🚀 go-pugleaf

This month's meeting:

  Greg Adams and Brian Moeller will be talking about risk assessment.

  At most of our past meetings we've talked about security
  vulnerabilities (what the risks are) or about security tools (which
  help identify the vulnerabilities or to fix them in some way).  This
  month we'll look at the process of risk assessment.

  Brian will start by discussing "Information Security Risk Assessment
  Method", which is an attempt to quantify exactly what a
  vulnerability means to you.  It allows one to take more factors into
  consideration than just the vulnerability.  These factors are the
  value of the information and access to it, the safeguards that are
  already in place, and the type of threat that would take advantage
  of the vulnerability.

  Greg will then talk about and demonstrate the L-3 Security Expert,
  which is a tool that helps walk you through this process and which
  automates many of the tasks.

  There's a rumor that we'll be having cookies and milk, also :-)

About the meeting:

  The meeting will be on Wednesday, Feb 24, from 4-6 PM in Baker
  Systems 120.

  Note to people coming from off the OSU main campus - parking at the
  Northwest ramp in particular has been horrible lately.  Sorry for
  the inconvenience.  You might want to try one of the other parking
  garages, or you could try parking on West campus and taking one of
  the OSU buses.

  I'm looking into changing the meeting time and location, stay
  tuned...

About the speakers:

  Greg Adams
  L-3 Communications Network Security Systems, LLC
  Vice President, Technology

    Greg is the Vice President of Technology and principal designer
    for the L-3 Network Security Expert risk assessment project.  He
    holds a Bachelors degree in Computer Sciences from University of
    South Alabama and has over ten years experience in the development
    and implementation of information protection solutions for many
    commercial and government customers.  He has extensive involvement
    in the computer security, telecommunications, and risk management
    arenas as a technical expert and as a manager.  Greg has led the
    engineering team responsible for the research, development, and
    implementation of computer security solutions for network
    intrusion detection, network monitoring and risk management.  He
    has spent the last four years researching and developing risk
    management principles, risk assessment algorithms, and information
    protection products.  He has been the guest lecturer at several
    risk management seminars and has taught artificial intelligence,
    expert systems, and knowledge engineering courses at Park College.

  Brian Moeller, CISSP
  Information Security Consultant
  Core Performance Company, Chicago Il.

    Brian is a Computer Security consultant for Core Performance.  He
    specializes in Risk Assessment and the deployment of intrusion
    detection solutions.

    He is a member of CSI, ISACA, ISSA, and participates with the
    AEGIS group and the FBI Infragard group.  He is an active
    volunteer for (ISC)2, administering the CISSP exam.

    He's also a heck of a nice guy...:-)

About these meetings (in general):

  The Network Security Group meetings are usually held on the fourth
  Wednesday of each month from 4-6 PM on the Ohio State University
  main campus in Columbus (usually in Baker Systems 120).  The goal of
  our meetings is to share information about computer security tools,
  practices and problems.  Anyone and everyone are invited to attend.

  We also have mailing lists for people who are interested in
  discussing network security issues, or who just want announcements
  about meetings and security bulletins.  Send mail to
  romig@net.ohio-state.edu for more information.

  Note that this is *not* the same as the bi-weekly security lunch at
  Battelle (the AEGIS group), though you are welcome to attend
  either.  For more information about AEGIS, please contact me.

--- Steve