RSA CONFERENCE Call for Speakers Offline Submission Form

Transcription

1 RSA CONFERENCE 2008 Call fr Speakers Offline Submissin Frm SESSION INFORMATION * = required input Sessin Title * (Limit 75 characters) High-Speed Risks in n Netwrks Sessin Abstract * (Limit 400 characters including spaces) The latest excitement in WLANs is the prmise f 100 Mbps cnnectivity with IEEE n. While many rganizatins seek pre-n slutins r plan t deply ratified n newrks in the future, few are cnsidering the security implicatins f this technlgy. This presentatin will examine several threats surrunding n technlgy, demnstrating tls that can be used t mitigate these risks. Sessin Frmat * (select ne) Individual Speaker - Yu (r the designated speaker if yu re submitting a prpsal n behalf f smene else) will be the nly speaker. C-Speakers - This frmat has tw speakers, ne f whm is designated as Primary Speaker and the ther as Secndary Speaker. The Primary Speaker is the persn t whm the RSA Cnference Speaker Manager will cme with questins and decisins regarding yur sessin. Panel Discussin - This is a sessin with a Mderatr and up t fur Panelists. The Mderatr is respnsible fr facilitating the panel discussin, but is nt a designated speaker. The panelists can make very shrt (2-3 minute) presentatins t identify their individual psitin n the tpic, but the majrity f the time shuld be spent n Q&A. Panelists shuldn t plan t use slides. NOTE: The psitins f the individual panelists shuld be clarified and cmmunicated t all the ther panelists befre the Cnference begins. NOTE: Please cnfirm the availability, expertise and cmmitment f any c-speakers and panelists befre submitting their names. Sessin Length * 50 minutes Will this presentatin be seen elsewhere within 45 days befre r after the Cnference? * N If Yes please specify: PAGE 1 f 8

2 Sessin Learning Objectives * (Limit 1,000 characters including spaces) Evaluate the new features in IEEE n netwrks frm a security and risk mitigatin perspective Identify the risks assciated with deplying pre-n r ratified IEEE n netwrks Apply free and inexpensive cmmercial tls t identify and mitigate threats intrduced with n technlgy Lng Sessin Abstract * (Limit 2,500 characters including spaces) The latest buzz in wireless LAN netwrking is the prmise f high-speed IEEE n cnnectivity. This is emphasized in the cnsumer and cmmercial markets, with the availability f pre-standard "N1" and "N2" devices, as well as the recent Wi-Fi Alliance Draft-N 2.0 certificatin. While n technlgy represents several tangible benefits fr enterprise and cnsumer netwrks, it als represents new risk areas fr rganizatins deplying this technlgy, r trying t perate in a shared spectrum where ther n technlgy is used. This presentatin will examine the new features in the n and pre-n netwrks, and will examine several risks assciated with this new technlgy, including availability attacks against legacy b/g netwrks, evading wireless intrusin detectin system (WIDS) with n rgue devices, threats stemming frm increase range in n netwrks, and attacks against new wireless drivers driven by the cmplexity f the n specificatin. Presenting the results f riginal research and analysis, the authr will demnstrate live attacks stemming frm the presence f ff-the-shelf pre-n devices. Techniques t mitigate the risks f n netwrks and strategies fr the secure deplyment f these netwrks will als be cvered, including the availability f tls written by the presenter and made available fr free fr RSA cnference attendees designed t help rganizatins assess and mitigate these risks. What pre-requisite knwledge is recmmended fr yur audience? * Understanding f the peratin and use f wireless LAN envirnments. Familiarity with cmmn wireless LAN attacks including availability and integrity attacks. Target Audience Prfiling Infrmatin The fllwing questins will help us accurately assess yur target audience. What rganizatinal functins will be mst interested in yur sessin? * (Select all that apply) Academia / Research / Scientist Cnsulting Engineering / Develpment / QA / Testing PAGE 2 f 8

3 Executive Finance / Financial Analysis / Industry Analysis IT / IS / Security Legal / Operatins / Prcurement / Human Resurces Press / Media / Public Relatins / Advertising Sales / Marketing / Business Develpment Other If Other please specify: What jb functins will be mst interested in yur sessin? * (Select all that apply) Executive (CEO, CFO, Other CXO, President, Sr. Vice President) Executive (CTO, CIO, CSO, CISO) Vice President / Directr Middle Management / Prject Manager / Team Leader Frnt-line Emplyee / Regular Staff Outside Cnsultant Student / Academic Other If Other please specify: Sessin Prfiling Infrmatin It is bviusly imprtant t deliver a sessin which meets the attendee s expectatins. The fllwing infrmatin will help ensure that the attendees clearly understand what they will learn during yur sessin. Sessin Classificatin * Please chse ne f the fllwing: Mathematic Cncepts & Principles Advanced mathematic and cryptgraphic principles and theries Strategic Designed fr business riented audiences (business line managers, directrs, VPs) wh are interested in business issues and strategic implicatins f technlgy. Fcus shuld be n prcesses, lessns learned, tls which can be shared and results, rather than definitins and cncepts. Business Futures Designed fr business prfessinals with 10 r mre year f experience. Sessins in this categry fcus n new business develpments, cncepts, geplitical issues r regulatins that are expected t cme t fruitin within the next 5 years. Very little time is spent n defining terms r ecnmic mdels. Advanced Technical PAGE 3 f 8

4 Sessins fcused n advance technical principles and cncepts, with little/n time spent n defining terms and backgrund. Cntains instructive dems, line cde r advanced architecture discussins and tls that can be shared. Geared tward technical infrmatin security prfessinals with 10 r mre years f experience. Nte: If yu select this ptin, yu will see a new field where yu will need t explain why this sessin shuld be classified as advanced technical. Please prvide specific examples f what technical infrmatin yu will prvide. Intermediate Technical Fcused n technical principles and cncepts that wuld appeal t infrmatin security prfessinals with mre than 5 years f technical experience. Little, if any, time is spent n definitinal terms and cncepts. Cntains instructive dems, line cde, tls and architectural discussins. Basic Technical Fcused n technical principles and cncepts that wuld appeal t infrmatin security prfessinals with less than 5 years f technical experience. Time is spent n definitins and cncepts, t build up t mre cmplex technical understanding. Jb aids and tls will be a plus. Technical Futures Designed fr infrmatin security prfessinal with 10 r mre years f experience. Sessins in this categry fcus n new cncepts, technlgy r threats that are expected t cme t fruitin within the next 5 years. Very little, if any time, is spent n defining terms; rather mre time may be spent n white barding slutins and explaining advanced theries r cncepts. Advanced Legal/Cmpliance Fcused n practicing attrneys r crprate prfessinals dealing with cmplex intellectual prperty r privacy litigatin r cmplex crprate gvernance, cmpliance and regulatry issues. These sessins assume an advanced level f legal r legislative knwledge, and are designed fr practitiners with 10 r mre years f experience. Intermediate Legal/Cmpliance Fcused n practicing attrneys r crprate prfessinals dealing with intellectual prperty r privacy litigatin r crprate gvernance, cmpliance and regulatry issues. These sessins are designed fr practitiners with mre than 5 years f experience. Basic Legal/Cmpliance Fcused n practicing attrneys r crprate prfessinals interested in learning mre abut intellectual prperty, privacy, crprate gvernance, cmpliance and regulatry issues. These sessins assume a basic knwledge f understanding in this area, and are designed fr prfessinals with less than 5 years f experience. PAGE 4 f 8

5 Individual Cntributr Prfessinal Develpment Designed fr individual cntributrs wh seek t influence thers and braden knwledge fr cntinued career grwth and/r persnal gals. Manager Prfessinal Develpment Sessin designed fr managers wh seek t cntinue t refine management skills and business knwledge fr cntinued career grwth and/r persnal gals. Advanced Prfessinal Develpment Advanced sessins fr directr-level and abve cntributrs wh seek t braden their business knwledge fr career grwth and/r persnal gals. Select the track that wuld be mst apprpriate fr yur tpic. * Select that Cnference Track which best fits yur presentatin. Yu will als have the pprtunity t select the 2nd best fit, which will increase the dds f being selected. Wireless What is yur secnd chice fr the track? * Hackers and Threats Select the security keywrds which are apprpriate fr yur sessin. * (Select all that apply) Access Cntrl Administrative Passwrd Management Anti-Spam Anti-Virus Applicatin Security Audit Authenticatin Business Cntinuity / Disaster Recvery Certificatin, Security Prfessinal Cmpliance Management Cntent Management/Filtering Database and Strage Security DDS Digital Certificates, Certificate Authrities Digital Rights Management Encryptin and Key Management End-Pint Security Enterprise Security Management Firewalls PAGE 5 f 8

6 Frensics Identity Management Incident Respnse Integrated Security Appliances Intrusin Detectin Malicius Cde Prtectin Managed Security Services Media Security Messaging Security, Encryptin, Security, IM Security Passwrd Management Patch/Cnfiguratin Management Penetratin Testing, Vulnerability Assessment, Risk Assessment Physical Security Plicy Management/Enfrcement Prduct Certificatin Public Key Infrastructure (PKI) Remte Access Risk Management, Risk Analysis Secure e-cmmerce Secure File Transfer Secure Mbile Cnnectivity Security Training, User Awareness Single Sign On Surce Cde Vulnerability Analysis Telecm/VOIP security Time Stamping VPNs Vulnerability Assessment WAN/Internet Security Web Cntent Management, Filtering/Behavir Blcking Web Services Security Web Site/Web Server Security Wireless Security Submitters Cmments The speaker Jshua Wright was als a speaker at the RSA 2007 cnference fr the presentatin "Wireless IDS Challenges and Vulnerabilities" (WIR-201). PROPOSED SPEAKERS Add a Speaker An Individual sessin may have nly ne speaker, a C-Speakers sessin has tw speakers, and Panel Discussins require a mderatr and up t fur panelists. PAGE 6 f 8

7 All prpsed speakers will be ntified that they were included in a prpsed submissin. The Cnference will prceed with the judging prcess assuming prpsed speaker cnfirmatin unless instructed therwise by the prpsed speakers. Cmplete the fllwing infrmatin fr each speaker. Yu ll als be given the ptin t prefill the frm with yur infrmatin, if yu are bth the submitter and a speaker. * = required input Sessin Rle * Individual r C-Speaker Salutatin * Mr. First Name * Jshua Last Name * Wright Preferred Name Cmpany * Aruba Netwrks Jb Title * (limit 75 characters including spaces) Senir Security Researcher Address 1 Address 2 City State Pstal Cde Cuntry address * jwright@arubanetwrks.cm Secndary address Telephne * Alternate telephne Fax number Speaker Bigraphy/CV * (Limit 400 characters including spaces) Enter speaker bigraphy/cv here Is the prpsed speaker a Certified Infrmatin Systems Security Prfessinal (CISSP)? * N Has the prpsed speaker spken at an RSA Cnference befre? * Yes If yes, please identify the Cnference(s) years: 2007 Des the prpsed speaker have prfessinal speaking experience (has he/she been paid t speak)? * Yes If yes, please elabrate where/when: Senir SANS Instructr and curse authr speaking at multiple SANS cnferences yearly. Regular speaker at PAGE 7 f 8

8 hacker cnferences including ShmCn and DefCn. Will the prpsed speaker be presenting at ANY event 30 days prir t the Cnference? * Yes If yes, please identify the event and the title f the presentatin: SANS NS2007 Cnference, Assessing and Securing Wireless Netwrks curse PAGE 8 f 8