ISSA E-News : August 6th, 2008

In this Issue:

  1. Live ISSA Webcast August 7th: DNS Security: New Threats, Immediate Responses, Long Term Outlook
  2. August ISSA Journal Now Available Online
  3. Polls Closed for International Board Election
  4. Annual Meeting to Be Held October 2 in Colorado Springs
  5. Professional Ethics Survey Open Until August 15
  6. On-Demand Webcasts
  7. Looking for a New Job Opportunity or That Perfect Addition to Your Staff?
  8. ISSA Events
  9. Industry Events

Sponsors:

New Webcast: Understanding Employee Behavioral Profiles to Stop Insider Threats

SAINT PCI certified vulnerability assessment and penetration testing solutions

Live on Aug 7th, 2008
DNS Security: New Threats, Immediate Responses, Long Term Outlook

Speakers: Dan Kaminsky, the security researcher who discovered the DNS exploit & Cricket Liu, DNS expert & author of O'Reilly's DNS and BIND

Sponsored by: ISACA and ISSA

Date: 7 August, 2008
Time: 9am Pacific, 12pm East, 5pm UK
Duration: 60 minutes


To Register:

Please go to http://mediazone.brighttalk.com/event/ISACA/28dc6b0e1b-1721-intro


Overview:

Details of a recent exploit of known DNS vulnerabilities were revealed on 21 July 2008, with the potential to impact nearly all of the 11 million DNS servers on the Internet. The exploit enables an attacker, in less than a minute, to redirect an organization's web traffic to rogue sites and steal account names, passwords and other sensitive data without detection. It is critical for all organizations to respond to this threat immediately. DNS has other known vulnerabilities, and additional exploits are expected. This means that managing DNS security is going to require a consistent, long-term process.

In this webinar, DNS expert Cricket Liu, author of O'Reilly's DNS and BIND will join Dan Kaminsky—the security researcher who discovered the DNS exploit—to discuss the role of DNS in modern networks, the current DNS exploit, as well as additional DNS threats and ways to mitigate them. They will also present a checklist and tools that can be used to audit DNS infrastructures.

To Register:

Please go to http://mediazone.brighttalk.com/event/ISACA/28dc6b0e1b-1721-intro

August ISSA Journal Now Available Online

Link to: http://www.issa.org/Members/Journal.html to see the complete August issue of the ISSA Journal. Featured article: Making Identity Management Work for Your Organizations.

Member only site; login information required.

Polls Closed for International Board Election

The polls are now closed for the election of the International Board President and five Directors. The results are being tallied and will be announced at the ISSA Annual Meeting on October 2.

Annual Meeting to Be Held October 2 in Colorado Springs

You will have the opportunity to meet and convey your thoughts to the ISSA International President, officers, directors and Chapter Presidents Advisory Council (CPAC) delegates at the ISSA Annual Meeting on October 2. The results of the International Election will be announced at that time. Board members will report to you on the year’s accomplishments and achievements and the projects and goals for the coming months.

The Annual Meeting will be held in conjunction with the Fall 2008 Security Conference sponsored by the Colorado Springs ISSA Chapter at Colorado Technical University in Colorado Springs, Colorado, USA.

Professional Ethics Survey Open Until August 15

Please share your thoughts and ideas regarding Professional Ethics in our industry, the effectiveness of the ISSA Ethics Committee, and any pertinent examples of situations and resolutions where ethics influenced the outcome by participating in the ISSA Ethics Committee survey, http://www.surveymonkey.com/s.aspx?sm=fKbGAzKjlKLDoUVmidJ65w_3d_3d, The survey will remain open until August 15, 2008.

Survey results will be compiled during September, and aggregated results will be shared in the October ISSA Journal - no names will be used without express permission. Although the ISSA Ethics Committee is always open to your invaluable input and feedback, take this opportunity to share your thoughts, and help to shape the focus and activities of this dedicated group of members to reflect our association’s stance on Professional Ethics as the Voice of Information Security!

On-Demand Webcasts Now Available:

Roles Based Access Governance: Best practices for Practitioners

Sponsor: Aveksa
Click here to view: http://www.talkpoint.com/viewer/starthere.asp?Pres=122529

Key Steps to Securing Your Organization and Evicting a Hacker

Sponsor: Foundstone Professional Services (a division of McAfee)
Click here to view: http://www.talkpoint.com/viewer/starthere.asp?Pres=122087

Understanding Employee Behavioral Profiles to Stop Insider Threats

Sponsored by: Raytheon Oakley Systems
Click here to view: http://www.talkpoint.com/viewer/starthere.asp?Pres=121819

Looking for a New Career Opportunity or That Perfect Addition to Your Staff?

ISSA's Career Services Center offers information security specific career listings. Check out the resources at: http://www.issa.org/Resources/Careers.html.

ISSA Members use discount code "124" for 50% off career listings.

ISSA Events

Central Florida ISSA Lunch-n-Learn
Orlando, Florida
Click here for details

ConSec' 08 Symposium on Business Continuity
Austin, TX, USA
Click here for details

6th Annual ISSA Louisville Metro InfoSec Conference
Louisville, KY, USA
Click here for details

Techno Forensics 2008
Gaithersburg, MD USA
Click here for details

Rochester Security Summit
Fairpoint, NY, USA
Click here for Details

2008 ISSA SoCal Symposium
2008 ISSA SoCal Symposium
Click here for details

Industry Events


SecureWorld Expo

  • Bay Area - Sept 10 - 11, 2008
  • Washington D.C. - Sept 30 - October 1, 2008
  • Seattle - Oct 29 - 30, 2008
  • Detroit - November 5 - 6, 2008
  • Dallas - Nov 12 - 13, 2008

Click here for details


Certified Ethical Hacker (C|EH) Training Camp
Dallas, TX, USA
Click here for details

IT Security World 2008 Conference and Expo
San Francisco, CA, USA
Click here for details

The Executive Women's Forum
Chandler, AZ, USA
Click here for details

American Conference Institute's 2nd Annual Cyber Risk Insurance
Philadelphia, PA, USA
Click here for details

ISSE 2008 Information Security Solutions Europe
Madrid, Spain
Click here for details

Corporate Network Security
Washington, D.C, USA
Click here for details

The 7th Annual Smart Cards in Government Conference 2008
Washington, D.C., USA
Click here for details

RSA Conference Europe 2008
London, England, UK
Click here for details

Techno Forensics 2008
Gaithersburg, MD, USA
Click here for details

I Digital Security Forum
Lisbon, Portugal
Click here for details

Gartner Enterprise Networking & Communications Summit
Kissimmee, FL, USA
Click here for details

Anti-hacker Training for Oracle Database
Reston, VA
Click here for details

American Conference Institute's 8th CPO Summit - The Meeting Place for Privacy Experts
Washington, DC
Click here for details