TC April 2007

Program overview

The FIRST Technical Colloquium (TC) event is restricted to FIRST members only and will be held in April 12-16, 2007.

The Doha TC marks the inaugural FIRST event in the Middle East region. The Doha TC will offer a wide range of presentations on topics in Information Security. Topic areas include Identity Theft, Privacy, Standards, Compliance (technical or legal), Cyber Crime, Law Enforcement, Incident Response, Damage Mitigation & Recovery, Vulnerabilities, Risk and Threat Assessment, and relevant Case Studies.

Program details on the FIRST TC itself are available for FIRST members only, directly through the Members only website, which you can access using your certificate.

Please note: the program schedule is not in its final version, adjustments still can occur.

Overview

April 12th (Thursday)
Local Q-CERT event (April 12th) – open to FIRST members
April 13th (Friday)
Hands-on Classes (April 13th) – FIRST members only
April 14th (Saturday)
FIRST TC Plenary Session (April 14-15th)
April 15th (Sunday)
FIRST TC Plenary Session (April 14-15th)
April 16th (Monday)
Regional workshop (April 16th) – open to FIRST members

April 12th (Thursday)

	Local Q-CERT event (April 12th) – open to FIRST members
09:00 – 12:00	Managing Organizational Information Security Q-CERT
12:00 – 14:30	Gala Lunch

Local Q-CERT event (April 12th) – open to FIRST members

09:00 – 12:00

Managing Organizational Information Security

Q-CERT

12:00 – 14:30

Gala Lunch

April 14th (Saturday)

	FIRST TC Plenary Session (April 14-15th)
08:15 – 08:30	FIRST TC Opening announcements
08:30 – 09:30	Haxdoor case study Robert Lowe (AusCERT, AU)
09:30 – 10:00	Coffee break
10:00 – 11:00	Phishing - A Global Issue in Need of a Global Approach Arjen de Landgraaf (Co-Logic Security, Ltd, NZ)
11:00 – 12:00	System Investigation on Incident Response at NTT-CERT Hirohisa Yamagami (NTT-CERT)
12:00 – 13:00	Lunch
13:00 – 14:00	A Study on Multilayer Combined Wide Area Monitoring Hitachi Incident Response Team (HIRT), Masato Terada (IPA, JP)
14:00 – 15:00	Security Measures for the FIFA WC2006 in Germany ... from physical security to DDoS defending Peter Quick (Telekom-CERT — Deutsche Telekom)
15:00 – 15:30	Coffee break
15:30 – 16:30	Information Security for High-Profile Events Chris Bateman (Q-CERT, QA)

April 15th (Sunday)

	FIRST TC Plenary Session (April 14-15th)
08:15 – 08:30	FIRST TC Opening announcements
08:30 – 09:30	Cyber Forensics Emerging Trends in Live System Memory Acquisition an Analysis Matthew Geiger (CERT/CC — Carnegie Mellon University, US) , Rich Nolan (CERT/CC, US)
09:30 – 10:00	Coffee break
10:00 – 11:00	State of Cyber Security in the Gulf Region
11:00 – 12:00	Gulf Region Panel
12:00 – 13:00	Lunch
13:00 – 14:00	ISO 27001 Standard Bill Wilson (Q-CERT, QA) , Farrukh Ahmad (Q-CERT, QA)
14:00 – 15:00	HoneyPot Networks National Case Studies from Brazil, Netherlands and Korea : Panel Discussion Cristine Hoepers (CERT.br - Brazilian Internet Steering Committee, BR) , Dave Woutersen (GovCERT.NL, NL) , Klaus Stedding-Jessen (CERT.br - Brazilian Internet Steering Committee, BR) , Woo-Han kim (KrCERT/CC, KR)
15:00 – 15:30	Coffee break
15:30 – 16:30	HoneyPot Networks Cristine Hoepers (CERT.br - Brazilian Internet Steering Committee, BR) , Klaus Stedding-Jessen (CERT.br - Brazilian Internet Steering Committee, BR)

April 16th (Monday)

	Regional workshop (April 16th) – open to FIRST members
08:15 – 08:30	Regional Greeting
08:30 – 09:30	National & Regional CSIRTs Gorazd Bozic (SI-CERT — TF-CSIRT chair, SI) , Husin Jazri (APCERT, MY) , Robin Ruefle (CERT/CC — Carnegie Mellon University, US)
09:30 – 10:30	Overview of AusCERT Robert Lowe (AusCERT, AU)
10:30 – 11:00	Coffee break
11:00 – 12:00	Network Situational Awareness Roman Danilyw (CERT/CC, US)
12:00 – 13:00	An Overview of Encryption Sven Dietrich (CERT/CC, US)