Tag Archive for: SANS

You are here: / SANS

Posts

SANS Cyber Defense Initiative (CDI) 2014

SANS Cyber Defense Initiative (CDI) 2014 will once again bring together the nation’s cyber defense community on December 10-19 at the Grand Hyatt Washington in DC.

 

CDI 2014 is not only a leading cyber defense training event, it is also powered by SANS’ NetWars! Learn more about the Core NetWars, DFIR NetWars, and the 3rd Annual NetWars Tournament of Champions taking place at CDI 2014 at the event page below, as well as the more than 25 courses available in IT security, pen testing, security management, IT audit, and digital forensics. Short courses can also be taken with a long course to enhance your training.

 

New courses include the debut of SEC562: CyberCity Hands-on Kinetic Cyber Range Exercise at CDI 2014. Competing in simulated attacks, participants will learn how to devise strategies and employ tactics to thwart computer attacks that would cause significant real-world damage. The battles ensue inside CyberCity, a miniature physical city featuring real-world Industrial Control Systems and a power grid. CyberCity’s in-depth and ambitious challenges include maintaining control of vital city infrastructure including water, power, transportation, hospitals, banks, retail, and residential.

 

On the final day of the SEC562 course participants compete in a free-for-all battle for turf in CyberCity. Teams are tasked with taking over turf from other teams while simultaneously protecting their own turf in a red-team/blue-team faceoff.

 

Every course, evening talk, and special event offered at SANS CDI 2014 is designed to keep cyber defenders on the cutting-edge and to ensure that they have the knowledge and skills required to fight against the actions of today’s cyber criminals. Many courses at CDI 2014 can also be used to prepare for GIAC certification.

 

For a complete list of courses and to register for the training event, please visit:

http://www.sans.org/info/169082

 

*** Save $150 on your CDI 2014 course with discount code: SANS_SecOrb150 ***

SANS Security West 2014 – Emerging Trends in Cybersecurity – is coming up on May 8-17

SANS Security West 2014 is a vital event for information security professionals looking to stay on top of industry trends, to acquire certifications, and to learn and immediately apply new cybersecurity skills. Security West features:

* Panel discussions on emerging trends in cybersecurity

* 25+ hands-on immersion InfoSec courses

* Industry-leading instructors with real-world experience

=========================
Emerging Trends in Cybersecurity
=========================
Security West features emerging trends in cybersecurity and is highlighted by evening talks and star-studded panel discussions from teams who will present the following:

* Keynote: Emerging Security Trends: Crossing the Chasm to Protecting a “Choose Your Own IT” World presented by John Pescatore

* Emerging Trends Panel: DFIR led by Rob Lee

* Emerging Trends Panel: Offense Informs Defense, but How? led by Ed Skoudis

* Emerging Trends Panel: Will The Real Next Generation Security Please Stand Up? led by John Pescatore
=========================
Security Training Courses
=========================
This training event will offer more than 25 outstanding hands-on immersion courses for all security professionals in IT audit, security management, technical security, penetration testing, and computer forensics. At SANS Security West, you have the opportunity to advance your information security skillset, learn to prepare your organization for the future, and enjoy the Pacific Ocean and San Diego!

For a complete list of course descriptions and to register, please visit:
http://www.sans.org/info/154435
( Save 5% on your course with discount code: SecOrb5_SANS )

SANS Security East 2014, New Orleans, LA – January 20 – 25

SANS Security East 2014 is coming up January 20-25. Start the year off right by choosing from ten outstanding, cutting-edge courses presented by SANS featuring our top-rated instructors in New Orleans. Now is the time to improve your information security skills and let the good times roll!

The instructor lineup for this event features SANS Faculty Fellows and Senior Instructors. This is a unique opportunity to get instruction from SANS Faculty Fellows: Dr. Eric Cole, Rob Lee, Hal Pomeranz, Ed Skoudis, and SANS Senior Instructors: Fred Kerby, Dave Shackleford, Kevin Johnson, Mike Poor, James Tarala, Joshua Wright all at the same event. This team will ensure attending students not only learn the material, but that they are able to use it the day they return to work.

The lineup of courses will appeal to Cybersecurity and Infosec professionals at all levels and in all roles. Pick a course below and learn how to protect your assets. SANS Security East 2014 has something for everyone. Don’t miss our special events and bonus evening presentations where we’ll share the latest threats and much more.

Choose from the courses below:

– * AUD507: Auditing Networks, Perimeters, and Systems (GIAC-GSNA) taught by James Tarala

– New! * SEC503: Intrusion Detection In-Depth (GIAC-GCIA) taught by Mike Poor

– SEC301: Intro to Information Security (GIAC-GISF) taught by Fred Kerby

– * SEC401: Security Essentials Bootcamp Style (GIAC-GSEC) taught by Dr.

Eric Cole

– * SEC504: Hacker Techniques, Exploits & Incident Handling (GIAC-GCIH) taught by Dave Shackleford

– SEC542: Web App Penetration Testing and Ethical Hacking (GIAC-GWAPT) taught by Kevin Johnson

– SEC560: Network Penetration Testing and Ethical Hacking (GIAC-GPEN) taught by Ed Skoudis

– SEC575: Mobile Device Security and Ethical Hacking (GIAC-GMOB) taught by Joshua Wright

– * FOR508: Advanced Computer Forensic Analysis and Incident Response

(GIAC-GCFA) taught by Rob Lee

– FOR610: Reverse-Engineering Malware: Malware Analysis Tools and Techniques (GIAC-GREM) taught by Hal Pomeranz

* Courses that align with DoD 8570 Directive

Learn more and Register today for SANS Security East 2014 by visiting: http://www.sans.org/info/144197

*** Save 5% off your course registration when using discount code SecOrb_SANS5 ***

DoD Cyber Crime Conference 2011

SANS is pleased to announce that we’ve partnered with DoD Cyber Crime Conference 2011 to offer SANS two-day Metasploit Kung Fu for Enterprise Pen Testing course as part of the pre-conference training January 21 – 24, 2011 in Atlanta, GA.

Register for pre-conference training and the DoD Cyber Crime Conference 2011 by December 31, 2010 for the deepest discounts available. Pre-conference training is January 21 – 24 and the Conference runs January 25 – 28.

The DoD Cyber Crime Conference focuses on all aspects of computer crime and incident response including intrusion investigations, cyber crime law, digital forensics, information assurance, as well as the research, development, testing, and evaluation of digital forensic tools.

The goal is to prepare attendees for the new crimes of today and the near future. Speakers will discuss new approaches and new perspectives with the current movers and shakers in cyber crime.

SANS Security East 2011

SANS Security East 2011

SANS Security EAST 2011 is 59 days away and only 17 days left for the best Early Bird pricing:

When: January 20-27

Where: New Orleans, LA


SANS is proud to be back in the historic French Quarter of New Orleans for SANS Security East 2011 on January 20 – 27 with our top instructors, new course offerings, action-packed night sessions, and many exciting special events.

Be sure and look for all the added benefits that come with a SANS conference: Special events, renowned expert speakers, vendor expo, fun night events, networking with other professionals from around the world, and more!

Simply go to http://www.sans.org/info/67168 by December 8 and use discount code: Connect_SecOrb10 to receive the best pricing.  Improve your information security skills and prepare for your certification test with the very best instructors in the industry.

MGT414: SANS® +S™ Training Program for the CISSP® Certification Exam

MGT414: SANS® +S™ Training Program for the CISSP® Certification Exam will prepare you to pass the CISSP® Certification Exam. This course is an accelerated review course that focuses solely on the ten domains of knowledge as determined by ISC2. Test-taking tips and strategies are also discussed.

Each domain of knowledge is dissected into its critical components. Every component is discussed, explaining its relationship to other components and other areas of network security. After completing the course you will have a solid understanding of the ten domains of knowledge.

Eric Conrad, author of CISSP Study Guide (Syngress), will be teaching this course LIVE in a vLive! virtual classroom. The class will begin on November 1st and will meet on Monday, Tuesday and Wednesday evenings for five weeks. Don’t worry if you have to miss a night — classes will be recorded and you will be able to review the archives for SIX MONTHS.

We are excited to announce that any student who registers for MGT414 and enters promo code Connect_SecOrb10 will receive an autographed copy of Eric’s book, “CISSP(R) Study Guide”, published by Syngress.  It is a great supplement to your SANS course materials!  Plus you are already receiving 10% off the course by using discount code: Connect_SecOrb10.
To register please click here: https://www.sans.org/info/65313

Creating a Comprehensive Vulnerability Assessment Program for a Large Company Using QualysGuard

An interesting paper by Tim Proffitt titled, “Creating a Comprehensive Vulnerability Assessment Program for a Large Company Using QualysGuard”

Vulnerability Assessment, according to wikipedia.org, is the process of

identifying and quantifying vulnerabilities in a system. Vulnerability assessment

can be used against many different types of systems such as a home security

alarm, the protection of a nuclear power plant or a military outpost. Note that

vulnerability assessment is different from risk assessments even though they share

some of the same commonalities. Vulnerability Assessment concerns itself with

the identification of vulnerabilities, the possibilities of reducing those

vulnerabilities and improving the capacity to manage future incidents. This paper

will focus primarily on vulnerability assessment as it pertains to information

technology infrastructure and how utilizing QualysGuard can ease the burden on

your technology staff.

With today’s global marketplace, companies cannot afford to tarnish their

reputation with a public security incident. Corporations can suffer major financial

losses if a security incident is encountered in the business. The fear of revenue

loss should motivate companies to begin taking proactive measures against

vulnerabilities in their infrastructure. The concept of vulnerability assessment is a

critical process that should be followed in any organizations as a way to identify,

assess and respond to new vulnerabilities before those vulnerabilities become a

threat.

To obtain a copy of this paper, you can find it here at SANS Reading Room

The 2010 Computer Security Salary Survey

The 2010 Computer Security Salary Survey was launched this morning. Please complete it today or at least this week (takes 5 minutes). A valid survey is probably the most valuable tool security people have to have productive conversations with their employers about their salaries. You get the results if you participate.

It’s at http://www.surveymethods.com/EndUser.aspx?CDE9859FCC869F96CD

SANS WhatWorks in Virtualization and Cloud Computing Summit with Tom Liston, Washington DC, August 19-20

As security professionals, we work in an environment that never stops
changing.  New technologies and innovative new uses for old technologies
seem to appear every day.  Unfortunately, along with the benefits that
every new technology brings, there are new and novel security challenges
that need to be addressed. We’re forced to constantly learn just to keep
up.

Two of the newest and most dynamic areas in Information Technology are
virtualization and cloud computing.  Unless you’ve been living under a
rock for the past few years, your organization is either currently
deploying or planning to deploy these technologies — and you’ve been
trying to figure out what it all means from a security perspective.

Virtualization is everywhere, from the desktop to the datacenter.  Cloud
computing has transformed our datacenters into flexible, elastic
environments that expand and contract to meet our needs.  Data storage
and computing “in the cloud,” has changed our ideas about what
infrastructure really means.

These technologies are being rolled out at a staggering pace in
organizations across the world.  The benefits of having a virtual
infrastructure are unquestionable: lower costs, flexibility, energy
conservation, scalability and reliability, just to name a few.  But what
really is the impact on security?  Do these new technologies make our
networks more secure, less secure, or are they just “different?”

You have questions, and you’re not alone.  Like any new technology, it’s
difficult to separate fact from fiction — reality from marketing hype
— and the media and vendors are of little help.  Where can you go to
find comprehensive, up-to-date answers that go beyond marketing and
truly get to the heart of these new technologies?

Once again, SANS is gearing up for its Virtualization and Cloud
Computing Summit, August 19-20 in Washington DC.  For the past two
years, the Summit has provided a forum for getting past the hype and
answering the questions that security professionals need answered.
Focusing on information you can use when you walk out the door, the
summit format combines topical expert presentations with end-user talks
where your peers who are already working with these technologies explain
both what they did “right” and how to avoid the pitfalls they
discovered.  We even bring in the vendors (and warn them to leave their
marketing-speak at home) so you can hear about what’s just over the
horizon.

Having acted as conference chair since the Virtualization and Cloud
Computing Summit’s inception, I believe that the summit format offers
participants an unparalleled opportunity to truly learn the information
that they need in a way that they can put to use immediately.  You won’t
be just sitting back and listening: the Summit format is designed to
break down the wall between the presenters and the participants,
encouraging questions and discussion that get you the answers that *you*
need. Every session is unique — filled with interaction, discussion,
and the kind of back and forth dialogue that you won’t find anywhere
else.  You are guaranteed to walk away from the Summit with all your
questions answered.

Here’s what some previous attendees had to say:

“Industry Leaders…discussing leading edge security issues…that’s why
I’m here.” – Major Doug Harold, Information Protection Officer, Canadian
Air Force.

“Finally, a conference dealing with real world security issues
organizations need to confront when moving virtualization into
production environments.” – Iben Rodriques, 4BaseTech

“The event was packed with useful information, speakers, and peer level
dialogue.” – Russell Wood, CenlarFSB

Join us at the Fairmont Washington DC on August 19th and 20th.  Bring
your questions, bring your security problems, and get ready for answers.
Hope to see you in DC! http://www.sans.org/info/60563

Tom Liston

Chairman
SANS Institute’s Virtualization and Cloud Computing Security Summit
Senior Security Analyst
InGuardians, Inc.

The most trusted source for computer security training, certification, and research