Long Island

Chapter Meetings
Scroll down to see the upcoming Long Island OWASP events

Date: Saturday June 27th 2009 Time: 10:00-14:00 Place: Sunrise Business Center, 3500 Sunrise Hwy, Great River, NY 11730, Building 200 MAP Directions: Enter from the service road on the East Bound side of Sunrise Hwy. Attendees can park in front of Building 200 and enter through the Building 200 entrance. We must ask that all Attendees do not park in any spot marked as RESERVED. RSVP REQUIRED http://www.owasp.org/images/7/7f/Register.gif Agenda:
 * 10-00 - Opening Remarks & Welcome to OWASP Foundation
 * --'''Helen Gao, OWASP LI Board


 * 10-20 - Incident Response - Identify, Contain, Eradicate, Recover, Lessons Learned
 * Breaches happen. Proper audit compliance enables an organization the ability to detect and prevent attacks.  A case study will be examined.
 * --'''Ryan Behan Manager of Network Technologies at Netsmart Technologies


 * 11-20 - Code Blue - The Unhealthy State of Your Medical Records (And What Can Be Done to Save Them)
 * Millions of patient records have been disclosed to unauthorized third parties. Some of these records were stolen, some were lost yet all could have been prevented.


 * A North Carolina hospital loses a laptop with 14,000 records. The Peninsula Orthopedic Associates lost backup tapes that help 100,000 patient records.  The Wallgreens Health Initiative emailed 28,000 records to the state of Kentucky without using encryption.  Confiker infects three University of Utah hospitals.  Kaiser fires 15 employees for inappropriately accessing medical records.  Two Scottish hospitals were infected by a computer worm.  Researchers find 20,000 medical records using peer-to-peer software.  The Mytob worm infects 4,700 computers at three UK hospitals.  Confiker infects 8,000 computers at the Sheffield Teaching Hospitals Trust.  Criminals tried to extort Express Scripts with the threat of releasing millions of patient records.  SRA International was breached when malicious software allowed an attacker the ability to access patient data maintained by SRA.  The list goes on.


 * All of these incidents were reported in the news within a five month period of each other. News like this is being reported with an increasing frequency.


 * Most of these incidents could have been easily avoided by conducting compliance audits and vulnerability assessments.


 * --'''Blake Cornell Security Consultant Net2S/BT-INS, OWASP NY/NJ/LI Board Member


 * 12-10 - Lunch TBD
 * TBD


 * 12-25 - Education, Penetration Testing and Vulnerability Analysis
 * A course in Penetration Testing has existed at NYU:Poly as far back as 2002, in large part because of a NSA Center of Excellence in Education certification requirement. Professors for the course have come and gone and the course content has changed with them, sometimes for the better, but mostly for the worse. In the Summer of 2008, with no instructor in sight for the coming semester and the course material seriously neglected, I offered to teach it and rewrite it from scratch.


 * These are my experiences.
 * --'''Dan Guido, Board Member OWASP NYNJ


 * 13-25 - Round Table Discussion - Successes, challenges, efforts, hopes and predictions for OWASP Long Island
 * --'''Helen Gao, Board Member, OWASP LI
 * --'''Ryan Behan, Board Member, OWASP LI
 * --'''Blake Cornell, Board Member, OWASP NYNJ/LI

Come prepared for a day of networking with your industry peers. We invite all attendees to food and libations after the meeting at a local restaurant TBA. If you join our mailing list, then you will receive details of the meeting as soon as they are finalized. To be a co-sponsor for this or a future meeting consider annual chapter sponsorship

Chapter Leaders/Contacts
 
 * [mailto:heleng@owasp.org Helen Gao, CISSP]
 * [mailto:ryan.behan@owasp.org Ryan C Behan]
 * [mailto:blake@owasp.org Blake Cornell] 212-202-6704