TC November 2005

Program overview

The FIRST Technical Colloquium (TC) event is restricted to FIRST members only and will be held in Nov 14-16, 2005.

Program details on the FIRST TC itself will be available for FIRST members only, directly through the Members only website, which they will be able to access using their certificate.

The Vendor SIG Meeting is open to all vendor teams irrespective if the are members of Vendor SIG or FIRST or not. Relevant guests are also welcomed. However, the Vendor SIG forum moderators can use their discretion and refuse participation.

FINAL DRAFT PROGRAM.

Overview

November 14th (Monday)
Technical Colloquium - Plenary Session
November 15th (Tuesday)
Technical Colloquium - Hands-On Classes
November 16th (Wednesday)
Vendor SIG Meeting

November 14th (Monday)

	Technical Colloquium - Plenary Session
08:30 – 09:15	Registration, coffee & introductions
09:00 – 09:45	Honeypots for Security Operations James Barlow (NCSA-IRST — National Center for Supercomputing Applications)
09:45 – 10:45	Vulnerability Management : Past, Present and Future Tom Briglia, Tom Briglia (ORACERT — Oracle, US)
10:45 – 11:15	Coffee break
11:15 – 12:00	Incident Response : the PSS Approach Greg Lenti, Greg Lenti (MSCERT — Microsoft Corporation, US)
12:00 – 12:30	Building an Apache URL Firewall using mod_rewrite Erik Graversen (Oracle), Erik Graversen (ORACERT — Oracle, US)
12:30 – 13:30	Lunch
13:30 – 15:00	Short Updates Session
15:00 – 15:30	Coffee break
15:30 – 16:20	Dealing with Security in Open Source Software Derrick Scholl (Sun)
16:20 – 16:50	Safeguard Selection: Web Application/Web Services Scanners Chad Hughes, Eric Veum, Mark Fallon, Chad Hughes (Oracle, US) , Eric Veum (Oracle, US) , Mark Fallon (Oracle, US)
16:50 – 17:30	PGP Survey and Beyond Damir Rajnovic (Cisco PSIRT — Cisco Systems Co., GB)
17:30 – 18:00	SC Update & Closing Session

November 16th (Wednesday)

	Vendor SIG Meeting
09:00 – 09:15	Introduction and welcome Damir Rajnovic (Cisco PSIRT — Cisco Systems Co., GB)
09:15 – 10:00	Vulnerability handling in JPCERT/CC Yurie Ito (JPCERT/CC, JP)
10:00 – 11:00	Vulnerability handling in CERT/CC Art Manion (CERT/CC)
11:00 – 11:15	Coffee break
11:15 – 12:00	Responsible Security Coordination with Open Source Derrick Scholl (Sun)
12:00 – 13:30	Lunch
13:30 – 14:00	Responsible Security Coordination with Open Source Derrick Scholl (Sun)
14:00 – 14:45	Legal issues Tara Flanagan (Cisco Systems — Cisco Systems Ltd., US)
14:45 – 15:00	Coffee break
15:00 – 15:45	OVAL scheme Andrew Buttner (MyCERT — MITRE, US)
15:45 – 16:30	Feasibility Study of OVAL based Vulnerability Management Extension Masato Terada (IPA, JP)
16:30 – 16:50	Closing remarks, next meeting Damir Rajnovic (Cisco PSIRT — Cisco Systems Co., GB)