Donn Parker, Principle Consultant, Parker Consulting

Abstract:  Security risk management is a negative, invalid art. It is improperly dependent on measuring complex unknown risk with insufficient, invalid, inapplicable data. Yet our leading experts, regulators, auditors, and legislators tell us we must base our security on this unproven concept. There is a successful alternative to achieve sound security and satisfy management and other stakeholders more effectively based on 40 years of experience engaging in diligence-based security management.

Donn Parker, CISSP, is a Fellow of the ACM and has been active in the computer field for 57 years.  He was an information security consultant and researcher on computer crime and information security for 35 years at SRI International. Parker was a Founder of I-4 Security Services, author of 6 definitive books on computer crime, ethics, and information security management, and the receiver of most offered life-time achievement and service awards in information security. Parker retired for 12 years but remains active by writing and lecturing. He received a MA in math from University of California in 1954.

Download  <11:45>

Rich Mogull, Analyst, CEO, Securosis

Putting the Fun in Dysfunctional: How the security industry works, and why it's your fault

Have you ever wondered why we really do what we do in the security industry? In this roller-coaster session, Rich Mogull will blend cognitive science, practical psychology, market forces, and technical analysis as he explains why we make the decisions we do, the two kinds of incidents that always get executive attention, and why some security markets succeed, while others fail.

The RSA Conference - Boldly going where no conference has gone before
Todd Inskeep, Authentication & Consumer Protection Executive, Bank Of America

In this PK presentation, Todd Inskeep takes a look at the major news and topics from previous RSA Conferences, and talk about what’s coming up in 2011.

Herbert “Hugh” Thompson, Ph.D., Chief Security Strategist, People Security

Facebook, Linked-In, and Twitter have moved from business curiosities to important PR, networking, and marketing tools. Consumer-focused companies are using Twitter to connect with customers. Many marketing campaigns leverage Facebook sites and fan pages. There are benefits galore for businesses that use social networking sites, but what about the risks? The big social networking attacks of 2009 may be giving us a peak into some bigger problems to come like corporate reputational hijacking. Join us for a brief but action-packed look at some of the risks of extending the enterprise (and government) through social networks.

Herbert “Hugh” Thompson, Ph.D, Chief Security Strategist, People Security

Abstract: Internet security guru and author Dr. Herbert "Hugh" Thompson has seen it all - hacked voting machines, airline computer insecurities, e-commerce vulnerabilities and cell phone exploits. For the fourth year running, Thompson brings a lifetime of security expertise and a wide-eyed enthusiasm to "The Hugh Thompson Show" at this year's RSA Conference. Become part of the action as Thompson takes center stage, interviewing some very special. His guests this year include Craig Newmark, founder and customer service rep, craigslist, Bob Sullivan, Technology Writer, MSNBC.com, and Steve Wozniak, Co-Founder, Apple Computer, Inc. and Chief Scientist, Fusion-io

Herbert (Hugh) Thompson is Chief Security Strategist at People Security and a world-renown expert on application security. He has co-authored several books on the topic and has written more than 80 academic and industrial publications on security. In 2006, he was named one of the "Top 5 Most Influential Thinkers in IT Security" by SC Magazine and was featured (along with Harri Hursti) in "Hacking Democracy", the Emmy-nominated HBO documentary on e-voting vulnerabilities. He is also an adjunct professor at Columbia University in New York where he teaches courses on computer security.

Download  <11:10>

Dave Hansen, Corporate Senior Vice President and General Manager, CA Security Business Unit

Keynote Session

Abstract:  Cloud computing and collaboration technologies are changing the way we communicate and do business. As technology changes, security must also evolve. Cloud computing and collaboration technologies give us an opportunity to create a more secure environment based on strong identities, data privacy and compliance management. Join Dave Hansen, General Manager of CA’s Security Business Unit, to discuss how to embrace collaboration tools and the cloud to create a safe and secure environment.

Dave Hansen is Corporate SVP and GM of CA’s Security and Compliance Business Unit. In this role he is charged with growing CA’s security, information governance, and IT governance, risk and compliance business. He and his team help deliver the products, services and partnerships required to meet customer needs for strategic, enterprise level security, risk and compliance management. Previously, Dave was CA’s CIO and was responsible for global IT strategy, applications development and the global CA infrastructure, IT compliance and CA’s international IT organization.

Download  <6:20>

Phil Dunkelberger, President & CEO, PGP Corporation

Keynote

Abstract:  Cloud based services have changed the IT landscape and attackers are paying attention. Multi-tenant architectures housing data from multiple sources make clouds attractive targets. Even though they've been around, cloud architectures have not yet been subjected to rigorous peer review from the security community. Providers are building platforms on proprietary technologies, leaving customers unable to independently assess the security posture.  This session will look at the evolution of cloud computing and evaluate what needs to be done to ensure its security and survival.

Phil Dunkelberger is the President and CEO of PGP Corporation. Previous positions include CEO of PGP Inc., the original PGP startup, VP of Sales at Symantec, COO of Vantive Corp. and CEO of Embark. Mr. Dunkelberger also serves as the Chairman of TechAmerica's Cybersecurity CxO Council and on the TechNet CEO Cybersecurity Task Force. Dunkelberger has a BA in Political Science from Westmont College.

Download  <6:25>

David Matthews, Deputy CISO, City of Seattle

Law track         

Abstract:  In this session we will enumerate and examine the different types of online service delivery platforms and discuss the records management and storage, eDiscovery, privacy and information security issues for each of them. The session will also focus on various approaches towards managing and mitigating the potential risks associated with cloud computing as it relates to each of these issues.

David Matthews, CISSP, CISM, is the Deputy CISO for the City of Seattle. He is Co-Chair of the NW Alliance for Cyber Security and an active member of ISSA, ISACA, InfraGuard and ISC2, the DHS Regional CIP subcommittee, the Agora, the Pacific CISO forum, the ABA Science and Tech committee, and NW Warn. He has presented at many emergency management and information security conferences.

View the Presentation <7:59>