Anton Chuvakin, Ph.D. Information Security Public Appearances

Past Appearances and Presentations (05/29/2002) InfraGard, Pennsylvania chapter, Philadelphia, PA Presentation: "FTP Attack Case Study" Text: here. (05/30/2002) InfraGard, New Jersey chapter, Edison, NJ Presentation: "FTP Attack Case Study" Text: not public (06/18/2002) FBI Academy, Quantico, VA Presentation: "Rootkits" Text: here (11/7/2002) ITRA Honeypots Conference, Las Vegas, NE Presentation: "Implementing the Honeypot" Text: here (01/21/2003) NJ InfraGard, Princeton, NJ Presentation: "Event Correlation in Security Information Management" Text: not public (08/14/2003) SANS Fire 2003, Washington, DC Presentation: "UNIX Rootkits: Detailed Analysis" Text: not public (10/03/2003) "Prevent Intrusions" with Stephen Northcutt (SANS), Las Vegas, NV Presentation: "Centralizing Centralization" Text: here. (10/14/2003) "NY ISSA Meeting", New York, NY Presentation: "Incident Response with netForensics" Text: not public (10/23/2003) Securing Government IT in the Age of Homeland Security, Washington, DC Presentation: "Honeypots: Implementing, Deploying and Maintaining a Honeypot" Text: here. (03/16/2004) NJ InfraGard, Edison, NJ Presentation: "Security Warrior: How to tell your Linux System is Hacked" Text: here. (03/23/2004) SearchEnterpriseLinux webcast Presentation: "Linux Security" Text: not public (03/24/2004) NY InfraGard, New York, NY Presentation: "Security Warrior: Linux Security" Text: not public (05/14/2004) ISSA Annual Conference, New York, NY Presentation: "Threat Intelligence" Text: not public (06/10/2004)DID NOT HAPPEN! InfoSecurity Canada Presentation: "Intrusion Prevention via Log Analysis" Text: not public (10/03/2004) SANS Network Security 2004 Presentation: "Simple Log Mining" (on using data mining-like techniques for security log analysis) Text: see loganalysis.org site (10/06/2004) SANS Institute webcast Presentation: "What's NOT Working in Security in 2004" Text: here. (11/18/2004) NY ISSA, New York, NY Presentation: "netForensics SIM: Five Years and Beyond - Evolution of Security Information Management" Text: not public (12/09/2004) Infosecurity 2004, New York, NY Presentation: "Log Analysis for Security" Text: not public (04/22/2005) netForensics FUG II, Orlando, Orlando, FL Presentation: "nFX OSP Advanced Use Best Practices" Text: not public (05/25/2005) LinuxWorld 2005 NY, New York, NY Presentation: "Intrusion Discovery with Linux" Text: not public (07/29/2005) SANS Network Security 2005 Presentation: "TCP/IP for Intrusion Detection, Day 1" Text: not public (08/09/2005) netForensics FUG III, Washington, DC Presentation: "netForensics nFX OSP Advanced Use Best Practices" Text: not public (10/25/2005) ISSA NY Chapter New York, NY Presentation: "Vulnerability Management Challenges: SIM to the Rescue" Text: not public (11/14/2005) MISTI Security and Audit 2005 Orlando, FL Presentation: "What Every Organization Should Monitor and Log" Text: not public (11/18/2005) USDA IT Summit Presentation: "Using SIM for Getting Security Organized (Finally!)" Text: not public (12/13/2005) Security Metrics Vigilar Webcast Presentation: "Optimizing Security Operations Performance: You Can't Manage What You Don't Measure" Text: not public (01/26/2006) Major bank security team Unspecified, TX Presentation: "Log Mining and Baselining Analytics" Text: not public (03/01/2006) SANS 2006 Orlando, FL Presentation: "Baselining Logs and Alerts" Text: not public (03/22/2006) netForensics Federal User Group 2006 Ft Meade, MD Presentation: "Advanced SIM Use" Text: not public (04/19/2006) NSI Partner Seminar Simi Valley, CA Presentation: "Log Management and Intelligence" Text: not public (04/26/2006) United States Military Academy at West Point West Point, NY Presentation/lecture 1: "Logs for Information Assurance" Presentation/lecture 2: "Log Forensics" Text: not public (05/09-10/2006) North America Computer Audit, Control and Security Conference - ISACA NA CACS Orlando, FL Presentation 1: "Log Management Best Practices" Presentation 2: "Log Management for Forensics Investigations" Text: not public (06/13/2006) CSI NetSec 2006 Scottsdale, AZ Presentation: "Log Mining for Security" Text: not public (07/13/2006) SANS Log Management Summit Washington, DC Presentation 1: Panel on Log Management Presentation 2: "Choosing a Log Management Approach" Text: not public (09/28/2006) Log Management Insights Online Presentation: "New Thinking on Compliance" Text: here. (10/04/2006) SANS Network Security 2006 Washington, DC Presentation: "Choosing a Log Management Approach" Text: not public (10/31/2006) Group 451 IT Innovation Summit Boston, MA Panel: "Security Sector" Text: not public (11/13/2006) CSI 33rd Annual Conference Orlando, FL Presentation: "Log Mining for Security" Text: not public (11/15/2006) SC Magazine Webcast Online Presentation: "Integrating Log Analysis and Forensics to Deliver Superior Incident Response: Answering Compliance & Information Protection Mandates In 2007" Text: here. (11/20/2006) SANS New Orleans 2006 New Orleans, LA Presentation: "Selecting A Log Management Approach" Text: not public (12/1/2006) SearchSecurity Webcast Online Presentation: "Steps for Continuous Compliance - Automating Your PCI Compliance" Text: here. (01/18/2007) ISACA Silicon Valley 2007 Winter Conference Santa Clara, CA Panel: "Cyber Crime- Security, Strategy & Solutions" Text: not public (01/25/2007) DoD Cybercrime Conference 2007 St Louis, MO Presentation: "Five Mistakes of Log Analysis" Text: not public (03/8/2007) IT Underground 2007 Prague, Czech Republic Presentation: "Log Mining and Analysis" Text: not public (04/4/2007) SANS 2007 Security Conference San Diego, CA Presentation: "Selecting A Log Management Approach" Text: teaser here (04/4/2007) SANS 2007 Security ConferenceSan Diego, CA Presentation: "NIST Log Management Guide 800-92 in the Real World" Text: not public (04/23/2007) SANS Log Management Summit 2007 San Jose, CA Presentation: "Selecting A Log Management Approach" Text: teaser here (04/23/2007) SANS Log Management Summit 2007 San Jose, CA Presentation: "Implementing Log Management" discussion panel Text: panel (05/07/2007) Computer and Enterprise Investigations Conference 2007 Las Vegas, NV Presentation: "Integrating Log Analysis into Your Incident Response Practice" Text: teaser here (05/8/2007) Unatek 2007 Security Conference 2007 Baltimore, MD Presentation: NOT PRESENTING Text: not public (05/12/2007) CONFidence 2007 Security Conference Krakow, Poland Presentation: "System, Network and Security Log Forensics" Text: teaser here (05/12/2007) CONFidence 2007 Security Conference Krakow, Poland Tutorial: "Logs for Incident Response" Text: not public (05/30/2007) Interop Moscow 2007 Moscow, Russia Presentation: "Trends in IT Security: 20007 and Beyond" Text: teaser here (05/31/2007) Online webinar roundtable on log management trends and best practices webinar Presentation: "Log Management Trends and Best Practices" Text: not public (06/12/2007) CSI NetSec Scottsdale, AZ Presentation: "Six Mistakes of Log Management" Text: teaser here (06/19/2007) FIRST 2007 Annual Conference Seville, Spain Tutorial: "Logs for Incident Response" Text: not public (06/27/2007) 2007 G-FIRST National Conference Orlando, Florida Presentation/tutorial: "Six Mistakes of Log Management" Text: teaser here (07/27/2007) SANSFire 2007 Washington, DC Presentation: "Choosing Your Log Management Approach" Text: not public yet (08/11/2007) ISSA Orange County Chapter Los Angeles, CA Presentation: "Six Mistakes of Log Management" Text: teaser here (09/6/2007) LogLogic Webcast online Panel: "Web Proxy Log Analysis and Log Management" Text: here (09/16/2007) LogLogic Webcast online Panel: "From FISMA to NIST: Compliance and Log Management" Text: here (09/19/2007) SecureWorld San Francisco, CA Panel: "SOX and Security Panel" Text: N/A (09/20/2007) MISTI IT Security World 2007 San Francisco, CA Presentation/tutorial: "Log Management From A to Z" Text: not public yet (09/28/2007) SANS NS 2007 Las Vegas, NV Presentation/tutorial: "Log Management 'Worst Practices'" Text: not public yet (11/13/2007) DeVenCI CIT Workshop on Network Survivability and Recovery Institute for Defense Analyses, Alexandria VA Presentation/tutorial: "LogLogic for Log Management' Text: not public yet (12/13/2007) SANS CDI 2007 Washington, DC Presentation/tutorial: "Log Management 'Worst Practices' Text: not public yet (1/15/2007) SANS Secuity 2008 New Orleans, LA Presentation/tutorial: "Log Management 'Worst Practices' Text: not public yet (1/17/2007) DoD CyberCrime 2008 St Louis, MO Presentation/tutorial: "Seven Mistakes of Security Log Analysis Text: not public yet (01/29/2008) OpenGroup Enterprise IT Architecture Conference 2008 San Francisco, CA Presentation: "CEE Logging Standard: Present and Future" Text: not public yet (01/30/2008) Technosium 2008 Conference Santa Clara, CA Presentation: "Log Data: The Weapon Of Choice to Thwart Insider Threats" Text: not public yet (02/04/2008) Honeynet Workshop for UK intelligence agency that asked not to be identified Cheltenham, UK Presentation: "Honeynets vs Insiders" Text: not public yet (02/04/2008) Computer Forensics Show Washington, DC Presentation: "Log Forensics" Text: N/A (03/05/2008) WhiteHatWorld Webcast Presentation: "Log Management Thought Leadership Roundtable" Text: recording (03/12/2008) MISTI InfoSec World 2008 Orlando, FL Presentation: "The Five Mistakes of Security and Compliance Log Analysis" Text: not public yet (03/13/2008) MISTI Log Management Summit Orlando, FL Presentation: "Logs for Incident Response" Text: not public yet (03/13/2008) MISTI Log Management Summit Orlando, FL Presentation: "Emerging Log Standards" Text: not public yet (03/24/2008) Russian CSO Summit Moscow, Russia Presentation: keynote presentation on security trends Text: not public yet (03/31/2008) Next Generation Security , Logging and Incident Response workshop Singapore Presentation: Next Generation Security, Logging and Incident Response Text: not public yet (04/21/2008) TRISC 2008 COnference Austin, TX Presentation: "Seven Mistakes of Security Log Analysis" Text: not public yet (04/23/2008) Idaho ISSA Chapter Idaho Falls, ID Presentation: "Log Forensics" Text: not public yet (04/23/2008) Idaho ISSA Chapter Idaho Falls, ID Presentation: "Seven Mistakes of Security Log Management" Text: not public yet (04/30/2008) OWASP CT Chapter Hartford, CT (here too) Presentation: "Application Logging 'Worst Practices'" Text: not public yet (05/12/2008) SANS SecurityWest, San Diego, CA Presentation: "'Worst Practices' of Log Management" Text: not public yet (05/14/2008) Secure360 Conference Minneapolis, MN Presentation: "Application Logging 'Worst Practices" Text: not public yet (05/22/2008) WhiteHatWorld Webcast Presentation: "Worst Practices' of Log Management" Text: recording (05/28/2008) O'Reilly Webinar Presentation: "Worst Practices' of Log Management" Text: slides or recording (06/03/2008) 4th Annual G-FIRST National 2008 Conference, Orlando, FL Presentation: "Using Logs for Incident Response and Forensics" Text: not public yet (06/05/2008) SANS webcast Presentation: "Presenting Fourth Annual Log Management Survey" Text: here (06/18/2008) SearchSecurity/Bitpipe Podcast Presentation:  "Eliminating the Headaches of Log Management - Part 1" and "Eliminating the Headaches of Log Management - Part 2" Text: recording (part 1 and part 2) (06/23/2008) FIRST 2008 Conference, Vancouver, Canada Tutorial: "System, Network and Security Log Analysis for Incident Response" Text: to be added later (06/24/2008) Burton Group Annual Conference, San Diego, CA Presentation: "Log and Event Standard" working group Text: to be added later (07/22/2008) ISC(2) e-Symposium on Logging and Reporting: A Foundation for Your Security Infrastructure Presentation: "Logs As a Vehicle for Accountability in IT and Beyond" Text: slides or recording (07/24/2008) SANSFire 2008, Washington, DC Presentation: ""Worst Practices" of Log Management" Text: not pubic yet (07/29/2008) SANS Webcast Presentation: "Security Is Not Virtual: Auditing and Logging Considerations to Ensure Compliance and Protect Virtual Server Environments" Text: here (09/16/2008) GOVCERT.NL Symposium 2008, Rotterdam, The Netherlands Presentation: "Logging for Incident Response and Forensics: Key Issues" Text: TBA (09/11/2008) SecureWorld Bay Area, Santa Clara, CA Presentation: "PCI Compliance Panel" Text: panel

Future Appearances and Presentations (10/30/2008) HITB 2008, Kuala Lumpur, Malaysia Keynote presentation: "Welome to the 0wned World" Text: not public yet (see here) (11/14/2008) DeepSec 2008, Vienna, Austria Presentation: "Making Logs Sexy Again: Can We Finally Lose The Regexes?" Text: not public yet (01/24/2009) DoD CyberCrime, TBA Presentation: TBA Text: not public yet (03/09/2009) MISTI, TBA Presentation: "Log vManagement: A to Z" Text: not public yet