RSA Conference Brochure 2008

EnlightEnMEnt froM lEading sEcurity profEssionals thursday, april 10 8:00 a.m. – 8:50 a.m. EXP-301 friday, april 11 9:00 a.m. – 9:50 a.m. EXP-401 (B) The Fight Against Phishing: lessons from the Biggest Fish in the Sea Michael Barrett | Chief Information Security Officer, PayPal (T3) learn to Stop Fuzzing and Find More Bugs Brian Chess | Founder, Chief Scientist, Fortify Software Jacob West | Manager, Security Research Group, Fortify Software Due to its high profile and large user base, PayPal is a common target of phishers. While acknowledging there is no silver bullet to wipe out phishing, the company has invested significant resources to combat the issue and protect its 153 million account holders worldwide. Join this session to learn how to protect your business against one of today’s most high-profile security threats. 9:10 a.m. – 10:20 a.m. EXP-302 This session demonstrates how using static analysis to find security bugs provides the most “bang for your buck.” Fuzzing is great at finding certain kinds of bugs, but it takes a lot of time to cover all your bases. This session will shed light on the differences between fuzzing and static analysis and will examine the effectiveness of both in different software scenarios. 10:05 a.m. – 10:55 a.m. EXP-402 (T2) How to Adapt to the Echo Generation’s (T) Social Media Hacking Game Virtualization and Security: A Technical Forecast MODERATOR: Michael Mimoso | Editor, Information Security Magazine PANELISTS: Simon Crosby | CTO, XenSource Stephen Herrod | Vice President of Technology Development, VMware Christopher Boyd | Director of Malware Research, FaceTime Security Labs Robert Vamosi | Senior Editor, CNet Networks A new generation of malware creators are taking advantage of an Internet full of social media and web applications. CNet’s Robert Vamosi will interview FaceTime’s Chris Boyd about the new methods security researchers are using, and the hackers tools against them to track them down and analyze threats. This session will share how social engineering and storytelling played a role in his recent discoveries. 10:40 a.m. – 11:50 a.m. EXP-303 This will be a moderated panel on where security and virtualization are headed. Specifically, the panel will discuss three aspects of virtualization in the next one to three years. First, what virtualization support to security operations (e.g., anti-malware, forensics, IDS) will be available? Second, what security capabilities within virtual machine environments (VMEs) will be available? Third, what attacks against VMEs can we expect? 11:10 a.m. – 12:00 p.m. EXP-403 industry ExpErts (T3) Electronic Voting: The Politics of Broken Systems MODERATOR: Gary McGraw | CTO, Cigital PANELISTS: Ed Felten | Professor, Princeton University Douglas Jones | Professor, University of Iowa Avi Rubin | President, Independent Security Evaluators David Wagner | Professor, U.C. Berkeley (T1) Why Security Programs Fail Amit Yoran | CEO, NetWitness Most electronic voting systems suffer from well-documented and publicly demonstrated security failures. This IEEE Security & Privacy panel will demonstrate and discuss major problems (some discovered by panelists), describe research results for better future systems and explain what happens when politics and technology collide on a subject critical to democracy. In spite of ongoing investments and numerous standards and regulations, cyberspace continues to observe security program failures — from the spectacular to those that rarely see the light of day. Former Cyber Security Czar Amit Yoran describes why security programs continue to fail and provides a vision for what public and private organizations should be doing to prevent such failures in the future. Sessions and speakers are subject to change without notice. sEssion codE AUTH - 303 Track Code Timeslot Code Day Code WWW.rsaconfErEncE.coM/2008/us 35 http://WWW.RSACONFERENCE.COM/2008/US

Table of Contents Feed for the Digital Edition of RSA Conference Brochure 2008

Table of Contents Who Should Attend & Why Keynote Speakers Agenda At-A-Glance Session Classification Special Events & Activities Connect & Network Highlights 1-Day Pre-Conference Tutorials 2-Day Pre-Conference Tutorials Tracks & Sessions Authentication Consumer Protection Business Trends & Impact Case Studies Cryptographers Deployment Strategies Developing with Security Enterprise Defense Hackers & Threats 1 Hackers & Threats 2 Identity & Access Management Industry Experts Law & Liability Policy & Government Professional Development Security-Oriented Architecture Standards Wireless Sponsor Sessions List of Exhibitors Registration Information Sponsors

For optimal viewing of this digital publication, please enable JavaScript and then refresh the page. If you would like to try to load the digital publication without using Flash Player detection, please click here.