22nd Annual FIRST Conference | June 13-18, 2010

FIRST.Org Home | Contact Us

Conference Program

Print a copy of the OFFICIAL Program Booklet

FINAL PROGRAM. Last revised 06.22.2010.
Click on a presentation title to view the presentation abstract.

Sunday, June 13

1330-1700	DAY I: Joint FIRST/ICANN Workshop \| 2F Theatre **Participants must be registered for the conference AND send an RSVP to first-2010@first.org in order to attend Sunday. First-come, first serve; 150 seats are available. Additional CPE credits will be given to attendees of the workshop for Sunday's participation. Day II continues on Wednesday.
1330-1730	Vendor Special Interest Group (Vendor SIG) \| 2F Windsor
1400-1800	Registration \| 2F Mezzanine East
1800-1900	2010 Session Chairs Meeting \| 2F Windsor
1830-1900	Newbie Meet & Greet \| Lobby Level Bayfront AB FIRST Newbies & 1st Time Attendees Meet & Greet w/ the Steering Committee
1900-2100	Ice Breaker Reception \| Lobby Level Bayfront AB General Attendance

Monday, June 14

0800-1600	Registration \| 2F Mezzanine East
0845-0900	Conference Opening & Welcome 2F Versailles Steve Adegbite Chair, FIRST.Org Senior Security Program Manager Lead, Microsoft Corporation, US
0900-1030	Keynote Presentation Cybersecurity Collaboration: Partnering Across the Cyber Ecosystem 2F Versailles Philip R. Reitinger Deputy Under Secretary for the National Protection and Programs Directorate (NPPD) Director of the National Cybersecurity Center (NCSC) U.S Department of Homeland Security, US
1030-1100	Networking Break \| 2F Grand Ballroom Foyer
1100-1200	How change to all-IP world impact attack scenarios and how CERT teams can be prepared? 2F Versailles Anu Puhakainen Michael Skogberg Ericsson, FI
1200-1330	Lunch \| 2F Mezzanine East & West
	Track I: Incident Response 2F Versailles	Track II: Management 2F Trianon	Track III: Technical 2F Chopin Ballroom
1330-1430	Incident Response to Social Engineering Attacks Ramses Martinez VeriSign, US	Know Thy Enemy: Cataloguing Agents of Threat for Improved Risk Assessments Timothy Casey Steve Mancini Intel Corporation, US	Targeted Intrusions & Cyber Espionage - Wake Up! Steven Adair Shadowserver Foundation, US
1430-1530	Got Spies in Your Wires? Marshall Heilman MANDIANT, US	Understanding the Insider Threat: Lessons Learned from Actual Insider Cyber Crime Randall Trzeciak CERT/CC, US	Portable Destructive File (PDF) Attacks and Analysis Mahmud Ab Rahman CyberSecurity Malaysia (MyCERT), MY
1530-1600	Networking Break \| 2F Grand Ballroom Foyer
1600-1700	Security in a peer to peer world Adrian Asher Skype, US	R&D projects launched in response to the dynamic evolution of Internet security threats - CERT view Krzysztof Silicki CERT Polska / NASK, PL	Locale-specific threats: Security challenges due to globalization Anthony Bettini McAfee, US
1700-1800	Lightning Talks \| 2F Versailles Sign-up sheets will be available at the registration desk. 5-minute rotations. No sales presentations.

Tuesday, June 15

0800-1600	Registration \| 2F Mezzanine East
0845-0900	Opening Remarks 2F Versailles Steve Adegbite Chair, FIRST.Org Senior Security Program Manager Lead, Microsoft Corporation, US
0900-1000	Keynote Presentation - Why Attackers Win 2F Versailles Dave Aitel CTO, Immunity, US
1000-1050	Incident Response at Scale 2F Versailles Heather Adkins Google, US
1050-1110	Networking Break \| 2F Grand Ballroom Foyer
1110-1200	Your Other Network's Attack Surface 2F Versailles Fabian "Fabs" Yamaguchi Security Researcher, Recurity Labs GmbH, DE
1200-1330	Lunch \| 2F Mezzanine East & West
	Track I: Incident Response 2F Versailles	Track II: Management 2F Trianon	Track III: Technical 2F Chopin Ballroom
1330-1430	CERT EE and CERT-FI: AbuseHelper framework for community-wide, automated abuse handling Juhani Eronen CERT-FI Anto Veldre CERT-EE	13 Things to Consider Before DNSSEC John Kristoff Team Cymru, US	Cyber[Crime/War] - Drawing the hidden links Iftach "Ian" Amit Security & Innovation, IL
1430-1530	Cooperation and self-regulation of Polish ISPs in combating online crime Przemek Jaroszewski CERT Polska / NASK, PL	Risk Intelligence: Business Intelligence Meets Information Security Matt White Intel Corporation, US	Opt-in Social Protesting Botnet Günter Ollmann Damballa, US
1530-1600	Networking Break \| 2F Grand Ballroom Foyer
1600-1700	Visualization for IT-Security L. Aaron Kaplan CERT.at, AT	Smorgasbord of Formats - how to communicate vulnerability information (90 minute session) Jim Duncan Juniper Networks, US Carlos Martinez-Cagnazzo CSIRT-Antel, UY Bence Birkás Ferenc Suba CERT-Hungary, HU Luc Dandurand NATO Piotr Kijewski NASK/CERT Polska, PL	BlackEnergy 2 Revealed Joe Stewart SecureWorks, US
1700-1930	Vendor Showcase \| 2F Grand Ballroom Foyer An evening to network with exhibitors and your peers (...with beer and snacks of course!)

Wednesday, June 16

0800-1500	Registration \| 2F Mezzanine East
0845-0900	Opening Remarks 2F Versailles Steve Adegbite Chair, FIRST.Org Senior Security Program Manager Lead, Microsoft Corporation, US
0900-1000	Keynote Presentation - Securing Europe's Information Society 2F Versailles Dr. Udo Helmbrecht Executive Director, ENISA
1000-1050	That Pesky Critical Infrastructure 2F Versailles Jason Larsen Researcher, Idaho National Laboratory, Department of Defense, US
1050-1110	Networking Break with Exhibitors
1110-1200	The Botnet Ecosystem 2F Versailles Vitaly Kamluk Director of Research Center EEMEA, Global Research & Analysis Team, Kapersky Lab, RU
1200-1330	Lunch \| 2F Mezzanine East & West
	DAY II: Joint FIRST/ICANN Workshop 2F Versailles	Track II: Management 2F Trianon	Track III: Technical 2F Chopin Ballroom
1330-1430	DNS Organizational Structure Yurie Ito Greg Rattray ICANN	Clearing the Brush: Lessons Learned in Gutting a CIRT and Rebuilding with Free Tools Michael La Pilla NetCentrics, US	Fingerprinting Malware Developers Rich Cummings HBGary, US
1430-1500	DNS Incident Response Tips Andre Ludwig CACI Robert Schischka CERT.at	After the Acquisition: A Software Security Assurance Perspective Bruce Lowenthal Oracle, US	Phishing Malware vs Brazilian Banks: What each side is going to raise the bar Ivo Peixinho Brazilian Federal Police, BR Jacomo Piccolini ESR/RNP, BR
1500-1530	DNS Incident Response Tips (continued)	After the Acquisition: A Software Security Assurance Perspective (continued)	Understanding and Combating Man-in-the-Browser Attacks Jason Milletary SecureWorks, US
1530-1600	Networking Break with Exhibitors \| 2F Grand Ballroom Foyer
1600-1700	Recent Threat Analysis Jose Nazario Arbor Networks, US Rod Rasmussen Internet Identity, US	Analysis of How CSIRTs are Organized in Japanese Large Companies Toshio Nawa CDI-CIRT, JP	Case study in the use of System Whitelisting David Billeter InterContinental Hotels Group, US
1700-1800	Lightning Talks \| 2F Versailles Sign-up sheets will be available at the registration desk. 5-minute rotations. No sales presentations.
1900-2200	Conference Banquet \| Plaza Level (walk through the Spa to get to pool deck) Reception begins at 1900; dinner starts at 19:30 Relaxed dress code - shorts and sandals!

Thursday, June 17

0800-1500	Registration \| 2F Mezzanine East
0845-0900	Opening Remarks 2F Versailles Steve Adegbite Chair, FIRST.Org Senior Security Program Manager Lead, Microsoft Corporation, US
0900-1030	Keynote Presentation Cloudifornication - Indiscriminate Information Intercourse Involving Internet Infrastructure 2F Versailles Christofer Hoff Director, Cloud and Virtualization Solutions, Cisco Systems, US
1030-1100	Networking Break with Exhibitors \| 2F Grand Ballroom Foyer
1100-1200	Panel Discussion: Implications of the Cloud Moderator: Andrew Cushman, Microsoft, US Panelists: Christofer Hoff, Cisco Systems, US Jose Nazario, Arbor Networks, US Udo Schweigert, Siemens, DE
1200-1300	Lunch \| 2F Mezzanine East & West
	Track I: Incident Response 2F Versailles	Track II: Management 2F Trianon	Track III: Technical 2F Chopin Ballroom
1300-1400	Incident Response in Virtual Environments: Challenges in the Cloud Bryan Casper Russ McRee Microsoft Corporation, US	Supply Chain Assurance: Incident Response in the Global IT Supply Chain Hart Rossman SAIC, US	Law Enforcement / CSIRT Co-operation Special Interest Group (LECC-SIG)
1400-1500	Forensics Considerations in the Next Generation Cloud Environments Robert Rounsavall Terremark, US	Critical Functions: A Functions Based Approach to IT Sector Risk Assessment Scott Algeier IT-ISAC, US Jerry Cochran Microsoft Corporation, US	LECC-SIG (continued)
1500-1830	Annual General Meeting (AGM) - Members Only Link \| 2F Versailles **Members Only. Must have a valid government issued photo ID for entry. No exceptions.

Friday, June 18

0800-1500	Registration \| 2F Mezzanine East
0845-0900	Opening Remarks 2F Versailles Steve Adegbite Chair, FIRST.Org Senior Security Program Manager Lead, Microsoft Corporation, US
0900-1000	Who Moved My Cheese? Why The Security Industry Has Been Turned Upside Down 2F Versailles John N. Stewart Cisco Systems, US
	Track I: Incident Response 2F Versailles * AM Coffee Break in Room	Track II: Management 2F Trianon * AM Coffee Break in Room	Track III: Technical 2F Choping Ballroom * AM Coffee Break in Room
1000-1100	Hands-on Computer Forensics with FOSS Tools Sandro Melo Locaweb, BR Nelson Uto CPqD, BR	Intrusion Response Reality Check Kris Harms Peter Silberman MANDIANT, US	A Day in the Life of a Web Application Kenneth van Wyk KRvW Associates, LLC, US
1100-1200	Hands-on Computer Forensics with FOSS Tools (continued)	Challenges for Digital Forensic Acquisition on Virtualization and Cloud Computing Platforms Christopher Day Terremark, US	Getting Ahead of Malware Jeff Boerio Intel Corporation, US
1200-1330	Lunch \| 2F Mezzanine East & West
1330-1430	Ad hoc File System Forensics Andreas Schuster Deutsche Telekom AG, DE	Building a Fortune 5 CIRT Under Fire Richard Bejtlich General Electric, US	Dragon Research Group Security Distro Dave Dobrotka Dragon Research Group Team Cymru, US Jacomo Piccolini ESR/RNB, BR
1430-1500	Closing Remarks \| 2F Versailles

Diamond

Gold

Network

Internet

Banquet

Media Partner

Downloads

Web Brochure

Conference Brochure

Sponsorship Form

Sponsorship Brochure