November 03 - November 07, 2008 - Los Angeles, California, USA (PCPI#2008-04A)

  MINDSET OF THE HACKER:

In the rapidly advancing world of Technology, it is time to focus on more than just the technical complexities of Information Security, and to take a little time to study the mind of the "Information Criminal" or "Hacker".

        What is the Motivation of the Information Criminal?

        How Easily Available is "Confidential" Information?

        What Technical Challenges has he Overcome?

        What are his New Technology Challenges and
   Opportunities?

        What are his Potential Rewards?

        How can we Make it More Difficult for him to Succeed?

The rewards available for criminals selling your information can be blindingly large, and their well-structured communities operate at an alarmingly sophisticated level. Commercial Organizations, Authorities and Vendors all continue to be at risk, and are all trying to address the problem more effectively.

UNIQUE PROGRAM:

This unique five day program has been developed for the World Institute for Security Enhancement by some of the world's most respected, talented and knowledgeable security experts. This presentation has the unique quality of looking at the problems of Information Security from two perspectives.... both from the "Attacking" standpoint of the Information Criminal, and from the "Defensive" position of the Information-Owning Organization or Individual.

INTERNATIONAL COMPUTER UNDERGROUND:

With numerous years direct experience and involvement with both Law Enforcement and in the elusive computer underground, the Faculty of the World Institute will discuss the dramatic changes that have taken place in recent times. The evolution in the styles of information-theft will be discussed, as well as some specific details of the crimes themselves.

Interactive Demonstration: There will be an alarming, interactive demonstration of the free flow of information trading in the "Underground". Information such as credit card numbers, phone numbers and access passwords that can be obtained so very easily.

Using the Internet: Live demonstrations will show the power of the Internet, and the availability of information the Hacker can use.

Video Presentation: Videos will be shown which include footage of actual physical break-ins, computer intrusions and potential threats.

Hacking Demonstrations: There will be live demonstrations of Computer Hacking Techniques, live Connections to Hacker Bulletin Boards and Chat Systems, and some sample handouts of Underground Hacker Publications.

System Bugs: The presentation will also expose system bugs which permit the use of extremely simple methods for compromising computer systems, and will discuss several "Methods of Attack" commonly used by information gatherers.

Hacking Programs: Some examples will be available of the Actual Tools and Programs used in the seminar. These are often the exact programs being used by Computer Hackers, world wide, to gain access to Corporate Computer Systems.

FUTURE TECHNOLOGY CONSIDERATIONS:

The increasing complexity of Global Networks and Computer Systems today requires an understanding of future technology, and the role that security must play within that technology. The World is now at the edge of the next generation of security issues, problems and challenges. Topics of discussion in this session will include security of Wireless LAN's, WAN's and how Users, Corporations, as well as Vendors should approach the changing Information Security arena.

OPEN FLOOR SESSION:

The Attendees will have the opportunity to participate in an open Question and Answer session. Additionally, the Instructors will be happy to make themselves available, on an individual basis, to answer questions on site-specific issues and other security-related topics.

PURPOSE

The purpose of the "Protection of Computers & Proprietary Information"  program is  to train attendees to ensure that they can apply a standard level of adequate and timely Information Security, Policies and Procedures within Information Technology and Proprietary Information environments.

WHO SHOULD ATTEND:

This forty hour program is highly recommended for those who are serious about learning more about the potential threats facing their Organization's or Company's Computing Infrastructure, and who are determined to improve their defenses against them. This includes everyone from the Managing Director, CIO, CTO and Information Security Officer through to the Managers of Application Development Divisions, Computer and Network Support Divisions, Facility Security personnel, Corporate Directors and Corporate Executives.  Attorneys and Prosecutors as well as other members of Law Enforcement will significantly benefit from this program.

By the end of this program participants will be better prepared and equipped to implement the latest in technology and security methods. Contact lists and reference material will be provided which will assist attendees in keeping pace with the problems.

CONTINUING EDUCATION UNITS (CEU):

Continuing Education Units (CEU's) are nationally recognized units in qualified programs which allow the participant to document all non credited work completed. CEUs may be used as evidence of increased performance capabilities and for job advancement, and are recognized by many professional organizations and companies.

CERTIFIED PROTECTION PROFESSIONAL (CPP) RECERTIFICATION:

Documentation of attendance at these programs may be submitted to the ASIS Professional Certification Board for consideration of recertification credit by qualified Certified Protection Professionals.

NORTH CAROLINA PRIVATE PROTECTIVE SERVICES BOARD  (NCPPSB)

This "Protection of Computer & Proprietary Information"  program has been reviewed and is "Approved by the North Carolina Private Protective Services Board". This Board regulates and licenses all Private Investigative, Security, & Counterintelligence activity within the State.

Chris Goggans;  is an internationally recognized member of the computer underground and acts as a Senior Consultant with many large International Security Consulting firms.

He is a leader in providing security related services to Corporate Clients and Government Agencies. He also specializes in the exposure of real-world problems through the use of the External Security Audit, or "Penetration Test". His Consulting work involves him with companies in industries ranging from Finance to Aerospace and from Telecommunications to Automotive.

Mr. Goggans work has been referenced in "Time", "Newsweek" and "Computer World", as well as in numerous other publications, and he has been featured on CNBC Television, in a security program "Steals and Deals".  He has also developed and presented an intensive, three day Training Seminar on Data Security for NATO's European Allied Command.

Through his experience in dealing with the international "Computer Underground", Goggans demonstrated real weaknesses in Computer and Network environments using techniques and methods employed by computer hackers. He was originally one of the founding members of the American hacking group, "The Legion of Doom", back in 1984. He was the founder of ComSec Data Security in 1991, and was active on a "Next Generation" Communications Engineering Project for a Fortune 500 computer firm.  Mr. Goggans was also a Senior Security Analyst for a major Internet Service Provider.

Mr. Goggans is noted for his work in helping defend Organizations against the Hacker. In late 1991 he was key to the arrests of The Masters of Deception hacking group in New York City.

Doug Gould, CISSP;  is the Chief Information Security Officer at the World Institute for Security Enhancement, and is associated with Bryant & Associates. He is an internationally recognized expert in the field of computer security and forensics. Currently President of Gould Professional Services, Inc., he is an electrical engineer, computer scientist, computer security consultant and computer forensic examiner, with over 28 years experience in computer and security professions, including 14 years as a member of the Technical Staff at Bell Laboratories.

He is a leader in providing security related services to Corporate Clients and Government Agencies. He has served as the principal architect for some of the world's largest e-commerce enabled businesses, and has led and managed security consulting services for a large Fortune 500 company. He has also held computer and network security responsibility for a U.S. government agency, including serving as the lead forensic investigator.

Mr. Gould served on the past Board of Directors of the Carolinas chapter of the Information Systems Security Association, and currently is the President of the Eastern Carolina InfraGard organization, one of the largest and most successful in the nation. He frequently assists law enforcement in investigations and has been called upon by the FBI and Secret Service for his expertise to assist in evidence recovery in major computer crime incidents.

Additional instruction may be provided by other faculty members, which might include:

Ron Gula, MSEE;  is a member of the Faculty at the World Institute for Security Enhancement, and is associated with Bryant & Associates. He is a Senior Network Security Engineer with more than ten years of experience and has a Masters Degree in Electrical Engineering. Mr. Gula is an Educator, Technical Consultant, and Special Operative specializing in intrusion detection, forensic analysis and incident response. He is currently Vice President of Intrusion Detection products for Enterasys Networks and manages the engineering group, which produces the Dragon Intrusion Detection System. Enterasys is one of the world's largest manufacturers of routers, switches, and a wide variety of enterprise networking equipment. Previously Mr. Gula had founded Network Security Wizards and wrote the original Dragon IDS. Before founding NSW, he worked for US Internetworking, GTE Internetworking, BBN, and while serving in the US Air Force, he worked for the National Security Agency supporting such organizations as NASA and the US Department of Justice. Mr. Gula is an active network security advocate, and trains other network analysts in the art of hacker techniques and intrusion detection. He has developed several professional training courses and has spoken at security conferences such as Black Hat, DEFCON, HOPE, and SANS. Mr. Gula is presently president of the Maryland INFRAGUARD program.

Mario C. Martinez, M.B.A., CFE, CIFI;  is an internationally recognized Consultant in Telecommunication Security with a Master of Public Administration in International Affairs. Mr. Martinez is the Director of Administration at the World Institute for Security Enhancement and retired as Director of Security for Southern Bell Telephone and Telegraph Co. directing all corporate security operations in the southern district of Florida. During his career he participated in a number of law enforcement task forces in Florida and Washington DC to enhance telecommunications technologies available for criminal investigations. During his tenure with Southern Bell he attended numerous management, technical, telecommunication, and investigative security courses. He has also developed and presented numerous programs in the areas of computer security and investigation.

Mr. Martinez has represented Southern Bell's business interests in the United States, Canada, and Spain. He was assigned to review security measures at Compania Telefonica Nacional de Espana (Telefonica) following terrorist bombing attacks directed at telephone company facilities in Madrid. He was later assigned to review telephone facilities security measures in Barcelona, Spain in connection with the 1992 Olympic Games in Barcelona. He has been cleared "Top Secret" by the Department of Defense and the F.B.I.

Mr. Martinez is an active member of numerous associations including the American Society for Industrial Security (ASIS). He is a Certified Fraud Examiner (CFE) from the Association of Certified Fraud Examiners and a Certified Insurance Fraud Investigator (CIFI) from the International Association of Special Investigation Units.