[Qatar-pm] QISF (Qatar Information Security Forum) - April 24

[Nigel Gourlay]

I'm not going to be able to go to this one. I'd say it's worthwhile
attending if you have free time in the middle of the day. Does anyone
have any more details on venue or timings? The last one was at around
1230 at College of North Atlantic.

I'm away in the UK until May 9. If you hear of any events announced in
the meantime, can you post them to the list? Thanks.

--nigel

>>>
Next Event: April 24, 2007
http://www.qcert.org/qisf/

The Future of Incident Response
Presenter: Thomas A. Longstaff, PhD, Deputer Director of Technology
for the CERT Program

If you are interested in attending this event, please complete the
registration form:
  http://www.qcert.org/forms/form.php

>From the earliest days of networked computing, we have counted on a
collection of computer security experts to watch for anomalous
activity, track down the source of the attacks, and bring the network
intruders to justice. A good review of how this used to work is
documented in the book "The Cuckoo's Egg" by Cliff Stoll. Today,
attacks are fully automated, vulnerability-seeking missiles that can
hide in our normal activity and relaunch from our homes and offices
around the world. These cyber weapons of mass disruption have
completely changed the nature of incident response from a
cat-and-mouse activity to a complex distributed analysis job more
concerned with limiting damage and notifying victims than in finding
the perpetrator. As we move into the future of advanced attack
technology, today's response will prove to be inadequate and
ineffective and must once again drive a change in the way we will
think about incident response. In this presentation, I will wind
through the history of incident response, using that trend as a guide
to how we are likely to respond to the future threat we will face in
the years to come.