Some useful links (feel free to email me interesting infosec-related links)

How AES works (link courtesy of Jeffrey Ketterer)

Blind phone hacker (link courtesy of Chris Alvarado)

Hacking PINs (link forwarded on 4/27/09 by Travis Crabb, my previous student at UCF)

http://www.gocsi.com

http://www.issa.org

http://www.isaca.org

Guest Speakers

Fall 2009: Jeff Carrell, Julie Machal-Fulks, Mark Kantor

Jeff Carrell (Nov. 5, 2009)

Topic: Infrastructure Security - Inside the Network

Abstract: Many Local Area Networks (LANs) today are considered secure since the system is behind locked doors and has security devices that provide protection from outside the network.

However, infrastructure devices are not necessarily configured for the many types of "attacks" that can be used to cause network slowdowns or network outages. These attacks could be from "infected" company systems or "guest" systems that are allowed access.

This session will look at ways that LAN switches can be attacked and then ways to implement stronger security configurations to prevent or control the severity of the attacks from causing network interruption.

The presentation will include a live demonstration.

Bio: Jeffrey L. Carrell is a Network Security Consultant, spending most of his time as a network systems and security instructor on HP ProCurve Networking products, delivering technical courses throughout North
America. In addition, Jeff provides network consulting services with an emphasis in security on wired, wireless and VoIP networks.

His involvement in the computer industry for over 30 years has culminated in the concentration of his endeavors in the internetworking portion of the industry for over 23 of those years. His designs are in thousands of networks throughout the world. Jeff has enjoyed successful career advancements with several network equipment manufacturers, ie., Foundry Networks and HP ProCurve Networking, as a pre-sales consulting engineer and technical
instructor. In an end-user position he has designed mission-critical/high-availability networks.

Julie Machal-Fulks (Oct. 29, 2009)

Topic: Network security and notification regulations

Bio: Julie Machal-Fulks, Partner of Scott & Scott, LLP, leads a team of attorneys in representing and defending clients in legal matters relating to information technology. Her practice focuses on complex litigation ranging from privacy and network security, data breach notification and crisis management, intellectual property disputes, service provider negligence claims, and content-based injuries such as copyright and trademark infringement in software, the Internet, and all forms of tangible media. Her focused practice has made Julie a trusted resource in her field, often invited to submit papers and present on topics including data breach notification, security incident response, and defending against regulatory and consumer class actions. She graduated with honors from Texas A&M – Corpus Christi, earning a B.A. in English. She received her law degree from The University of Houston Law Center where she was inducted into the Order of the Barristers. Julie’s article, “Privacy, Network Security, and the Law,” was recently published in the IT Compliance Journal.

In Spring 2008, Julie also spoke to the ITDS faculty during an Information Systems Research Center (ISRC, now Center for Decision and Information Technologies) seminar, and to students in BCIS 4740 and BCIS 5630.

Mark Kantor (Sept. 24, 2009)

Topic: Information security: Why bother?

Bio: Mark has been involved in information technology for over 30 years with the last 15 years focused on information security. My roles have been in sales, sales management and consulting. He has a degree in Business Administration with a major in Marketing from the University of Albany - Albany, NY.