[PLUG] CRIME meeting Septt 10 2002 @ 10AM @ Verizon Airtouch (Correction)

[Zot O'Connor]

[Date corrected!]

CRIME meeting Sept 10 2002 @ 10AM @ Verizon Airtouch

Speaker(s): Gene Kim, CTO Tripwire

Subject:  "An IT Safety Metric: Why Is It So Difficult To Maintain
Control?"

Directions: C.R.I.M.E. meets in the Verizon (Airtouch) Cellular building (Take I-5
South to Carmen Drive. The building is on the West side [Tigard side] of
the Freeway). The meeting room is in the back of the building. The talk
begins at 10:00 a.m.The street address is 15575 Sequoia Pkwy, Tigard

Web Page: http://crime.whiteknighthackers.com/meetings.php3.

 
Topic:  The job of security practitioners is bad enough trying to detect bad
guys, but what happens when forces conspire to make the task of
remediation and recovering almost impossible?  Rapid capacity expansion
and "break/fix" cycles often lead to loss of repeatable builds.  This
talk describes how the loss of production controls, configuration
management, and change control leads to configuration drift and the loss
of what is a "known, good state." We also describe how to measure it,
and recover it before you need to.

To measure an IT organization's ability to avert "unbounded security
remediation" efforts, Kim and Dr. Spafford developed the IT Safety
Index. We present case studies to display the various attributes of
Level 0 to Level 5 organizations to show how basic capabilities map to
an IT organizations ability to provide business continuity and security.

Gene's Bio:
As co-creator of the original Tripwire software and co-founder of
Tripwire, Inc., Gene Kim now serves as Vice President and Chief
Technical Officer. While his major responsibility is Tripwire products
and development of future technology, his stamp on Tripwire can be seen
everywhere, from new products and business development, to sales and
marketing. Kim also frequently serves as the company evangelist,
speaking at industry events and contributing articles on
security-related topics. 
Kim co-created the first version Tripwire software in 1992 when he was a
student at Purdue University working under security luminary, Dr. Eugene
Spafford. Tripwire worked so well it was quickly embraced by the
security community and eventually became a part of best practices for
computer security professionals around the world. After earning his B.S.
in Computer Sciences from Purdue, he earned an M.S. in Computer Sciences
from the University of Arizona. Kim also spent summers at the
Supercomputing Research Center (now known as the Center for Computing
Sciences) in Maryland working with many of the country's best computer
scientists, engineers, and mathematicians on high-performance computing
techniques for the National Security Agency. Following that, Kim worked
at Intel and then at Infinite Pictures where he met Wyatt Starnes. He
and Starnes formed Tripwire, Inc. in 1997 to create a dramatically
enhanced version of Tripwire that would protect data and network
integrity for Internet-driven businesses. 



-- 
Zot O'Connor

http://www.ZotConsulting.com
http://www.WhiteKnightHackers.com