sexy Back To…Defense In Depth

By Martin Fisher.   A full schedule of events can be access at their website located at:

http://www.shmoocon.org/schedule

The event is being held at:

Hyatt Regency Washington
400 New Jersey Avenue, NW
Washington, District of Columbia
United States 20001
Tel: 1-202-737-1234
Fax: 1-202-737-5773
Hotel Website
Google Maps

It is expected to be another well hosted security conference and plenty of valuable information by some of the leading security experts and hackers in the game.

If you are one of the unlucky ones that cannot make it, we have good news for you. The event will be streamed at the following links below and on the securityorb.com/ site. Enjoy…

Build It: http://www.ustream.tv/channel/build-it-2013

Belay It: http://www.ustream.tv/channel/belay-it-2013

Bring It On: http://www.ustream.tv/channel/bring-it-2013

About ShmooCon:

ShmooCon is an American hacker convention organized by The Shmoo Group. There are typically about 35 different talks and presentations, on a variety of subjects related to computer security and cyberculture.

ShmooCon 2013 Security Conference Streaming Information

If you are one of the unlucky ones that cannot make it, we have good news for you. The event will be streaming at the following links below and on the securityorb.com/ site. Enjoy…

Build It: http://www.ustream.tv/channel/build-it-2013

Belay It: http://www.ustream.tv/channel/belay-it-2013

Bring It On: http://www.ustream.tv/channel/bring-it-2013

 

President Obama’s State of the Union CyberSecurity Text, Audio and Video

President Obama stated:

America must also face the rapidly growing threat from cyber-attacks.  We know hackers steal people’s identities and infiltrate private e-mail.  We know foreign countries and companies swipe our corporate secrets.  Now our enemies are also seeking the ability to sabotage our power grid, our financial institutions, and our air traffic control systems.  We cannot look back years from now and wonder why we did nothing in the face of real threats to our security and our economy.

That’s why, earlier today, I signed a new executive order that will strengthen our cyber defenses by increasing information sharing, and developing standards to protect our national security, our jobs, and our privacy.  Now, Congress must act as well, by passing legislation to give our government a greater capacity to secure our networks and deter attacks.

Audio File: SotU CyberSecurity

Executive Order on Improving Critical Infrastructure Cybersecurity

The White House

Office of the Press Secretary

For Immediate Release
February 12, 2013

Today, President Obama signed an Executive Order to strengthen the cybersecurity of critical infrastructure by increasing information sharing and by jointly developing and implementing a framework of cybersecurity practices with our industry partners.

  • Defense Industrial Base Information Sharing Program Now Open to Other Sectors: The Order expands the voluntary Enhanced Cybersecurity Services program, enabling near real time sharing of cyber threat information to assist participating critical infrastructure companies in their cyber protection efforts.
  • NIST to Lead Development of Cybersecurity Framework: NIST will work collaboratively with critical infrastructure stakeholders to develop the framework relying on existing international standards, practices, and procedures that have proven to be effective.

 

Partnering with Industry to Protect Our Most Critical Assets from Cyber Attack

Today’s new Executive Order was developed in tandem with the Presidential Policy Directive on Critical Infrastructure Security and Resilience also released today. The Executive Order strengthens the U.S. Government’s partnership with critical infrastructure owners and operators to address cyber threats through:
  • New information sharing programs to provide both classified and unclassified threat and attack information to U.S. companies. The Executive Order requires Federal agencies to produce unclassified reports of threats to U.S. companies and requires the reports to be shared in a timely manner. The Order also expands the Enhanced Cybersecurity Services program, enabling near real time sharing of cyber threat information to assist participating critical infrastructure companies in their cyber protection efforts.
  • The development of a Cybersecurity Framework. The Executive Order directs the National Institute of Standards and Technology (NIST) to lead the development of a framework of cybersecurity practices to reduce cyber risks to critical infrastructure. NIST will work collaboratively with industry to develop the framework, relying on existing international standards, practices, and procedures that have proven to be effective. To enable technical innovation, the Cybersecurity Framework will provide guidance that is technology neutral and that enables critical infrastructure sectors to benefit from a competitive market for products and services.

Read the rest at the White House website

An Interview with Mark Russinovich

This week on Washington DC based “The SecurityOrb Show” a discussion with Mark Russinovich occurred. The discussion centered around his role at Microsoft as a Technical Fellow as well as some of the work he did before Microsoft with his companies Winternals and Systernals.

We also talked about his educational background, current projects and views on the new coding methodology.

Mark also discussed his motivation for writing his first two fiction-based books, “Zero Day” and “Trojan Horse” and also stated his third book “Rogue Code” will coming out in spring 2013.

For more information on Mark and how to contact him, check out: http://www.russinovich.com

You can also check out his Wikipedia at: http://en.wikipedia.org/wiki/Mark_Russinovich

In addition to the interview with Dr. Russinovich, a discussion on a recent examiner.com article about how a Chinese hackers are attacking American-based media companies such as Twitter, the NY Times, Bloomberg and Wall Street Journal.

On this show, we talk about how Chinese hacker are attacking US media companies, we also did an interview with Microsoft Technical Fellow, Mark Russinovish, Author of Zero Day and Trojan Horse.

You can also follow previous shows at:

https://securityorb.com/securityorbshow/

The SecurityOrb Show #003 – Feb. 6 2013


On this show, we talk about how Chinese hacker are attacking US media companies, we also did an interview with Microsoft Technical Fellow, Mark Russinovish, Author of Zero Day and Trojan Horse.

Media Companies are Under Attack by Chinese Hackers

On Friday, February 1, Twitter has reported and confirmed that is has become the latest victim of sophisticated cyber attacks against media companies in recent weeks. Other companies include The Washington Post, The New York Times, Bloomberg News and The Wall Street Journal. All fingers point to Chinese hackers penetrating their computer systems.

Read More at Examiner.com