[PLUG] [Proposed Presentation: Defending Home Networks]

[Mike Leone <turgon@mike-leone.com>]

I received the following proposal for a presentation the other day. Along
with a 2.6 meg unannounced attachment. Twice. :-) Good thing I'm not still
on dialup.

Anyway, the attachment was a 67 page PDF of very colorful slides for what I
presume will be in the talk - everything from SANS to CERT, to ethereal, to snort, to
defense in depth. Looks quite comprehensive. I can't quite tell if it's
meant to just be informative, or if he's trying to peddle something. Not
that that would matter all that much, I don't think. It would be like a vendor
presentation, which we've had before (the recent RedHat Tour, the e-smith
presentation).

Our next free month is in July. I'm going to write this guy, and ask him to
speak to PLUG, unless there are major objections? (besides that fact that he
uses AOL, that is :-) Room 101 at USP should quite easily meet their
requirements, I think.

Thoughts? I'm thinking about emaiing him over the weekend, on Sunday
perhaps.

----- Forwarded message from Lewisjwl@aol.com -----

> Date: Mon, 30 Dec 2002 22:11:36 EST
> From: Lewisjwl@aol.com
> To: turgon@mike-leone.com
> X-Mailer: AOL 8.0 for Windows US sub 230
> Subject: Defending Home Networks
> 
> Following is a talk which might be of interest to 
> the Philadelphia area LINUX user group.
> 
> TALK
> Now that we know a dedicated attacker can break into almost
> any computer permanently attached to the INTERNET, defense
> of home and small office networks is becoming an important
> issue. In the past, LINUX has been less vulnerable than 
> software products from other software suppliers, but that
> is changing rapidly as major organizations begin widespread 
> LINUX deployments and attackers begin to focus on LINUX.
> 
> In this talk, we explore some past and present attacks
> and vulnerabilities, sniff some of the network traffic, explore
> vulnerability assessment tools, and investigate more secure
> LINUX configurations.
> 
> CUSTOMIZATIONS
> As originally presented, the talk takes about an hour and
> is totally freestanding. It could be combined with a security
> "newbie corner" or installations. With a longer Q&A session
> it might stretch to almost two hours.
> 
> DEMOS
> * Vulnerabilities and attacks
> * The GOLD Standard
> * ETHEREAL Sniffer
> * Hardware and software firewalls
> * NMAP Scanner
> * NESSUS Vulnerability Assessment
> * Host-based intrusion detection
> * SNORT Intrusion Detection
> * Resources
> 
> OUR EQUIPMENT
> We will bring:
> * Red PC (attack)
> * Blue PC (victim)
> * Ethernet Hub
> * Shared monitor, keyboard, mouse, and KVM
> * XGA video projector (unless you have one)
> 
> REQUIREMENTS
> * 4x120VAC @ 15 amps with surge suppression
> * RJ45 Ethernet, DHCP, INTERNET
> * Thirty minutes setup and test
> 
> Regards
> John
> 
> Viewgraph file follows
> 
> --------------------------------
> JW Lewis
> lewisjwl@aol.com
> JJPW Associates
> 9514 Angelina Circle
> Columbia, MD 21045
> 443-562-4945
> 
> 
> 

----- End forwarded message -----

-- 
PGP Fingerprint: 0AA8 DC47 CB63 AE3F C739 6BF9 9AB4 1EF6 5AA5 BCDF
Member, LEAF Project <http://leaf.sourceforge.net>    AIM: MikeLeone
Public Key - <http://www.mike-leone.com/~turgon/turgon-public-key.asc>
Registered Linux user# 201348

Attachment: pgpqfxkWsDf0u.pgp
Description: PGP signature