Dawn Cappelli, Technical Manager, Carnegie Mellon University Software Engineering Institute
Joji Montelibano, Insider Threat Security Analyst, Carnegie Mellon University, SEI, CERT Program
CERT has developed strategies to help organizations combat insider threat, based on a database of over 400 actual cases and with over nine years of research. To test these proposed strategies, CERT created the Insider Threat Lab to simulate events from actual cases. This panel will present three of these simulations and demonstrate how to best deploy countermeasures against malicious insider IT sabotage activities.
Joji Montelibano is a member of the Insider Threat team at CERT. He has over 15 years experience in the fields of software development, network engineering, and security. He began his career as a developer for the petroleum and chemical industries, where he created customized simulation programs for companies such as Shell Oil, Sunoco, and Foster Wheeler. Prior to joining CERT, Joji was a Senior Information Security Analyst for the RAND Corporation, where his main projects focused on securing and ensuring the availability of military networks and communications. He holds an undergraduate degree in Chemical Engineering from Stanford University, and Master’s degrees from Harvard University and the University of Southern California. His certifications include the CISSP, CSTE, CCNP, and ACSA.
Dawn Cappelli, CISSP, is Technical Manager of CERT’s Enterprise Threat & Vulnerability Management team and the Insider Threat Center at CERT, in Carnegie Mellon’s Software Engineering Institute. Her team assists organizations in improving their security posture and incident response capability by researching threat areas; developing assessment methods; and providing information for preventing, detecting, and responding to illicit activity. Dawn’s focus has been insider threats since 2001, including threat analysis and modeling; assessments; and insider threat workshops. Dawn has 30 years experience in software engineering, technical project management, and information security. Before joining CMU in 1988 she worked for Westinghouse as a software engineer developing nuclear power systems.
Download <12:23>
Those of you familiar with binary planting and DLL hijacking already know that hundreds of applications can be tricked into executing DLLs and executables from remote servers. However, there’s much misunderstanding when it comes to hard technical details. This session will provide concrete instructions and tips for developers, researchers and whitehats with exploit scenarios.
