Techno Security 2010 Agenda: At-A-Glance

Sunday June 6, 2010

See Note Below to Register for TRACKS 5, 6, and 7 AccessData Hands-on Labs PLEASE NOTE: AccessData Hands-on Lab Track Pre-registration…   Only those with an AccessData Users' Ticket have the opportunity to reserve a computer in the AccessData hands-on lab track. We encourage everyone -- even those without an AccessData promo ticket -- to arrive 10-15 minutes early for these labs, as many computers become available due to no shows. In addition, while computer seating is limited, AccessData is providing plenty of seating for auditors, and people may also share computers, if they choose. You may attend any of the labs with or without the AD Users' pass, except for the ACE Certification exam, which requires prior approval from AccessData.     To learn more about the AD Users' Ticket, contact AccessData at 800.574.5199 (US) or +1.801.377.5410 (Int'l)

Track 1 - Oleander A Details Sponsor: ICS  TRACK - “Beginner Forensics: Lessons for the Junior Digital Evidence Investigator” 11:00 AM - 12:00 PM Introduction to cell phone forensics by James Rowley, Micro Systemation 12:00 - 1:00 PM Validating your Forensic Tools by Amber Schroader, Paraben 1:00 - 2:00 PM Overview of Live Forensics by Chris Brown, Technology Pathways 2:00 - 3:00 PM Monitoring for Fraud in an Electronic World by Anthony Reyes, CEO-The Arc Group of New York 3:00 - 4:00 PM Incident Response and Forensics by Greg Kipper, Paraben     Track 2 - Oleander B Details Sponsor: Cyveillance  Financial Fraud Track 12:00 - 1:00 PM Malware: Latest trends in types, distribution and delivery vectors by Terry Gudiatis - Cyveillance 1:00 - 2:00 PM The Online Organized Crime Ecosystem by Terry Gudiatis - Cyveillance 2:00 - 3:00 PM Cyber Intel Jeopardy by Terry Gudiatis - Cyveillance     Track 5 - Ballroom 1 Details Sponsor: AccessData  AccessData Hands-on Labs    SEE NOTE ABOVE  TO REGISTER    8:00 AM - 4:30 PM ACE Preparation ALL DAY by AccessData 5:00 - 6:00 PM ACE Test #1 by AccessData     Track 6 - Ballroom 2 Details Sponsor: AccessData  AccessData Hands-on Labs    SEE NOTE ABOVE  TO REGISTER    1:30 - 3:00 PM Memory Analysis: The Basics by Kevin Golas - AccessData 3:30 - 4:30 PM Proactive Threat Auditing: Identifying Potential Threats to Your Organization by Kevin Golas/Chris Mellen - AccessData     Track 7 - Ballroom 3 Details Sponsor: AccessData  AccessData Hands-on Labs    SEE NOTE ABOVE  TO REGISTER    10:00 - 11:00 AM Strategies to streamLine explicit image identification, classifiication, and reporting by AccessData 11:00 AM - 12:00 PM LiveView: Applying Virtualization to Digital Forensics by Kris Rush, CERT Forensics 1:30 - 2:15 PM Collaborative Forensic Analysis: Reducing Case Load through Division of Labor by AccessData 2:15 - 3:00 PM Windows Offline Files, Shadow Copy and Random Gems by Rich Hoffman - UnitedLex Corporation 3:30 - 4:30 PM Live Device Aquistion and Anlaysis (why you should care and how to) by AccessData

Noon - 1:30PM - On your own for Lunch Meals are available in Hotel or off premise

3:00 - 6:00PM - Exhibit Hall Opens - Bring Your Business Cards

Monday June 7, 2010

Early Bird Session 700-745 - Tides 2 -   Sponsored By: Apple The Mac for Video Surveillance VideoNEXT

Early Bird Session 700-745 - Tides 1 - Details   Sponsored By: Foward Discovery 3 Short Mini-Lessons on Current Forensic Issues

See Note Below to Register for TRACKS 5, 6, and 7 AccessData Hands-on Labs   Sponsored By: AccessData PLEASE NOTE: AccessData Hands-on Lab Track Pre-registration…   Only those with an AccessData Users' Ticket have the opportunity to reserve a computer in the AccessData hands-on lab track. We encourage everyone -- even those without an AccessData promo ticket -- to arrive 10-15 minutes early for these labs, as many computers become available due to no shows. In addition, while computer seating is limited, AccessData is providing plenty of seating for auditors, and people may also share computers, if they choose. You may attend any of the labs with or without the AD Users' pass, except for the ACE Certification exam, which requires prior approval from AccessData.     To learn more about the AD Users' Ticket, contact AccessData at 800.574.5199 (US) or +1.801.377.5410 (Int'l)

Track 1 - Oleander A Details 8:00 - 8:30 AM Opening Welcome 8:30 - 9:30 AM Responding to the Global Cybersecurity Challenge by Shawn Henry - FBI, Assistant Director in Charge of the Washington Field Office     Track 2 - Oleander B Details 8:00 - 8:30 AM Opening Welcome 8:30 - 9:30 AM Responding to the Global Cybersecurity Challenge by Shawn Henry - FBI, Assistant Director in Charge of the Washington Field Office     Track 3 - Tides 1 8:00 - 9:30 AM Nothing Scheduled     Track 4 - Tides 2 8:00 - 9:30 AM Nothing Scheduled     Track 5 - Ballroom 1 Details Sponsor: AccessData  AccessData Hands-on Labs    SEE NOTE ABOVE  TO REGISTER    8:00 - 10:00 AM ACE Test #2 by AccessData     Track 6 - Ballroom 2 Details Sponsor: AccessData  AccessData Hands-on Labs    SEE NOTE ABOVE  TO REGISTER    8:00 - 9:30 AM Nothing Scheduled     Track 7 - Ballroom 3 Details Sponsor: AccessData  AccessData Hands-on Labs    SEE NOTE ABOVE  TO REGISTER    8:00 - 9:30 AM Nothing Scheduled     Track 8 Heron

9:30 - 10:00 AM - Networking Break   Sponsored By: TBA

Track 1 - Oleander A Details Sponsored by: Cyveillance 10:00 - 11:00 AM The Good, the Bad and the Ugly: Business Opportunities and Risks through Online Social Media by Terry Gudiatis - Cyveillance 11:00 AM - 12:00 PM Cracking 2.1 Million Passwords - Supercharged John the Ripper Techniques by Rick Redman, KoreLogic -Senior Security Consultant     Track 2 - Oleander B Details Sponsored by: Apple 10:00 - 11:00 AM Email Investigations - Misuse of Email for Fraud, IP Theft and other Inappropriate Uses by Peter Mercer, CTO - Vound 11:00 AM - 12:00 PM The Mac for Computer Forensics by Apple     Track 3 - Tides 1 Details 10:00 - 11:00 AM Death of the USB Flash Drive, Hacking USB Encrypted Flash Drives, and OPAL Latest and Greatest by John Tate, VP- LOK_IT & Ralph D'Altlia, Vice President of Softex 11:00 AM - 12:00 PM Current Day Data Loss Prevention Thinking by J. Michael Gibbons, Principal – Deloitte     Track 4 - Tides 2 Details Sponsored by: Tableau 10:00 - 11:00 AM The Pitfalls of Macintosh Forensic Analysis by Derrick Donnelly - CTO, BlackBag Technologies 11:00 AM - 12:00 PM Live System Triage of Windows Volume Shadow Copy by Christopher L Brown - Technology Pathways     Track 5 - Ballroom 1 Details Sponsor: AccessData  AccessData Hands-on Labs    SEE NOTE ABOVE  TO REGISTER    10:00 AM - 12:00 PM ACE Test #3 by AccessData     Track 6 - Ballroom 2 Details Sponsor: AccessData  AccessData Hands-on Labs    SEE NOTE ABOVE  TO REGISTER    10:00 AM - 12:00 PM Low-level Reverse Engineering: Once You Find the Stuff, How Do You Know What It Is Doing? by Rich Cummings, CTO, HB Gary     Track 7 - Ballroom 3 Details Sponsor: AccessData  AccessData Hands-on Labs    SEE NOTE ABOVE  TO REGISTER    10:00 - 11:00 AM CASE STUDY: Using an In-house eDiscovery Solution Coupled with Outsourced Review by Phil Goodwin and Rich Hoffman of UnitedLex Corporation 11:00 AM - 12:00 PM End-to-End eDiscovery Entirely In House: Integrating Review and Collection by Aaron Stochlia AccessData     Track 8 Heron Details Techno Vendor Showcase Track 10:00 - 11:00 AM Forensic Computers Product Overview by Greg Dominguez Vice President - Forensic Computers, Inc 11:00 AM - 12:00 PM Gaining a performance edge with TIM (Tableau IMager software) by Jim Borecki - Tableau

11:00AM - 4:00PM - Exhibit Hall Open

12:30 - 1:30 PM - Networking Lunch in Exhibit Hall

Track 1 - Oleander A Details Sponsored by: SkyCatcher 1:30 - 2:15 PM Hacking Techniques & Methodology by SkyCatcher 2:15 - 3:00 PM Money Laundering in the Information Age by Ross Mayfield - SkyCatcher 3:30 - 4:30 PM Augmented Reality - A Cyber-Crime Perspective by Joseph Rampolla - SkyCatcher 4:30 - 5:00 PM Compliance - Making it Easier     Track 2 - Oleander B Details 1:30 - 2:15 PM An Overview of Cryptography by Gary C Kessler, Champlain College - Assoc. Professor 2:15 - 3:00 PM Tracking and recovering a stolen iPhone by Steve Branigan, Cyanline 3:30 - 4:30 PM Forget About Security FROM the Cloud, What About Security FOR the Cloud by Scott Chasin McAfee, CTO, SaaS     Track 3 - Tides 1 Details Sponsored by: Huron Consulting 1:30 - 2:15 PM E-Discovery as a Managed Service by James Zinn, Huron Consulting Group - Managing Director 2:15 - 3:00 PM Mobile Forensics - Advanced Flasher-box Techniques, Extractions and Analysis by John Thackray, CEO and President for Thackray Forensics 3:30 - 4:30 PM NTFS Metadata – Going beyond date and time stamps by Andy Rosen, CEO & President -ASR Data     Track 4 - Tides 2 Details Sponsored by: HTCI 1:30 - 2:15 PM Software Write Blocking: The Future Of Forensic Triage and Acquisition by Dr. Victor Fay-Wolfe, PhD - CTO ForensicSoft Inc 2:15 - 3:00 PM Demystifying the Microsoft Extended File System by Robert Shullich -Sr. Security Technology Advisor, Bowne & Co., Inc. 3:30 - 4:30 PM Digital Triage Forensics Tools and Techniques by Thomas Eskridge, COO, HTCI     Track 5 - Ballroom 1 Details Sponsor: AccessData  AccessData Hands-on Labs    SEE NOTE ABOVE  TO REGISTER    1:30 - 2:15 PM Advanced Registry Viewer by AccessData 2:15 - 3:00 PM iPhones & Androids: Data Extraction and Controversy by Lee Reiber, Mobile Forensics, Inc 3:30 - 4:30 PM Forensic Analysis of Photographic Images by Nasir Memon, Director ISIS Lab, Polytechnic Institute of NYU 6:00 - 7:00 PM HAPPY HOUR LAB: Advanced File Carving: Custom Carvers & File Identifiers by AccessData     Track 6 - Ballroom 2 Details Sponsor: AccessData  AccessData Hands-on Labs    SEE NOTE ABOVE  TO REGISTER    1:30 - 3:00 PM Hands-On Network Forensics by Jason Mical - AccessData 3:30 - 4:30 PM Chasing Down a Spillage Incident: PII and Classified Data Spills by Kevin Golas/Chris Mellen - AccessData 6:00 - 7:00 PM HAPPY HOUR LAB: Fundamentals of Linux Investigations by AccessData     Track 7 - Ballroom 3 Details Sponsor: AccessData  AccessData Hands-on Labs    SEE NOTE ABOVE  TO REGISTER    1:30 - 2:15 PM De-Duping Exposed: Vertical & Horizontal Deduplication in eDiscovery by Joseph Martinez, Vice President, Forensics and Electronic Discovery Services, Innovative Discovery 2:15 - 3:00 PM Best Practices for eDiscovery Reporting by David Speringo, J.D., CCE, ACE, eDiscovery Systems Engineer 3:30 - 4:30 PM Using Analytics & Non-linear Searching Techniques to Reduce eDiscovery Review Times by James Wolf, H5 6:00 - 7:00 PM HAPPY HOUR: Dell Hardware Showcase by AccessData     Track 8 - Heron Details 1:30 - 2:15 PM Forensic Roadmap by Steve Salinas, Product Marketing Manager, Guidance Software 2:15 - 3:00 PM THREADS - Link Analysis and Pointer Software for Mobile Device Forensic Tools and Call Data Records by Bill Teel, President - Teel technologies

3:00 - 3:30 PM - Networking Break

5:00 - 7:00 PM Monday Night Panel Discussion and Reception in Tides 1&2   Sponsored By: Apple Panel Discussion on Latest Trends in Forensic Computing - Hear the views of a panel of experts from Industry, Local and Federal Law Enforcement.

Tuesday June 8, 2010

Early Bird Session 700-745 - Tides 1 - Details   Sponsored By: Infinadyne Optical media evidence - comparison and contrast with other forms of digital evidence

Early Bird Session 700-745 - Tides 2   Sponsored By: Apple The Mac for Computer Forensics Tech Session

See Note Below to Register for TRACKS 5, 6, and 7 AccessData Hands-on Labs   Sponsored By: AccessData PLEASE NOTE: AccessData Hands-on Lab Track Pre-registration…   Only those with an AccessData Users' Ticket have the opportunity to reserve a computer in the AccessData hands-on lab track. We encourage everyone -- even those without an AccessData promo ticket -- to arrive 10-15 minutes early for these labs, as many computers become available due to no shows. In addition, while computer seating is limited, AccessData is providing plenty of seating for auditors, and people may also share computers, if they choose. You may attend any of the labs with or without the AD Users' pass, except for the ACE Certification exam, which requires prior approval from AccessData.     To learn more about the AD Users' Ticket, contact AccessData at 800.574.5199 (US) or +1.801.377.5410 (Int'l)

Track 1 - Oleander A Details 8:00 - 9:30 AM The next big threat doesn't necessarily go Boom! by Chet Hosmer, Sr. Vice President of Security/Chief Scientist , WetStone/ AllenCorp.     Track 2 - Oleander B Details 8:00 - 9:30 AM The next big threat doesn't necessarily go Boom! by Chet Hosmer, Sr. Vice President of Security/Chief Scientist , WetStone/ AllenCorp.     Track 3 - Tides 1 8:00 - 9:30 AM Nothing Scheduled     Track 4 - Tides 2 8:00 - 9:30 AM Nothing Scheduled     Track 5 - Ballroom 1 8:00 - 9:30 AM Nothing Scheduled     Track 6 - Ballroom 2 8:00 - 9:30 AM Nothing Scheduled     Track 7 - Ballroom 3 8:00 - 9:30 AM Nothing Scheduled

9:30 - 10:00 AM - Networking Break   Sponsored By: TBA

Track 1 - Oleander A Details Sponsored by: WetStone 10:00 - 11:00 AM Live Forensic Investigations the Essential Ingredients, 2010 and Beyond by Chet Hosmer, Sr. Vice President of Security/Chief Scientist , WetStone/ AllenCorp. 11:00 AM - 12:00 PM Enterprise Clouds: Security Risks and Rewards by Jeff Huegel, AT&T - Executive Director, Chief Security Office     Track 2 - Oleander B Details Sponsored by: Carolina Advanced Digital 10:00 - 11:00 AM Should You Fear the Cloud? Project Management, Legal Perspectives and Risks Associated with Cloud Adoption by Mark D Gianturco, PhD, CTO and Neal Lawson, President - Intelligent Discovery Solutions 11:00 AM - 12:00 PM WHat Do You Do When Everything Falls Apart by Jenifer jabusch, CISO Carolina Advanced Digital     Track 3 - Tides 1 Details 10:00 - 11:00 AM Something Smells Phishy: The evolution of social engineering by Chris Silvers & Dawn Perry, Senior Consultants- Foundstone 11:00 AM - 12:00 PM Does Managed Security Make Business Sense? by Jim Kates, Cognizant     Track 4 - Tides 2 Details Sponsored by: Logicube 10:00 - 11:00 AM Emerging Evidence in Mobile Digital Devices by Amber L Schroader - Paraben Corporation 11:00 AM - 12:00 PM Electronic Discovery Laws (US), the expectations of the courtes, and how companies need to prepare by Bill Dean, Sword & Shield Enterprise Security : Director of Computer Forensics     Track 5 - Ballroom 1 Details Sponsor: AccessData  AccessData Hands-on Labs    SEE NOTE ABOVE  TO REGISTER    10:00 - 11:00 AM Browser Forensics: Advanced Discovery & Analysis of Internet Artifacts (Internet Explorer 8 and Chrome) by AccessData 11:00 AM - 12:00 PM Windows 7 Artifacts by AccessData     Track 6 - Ballroom 2 Details Sponsor: AccessData  AccessData Hands-on Labs    SEE NOTE ABOVE  TO REGISTER    10:00 - 11:00 AM Triage as a Critical Component of Incident Response and Field Forensics by Mike Viscuso, Kyrus 11:00 AM - 12:00 PM Using Host and Network Forensics for Threat Identification by Jason Mical - AccessData     Track 7 - Ballroom 3 Details Sponsor: AccessData  AccessData Hands-on Labs    SEE NOTE ABOVE  TO REGISTER    10:00 - 11:00 AM What Every Forensic Investigator Should Know about eDiscovery: An Expert Panel Discussion with Q&A by Brian Karney, Phil Goodin, Joe Martinez - AccessData 11:00 AM - 12:00 PM Streamlining Collaborative Review by Brian Karney, COO, AccessData Corporation

11:00AM - 4:00PM - Exhibit Hall Open

12:30 - 1:30 PM - Networking Lunch in Exhibit Hall

Track 1 - Oleander A Details 1:30 - 2:15 PM SQL Injection by Joe McCray - Learn Security Online 2:15 - 3:00 PM You Spent All That Money and You Still Got Owned...??? by Joe McCray - Learn Security Online 3:30 - 4:30 PM Data Loss Prevention - Trends, Considerations and Approaches by Carlos M Bonet - Fishnet Security 4:30 - 6:30 PM The Challenge of Winning the War for IT Cyber Security Talent by University of Fairfax panel chaired by Dr Christopher Feudo and a panel of leading experts. See details for more information.     Track 2 - Oleander B Details Sponsored by: CRU-DataPort 1:30 - 2:15 PM Hidden Areas on Hard Drives by James Wiebe - Wiebetech 2:15 - 3:00 PM Bitlocker for the forensic investigator by James Wiebe - Wiebetech 3:30 - 4:30 PM Encyption Background & Dealing with Encryption by James Wiebe - Wiebetech 4:45 - 6:00 PM Famous Uses of Ciphers in Crime Fighting History by James Wiebe - Wiebetech - - RECEPTION FOLLOWS     Track 3 - Tides 1 Details 1:30 - 2:15 PM The Web of Terror: The virtual face of physical extremist groups by Marjie T. Britz, Professor -Clemson University 2:15 - 3:00 PM Say What...Does Your Non-verbal Speak The Same Language As Your Verbal? by Stevee Ashlock-The Trial Experts 3:30 - 4:30 PM Providing Actionable Cybersecurity Information to State and Local Governments by John McCumber, Strategic Program Manager, Public Sector Group - Symantec Corporation     Track 4 - Tides 2 Details Sponsored by: Guidance Software 2:15 - 3:00 PM Cell Site Analysis - Why Capturing The Cellular Network’s Coverage Characteristics At The Scene of the Crime is Essential by Bill Teel, President - Teel technologies 3:30 - 4:30 PM iPhone Forensics, An Investigative Approach by Sean F Morrissey, Paradigm Solutions/US Department of State Computer CIF     Track 5 - Ballroom 1 Details Sponsor: AccessData  AccessData Hands-on Labs    SEE NOTE ABOVE  TO REGISTER    1:00 - 4:30 PM Mac Analysis 2.5 hours TRAINER by AccessData     Track 6 - Ballroom 2 Details Sponsor: AccessData  AccessData Hands-on Labs    SEE NOTE ABOVE  TO REGISTER    1:30 - 3:00 PM Thwarting Memory Analysis through Direct Kernel Object Manipulation (DKOM). by Kyrus - AccessData 3:30 - 4:30 PM Detecting, Analyzing and Recovering from Advanced Persistent Threats. by Kevin Golas/Chris Mellen - AccessData     Track 7 - Ballroom 3 Details Sponsor: AccessData  AccessData Hands-on Labs    SEE NOTE ABOVE  TO REGISTER    1:30 - 2:15 PM Understanging the eDiscovery production process by Joseph Martinez, Vice President, Forensics and Electronic Discovery Services, Innovative Discovery 2:15 - 3:00 PM Keeping eDiscovery Evidence Secure and Defensible: Encrypted Evidence Files, Access Controls & Illustrating Chain of Custody by Aaron Stochlia - AccessData 3:30 - 4:30 PM eDiscovery from a Practical Perspective: The Technology, Processes and Pitfalls by Brian Karney, COO AccessData Corporation

3:00 - 3:30 PM - Networking Break