RSA Conference Brochure 2008

frEsh insights into EMErging thrEats & tEchnologiEs thursday, april 10 8:00 a.m. – 8:50 a.m. HT2-301 friday, april 11 9:00 a.m. – 9:50 a.m. HT2-401 (T) Espionage Trojans: Targeted Attacks Drive the Next Wave of Malware Mikko Hypponen | Chief Research Officer, F-Secure Corporation (L2) Organized Online Criminal Enterprises: Profile of Who, Where and How Dmitri Alperovitch | Principal Research Scientist, Secure Computing Corporation Targeted trojans are a growing global threat to corporate and national security. Spies are using malware to steal sensitive information from specific targets, and the problem is set to escalate in the coming years. This presentation will explore the threat of these attacks, the details of how they operate and what can be done today to thwart them. 9:10 a.m. – 10:20 a.m. HT2-302 This presentation will explore the state of the current international mob involvement in online organized crime: spam, botnets, malware, identity fraud/phishing, denial of service attacks, blackmail and extortion. The session will showcase a unique historical perspective and overview from a native Russian and will cover technical abilities, recruiting techniques and money-laundering schemes. 10:05 a.m. – 10:55 a.m. HT2-402 (T2) Breaking and Securing Web Applications Nitesh Dhanjani | Sr. Director, Security Assessments (T1) Detection of Beacon Trojans and This session will focus on today’s most common high-risk web application vulnerabilities including: Cross-Site Scripting (XSS), Cross-Site Request Forgery (XSRF), browser vulnerabilities and much more. This discussion will show that automated tools cannot find some of these vulnerabilities, and what an enterprise can do to protect itself from the latest web application attacks. 10:40 a.m. – 11:50 a.m. HT2-303 Advanced Data Exfiltration Techniques Shawn Carpenter | Principal Forensics Analyst, NetWitness Corporation Edward Schwartz | Chief Security Officer, NetWitness Corporation (T1) Ajax Applications: A Blueprint for Disaster Billy Hoffman | Lead Researcher, SPI Dynamics Bryan Sullivan | Development Manager, HP Software, Application Security Center Drawing upon experience with Titan Rain and more sophisticated attacks observed within the public and private sectors, this session provides an in-depth examination of advanced data exfiltration techniques. This presentation describes methodologies and technologies for analyzing and detecting these zero-day attacks and provides techniques for building an alerting function for detecting beacon trojans. 11:10 a.m. – 12:00 p.m. HT2-403 hackErs & thrEats 2 People talk in the abstract about Ajax security issues like an “increased attack surface” or “code transparency issues.” But how secure is your average Ajax application? In this session, a sample Ajax application will be built using design patterns, advice and code samples from respected resources in the Ajax community; then the glaring security defects will be exposed. (S) Cyber CSi: How Criminals Manipulate Anti-Forensics to Foil the Crime Scene Christopher Novak | Principal Consultant, Verizon Business The latest red-hot hacker trick is anti-forensics. Join a leading forensics investigator as he discusses common anti-forensics varieties. Participants will learn how hackers are stealing data right from under administrators’ noses without them even knowing or suspecting there is a problem, and how forensics investigators catch these bad guys. Sessions and speakers are subject to change without notice. Track sponsored by: sEssion codE AUTH - 303 Track Code Timeslot Code Day Code WWW.rsaconfErEncE.coM/2008/us 31 http://WWW.RSACONFERENCE.COM/2008/US

Table of Contents Feed for the Digital Edition of RSA Conference Brochure 2008

Table of Contents Who Should Attend & Why Keynote Speakers Agenda At-A-Glance Session Classification Special Events & Activities Connect & Network Highlights 1-Day Pre-Conference Tutorials 2-Day Pre-Conference Tutorials Tracks & Sessions Authentication Consumer Protection Business Trends & Impact Case Studies Cryptographers Deployment Strategies Developing with Security Enterprise Defense Hackers & Threats 1 Hackers & Threats 2 Identity & Access Management Industry Experts Law & Liability Policy & Government Professional Development Security-Oriented Architecture Standards Wireless Sponsor Sessions List of Exhibitors Registration Information Sponsors

For optimal viewing of this digital publication, please enable JavaScript and then refresh the page. If you would like to try to load the digital publication without using Flash Player detection, please click here.