2019/11/12 – 2019/11/12

141 Catherine St.

View MapMap and Directions | Register

Description:

NOTE: We will be having our rescheduled AGM at the beginning of the November meeting as announced at the September meeting. The positions that will be open for election/acclamation are First VP, Second VP, Treasurer, and Secretary. The current First VP will become the Chapter President next year. If anybody wished to be volunteer for a board position, feel free to speak up at the meeting. At present, the existing board members are all standing for re-election. We will verify the slate at the AGM.

Presentation Description

With the ever-changing landscape of security in Canada and the world, the
implementation of security solutions are becoming more and more critical to the
success of any organization. In deploying these security solutions, a unified
framework needs to be developed and followed in order to ensure success. In
this talk we will touch on different aspects of this framework such as Defence
in Depth, Mitre Attack and Zero Trust and how technologies can be aligned.

Biography

Devin Somppi, Director of Security Operations, BriteSky

As Director of Security Operations at BriteSky, Devin combines advanced
technologies, products, and systems to enable BriteSky to provide technology-
and vendor-agnostic network security solutions. Devin brings extensive
experience in security architecture to BriteSky, based on his work as an IT
security operations analyst at Export Development Canada, a senior network
security analyst at Bell Canada, and a server administrator at BoxFabric. He
has conducted in-depth network security audits, developed and implemented
cybersecurity protection and response systems, developed, deployed, and
maintained QRadar Security Information and Event Management (SIEM) systems, and
implemented zero-trust network access models.

Agenda

  • 5:30 – 6:00 PM Registration, Networking, Cash Bar and Grill
  • 6:00 – 6:15 PM AGM & Elections
  • 6:15 – 6:20 PM Introduction of Speaker
  • 6:20 – 7:20 PM Presentation
  • 7:20 – 7:30 PM Question Period
  • 7:30 PM Closing remarks

Cost

Members: free, included in your annual dues

Non-Members: $15.00

Register

2019/10/08 – 2019/10/08

141 Catherine St.

View MapMap and Directions | Register

Description:

NOTE: We will be having our AGM at the October meeting as announced at the September meeting. The positions that will be open for election/acclamation are First VP, Second VP, Treasurer, and Secretary. The current First VP will become the Chapter President next year. If anybody wished to be volunteer for a board position, feel free to speak up at the meeting. At present, the existing board members are all standing for re-election. We will verify the slate at the AGM.

Presentation Description

Digital and mobile forensics are more important today than ever before. Most criminal investigations involve at least some digital evidence, and in many cases, digital evidence can be the most critical and the most accurate source of truth. In spite of this fact, until recently there have been few changes in the way most agencies collect and use mobile forensic evidence. Today’s challenges include encryption, harder security, the wider use of encrypted apps, exploding data volumes needing analysis, limited resources, and backlogs of phones needing processing. In this presentation we will discuss how taking an iterative five-step approach to creating a better mobile forensic system can significantly improve effectiveness and results.

Biography

Randy Whitcroft is the Director for Canada with MSAB. The MSAB solutions are used by Police, Law Enforcement, Military, Government Intelligence Agencies and Forensic Laboratories in over 100 countries worldwide to investigate crime, gather intelligence, investigate fraud and fight corruption. Randy works closely with these organizations in Canada and as a result has gained a good view into the challenges that many of these organizations face. He has spoken at various events including the Ontario Forensics Investigators Association event in May 2019.

Agenda

  • 5:30 – 6:00 PM Registration, Networking, Cash Bar and Grill
  • 6:00 – 6:15 PM AGM & Elections
  • 6:15 – 6:20 PM Introduction of Speaker
  • 6:20 – 7:20 PM Presentation
  • 7:20 – 7:30 PM Question Period
  • 7:30 PM Closing remarks

Cost

Members: free, included in your annual dues

Non-Members: $15.00

Register

2019/09/10 – 2019/09/10

141 Catherine St.

View MapMap and Directions | Register

Description:

What is threat modelling? What are the possible mechanisms of threat modelling? What constitutes a good threat model? And why would you do it? Plus we work through the threat model of a few common patterns.

Biography

Garth Boyd is an OWASP Ottawa Chapter Co-Leader, Software Developer, Hacker, and Security Architect. Erstwhile Electrical Engineer who started programming in the bear skins and stone knives age of Windows 1.0 and Sys5 Unix and his path moved into TCP/IP network programming before moving into Military Message Handling, PKI, cryptography, key management, pentesting, and threat modelling. A lifelong learner who enjoys crafting solutions to interesting and tough problems through architecture, threat modelling, mitigation design, and penetration testing. Researching new ideas, troubleshooting, communication, and thinking of six impossible things before breakfast are part of the journey.

Agenda

  • 5:30 – 6:00 PM Registration, Networking, Cash Bar and Grill
  • 6:00 – 6:05 PM Introduction of Speaker
  • 6:05 – 7:20 PM Presentation
  • 7:20 – 7:30 PM Question Period
  • 7:30 PM Closing remarks

Cost

Members: free, included in your annual dues

Non-Members: $15.00

Register

2019/08/13 – 2019/08/13

141 Catherine St.

View MapMap and Directions | Register

Description:

This month we have a BoF. The topic will be led by Denis Roussel

Starter Topic:

“Internal Corporate IT Incidents and Investigations” – how formalized and/or up-to-date are your organizations corporate policies and procedures?

    • Modern or Out-of-Date? Are they due for a refresh?
    • Management, Legal and Human Resources involved in their development?
    • Effective/measurable or not? How do we know?

Secondary Topic:

“Workforce IT / Cybersecurity skills shortage” – is it really a numbers shortage?

    • Public Sector vs. Private Sector
    • Students, full-time/part-time employees, Consultant or Professional Services – who do you hire:
      1. Staff numbers that support the needs?
      2. Cheap with less experience vs. expensive with lots of experience? i.e.. Speed and/or quality?
      3. Burnout rate of staff – work life balance?
    • In world of Big Data – AI and Machine Learning – weeding though more data more efficiently and what skills are needed now or in the near future?
    • Developing your people – keeping skills up-to-date
    • Availability of skilled personnel
    • Retaining personnel

Agenda

  • 5:30 – 6:00 PM Registration, Networking, Cash Bar and Grill
  • 6:00 – 7:30 PM Discussion
  • 7:30 PM Closing remarks

Cost

Members: free, included in your annual dues

Non-Members: free

Register

1 2 3 29