Open Software and Trust--Better Than Free?
Recorded Tuesday, April 28, 2015
Click here to listen/view the Web Conference recording
Click here to download the slidedeck
Click here to take the CPE quiz to download your Certificate of Attendance
Web Conference Overview:
Last year we were hit with multiple Open Source vulnerabilities. The most significant was Heartbleed, or was it the potential of Poodle or the other half dozen or so vulnerabilities. If it wasn’t that, then what about ShellShock (the bash bug? The open source world is supposed to be safer as everyone can examine the software, but are enough experts examining it?
Join the conversation: #ISSAWebConf
Moderator and Speakers:
ISSA Educational Advisory Council Member
Phillip is a CISM and ISSA Fellow with over 20 years of information assurance experience. Phil has served as a trusted security adviser, security architect, and consultant with leading corporations. He has acted as committee chair, editor, and head of delegation in the development of US national and international security standards, and he currently serves on the ISSA Educational Advisory Council. His current work encompasses encryption technologies, access control, and biometric information security management policy. Phil has nine U.S. patents at the intersection of biometrics, RFID, and information security, a number of academic and professional technical publications, and he has spoken at leading security conferences around the world.
CISO & Privacy Officer, San Diego Health Connect
Mark Kadrich is a well-known speaker and evangelist on network security. For the past 25 years, he's worked in the security community, building knowledge, and contributing solutions. His strengths are in architecture level design, solution design, policy generation, endpoint security, and risk management. Mr. Kadrich holds degrees in Management Information Systems, Computer Engineering and Electrical Engineering. Mr. Kadrich authored the book Endpoint Security (Addison Wesley) and was a contributing author in publications such as Health IT Outcomes, TCP Unleashed, ISSA Journal, Publish Magazine, Planet IT, RSA, CSI, SANS and The Black Hat Briefings. Recently, Mark has been working with his colleagues at Emagined Security filling positions as a CISO and a PCI compliance architect. He is responsible for crafting new policy and procedures regarding installation, use, testing, and compliance for both a health information exchange and a large and diverse retail service enterprise.
Director, Enterprise Security Strategy
Tim Jarrett is Director of Enterprise Security Strategy at Veracode, where he works with a wide array of enterprise and software companies to evangelize successful application security strategies and learn from customer experiences. He joined Veracode in 2008, after industry experience at Microsoft and AMS (now CACI), where he helped build Veracode's static analysis technology and cloud platform as a product manager. A Grammy-award winning choral singer with a Bacon number of 3, he can be found on Twitter at @tojarrett