Sample Video Presentations

We’ve asked our speakers to provide a six-minute summary of their session content, using a format loosely based on "pecha kucha," a unique "no-bull" format created by two architects in Japan. The videos get to the meat of the sessions as quickly as possible, zeroing in on the most important takeaways. You’ll be able to get a good sense of the quality of the SX sessions, as well as actually learn from the videos. As a bonus, SX attendees receive access pre-conference to all the sessions, so you can spend your time at the event wisely.

• Presentations
• How I Hacked Your Wireless LAN (And How to Stop Me)
• Information Protection and Privacy: Cooperative Education and Awareness
• Free Security!
• Brand Your Security Program as Fun
• PCI in 2008
• XML and Web 2.0 Threats You Never Knew About
• How to Win Management Support for Awareness
• Legal Developments in Security and Privacy
• The SDLC and Security Awareness for Application Developers
• To Disclose the Breach or Not?

How I Hacked Your Wireless LAN (And How to Stop Me)

Jon Green
Aruba Networks

Wireless LANs are popping up everywhere in homes, hotspots and businesses. We’ll review wireless LAN attacks that have occurred, give an appraisal of various risk models that address real dangers (not just hype) and provide a vendor-neutral review of wireless security technologies on the market.

Information Protection and Privacy: Cooperative Education and Awareness

Naomi Fine & Gerry Phelan
Pro-Tec Data

Whether you’re adding on a privacy or security module or competing for resources with new privacy and information protection education and awareness initiatives, this session is for you. Learn why the two belong together and the cooperative steps you can take to assure optimum results for both missions. Session includes sample awareness communications incorporating both privacy and information protection.

Free Security!

Ron Woerner
TD Ameritrade ThinkTech

Many security tools, documents and programs are available for free (or very little cost). This session will show how they can be used for vulnerability assessments, penetration testing, intrusion detection, incident response and security management. Bring your PC so you can try them for yourself. This updated presentation is great for cash-strapped organizations promoting security activities.

Brand Your Security Program as Fun

Todd Fitzgerald
National Government Services

So many Powerpoint slides, so little interest. Looking for a livelier image for your face-to-face awareness presentations? This engaging session will help you brand your program as fun,so fun, you may need a waiting list. Find ideas, props, themes, plans and techniques you can easily adapt for your organization.

PCI in 2008

Branden R. Williams
VeriSign

Recent changes to the Payment Card Industry’s Data Security Standard have moved some merchants into different merchant levels with more rigorous requirements, and created new requirements for securing Web servers and services. Make certain you’re ready to pass your next PCI audit.

XML and Web 2.0 Threats You Never Knew About

Steve Orrin
Intel Corporation

Organizations that are implementing Web services and beginning to look at Web 2.0 and rich Internet applications are discovering that there are unique security challenges that can surface throughout the various phases of the Web service lifecycle. Here’s the full rundown.

How to Win Management Support for Awareness

Thomas Peltier
Thomas R. Peltier Associates, LLC

Here’s the trick: learn first about management’s needs, then take best advantage. Talk "policy," "compliance" and "risk reduction" rather than "training and awareness." Learn how to tie awareness initiatives to key business needs, using three case studies that will illustrate varied goals and approaches. Leave with strategies for interacting more effectively and confidently with management.

Legal Developments in Security and Privacy

M. Peter Adler
Pepper Hamilton LLP

Security-related policy isn’t just Sarbanes&Oxley and PCI. This session will give you a rundown that includes: data breach disclosure laws, bills that are being reviewed by Congress and by state legislatures, precedent-setting court cases and actions by the Federal Trade Commission and other agencies. (And yes, PCI and SOX.)

The SDLC and Security Awareness for Application Developers

Nish Bhalla & Rohit Sethi
Security Compass

You know the importance of tailoring awareness messages to each target audience, but what should you be teaching application developers about security that relates to their daily job? Learn from experienced application developers about the content and approaches that will work to impact this tough target audience.

To Disclose the Breach
or Not?

Patricia Logan
Marshall University

Breach disclosure laws sometimes mandate that an incident be reported, but in other cases the decision is made at the discretion of the breached organization’s leaders. In this session, breach case studies and the companies’ decisions to disclose or keep the event secret will be reviewed and discussed. Attendees will discuss, in an open forum, the sticky choices organizations should make when business motivations and social responsibility collide.