Mobile Data and Wireless Security Seminar

11-Mar-2009

How valuable is your PDA ?

What are the threats facing the use of data by mobile users, typically on their mobile terminals, laptops, pda’s, smartphones, … Understand processes, available tools and solutions that help organizations preventing data leakage and protecting valuable information. Understand the value of a Blackberry device in the hands of your competitor. Consider a mobile data usage policy, implementing, enforcing and controlling that policy.

All enterprises need to mitigate risk, exposure and expense related to mobile devices and the networks to which they connect. Incidents of mobile device theft, compromise or loss, malware attacks and network breaches are making headlines in growing numbers and show no signs of slowing down.

This seminar was targetted to : mobile professionals, IT management, risk management, project managers, business managers, system architects, CSO’s, CFO’s, Sales Force Automation and Government Authorities

Utimaco - Sophos


Program

9.30h : welcome, registration & coffee

10.00h : Introduction, opening notes and agenda of the day
By Ulrich Seldeslachts, CEO LSEC

10.10 : A perspective on mobile and wireless data in business environments. Understanding requirements of today’s mobile business applications and considerations on the future.
By Ulrik Van Schepdael, CEO Euremis

Anywhere, anytime, any device in other words pervasive computing. This is no longer the future, but the way this generation and future generations of workers and employees will be connecting with your organization. Today, this happens typically in an always-on connection, with a constant connection to the back-end infrastructure and local storage only in a “survival mode”, … on a variety of devices : mobile handsets and heavy duty laptops. Understand the value of those applications for your business, and learn from some of the current architectures.

11.00h : Wireless Security, a landscape perspective
By Elke Demulder, Researcher KU Leuven ESAT – COSIC

What are the current threat levels facing your variety of mobile and wireless devices. GSM exists for over 15 years, … is it still as secure as it used to be? What about 3G (UMTS / HSDPA), but also what about short range wireless such as Bluetooth or Wi-Fi? Quite some research has been done in breaking wireless technologies, both on radio and applications levels. Understand how easy it is to effectively steal data, or how malicious persons could cause even more damage. Learn some of the risks and understand the key threat vectors, and how they could impact your business.

12.00h : Sandwich lunch & soft drinks offered by our sponsors

13.00h : Keynote : What does security mean in today’s mobile environment?
By Richard Jacobs, CTO Sophos

The continuously increasing mobility of IT is a trend that is transforming how we all work. Not only are we racing to expand our reach out to every corner of the world, but consumer technologies are mixing with corporate assets and data in a drive that none of us can control. Against this background, building security walls around the edge of our corporate networks is no longer effective and any attempt to restrict flexibility is vigorously resisted. So how do we secure our core systems and data while allowing that data to roam the world?

13.50h : Security on Mobile Devices : Windows Mobile : threats, vulnerabilities, challenges and solutions
By David Henrie, Developer Evangelist, Microsoft

From the most popular desktop operating system vendor in the world, there is also Windows Mobile, probably the most versatile mobile OS that allows for an optimal integration with existing business integrations and databases. Integrated with Vista OS, security becomes an integral part from a system architecture perspective. Learn from Microsoft about the Mobile platform where and how it is being connected to internal systems (system architecture) – basic / advanced applications; typical integration issues (and there for security issues); Windows Mobile Security features; Security issues (as they have been reported and discussed worldwide); advanced security possibilities / features; overview of practical improvements for IS/IT managers; Security Managers (policy improvements), end users (and others); how to integrate or migrate from legacy devices and a glimpse on a roadmap for the future.

14.45h : Security on Mobile Devices : Blackberry : threats, vulnerabilities, challenges and solutions …
By Gert Vanhaeght, Alliance Manager Benelux Region, Research In Motion

The Blackberry in all its variations is without doubt today’s most popular business smartphone. Used by millions of users worldwide, it allows for extreme fast messaging and communications. Learn from Research In Motion, Blackberry’s parent about the platform where and how it is being connected to internal systems (system architecture) – basic / advanced applications; typical integration issues (and there for security issues); Blackberry Security features; Security issues blackberry (as they have been reported and discussed worldwide); advanced security possibilities / features; overview of practical improvements for IS/IT managers; Security Managers (policy improvements), end users (and others); how to integrate or migrate from legacy devices and a glimpse on a roadmap for the future.

15.40h : Coffee Break & Networking

16.10h : Mobile Authentication Solutions overview
By Eddy Cormon, Vasco Data Security

Some of the challenges on mobile data security have to do with connecting the mobile workforce through a variety of devices to back-end systems. Some of these challenges include authentication, encrypted transmission ensuring data integrity and preventing data from being lost due to system failures, or even plain theft. During this session some of the architectural challenges and System Integration issues will be presented.

17.00h : from an Enterprise Risk Management Perspective, what can be learned from the technological challenges and how to cope with them in your organization
By Dirk De Maeyer, Manager IT Advisory a division of KPMG Advisory

As a risk and security manager or officer, what are the challenges and how to seamlessly integrate and manage the multitude of wireless devices in an organization. Some guidelines from an Enterprise Risk Management Perspective on how companies could deal with the organizational, technological and risk challenges that mobile data and wireless technologies cause from a security perspective. Is there a way to manage the balance between technology-apt employees with the latest mobile phones and wireless technologies, and the objective to be able to fully control information systems?

17.50h : Panel discussion

18.20h : Closing notes
By Ulrich Seldeslachts, CEO LSEC

18.30h : Reception, Drinks & Snacks offered by LSEC and its partners. Networking

20.00h : Close of Event

Practical Details

- Wednesday March 11th, Leuven – KU Leuven – Auditorium “De Tweede Hoofdwet”, Thermotechnisch Instituut, Celestijnenlaan
- Kasteelpark Arenberg 41, 3001 Heverlee
- Upon registration prior to February 15th : 150 EUR (excl VAT)
- Upon registration after February 15th : 250 EUR (excl VAT)
- A discount of 150 EUR :
- upon presentation of a valid LSEC 2008 or 2009 voucher at time of registration
- to LSEC members, LSEC member invites and LSEC affiliates (ISSA, ISACA, Agoria-ICT, KTN, TeleTrusT, Pôle TES, EEMA - members)
Free to Special LSEC invites

Google Map Indications

On the following Google map you will be able to find the auditorium “De Tweede Hoofdwet”
(NOTmarked with A), on the left corner of the Celestijnenlaan and the Willem De Croylaan.

Coming from the E40 / E314 highways, enter the Celestijnenlaan to the right at the traffic lights.
Just after crossing “the Dijle"-river, turn left on the Kasteelpark. Continue the route until it turns to the right, just in front of the castle (on your left hand).
Press the button of the intercom and announce yourself coming for “LSEC event in the Auditorium”, or just LSEC.
It could take some time before the guard responds, please be patient and try again if it takes too long.

Continue the driveway until you reach the parking lot next to the building on your right.
The entrance to the auditorium is via the back (between the trees) approximately 30 meters from the parking.
Enter the Auditorium entrance and continue to the auditorium on your right.


Grotere kaart weergeven

In order to subscribe, press the button below and log in with your personal credentials, or send an email with your contact details and company name to wirelesssecurity @ lsec.be.
If you haven’t registered before, please register to the website first and subsequently return to this page to complete your registration.

Looking forward seeing you March 11th or at one of our earlier events.

Are you a leader in Security ? Do you want to share your expertise and join the Leaders in Security as a Core Expert Member ?
Contact us via email! Or call +32.16.32.85.41 for a direct contact and more information.
An information set and your Membership Welcome Pack awaits you.

 

Copyright LSEC vzw 2007-2008 with the support of the IWT.

LSEC vzw Kasteelpark 10 - 3001 Heverlee - VAT BE BE 478 045 395 - fax. +32.16.32.19.69 - info @ lsec.be

<< February 2012 >>

S M T W T F S
29 30 31 1 2 3 4
5 6 7 8 9 10 11
12 13 14 15 16 17 18
19 20 21 22 23 24 25
26 27 28 29 1 2 3

Expert: Oracle

Oracle Belgium & Luxemburg

Expert: Option

Wireless data security enablers

Expert: TNO

TNO Research and Innovation

Expert: Control & Process

Automatisering SCADA, PLC; Meettoestellen en brandbeveiliging

Expert: Thales Group

Thales Group

Expert: On2It

Smart IT Security We Are On To It

Expert: Mobco

Mobile Fleet Management

Expert: TITANS

TITANS ICT Consulting

Expert: G Data

G Data Anti Virus Solutions

Expert: Outpost 24 - Vulnerability Management Made Easy

Outpost 24 - Vulnerability Management Made Easy

Expert: Regify - Trusted and Binding Secure eMail

Regify - Trusted and Binding Secure eMail

Expert: Mobila - Mobile Enterprise Applications

Mobile Enterprise & Applicatinos

Expert: Lancelot Institute

Lancelot Institute - Training in Information Security, IT- Risk & IT - Auditing

Expert: CSI Tools

CSI tools is an expert software solution provider specialized in powerful tools for IT architects and auditors who are focused on maximizing GRC project development efficiency in SAP environments.

Expert: Intrinsic-ID

Content Protection, Unique Device Identification, Key Storage, PUF Physical Unclonable Functions

Expert: Belgacom ICT

Belgacom ICT Security Solutions for Large, Medium and Small Enterprises

Expert: Qualys

On Demand Vulnerability Management and Policy Compliance

Expert: Trend Micro

Securing your web world

Expert: Egemin

Egemin provides process and handling automation engineering and Secures Industry Automation

Expert: AEP Networks

More than 60 countries ... protected by AEP Networks

Expert: Palo Alto Networks

Next Generation Firewalls

Expert: Atos Origin Belgium & Luxemburg

A leading IT services provider. Ranks 1 in telecom outsourcing. Via Atos Worldline specialized in financial transactions.

Expert: Websense

Leading provider of unified content security

Expert: CA Technologies

Protect your critical IT assets, achieve sustainable regulatory compliance, reduce IT administration costs and enable new business opportunities with our security management products.

Expert: CA Technologies

Protect your critical IT assets, achieve sustainable regulatory compliance, reduce IT administration costs and enable new business opportunities with our security management products.

Expert: Axl-Trax

axl & trax are highly qualified experts in providing leading edge GRC services for SAP

Expert: VintiQ

VintiQ - Security Management Services

Expert: T-Systems Belgium

T-Systems is Deutsche Telekom's corporate customer arm.

Expert: LIN.K nv - LINKID

LIN.K is a provider of online user authentication, identification with the system LINKID

Expert: Devoteam Belgium

Devoteam Belgium, one of the major European ICT consultancy specialists with offices in 23 countries

Expert: CHB Technologies - Celadon Hailstone Biometrics

Celadon Bailstone Biometrics

Expert: Barracuda Networks

Worldwide supplier of email and internet security

Expert: Sophos

Sophos is the Utimaco is a leading global provider of data security solutions, enabling mid- to large-size organizations to safeguard their data assets against intentional or unintentional data loss, and to comply with privacy laws.

Expert: Dimension Data

Dimension Data

Expert: Bull

Bull

Expert: Check Point Software Technologies

Check Point Software Technologies

Expert: MMS-Secure

MMS-Secure nv, a distributor with a specific focus on network and systems security

Expert: F-Secure Corporation

F-Secure - Fastest Focused Anti-Virus Protection

Expert: C-Cure

C-Cure are Information Security architects already since 1998

Expert: IS4U

IS4U - Cronos specializes in Identity and Access Management

Expert: UCL Crypto Group

The Crypto Group of UCL, the UC of Louvain-la-Neuve is a research group specialized in cryptography and information security.

Expert: eID Company

eID company provides a flexible easy to integrate eID in any web application. Access to eID as a webservice.

Expert: ACA IT-Solutions

ACA IT-Solutions, end to end IT solutions and IDM Expert. Probably the largest and most successful independent J2EE solution provider.

Expert: RSA - Security Division of EMC

RSA - The Security Division of RSA. One of the leading companies in the world in IT Security. Enterprise wide Data Security solutions, suites and Services.

Expert: Unisys

Security Unleashed – At Unisys, we’re looking at security in an entirely new way.Security is no longer a defensive measure. It’s an enabling catalyst for achievement.Unisys Secure Business Operations help to unleash your full potential.

Expert: Zion Security

ZION SECURITY is the leading European application security company. Our mission is to secure your business value by securing your business applications.

Expert: Zetes

For those who want to see the difference!

Expert: Vasco

VASCO designs, develops, markets and supports patented User Authentication products for e-business and e-commerce.

Expert: SUN Microsystems

Everyone and everywhere connected to the network.

Expert: Security4Biz

Security4Biz offers ICT security consultancy services.

Expert: SecurIT

The value proposition to our customers is the competence and experience of highly qualified people, combined with best-in-class solutions from leading suppliers, and our entire focus on Identity and Access Management.

Expert: Sealed

Expert in implementation of e-Security, e-Proofs and e-ID within the management of business & document flows & processes, or within the management of your enterprise content in the broad sense.

Expert: McAfee

McAfee is the world largest dedicated security companY;

Expert: NXP (founded by Philips)

Sense & simplicity. Help customers to transform initial ideas into competitive products and cost-efficient manufacturing solutions within healthcare, lifestyle and technology.

Expert: KPMG

PMG Information Risk Management (IRM) focuses on inherent risks in technology systems used to support your business objectives and grow your business.

Expert: EMC2

EMC Corporation is the world's leading developer and provider of information infrastructure technology and solutions.

Expert: Deloitte

In addition to the qualities of a leading Belgian audit and consulting firm, Deloitte is different through the values it shares daily with clients and employees.

Expert: Certipost

Specialist in secured electronic document exchange for companies, the state, and for residential customers.

Expert: Ascure

World class information risk management services!

Expert: Verizon Business

Verizon Business is now the leading provider of managed security services worldwide with acquisition of Cybertrust.

Expert: K.U. Leuven

Computer Security and Industrial Cryptography (COSIC): Cryptography to protect data against passive and active fraud.

Expert: ATOS Worldline nv

Specialist in end-to-end secure payment systems.

Expertise: UTM

UTM - Unified Threat Management

Expertise: End Point Security

End Point Security

Expertise: DLP - Data Leakage, Data Loss Prevention and Protection

DLP - Data Leakage, Data Loss Prevention and Protection

Expertise: SOA - Service Oriented Architectures

Expertise: Identity Management

Identity Management (IdM) enables organizations to facilitate and control their users' access to critical online applications and resources — while protecting confidential personal and business information from unauthorized access

Expertise: Crypto

Cryptography - Cryptografie - Cryptographie

Expertise: Secure Application Development

Secure Application Development. Security does not only start at user name and password login, from the first entry of a software security needs to be integrated.

Expertise: RFID

passive and active low-cost wireless tags

Expertise: Application Security

encompasses measures taken to prevent exceptions in the security policy of an application or the underlying system

Expertise: Wireless Security

Expertise: Appliances

protect computer networks from unwanted data traffic, intruders, email spam, enforce policies, and may also be used to create and manage VPNs.

Expertise: Access Control

the ability to permit or deny the use of something by someone.

Expertise: Risk and Vulnerability Assessment

process of identifying and quantifying vulnerabilities in a system..Cataloging assets and capabilities (resources) in a system

Expertise: Penetration Testing

A method of evaluating the security of a computer system or network by simulating an attack by a malicious user, commonly known as a hacker.

Expertise: Physical Security

describes measures that prevent or deter attackers from accessing a facility, resource, or information stored on physical media. It can be as simple as a locked door or as elaborate as multiple layers of armed guardposts.

Expertise: Remote Access

computer program that lets you access your PC from another PC via the Internet, LAN, or phone connection and work on your computer ...

Expertise: Security Policy

security policy is a definition of what it means to be secure for a system, organization or other entity. For systems, the security policy addresses constraints on functions and flow among them, constraints on access by external systems and adversaries

Expertise: Anti-Virus

Software that detects, repairs, cleans, or removes virus-infected files from a computer.

Expertise: Spyware

Software that covertly gathers user information through the user's Internet connection without his or her knowledge, usually for advertising purposes.

Expertise: Authorization

The process of enforcing policies: determining what types or qualities of activities, resources, or services a user is permitted. Usually, authorization occurs within the context of authentication.

Expertise: Authentication

Provides a way of identifying a user, typically by having the user enter a valid user name and valid password before access is granted. The process of authentication is based on each user having a unique set of criteria for gaining access.

Expertise: Computer Virus

Program or programming code that replicates by being copied or initiating its copying to another program, computer boot sector or document.

Expertise: Smart Cards

smart card or chip card, is defined as any pocket-sized card with embedded integrated circuits which can process information such as a SIM for a mobile phone or an eID card

Expertise: UTM and Appliances

Unified threat management (UTM) is a term which is used to describe network firewalls that have many features in one box, for example junk e-mail filtering,or anti-virus capability, along with the traditional activities of a firewall.

Expertise: NAC

Network access control (NAC) is a method by which hardware and software grant access to enterprise network resources after first authorizing the user and device and verifying the device's compliance with the enterprise's security policy.

Expertise: Biometrics

Biometrics (ancient Greek: bios ="life", metron ="measure") is the study of methods for uniquely recognizing humans based upon one or more intrinsic physical or behavioral traits.

Expertise: DRM

Expertise: eID - Electronic Identity Cards

The electronic identity card (eID) is an official electronic proof of one's identity. It also enables the possibility to sign electronic documents with a legal signature.