December 2017 Meeting

We will have time for food, drinks, networking, and job sharing. We also have two talented local folks presenting different angles on application security.

Title: Modern DLL Highjacking

Abstract: DLL Hijacking is a very old problem that is very easy to understand — or is it? Learn why modern automation tools for DLL hijacking testing fail and look at some of the things that nearly everybody forgets to check when it comes to this old problem. Practical mitigation and a new tool for identifying hijackable DLLs will be shown.

Bio: Reid Wightman

Title: Threat Hunting + Response: What It Is, Why You Need It

Abstract: The undisputed global shortage of cyber security professionals has become such a problem that even the most celebrated technology companies like Google, Amazon, and Tesla are having difficulty hiring and retaining these professionals. As long as this talent gap remains wide, small businesses, non-technology companies, and governments will be especially at risk of experiencing data breaches or cyber incidents. Join speaker Jason Ortiz to explore an innovative set of tools, techniques, and procedures called Threat Hunting and Response (TH+R), and learn how this approach can help guard your business against cyber attackers. With integrated technology and human analysis capabilities covering network, log, and host, TH+R has the ability to replace — or work in conjunction with— your existing SIEM and MSSP contracts, while delivering a higher level of security at a more cost-effective price point. Jason will explain the technical implementations of TH+R, as well as the roles of analysts and hackers, in order to demonstrate the“Peyton Manning Effect”— a great offense really can be the best defense.

Key Lessons:

1. The state of cyber security and how it is evolving

2. TH+R overview

3. TH+R versus emerging threats and technologies (including implications of the IoT)

Bio: Jason Ortiz is a senior integration engineer with Pondurance. He recently moved back to Indiana from Washington, D.C., where he spent the past eight years working in the United States intelligence community, including the last five years at the NSA. In addition to being a passionate technologist, Jason considers himself an amateur cartographer, an urban enthusiast, and a Trekkie. He loves living an active lifestyle, playing sports, and cheering on his favorite teams.

Location, food, and drink sponsored by Pondurance.