Contents
Cal Poly Pomona

Presentations

"Do You Accept This Certificate?" - Craig Rich ( View Bio )

Most of us have been taught that when providing sensitive information over the internet through web-based forms, we should make sure the web address begins with 'https:' rather than 'http:'. The 's' in 'https:' stands for the Secure Sockets Layer, which ensures that the network traffic will be encrypted, and attempts to establish the authenticity of the web server to which the information will be sent.

If your web browser asks "Do You Accept This Certificate?", what do you do? The word "certificate" sounds reassuring and trustworthy... who wouldn't want a certificate? How many people know what a certificate is or how it could possibly establish authenticity?

In this talk, we will demonstrate a man-in-the-middle attack, one in which a malicious eavesdropper/intruder hijacks an 'https:' conversation and tries to acquire sensitive information through a convincing masquerade. A certificate will be offered, and we'll see if we can distinguish it from a trustworthy certificate.

HP Security a multi-layered approach - Brad Rhodes ( View Bio )

HP will be discussing how a multi-layered approach to security is really the best strategy for securing today's enterprise. As network security has evolved, more and more companies face security breaches at the client level vs intrusion into the network. HP's hardware and software security strategies including the HP ProtectTools security suite and our ISV security partnerships let enterprises leverage everything from client based security infrastructure in loosely managed environements up to enterprise class centrally managed security consoles. We'll cover topics such as Multi-Factor Authentication, Full Disk Encryption, Port Control, Trusted Platform Modules (TPM) and Identity Management.

"Privacy is Dead - Get Over It" - Steven Rambam ( View Bio )

This will be a wide-ranging lecture covering databases, privacy, and "computer-aided investigation". This seminar will be held October 25, 2007 in URSA Minor from 11:30am-2:00pm. The final half-hour of the talk will be a Q&A session. The objective is to show Cal Poly students, faculty and staff what personal and private information is available on the Internet to help them make informed decisions and to help guard against identity theft.

Emphasis will be placed on discussing the "digital footprints" that we all leave in our daily lives, and how it is possible for an investigator (or government Agent) to determine a person's likes and dislikes, religion, political beliefs, sexual orientation, habits, hobbies, friends, family, finances, health and even the person's actual physical whereabouts, solely by the use of online data and related activity. Numerous "real-world" examples will be provided.

This talk will include numerous examples of investigative online resources and databases, and will include an in-depth demonstration of an actual online investigation done on a volunteer subject. (The subject is Rick Dakan, a noted author.) Further, the Cyber Security Fair committee is seeking a local volunteer, if one can be found though pre-seminar advertising and interviews to bring the point home the impact on Cal Poly students, faculty and staff.

From CNN: "...Rambam was scheduled to discuss how he dug up -- in just over four hours of searching private and public databases -- more than 500 pages worth of data on Rick Dakan, who was attending the conference and had agreed to participate in the project. "All I had given him was my e-mail and name," Dakan said. "He knew everywhere I'd lived, every car I had driven, and even someone else in Alabama who was using my Social Security number since 1983. He found all my friends, pictures of friends, knew about my brother's criminal history."

VMware Virtualization







Windows Vista & Second Life - Sam Stokes ( View Bio )

Vista, Second Life and online presence, how to be secure, how to work with Second Life

Using Vista with Second Life or other online presence is a great way to tell your story culturally, religiously or just plain talk about your life. This talk will discuss how using Microsoft Vista with Second Life or other online societies works, and how to do so securely.