Columbus InfoSec Forum Expert Panel and Speakers

Key note speaker

Matt Curtin, Chief Executive Officer and Founder, Interhack Corporation; cmcurtin@interhack.com

Matt is founder, Chief Executive Officer of Interhack Corporation (Interhack), a Columbus, Ohio-based Internet Firm with expertise in Security and Privacy Research, Product Development, and Consulting.

Matt began his work on computing security over 12 years ago, and today is a recognized expert in Privacy and Security, and his views on these issues are often sought as a speaker and expert witness. He has been the speaker or panelist at the Columbus Computer Society, Privacy by Design 2001 – Montreal, Privacy 2001 – Cleveland, InterLab 2000 – Los Alamos National Laboratories, and the Network Security Working Group as well as Open Source Club at The Ohio State University. He is a member of USENIX, the Association for Computing Machinery, and the IEEE Computer Society. He is active with the Infragard group, the Explorer Post sponsored by Lucent Technologies, and several local and national business and technology organizations.

Mr. Curtin has published numerous books, formal papers, technical reports on online privacy and information security, appeared on several media, including CNN, AP and has been quoted worldwide in various media and articles by reporters and editors. His most recent book was a comprehensive approach to building trust within an enterprise, titled Developing Trust: Online Privacy and Security (Apress, 2001). Peter Neumann, Principal Scientist, SRI International remarks that with the understanding in this book, you will have a major step toward being able to design, implement, operate, maintain, and manage privacy-respectful enterprises with far fewer risks. Many of his papers and reports address issues and effectiveness in programming, anti-virus software, firewalls, integrity, encryption, and privacy invasion. Mr. Curtin currently teaches a `Programming in Common Lisp' and 'Operating Systems Laboratory' course at The Ohio State University.

Prior to forming Interhack, Matt was a Senior Systems Developer/Engineer at The Ohio State University. At Megasoft Online as a Chief Scientist, he was part of the team that developed the acclaimed security architecture and features for their flagship product, Web Transporter. He was also involved with the highly publicized first-ever break of a message encrypted with DES, the U.S. Government standard for data encryption. Before that Mr. Curtin was Chief Hacker at Fahlgren and prior to that he worked with the Internet Gateway Group at the AT&T Bell Laboratories, to connect AT&T to the Internet securely. This work and the scientific community at Bell labs lead to his interest, knowledge, and passion for building trustworthiness in computing systems.

Matt's personal and cultural interest outside of the evangelism for the need for privacy and security include the study of Russian, and supporting the Columbus Symphony Orchestra and Opera Columbus.

Interhack

A Security and Privacy Research, Product Development, and Consulting Firm. Interhack specializes in helping its clients worldwide to ensure that their strategic and tactical business operation and computing systems meet the required levels of trustworthiness. Matt Curtin formed Interhack as a group of informally connected ex-Bell Labs scientists interested in continuing the study of trustworthiness in computing. Interhack's primary focus is to address the enterprise business needs for trust, improve policies, education, processes, and functions, and then enable those improvements through the effective and efficient application of technology. Interhack is recognized as the Enterprise Security Experts.

Panel Moderator

Jeff Schmidt, Founder and CTO, Secure Interiors Inc. jschmidt@secureinteriors.com

Jeff Schmidt, MCSE, CISSP, is the founder and chief technology officer of Columbus-based Secure Interiors, a provider of around-the-clock Internet security protection for small to medium-sized businesses (SMEs). Schmidt's primary expertise includes network security, systems programming and distributed systems. He is a recognized IT security industry expert, author and speaker.

Schmidt is one of five National Executive Board members in InfraGard, an FBI-sponsored program comprised of businesses, academic institutions, state and local law enforcement agencies and the FBI's NIPC that is dedicated to increasing the security of the critical infrastructures of the United States of America. In this role, Schmidt directs guidance to the 56 FBI field offices and interfaces with senior FBI management in Washington, DC. Schmidt frequently travels to FBI offices to lead training sessions and speak on various panels.

Prior to founding Secure Interiors, Schmidt spent six years as a Senior Systems Developer/Engineer at The Ohio State University where he led various distributed systems and security projects. He has also worked for the Distributed Services Infrastructure Group at Microsoft Corporation in the area of network security. At Microsoft, Schmidt was a founding member of the internal penetration testing team, a small, elite group of engineers focused on identifying security problems, and wrote various network security testing tools for internal use that are still being used today.

Schmidt has served as an independent security consultant to several organizations throughout North America and is a frequent speaker on panels related to network security.

Schmidt is the author of the Microsoft Windows 2000 Security Handbook, which has been published by Que in three languages and contributed to the book Using Windows NT Workstation 4.0.

Secure Interiors

Secure Interiors makes managed Internet security services available to small and medium-sized businesses. The company's solution is comprised of the PADDLock(tm) security appliance at the customer site that is continuously under the watchful eye of Secure Interiors' advanced technology and expert Internet security analysts located in a 24/7 command center. The Secure Interiors solution provides high-end, preventive security as well as the fastest incident response time in the industry.

Expert Panel

1. Ed Daniels, Director Information Protection, Cardinal Health, Inc. edward.daniels@cardinal.com

   Ed is a nineteen-year veteran of the IT and InfoSec industry. He is responsible for the design, implementation and management of the network security infrastructure for Cardinal Health and is also routinely involved with computer forensics and policy enforcement. Ed's career has allowed him to gain knowledge of network protocols, system OS and programming languages which gives him a unique perspective of computing and InfoSec.

   As part of Ed's routine vulnerability assessment, he has begun testing Cardinal facilities for rogue wireless networking access points. Due to the inexpensive and easy out-of-the-box implementation features of WLAN access points, it is possible for non-IT staff to install the technology and consequently compromise the security of the network.

2. Darrin Miller, Consulting Systems Engineer, Cisco Systems; darrimil@cisco.com

   Darrin has 14 years of experience in network and security design. In his current position with Cisco, Darrin is the regional go-to-guy for consulting on security design and implementation. He has specific expertise in firewalls, intrusion detection, virtual private networking and wireless technology.

   Darrin is deeply involved in the security issues revolving around wireless LANs and has been designing secure wireless networks since early 2000. He is co-author of the "SAFE: Wireless Security in Depth" white paper on www.cisco.com/go/safe.

3. Brian R. Moeller, CISSP, Senior Security Engineer, OARnet Enterprise Network Security Services; moe@enss.net

   Mr. Moeller has been in the InfoSec industry for fifteen years and is currently a firewall expert on staff with OARnet (The Ohio Academic Resources Network) and specializes in configuring firewalls for the Educational community. A large portion of his time is spent measuring and weighing the risks of providing public network services, and mplementing effective methods of mitigating risks to computing systems. Wiress Access Points became an interest when surveying for alternative access methods to networks.

   Mr. Moeller is very active in the Security Professional community, involved in many security professional organizations, and is a proponent of sharing security knowledge.

4. Paul Cardon, Information Security Architect, Bank One; paul_cardon@bankone.com

   Paul has been an InfoSec professional for nine years with additional expertise in Unix system administration. His current responsibilities involve network perimeter security architecture including packet filtering, proxies, IPSec VPNs, Intrusion Detection, and cryptography. He also performs vulnerability assessments and penetration testing of system and network infrastructure and web applications. Paul uses his free time to perform technical review of computer security books and has provided patches for several open source security tools such as snort, dsniff, firewalk and libnet. Paul has a degree from Brigham Young University in Mathematics where he focused on numbery theory (with applications in cryptography) and skiing.

   Paul is experienced with the protocols used by 802.11 wireless networks including WEP and its weaknesses. He has developed a deployment plan for 802.11 networking involving the use of a VPN and two-factor authentication to protect access to sensitive data and wired networks at Bank One. Paul also did a technology review of the Blackberry wireless PDA and the security surrounding the integration of that system with our corporate e-mail platform.

5. Greg Telles, Network Specialist, OSU Medical Center; telles-1@medctr.osu.edu

   Greg has 10 years experience in networking related technologies and holds the CCNA (Cisco's Network Associate), CWNA (Certified Wireless Network Administrator), and SCP (Sniffer Certified Professional) certifications.

   After 5 years as a Novell LAN Manager, Greg joined the Telecommunications department at OSU Medical Center in 1997. In the Spring of 2000, Greg began the design and deployment of a campus WLAN. He has been involved in all aspects of the technology including site survey, implementation, Client and Access Point configuration, speed and interference analysis, troubleshooting, and the ever evolving security processes. The successful implementation includes a large WLAN currently at OSU Medical Center and a small installation at OSU East Hospital. This infrastructure is supporting the all important patient order entry on the patient floors, and patient registration in the Emergency Departments. The system is entirely made up of the Cisco/Aironet wireless LAN devices.

6. Bob Rich, Title: Chief Technology Officer; Global Security Technologies, Inc. rrich@gstisecurity.com

   Bob has been in the IT industry for 12 years specializing in InfoSec for the last 6 years. In his role as co-founder and CTO, Bob has the responsibility of building the strategic security practices for the two-year old company. In the wireless technology space, he has incorporated wireless security auditing tools and implementation best practices into the set of products and services that GSTI offers to its customers worldwide.

   Prior to GSTI, Bob was a Senior Architect with Banc One Information Security developing and implemented the corporate security infrastructure.