ISSA Meets Tonight

INFORMATION SYSTEMS SECURITY ASSOCIATION
Rainier Chapter

University of Washington Tacoma
Tacoma Room (GWP 320)
Tuesday October 4, 2011
6:00 pm – 8:00 pm

(Different guest speaker EVERY 1st Tuesday of each month)
FREE Open to all

Topic for Tuesday Oct. 4th, 2011
The 2012 Threat Landscape and Advanced Persistent Threats

Speakers provided by McAfee
Dan Wolff and Steve Peoppe
Bios:
Dan Wolff is on the McAfee Solutions Management team responsible for Endpoint Security and NAC products. He has fifteen years of engineering and product management experience in the areas of information security and web analytics. He was the product manager for Entercept (now McAfee HIPS) and the Desktop Firewall.

Steve Poeppe, CISSP, is on the McAfee Gov/Ed Solution Engineering team responsible for technical pre and post sales activities for the West. Steve hails from 12 year of public sector experience having been the Deputy CISO for State of Idaho and SSO for Superior Court Arizona. Steve’s private sector experience includes managing projects and software deployment for Server Access Control at Hewlett-Packard.

A Full Ride, Living Stipend and a Job in Information Assurance

How does a full ride scholarship, a living stipend (because the funding organization wants you to work on research and studies) and employment once you’ve earned your degree sound? That’s what the Information Assurance Scholarship for Service program does, and is doing for two graduate students currently at the Institute of Technology. And there is more to come in the next three years.

To create a powerful incentive for students to enter the Information Assurance field, the Department of Defense is offering the program described above. As they put it:

Nearly every day, the United States faces growing threats and attacks against our critical government systems. DoD’s mission is to address the Nation’s urgent security challenges and to proactively seek solutions to protect and defend our information and information systems. One of the key security challenges DoD faces daily is assuring that the Department's information, information systems, and information infrastructure are protected and available in order to support the Department's transformation to a secure net–centric environment.

To continue to provide the growing number of trained personnel needed, DoD is working with universities across the country, known as, often referred to as CAEs, to develop and expand IA–related curricula and to offer programs of study for future IA professionals.

In order to provide the scholarships you have to qualify as an educational institution. So if you are interested, you need to attend one of the nation’s universities that have been designated as National Centers of Academic Excellence in Information Assurance. Then that university has to pass muster during an NSF (National Science Foundation) site visit to be vetted to provide that opportunity.

As it happens the University of Washington has qualified as one of the universities to offer it. Last June, led by Dr Barbara Endicott-Popovsky, the Director of Center for Information Assurance and Cybersecurity at the UW, the site visit by the NSF was conducted and included visits to the Institute of Technology at the University of Washington, Tacoma.

The visit was such a success that they asked that Barbara increase the budget in her proposal.

Three months later Barbara sent out the announcement:

The NSF has officially awarded us $2.1M to fully fund 18 graduate-level scholars over the next 4 years to fully immerse in information assurance (IA) studies! Further, we received an additional $ ½ M on top!! This truly launches us on the national scene as a significant IA presence in the Northwest and in the field at large!
There are only 30+ schools in the US who have had similar awards, our sister iSchool—Syracuse University—being one of them, along with CMU, Johns Hopkins and Purdue. There are only 200+ such scholars in the US at any one time—we’ll have 4 this year—we are in elite company!!

Once again I am reminded of the strengths we have in the South Puget Sound to help generate success in research and technology in the area of Information Assurance and Cybersecurity. With our partners in academia to the North, and in particular UW Seattle’s Information School, we can be part of future solutions to the challenges described on the CISC (Center of Information Assurance and Cybersecurity) site:

The challenges of information assurance are not going to be solved easily, quickly, or independently. Solutions will require new research, new capabilities, new products and services, a spectrum of broadly and specially educated professionals, a much more aware public, and much innovation and broad collaboration. Washington is a convergence of international commerce, military defense, and network-based software development. As such, it is both vulnerable to disruption, and is the home of a spectrum of professional talent and organizations that can be well served by the presence of a national center of excellence.

If you are interested in applying for the program, consider applying to the graduate program at the Institute of Technology at the UW Tacoma or the Information School at the UW Seattle.

ISSA Tacoma Programming

The ISSA (Information Security Systems Assn.) puts on free monthly workshops featuring a guest speaker each month.

It is held on the first Tuesday of each month and they will start back up in September after a summer break.  The next is Tuesday, Sept. 6th in the Tacoma Room from 6 - 8 pm. Anyone can come that is interested.

Program Information:  Abstract:

Congratulations, your edge is secure and your users have Security and Privacy policies to guide their activities. So why is it that according to Carnegie Mellon more than 30% of electronic crime is committed by insiders and the ACFE estimates that 4% of total revenue is lost to fraud? That’s more than many company’s total IT budgets. What we are hearing from banks, hospitals, state and local government, etc is that their limited visibility to what credentialed users are actually doing limits their ability to proactively identify and investigate suspicious user activity.

What can be done about it? You will see the End User Behavior Tracking & Analysis technology that Gartner named “Cool Vendor – Security & Privacy”. Local ISSA leadership who has seen this technology has said “this could challenge how we think about monitoring."

The goal for the night is to use the demonstration as a jumping off point to discuss why the Internal Threat is so challenging for you to detect inappropriate activity as well as share successful strategies to address this risk. What effective strategies have you seen or implemented? Your Monitor, Fraud and Incident response colleagues will want to be here.

With NIST taking comments for better Internal Threat controls, FFIEC recently adding customer behavioral analysis and Healthcare Accounting of Disclosure rules in review this topic is getting lots of attention. As one organization stated “This can take us from playing Pin the Tail on the Donkey blind-folded to being Tom Cruise in Minority Report.”

Program Speakers: Mark Benoit & Tony Luque

Tony Luque, CISSP - Security Solutions Engineering Manager
Tony Luque has worked in the information security industry for more than 10 years. Most recently joining Attachmate from Symantec where he worked with large enterprise accounts across the risk spectrum of solutions. Today, his work is focused on Fraud Management, monitoring and investigations. He received his bachelor's degree in business administration from the University of Washington. Luque's past speaking engagements have included Linux World, HP World, and Washington Technology Group across solutions such as DLP and secure communications.

Mark Benoit – Security Specialist
Over the last 15+ years Mark has worked for global providers of network, managed and professional services. Most recently prior to Attachmate, Mark worked at Verizon Business - CyberTrust Security supporting the 6th largest US bank. Mark is currently an Attachmate Security Specialist working primarily with Banks, Healthcare and Government across the country focusing on Fraud and Privacy initiatives. He received a BA from Washington State University and completed The Management Program at the University of Washington.

For more information, contact Betty Perry, UW Tacoma Conference Services at 253-692-4676 or via this website.

Reputation & Integrity in the Info Age

LINK TO REGISTER.

Congressman Adam Smith's Technology Issue Update

Smith Active in Patent Reform

Congressman Adam Smith continues to stay actively involved in patent reform, co-signing a letter in support of the legislation and joining a bi-partisan group of his colleagues in voting for H.R. 1249, the America Invests Act. The bill, which passed the House of Representatives on June 23 by a vote of 304-117, moves the patent system from a “first to invent” to a “first inventor to file” system, a decision that received wide support from industry groups, the Small Business & Entrepreneurship Council and the National Academy of Sciences, and will provide needed stability and predictability to the patent process. The bill also ensures that prior users can continue to utilize methods patented by others, provides a one-year grace period to protect innovators’ rights to their invention from the date of first disclosure, and modifies post grant review proceedings. Finally, H.R. 1249 provides for structural changes to the U.S. Patent and Trademark Office, modifying its authority to set fees, while implementing additional measures for proper oversight.

The House and Senate have both passed versions of the bill. The two versions will now move to a Conference Committee with the aim of resolving differences between the bills.

_________________________________________

Smith Supports Satellite Export Reform

Earlier this year during debate over the National Defense Authorization Act (NDAA), Adam voiced his support for H.Amdt 331, an amendment to reform satellite export policy. Speaking in support of the amendment, Adam challenged the notion that inaction was the safest policy, noting “the risk of excessive restrictions on U.S.companies' ability to export technology.”

By reforming satellite export policy, the amendment would help American companies that manufacture satellite components remain competitive and on the forefront of satellite technology. The amendment, which keeps safeguards to ensure that satellite technology stays in the right hands, is also a national security issue, helping to maintain American technological superiority.

The amendment, introduced by Rep. Dana Rohrabacher, was withdrawn at the request of the chair, Rep. Buck McKeon. Adam’s comments can be viewed in full here.

_________________________________________

Smith Advocates Rebalancing Trade Relationship with China

Recently, Adam joined a number of his colleagues in asking the House Subcommittee on Commerce, Justice, and Science and Related Agencies to increase funding for the office of United States Trade Representative (USTR) to address industrial practices by China that violate World Trade Center (WTO) rules. While the USTR has made considerable progress in pursuing these unfair trade practices, funding for the office has not been sufficient to properly carry out its mission. The letter, which acknowledges the current financial constraints of the federal budget, reinforces the importance of the USTR’s mission, and the notion that the “American people expect Congress to defend U.S. manufacturing and service companies, workers, and farmers”, a mission made more difficult with resources that Trade Representative Ron Kirk described as “woefully short.”

_________________________________________

Smith Supports Trade Adjustment Assistance for Firms

Earlier this year, Adam joined a number of his colleagues in asking the House Subcommittee on Commerce, Justice, and Science and Related Agencies to support the Trade Adjustment Assistance for Firms (TAAF) for Fiscal Year 2012. TAAF provides vital assistance to businesses negatively impacted by foreign competition, helping companies develop strategies to find new markets, improve external communication, and address internal inefficiencies. The assistance, delivered through federally funded Trade Adjustment Assistance Centers, is estimated to have helped retain or create more than 50,000 jobs in the past five years.

_________________________________________

Grants and Procurement Opportunities

National Science Foundation

Computing and Communication Foundations (CCF): Core Programs
Funding for research and education projects that develop new knowledge in three core programs: The Algorithmic Foundations program; The Communications and Information Foundations program; and The Software and Hardware Foundations program. For more details on this program, click here

Computer and Network Systems (CNS): Core Programs

Funding through Division of Computer and Network Systems (CNS) supports research and education projects that develop new knowledge in two core programs:
Computer Systems Research (CSR) program; and Networking Technology and Systems (NeTS) program. For more details on this program, click here

For more information on grant opportunities that may benefit your organization, please visit www.grants.gov.

Tech Personnel Exchange with DoD

The Department of Defense announced last week the availability to participate in a new pilot program that provides an avenue for information technology professionals to exchange best practices with the private sector.

Authorized by the fiscal 2010 National Defense Authorization Act, the Information Technology Exchange Program (ITEP) pilot permits the DoD to assign information technology civilian employees to private sector organizations and to accept information technology employees from the private sector.

"The Defense Department recognizes that sharing information and leveraging best practices are critical components of education and continuous learning," said Teri Takai, DoD Chief Information Officer. "Under this collaborative learning venture, DoD and private industry organizations have a unique opportunity to share best practices through the exchange of high performing information technology professionals in areas such as service oriented architectures and cyber security. ITEP provides an opportunity for both industry and DoD to learn from each other -- to enhance employees' IT competencies and technical skills."

The personnel assignments will be from three months to one year in length. The first opportunities range from work regarding mobile devices to cloud computing and infrastructure management within the DoD.

Interested participants should visit http://cio-nii.defense.gov/sites/itep for more information about the ITEP pilot.

Local Firm Scores in Top 100

The Initiative for a Competitive Inner City and Fortune Magazine released the 2011 Inner City 100 list of the fastest-growing inner city companies in the U.S. SiteCrafting, Inc. from Tacoma, Washington ranked 51 on this year’s list.

The Inner City 100 program recognizes successful inner city companies and their CEO’s as role models for entrepreneurship, innovative business practices and job creation in America’s urban communities. The full list can be viewed here.

The rankings for each company were announced at the Inner City 100 Awards Dinner on Thursday, May 12, 2011 in Boston, MA. Winners attended a two-day event featuring seminars for Inner City 100 owners and managers at Harvard Business School, a procurement symposium and an awards gala that drew more than 500 guests.

The Inner City 100 list provides unmatched original data on the fastest growing inner-city businesses in the U.S. In the last 13 years, 661 different companies have earned positions on the Inner City 100, collectively generating more than $2.2 billion in annual revenues and creating nearly 70,000 new jobs. Chevron Corporation, Staples Foundation and Goldman Sachs are long-time sponsors of the program.

For the 2011 list, a record number of two thousand nominations were received. Winners represent a wide span of geography, operating in 51 cities and 32 states.

“We are delighted to celebrate businesses like SiteCrafting that are playing a critical role in revitalizing America’s urban communities. Through their achievements, the Inner City 100 winning companies exemplify America’s remarkable potential and the future of our urban centers,” Mary Kay Leonard, ICIC president and CEO. “These extraordinary companies demonstrate the market possibilities that exist within our inner cities and the growth that is at the heart of all urban entrepreneurial successes.”

SiteCrafting President Brian Forth said, “SiteCrafting is thrilled to have been named to the Inner City 100 list for the second time. It is an honor to be listed with some of the most innovative and creative companies in America. Each Inner City 100 company has an unbelievable story of perseverance and courage. This list is proof that the American dream is alive and well.”

SiteCrafting is a website design and web application development company that specializes in custom web based solutions for mid- to large-size businesses, counties, and municipalities. The company’s goal is to ensure its clients get the tools and technology they need to work most efficiently. The company has been headquartered in Tacoma since 1995 and has satellite offices in Seattle and Spokane.

To qualify for the Inner City 100 list, companies were required to have:

• at least 51 percent of their operations located in an economically distressed urban area;
• have at least 10 full-time employees;
• and a five-year operating sales history that includes at least $200,000 in revenues in the first year of consideration:
• an increase in year five sales over year four sales;
• and fifth-year sales of at least $1 million.