Living Security CyberEscape Online
2020-05-06 18:00 - 19:00 (America/New_York) | MD
ISSA of Central Maryland is partnering with Living Security to provide our members with the opportunity to engage in a virtual Cybersecurity “Escape Room.” We will divide participants up into teams of 8 and they will work together as a virtual team to solve a series of cybersecurity-related challenges and puzzles.
The total time is about 1 hour and we are able to offer this to our members free of charge thanks to Living Security’s generosity. This should be FUN!
To join, register here or paste below URL into your browser:
https://zoom.us/meeting/register/tJ0ldO-uqzovEteHgEosJhmLTt2aJ9bhr6bS
The cost is FREE. Please note that Living Security is handling registration. You are welcome to invite your colleagues and anyone interested in joining ISSA of Central Maryland.
AGENDA

6:00 pm – Introduction by ISSA Central Maryland
6:15 pm – Introduction to Living Security and CyberEscape Online Experience
6:45 pm – CyberEscape Online virtual escape room hosted by Living Security. Group will be split into teams of 8 and will compete to complete a cybersecurity themed escape room, tracking down the insider threat and thwarting their attack before it’s too late!
7:30 pm -8:00 pm – Return to large group session for debrief and Q&A

A PDF describing Living Security’s escape room is available here.

Spring 2020 CISSP Study Group
2020-05-12 17:00 - 20:00, 2020-05-19 17:00 - 20:00 | UMBC Training Centers, 6996 Columbia Gateway Dr., Suite 100, Columbia, MD, 21046, United States
ISSA Central Maryland is pleased to announce the opening of registration for our Spring 2020 session of the CISSP Study Group. As you may know, we conduct these study groups twice a year (Spring and Fall) in order to provide access to high-quality, low-priced resources to further the Information Security profession, and help our community members meet the compliance requirements outlined in DoD 8570.01. At just $450.00, our study group sessions are highly affordable even for those who are not reimbursed for educational expenses.

Memorial Day
2020-05-25 | MD

Membership Meeting 5/27/2020
2020-05-27 17:00 - 19:30 | Virtual
Chapter Business Meeting Slides: 2020-05-27 Meeting Presentation
Meeting Sponsor Slides: Semperis AD Recovery and Protection – 2020-05-27
Speaker Slides: Bricata SOAR Presentation – Carl Bolterstein 2020-05-27
Presentation Title: SOARing into Netsec
Traditional methods of security event management create a constant struggle to keep up with the large volumes of data produced by siloed, highly specialized tools. This segmentation and siloing of capabilities produce a huge manual workload on already over worked and under resourced security operation staffs.
Bridging this gap in analyst and security tool capacity is the concept of security orchestration, automation and response (SOAR). This methodology and toolset allow for cybersecurity tools to react to alerts and incidents automatically to enhance productivity. It is the process and the underlying perspectives and ideas that will be discussed during this presentation.
Speaker Bio: Carl Bolterstein, Senior Solutions Engineer at Bricata
Carl is an experienced Solution Architect and Engineer in cybersecurity. He has spent the last seven years focused on network and data cyber analysis. He has worked in the public and private sector with a wide range of customers from small business to large enterprise in the engineering and analyst capacity. He currently serves as a Senior Solutions Engineer at Bricata.
Note: Due to the COVID-19 Coronavirus, the May General Membership meeting will only be provided virtually via GoToWebinar. There will be no in-person meeting.
The May Membership Meeting is sponsored by

Membership Meeting 6/24/2020
2020-06-24 17:00 - 19:30 | MD
Click HERE to Register for the June 2020 Virtual Meeting
Chapter Business Meeting Slides: 2020-06-24-Meeting-Presentation.pdf
Speaker Slides: TBD
Topic: Cybersecurity Maturity Model Certification (CMMC) – A New, Required DoD Cybersecurity Standard
On January 31, 2020, the DoD published a new cybersecurity standard which will be required beginning in spring, 2020 for new acquisitions awarded to contractors who do business with DoD. The Cybersecurity Maturity Model Certification (CMMC) framework consists of 17 domains, five processes across five levels to measure maturity, and 171 practices across five levels to measure technical capabilities. DoD Program Manager’s will determine what level of maturity required to bid on new RFIs and RFPs based upon the sensitivity of the data in the contract. Maturity Levels range from Level 1, Basic Cyber Hygiene which is performed on an ad hoc basis up to Level 5, Advanced / Progressive cybersecurity capabilities performed with optimized maturity. Level 3 will be required for all future DoD acquisitions where basic Controlled Unclassified Information (CUI) will be part of the performance of the contract.
CMMC will be implemented on a crawl, walk, run basis over the course of the next five years. This spring the Accreditation Body will begin to train C3PAO organizations to certify companies. The DoD will train their Program Managers. Starting in June, a few select contracts will be identified with CMMC requirements in RFIs. This fall, CMMC requirements will appear in a few select RFPs. The execution of a new contract will require that prime contractor and their subcontractors to achieve the appropriate level of CMMC called upon in the contract. While details are still evolving, it is important to prepare now! Come learn more about these new requirements and how to get started.
Speaker: Dawn M Greenman, Deputy Program Manager Cybersecurity for Johns Hopkins Applied Physics Laboratory (JHU/APL)
Dawn M Greenman is Deputy Program Manager Cybersecurity for Johns Hopkins Applied Physics Laboratory (JHU/APL). In this position, she oversees cybersecurity projects across the organization and assists in the oversight of JHU/APL’s cyber operations, security engineering, and IT compliance functions.
Over the past 25 years, Ms. Greenman has held positions of increasing responsibility in information technology and cybersecurity, working for companies small to large. In 2017, Dawn lead JHU/APL to compliance with DFARS 7012 and NIST SP 800-171. During this time, she recognized the struggle small organizations were having with compliance requirements and also understood compliance alone was not enough. She started to participate in external projects and lead working groups with DoD and industry to develop strategies to improve the protection of controlled unclassified information.
More recently, passionate to improve the security of the DoD supply chain, Ms. Greenman eagerly accepted a role as Outreach Lead for the DoD Office of Sustainment and Acquisition’s Cybersecurity Maturity Model Certification (CMMC) project. The Cybersecurity Maturity Model, developed by JHU/APL and SEI/CERT, delivered DoD a new common standard in cybersecurity in January 2020. She will continue to participate in efforts to implement this new standard which will begin to be required by all defense contractors doing business with DoD as early as this summer.
Ms. Greenman holds an undergraduate degree in Information Systems with a concentration in Homeland Security. In July 2019, she graduated with an Executive Masters of Business Administration from The University of Maryland Robert H. Smith School Of Business. She is a Certified Information Security Professional (CISSP) and holds the GIAC Security Essentials (GSEC) certification.
Click HERE to Register for the June 2020 Virtual Meeting

Living Security's Breaking Security Awareness Digital Conference
2020-06-25 12:00 - 17:00 | Virtual
Living Security just announced the launch of “Breaking Security Awareness,” a digital conference to help technology leaders develop a customized solution for their organization! During this conference, leaders will learn action steps in:

Developing a gamified solution that resonates across their organization
Phishing Scams and how to change behavior that minimizes risk
Learning Diversity in Security Awareness. This isn’t a one-size-fits-all solution, but it doesn’t have to be complicated either.
Metrics that drive outcomes and creating the data needed to do this

The conference will take place Thursday, June 25,2020 12:00pm – 5:00pm EST. Be sure to stick around afterwards for a Security Improv Show 5:30-6:30pm which will be fun for the entire family! Registration is FREE

Independence Day
2020-07-03 | MD

SANS DFIR Summit & Training - Live Online
2020-07-16 - 2020-07-17 | Virtual
DFIR Summit & Training – Live Online
We are opening this virtual Summit (July 16-17) up to the community! Register now for FREE. (Yes — you read that right!)

Two days of in-depth DFIR Summit talks *MULTIPLE TRACKS* → VIEW AGENDA
Solutions Track Now Available → VIEW SOLUTIONS TRACK
Top hands-on SANS DFIR courses → VIEW COURSES
Exclusive networking opportunities

Membership Meeting 7/22/2020
2020-07-22 17:00 - 19:30 | Virtual via Zoom, MD
Chapter Business Meeting Slides: Membership Meeting 7/22/2020
Speaker Slides: MSSP Market Overview
Speaker Recording: MSSP Market Overview
Topic: Managed Security Services
An overview of the Managed Security Services market including:

Definition of MSS
Categorization of MSS market segments and the pros and cons of each
Explanation of why certain offerings dominate the MSS market and why other offerings are less common
Overview of vendors and their products aligned with the common MSS offerings
Description of the varying service models and how they align to different types of customers
Predictions of disruptions to the MSS market in the coming years

Speaker:
John Perkins, Founder, ThreatAngler
John Perkins is the Founder of Threat Angler and brings over twenty years of cybersecurity experience. During the first fifteen years of his career at the Federal Reserve, he contributed to nearly all cybersecurity disciplines. John spent the next five years designing, building, and leading managed security services with Optiv, GuidePoint, Insight Enterprises, and other service providers. John’s passion is to build a sustainable managed security service focused on delivering cybersecurity value outcomes while developing cybersecurity talents in team members.

IT + Cybersecurity Virtual Career Expo
2020-07-23 10:00 - 15:00 | Virtual
The Maryland Tech Council, in collaboration with Montgomery College’s America’s Promise leadership, is hosting a virtual career expo to connect job seekers and students with industry for cybersecurity and IT related career positions and create awareness of the job opportunities available. The Career Expo is complimentary for all students and job seekers, registration is required.
About the IT + Cybersecurity Virtual Career Expo

20 employers in the virtual expo hall
Explore employer information and career opportunities
Ability to engage with employers through the one-on-one online chat feature
Upload your resume and LinkedIn information to make a strong first impression
This event is complimentary and open to all students and job seekers exploring career opportunities in cybersecurity and IT related fields

If your company is interested in exhibiting, please contact Emily Sumpter at emily@mdtechcouncil.com for more details.

SANS - Cyber Camp for Teens
2020-08-11 - 2020-08-12 | Virtual
SANS introduces the first-ever SANS Cyber Camp for Teens. If you’re interested in a career in cyber security and you attend high school or junior high, this event is for you!
The camp brings together a group of cyber security experts, discussing the latest topics and trends in IT Security. This free Live Online training event includes:

IT Security-Focused Talks – The industry’s top practitioners will present a series of short, age-appropriate talks on Coding, Using Technology Responsibly, Ethical Hacking, Digital Forensics, Security Awareness and more!
Workshops – These hands-on activities are designed to help you learn in a safe and fun environment and do what the professionals do every day.

ISSA-DC August Chapter Meeting
2020-08-18 18:30 - 20:00 | Virtual via Go To Meeting, MD
Incident Handling & Threat Hunting w/ Security Onion by Tyrone E. Wilson
Mr. Wilson will discuss how to use a free and open source tool like Security Onion (SO) to provide hands-on experience and increase our knowledge in incident response and threat hunting. This event is for those with minimal experience working with detection alerts, pcap files, and log management. We will learn how to setup Security Onion at home or on an enterprise network and use its features to complete various network defense challenges. Attendees will leave with a higher level of confidence in network defense as well as the ability to crush their next analyst interview. Participants will also receive a booklet of instructions and credentials to a live SO server which will allow them to continue to practice their new found skills from anywhere in the world.

Membership Meeting 8/26/2020
2020-08-26 17:00 - 19:30 | HubSpot—The Gathering Place on the Gateway, 6724 Alexander Bell Drive Hub Spot, Suite 105, Columbia, MD, 21046
Chapter Business Meeting Slides: 2020-08-26 Membership Meeting
Speaker Slides: Dell Security Operations 2.0 Transformation
Speaker Recording: Dell Security Operations 2.0 Transformation
Topic: Security Operations 2.0
With Dell Technologies being looked at as a key innovator is response to the rapidly changing workforce, Bob will layout a vision of what the next-gen security operations will begin to look like. Based on his past experience as a cybersecurity director and his current outlook within Dell Technologies, Bob will explore how technology will drive how we assess risk, manage and mitigate risk, and provide situational awareness. Enablers for remote workforce, multi-cloud operations, and enhanced intelligence all play a role in every agency’s modernization strategy. But should how you secure these new environments change how you think about securing the rest?
Speaker: Bob Nicholson, Business Development Executive, Dell Technologies Federal
Bob Nicholson is currently a Business Development Executive for the Dell Technologies’ Federal team with a concentration on Federal Civilian agencies. Bob has been serving in this position for 5 years but brings more than 25+ years of solutioning experience in support of the public sector.
For 15 years he served as a cybersecurity leader and solution architect within the federal government which included designing and implementing many enterprise solutions and establishing many best practices. Many of these as a result of Federal mandates, Bob has a great deal of experience working within government, in coordination with its many bodies of governance, and throughout industry. He has transferred this knowledge and relationships into not only being a strong advocate for innovation within government, but also a facilitator for ensuring its success.

Insider Threat Day at Johns Hopkins University Applied Physics Lab
2020-09-01 08:30 - 13:30 | JHU Kossiakoff Conference Center, 11100 Johns Hopkins Road, Laurel, MD, 20723
The Insider Threat Day at Johns Hopkins University Applied Physics Lab, hosted by the ISSA Central Maryland Chapter, will take place on Monday, September 1, 2020. This one-day event will be part of the Insider Threat Awareness Month declared by the U.S. National Counterintelligence and Security Center (NSCS) and the National Insider Threat Task Force (NITTF). The goal of Insider Threat Day is to raise awareness and help organizations develop proactive strategies for detecting and combating these threats, as well as to reduce the risk of compromised information.
Register at https://www.fbcinc.com/e/JHU/attendeereg.aspx

Early Bird registration price for Industry is $75 and ends on 7/31/2020. Afterward, the registration price will be $100.
There is no cost for Government, ISSA members, or JHU/APL Employees to register for this event.

Johns Hopkins Applied Physics Lab is the nation’s largest university-affiliated research center and provides U.S. government agencies with deep expertise in specialized fields to support national priorities and technology development programs. They also serve as independent trusted technical agents to the government, providing continuity for highly complex, multigenerational technology development systems. To find out more about JHU/APL, please visit https://www.jhuapl.edu/

This conference is brought to you by the ISSA Central Maryland Chapter and the Federal Business Council.

Cyber Threat Hunting Workshop
2020-09-02 11:00 - 13:30 | Virtual
Join RedSeal and ISSA Central Maryland on Thursday, August 13, 2020 at 11:30am ET, for a free virtual Cyber Threat Hunting workshop for cybersecurity practitioners.
Learn to identify potential attack vectors that bad actors could use to exploit existing vulnerabilities
During the event, you will leverage the RedSeal platform to assess the overall cybersecurity posture of, and threat hunt within, a pre-built virtual network model while refining your skills in risk and vulnerability assessment, cyber hunting, and incident response.
At the completion of the session, you will have learned how to:

Easily identify devices on the network that pose the most risk to your enterprise
Identify devices across your enterprise that have network access and exploitable vulnerabilities
Quickly visualize where aggressors can pivot following system compromise
Coordinate with other teams to enhance digital resilience

Click Here to Register

BSidesCharm
2020-09-05 - 2020-09-06 | MD
BSidesCharm is a regional Security B-Sides held in Baltimore, MD. It operates under the umbrella principles of Security B-Sides as a larger community project within information security. The goal of BSides is to offer small, intimate events where all participants can engage each other to help develop connections, friendships, and network with different industry professionals.

We recognize the value in engaging a smaller audience and being the big fish in a small pond. Every organization will have different goals and priorities which is why we offer different levels of participation for every individual, group, or organization. We specifically designed several different options for any sized organization to participate and support this event.

Labor Day
2020-09-07 | MD

Billington CyberSecurity Summit
2020-09-08 - 2020-09-09 | MD
Following a sold-out Summit in 2019, the 11th Annual CyberSecurity Summit promises to continue the proud tradition of convening the top “who’s who” in cybersecurity leadership for an unparalleled two days of high-level networking and knowledge-sharing to advocate cyber mission in the U.S. and among allied countries.

Rosh Hashanah Jewish Holiday
2020-09-19 | MD

Membership Meeting 9/23/2020
2020-09-23 17:00 - 19:30 | Virtual via Zoom, MD
Chapter Business Meeting Slides: 2020-09-23-Meeting-Presentation.pdf
Speaker Slides: UAS-Forensics-Framework-2020-09-23.pdf
Topic: A Study on Drone Forensics Framework
As consumer unmanned aircraft systems (UAS) or drones are used more commonly in public areas, an approach for a drone forensics framework is needed to guide forensics investigators in analyzing recovered drones that entered the unauthorized national airspace system (NAS). The presentation is based on a doctoral research study focused on whether a single framework and multiple frameworks for drone forensics. The data collected through an online survey provided detailed descriptions of the participants’ most commonly used forensics frameworks or guidelines. The data collected from participants in the United States measured the occurrences of the type of guidelines forensics examiners used. The results of the study identified a need for a standard drone forensic framework across digital forensic disciplines and aircraft accident investigation for use by investigators to produce admissible evidence for litigation in the U.S. courts. The research led to a proposed basic drone forensics framework, which can be improved upon in future research.
Speaker: Nagi Mei, D.Sc.

Dr. Nagi Mei has over 14 years in management and technology consulting service offerings to the commercial and health industries, and federal, state, and local governments. She has extensive experience in strategic initiatives and operational responsibilities grounded in information security management. Dr. Mei is a project manager where she leads teams in implementing information security projects. Dr. Mei received a Doctor of Science in Cybersecurity from the Capitol Technology University. She holds a Master in Business Administration, a Master of Science in Information and Telecommunications Systems from the Johns Hopkins Carey Business School, and a Bachelor of Science in Information Systems concentrating in Digital Forensics from the Johns Hopkins University. She holds certifications in Sec+, PMP, PMI-ACP, SSM, CSM, and ITILv3.

Yom Kippur Jewish Holiday
2020-09-28 | MD

Data Connectors Baltimore 2020
2020-09-30 | MD
Capital Region:
Virtual Cybersecurity Summit
A live, interactive experience!
Wednesday, September 30th
More than 70,000 members of the Data Connectors Cybersecurity Community are in the DC area. The Virtual Summit will be conducted in real time, with the same panels, presentations and solution provider exhibits and demonstrations
Complimentary Registration Includes:

Keynote presentation
CIO/CISO Panel Discussion
Cybersecurity expert presentations
Virtual exhibits from solution providers with chat capability
CPE Credits
Prizes such as Air Pods, XBox, Amazon Gift Cards and lots more…

Register Here

Virtual Threat Defense Challenge
2020-10-08 10:00 - 16:00 | Virtual
Join our security experts for a hands-on learning experience as you navigate a simulated cyberattack in real-time. Learn to “think like a hacker” and then respond to and defend valuable assets. Whether you are a novice or a skilled security professional, this experience has something for everyone.
Compete in teams alongside your peers to run cyberattacks in a controlled environment. Premium prizes will be given to the team with the most points.
Join this action-packed session and learn to:

Understand the tools and techniques used by hackers
Identify infrastructure security gaps
Plan and implement security measures

There’s no cost to attend. Just bring your best game!
Register Here; https://resources.trendmicro.com/2020-Q4-NE-MA_TDC_OCT8.html

Columbus Day
2020-10-12 | MD

EC-Council - Hacker Halted Virtual Cyber Security Training and Conference 2020
2020-10-19 - 2020-10-23 | Virtual
Hacker Halted is a global series of computer and information security conferences presented by EC-Council. Hacker Halted is a global series of computer and information security conferences presented by EC-Council. The objective of the hacker halted conferences is to raise international awareness towards increased education and ethics in IT security.

Membership Meeting 10/28/2020
2020-10-28 17:00 - 19:30 | Virtual via Zoom, MD
Chapter Business Meeting Slides: 2020-10-28- Meeting Presentastion.pdf
Speaker Slides: 30 Years 20-10-28.pdf
Topic: Lessons Learned from 30 Years of Security Awareness Efforts
Organisations acknowledge that employees are often the weakest link, yet efforts to improve ‘user awareness’ tend to rely upon available tools and not true experience. Drawing on three decades of awareness efforts and experience improving true security behaviours, Ira Winkler will dispel many commonly held beliefs about security awareness, detailing what consistently works and what does not.
Learning Objectives:
1: Learn and apply what works consistently across hundreds of organisational awareness efforts.
2: Learn from research in other disciplines that improves awareness efforts.
3: Learn how to create a security culture that drives individual security behaviours.
Speaker: Ira Winkler, President, Secure Mentem

Ira Winkler, CISSP, is the President of Secure Mentem and Author of Advanced Persistent Security, and the forthcoming books, You Can Stop Stupid and Security Awareness for Dummies. He is considered one of the world’s most influential security professionals and was named “The Awareness Crusader” by CSO magazine in receiving their CSO COMPASS Award. He also received the ISSA Hall of Fame award. He has designed and implemented and supported security awareness programs at organizations of all sizes, in all industries, around the world. Ira began his career at the National Security Agency, where he served in various roles as an Intelligence and Computer Systems Analyst. He has since served in other positions supporting the cybersecurity programs in organizations of all sizes. Ira’s new book can be preordered here: https://tiny.cc/stupidbook

Veterans Day
2020-11-11 | MD

(ISC)² Security Congress
2020-11-16 - 2020-11-18 | Virtual
Join thousands of leading cybersecurity professionals virtually at (ISC)² Security Congress 2020 November 16-18. You will hear expert insights into the latest security challenges, and share best practices for combating threats, building teams and implementing the latest processes and procedures to better defend your organizations’ critical assets. We will discuss the latest issues facing the workforce, explore pathways for career advancement and discover new tools and solutions together.
Attend (ISC)² Security Congress from home and take advantage of the powerful collaboration that you can only find at a conference of your peers who are dedicated to helping one another solve the challenges we all face.
Early Bird pricing to (ISC)² members and associates of just $295 for an All-Access pass. Non-members will also benefit with Early Bird pricing of $395. Registration details will be announced when open. The Early Bird window will close on September 30. Registration and more information can be found Here!

Membership Meeting 11/18/2020
2020-11-18 17:00 - 19:30 | Virtual via Zoom, MD
Chapter Business Meeting Slides: 2020-11-18 – Meeting Presentastion.pdf

Speaker Slides: Roles of Artificial Intelligence and Deep Learning in Detecting Data Exfiltration
Topic: Roles of Artificial Intelligence and Deep Learning in Detecting Data Exfiltration
Essential Internet services are vital for many aspects of modern living, yet those services remain valuable to threat actors who use them for network intrusions and data exfiltration. Dr. Pena completed a quantitative research study analyzing the ability of a Convolutional Neural Network (CNN) to detect Domain Name System (DNS) covert communications generated by the DNSExfiltrator open source tool. The results showed the CNN model had100% accuracy when exfiltrated file sizes exceeded 2 Kilobytes (KB) using the default (maximum) transmission packet size, but its performance fell dramatically for files below 1 KB in size.
As AI/ML solutions become more prevalent in cybersecurity tools, professionals must understand where a model’s strengths and weaknesses lay in order to apply appropriate risk mitigations, such as tuning complimentary detection systems.
Speaker: Dr. Tomas Pena, L3 Harris Technologies

Dr. Tomas Pena is the Chief Technologist for Cyber Operations at L3Harris Technologies’ Space and Airborne Systems Segment. In that role, he’s responsible for cyber innovation and improving the resiliency of company products spanning land, sea, air, space, and cyber domains. He’s been in cyber-related systems engineering and defense contracting positions since 2013. Prior to that time, he completed 20 years of service in the United States Air Force as a Cyberspace Operations Officer where he organized, planned, executed full-spectrum cyberspace operations, stood up the United States Cyber Command’s 24/7 Joint Operations Center, and led Air Force Business Transformation Initiatives at the Pentagon. Dr. Pena has also filled roles such as managing the Global Positioning System satellite control systems, managing theater communications during Operations IRAQI FREEDOM and ENDURING FREEDOM. He is also the Founder and President of Parallax Cyber LLC, a small business focused on training and educating the workforce in Cybersecurity and Cyber Conflict, and the current Editor-in-Chief of the Military Cyber Professional Associations’ Military Cyber Affairs Journal.

Click Here to register for the November 18, 2020 General Membership Meeting
