jon on Sat, 04 Jan 2003 09:10:35 -0500


[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]

RE: [PLUG] [Proposed Presentation: Defending Home Networks]


For whatever it's worth, John Lewis is actually going to be doing next
week's DC LUG presentation as I understand it....

----------------
The January 2003 meeting of Washington DC Linux user group will take
place on Wednesday, Jan 15, 7pm, at 2025 M street, NW in downtown
DC. There will be signs in front of the building.

John Lewis will present a talk on Linux security:

    Now that we know a dedicated attacker can break into almost
    any computer permanently attached to the INTERNET, defense
    of home and small office networks is becoming an important
    issue. In the past, LINUX has been less vulnerable than
    software products from other software suppliers, but that
    is changing rapidly as major organizations begin widespread
    LINUX deployments and attackers begin to focus on LINUX.

    In this talk, we explore some past and present attacks
    and vulnerabilities, sniff some of the network traffic, explore
    vulnerability assessment tools, and investigate more secure
    LINUX configurations.

The meeting location is within 3 nearby Metro stops, both on the red
(Dupont, Farragut North) and blue/orange (Farragut West, Foggy Bottom
[a bit of a hike]) lines.

----------------

	-- jon

-----Original Message-----
From: plug-admin@lists.phillylinux.org
[mailto:plug-admin@lists.phillylinux.org]On Behalf Of Mike Leone
Sent: Thursday, January 02, 2003 11:37 PM
To: PLUG ML
Subject: [PLUG] [Proposed Presentation: Defending Home Networks]


I received the following proposal for a presentation the other day. Along
with a 2.6 meg unannounced attachment. Twice. :-) Good thing I'm not still
on dialup.

Anyway, the attachment was a 67 page PDF of very colorful slides for what I
presume will be in the talk - everything from SANS to CERT, to ethereal, to
snort, to
defense in depth. Looks quite comprehensive. I can't quite tell if it's
meant to just be informative, or if he's trying to peddle something. Not
that that would matter all that much, I don't think. It would be like a
vendor
presentation, which we've had before (the recent RedHat Tour, the e-smith
presentation).

Our next free month is in July. I'm going to write this guy, and ask him to
speak to PLUG, unless there are major objections? (besides that fact that he
uses AOL, that is :-) Room 101 at USP should quite easily meet their
requirements, I think.

Thoughts? I'm thinking about emaiing him over the weekend, on Sunday
perhaps.

----- Forwarded message from Lewisjwl@aol.com -----

> Date: Mon, 30 Dec 2002 22:11:36 EST
> From: Lewisjwl@aol.com
> To: turgon@mike-leone.com
> X-Mailer: AOL 8.0 for Windows US sub 230
> Subject: Defending Home Networks
>
> Following is a talk which might be of interest to
> the Philadelphia area LINUX user group.
>
> TALK
> Now that we know a dedicated attacker can break into almost
> any computer permanently attached to the INTERNET, defense
> of home and small office networks is becoming an important
> issue. In the past, LINUX has been less vulnerable than
> software products from other software suppliers, but that
> is changing rapidly as major organizations begin widespread
> LINUX deployments and attackers begin to focus on LINUX.
>
> In this talk, we explore some past and present attacks
> and vulnerabilities, sniff some of the network traffic, explore
> vulnerability assessment tools, and investigate more secure
> LINUX configurations.
>
> CUSTOMIZATIONS
> As originally presented, the talk takes about an hour and
> is totally freestanding. It could be combined with a security
> "newbie corner" or installations. With a longer Q&A session
> it might stretch to almost two hours.
>
> DEMOS
> * Vulnerabilities and attacks
> * The GOLD Standard
> * ETHEREAL Sniffer
> * Hardware and software firewalls
> * NMAP Scanner
> * NESSUS Vulnerability Assessment
> * Host-based intrusion detection
> * SNORT Intrusion Detection
> * Resources
>
> OUR EQUIPMENT
> We will bring:
> * Red PC (attack)
> * Blue PC (victim)
> * Ethernet Hub
> * Shared monitor, keyboard, mouse, and KVM
> * XGA video projector (unless you have one)
>
> REQUIREMENTS
> * 4x120VAC @ 15 amps with surge suppression
> * RJ45 Ethernet, DHCP, INTERNET
> * Thirty minutes setup and test
>
> Regards
> John
>
> Viewgraph file follows
>
> --------------------------------
> JW Lewis
> lewisjwl@aol.com
> JJPW Associates
> 9514 Angelina Circle
> Columbia, MD 21045
> 443-562-4945
>
>
>

----- End forwarded message -----

--
PGP Fingerprint: 0AA8 DC47 CB63 AE3F C739 6BF9 9AB4 1EF6 5AA5 BCDF
Member, LEAF Project <http://leaf.sourceforge.net>    AIM: MikeLeone
Public Key - <http://www.mike-leone.com/~turgon/turgon-public-key.asc>
Registered Linux user# 201348


_________________________________________________________________________
Philadelphia Linux Users Group        --       http://www.phillylinux.org
Announcements - http://lists.netisland.net/mailman/listinfo/plug-announce
General Discussion  --   http://lists.netisland.net/mailman/listinfo/plug