Archive for February, 2006

Network Audit: Identification of Threat

Tuesday, February 21st, 2006

CAT5 Stethoscope
Our February 21, 2006 meeting entitled Network Audit: Identification of Threat was held in the Cisco Systems New York office.

Special Thanks to Tom Brennan for all of his work in helping coordinate this meeting. It is the dedication of secure members like Tom that helps us provide a valuable resource for the critical infrastructure protection community.

Thanks also to Cisco Systems for providing the use of their facilities and of course all of our speakers for their support.

Syngress Publishing was on hand to raffle off a terrific Ultimate Security CD containing ten of their IT Audit and information security publications. Visit the Syngress New York Metro InfraGard Page for a 45% discount on selected titles for our members. The discounted Ultimate Security CD can be found here.

Tom Brennan and John Tierney tag-teamed their presentations with Tom handing off to John who provided an overview of Google’s various tools and then examples on how to delve deeper on the aspects of using Google for reconnaisance. Tom then picked up the presentation again to break out a very full toolkit to depict a complete example of reconnaisance and exploit.

Tom’s quote from Sun Tzu’s “The Art of War” wraps the day’s intent up perfectly:


“If you know yourself but not the enemy,
for every victory gained you will also suffer a defeat”

== Agenda ==
Download the Complete Agenda.

Introductions and Key Business Issues
Joseph R. Concannon
President, NYM InfraGard

The Role Of Information Security In IS Audit
Jason Harrell, CISSP-ISSM
ABN AMRO NV
Download the Presentation Here.

Holes in the IT Armor
Thomas Brennan, CISSP, C|EH, CFSO, MCSA
AccessIT Group Inc.
Download the Presentation Here.

Google Hacking
John J. Tierney, CISSP CISA
Vice President
New York Metro InfraGard
Director, Information Systems & Security
Water Authority of Western Nassau County
Download the Presentation Here.

Web Application Scanners
Thomas Ryan
Vigilar, Inc.
Download the Presentation Here.