Central Maryland Chapter of ISSA

Hacker Halted
2021-10-07 09:00 - 2021-10-08 17:00 (America/New_York)
Hacker Halted is a global series of computer and information security conferences presented by EC-Council. The objective of the hacker halted conferences is to raise international awareness towards increased education and ethics in IT security.
Our conference is dedicated to providing a harassment-free conference experience for everyone, regardless of gender, gender identity and expression, age, sexual orientation, disability, physical appearance, body size, race, ethnicity, religion (or lack thereof), or technology choices. We do not tolerate harassment of conference participants in any form. Sexual language and imagery is not appropriate for any conference venue, including talks, workshops, parties, Twitter, the conference app, and other online media. Conference participants violating these rules may be sanctioned or expelled from the conference without a refund at the discretion of the conference organizers.

Columbus Day
2021-10-11

Membership Meeting 10/27/2021
2021-10-27 17:00 - 19:30 | HubSpot—The Gathering Place on the Gateway, 6724 Alexander Bell Drive Hub Spot, Suite 105, Columbia, MD, 21046
Chapter Business Meeting Slides: 2021-10-27 Meeting Slides

Meeting and Speaker Recording: Zoom Meeting Recording
Topic: Intellectual Property Espionage
Cliff will talk about an intellectual property espionage case study and discuss how focused curiosity can help you develop solutions.

Speaker: Cliff Stoll, Founder of Acme Klein Bottles
Dr. Cliff Stoll has had a variety of careers over his lifetime. Presently he is the CBO (Chief Bottle Officer) and founder of Acme Klein Bottles. He is also an author of 3 books: The Cuckoo’s Egg, Silicon Snake Oil, and High Tech Heretic. He was a System Administrator at Berkeley. He is also an astronomer. And as a self-proclaimed mad scientist, he has one major accomplishment that few people in the world can claim; he successfully tracked a nation state spy through the Internet. In his search for a 75 cent glitch, he highlighted problems with the network and created some unique solutions that helped the advancement of intrusion detection and digital forensics.

Veterans Day
2021-11-11

MAX Cyber Skills Challenge
2021-11-11 - 2021-11-15 | Virtual
We invite you to a competition for points, prizes, and respect. Prove your cyber skills in the MAX Cyber Skills Challenge! The five-day, at your pace, capture the flag, has set the gauntlet. Compete in more than 40 lab-based challenges to earn points and work your way up the leader board. Compete against your coworkers and peers. In partnership with Immersive Labs and Reyncon Educational Services and Training we are excited to host the first annual MAX Cyber Skills Challenge.
To register: https://www.eventbrite.com/e/194112344247

ISSA Mid-Atlantic Qtrly Summit
2021-11-11 18:30 - 20:00
The Solarwinds Attack has caused government and private sector organizations to renew their focus on strengthening Cybersecurity Supply Chain Risk Management. By statute, federal agencies must use NIST’s C-SCRM and other cybersecurity standards and guidelines to protect non-national security federal information and communications infrastructure. The SECURE Technology Act and FASC Interim Final Rule gave NIST specific authority to develop C-SCRM guidelines. Matthew Butkovic, Technical Manager of the Cybersecurity Assurance, Software Engineering Institute will moderate a discussion with Dr. George Duchak, Chief Information Officer, DLA Information Operations and Robert S. Metzger, Shareholder at the Rogers, Joseph, O’Donnell Washington, D.C. law firm’s Cybersecurity and Privacy Practice Group to share their thoughts about designing stronger cybersecurity risk management strategies and approaches.

Pen Test HackFest Summit & Training
2021-11-15 - 2021-11-22
At this year’s Pen Test HackFest Summit, you’ll have the chance to learn, connect, and share with thousands of cybersecurity professionals in attendance online and in-person*. No matter your background or skill level, you’ll walk away from HackFest with new tools and techniques to help you advance your skillset, as well as your organization’s defenses.

Membership Meeting 11/18/2021
2021-11-18 17:00 - 19:30 | HubSpot—The Gathering Place on the Gateway, 6724 Alexander Bell Drive Hub Spot, Suite 105, Columbia, MD, 21046
Note: The November 18, 2021 will be held on the third Thursday of the month.
Chapter Business Meeting Slides: 2021-11-18 Meeting Slides
Speaker Slides: 2021-11-18 Space_Enterprise_Trends_Risks_and_Securing_the_Future

Meeting and Speaker Recording: Zoom Meeting Recording
Topic: Protecting and Securing Data
Billions of people around the world rely on operations conducted across the space enterprise. Space systems support critical functions including navigation, communications, agriculture, financial exchange, and emergency services. Current and emerging markets for space services range from GPS and broadband connectivity to environmental monitoring and on-orbit manufacturing.
The volume of data travelling across information systems in satellite, ground, and user segments continues to escalate due to a range of factors and trends, including the commercialization of space with the transportation of cargo, experiments, and payload; human space flight; resupply to the International Space Station; Space as a Service (SaaS) and Ground Station as a Service (GSaaS); and the push to the moon and Mars.
Adversaries seek to exploit vulnerabilities and threats across this increased threat plane through unauthorized access, malware, denial of service, supply chain, and other opportunities. Guidance, best practices, and a defense-in-depth approach to protecting and securing data and information is a key priority and continues to evolve in the government and commercial sector to outpace the threat.

Speaker: Lori Gordon, Aerospace Corporation
Lori Gordon is a senior project engineer and technology strategist in the Corporate Chief Engineer’s Office at The Aerospace Corporation, focusing on Space Enterprise Integration (SEI) and Space Enterprise Risk (SER) to cyber and physical infrastructure. During her career, she has led efforts to coordinate national strategies and initiatives to enhance the resilience of U.S. critical infrastructure, mitigate national security and civil space enterprise risk, and accelerate technology innovation in complex systems. She has advised U.S. and international standards development organizations and academic curriculum boards on autonomous systems, cybersecurity, and the next generation workforce. Gordon has a master’s in public administration from the University of Massachusetts and a bachelor’s in geography from the University of Maryland. She is a Partner with The Aerospace Corporation’s Center for Space Policy and Strategy and is a Visiting Fellow at the National Security Institute.

Thanksgiving Day
2021-11-25

Membership Meeting 12/15/2021
2021-12-15 17:00 - 19:30 | HubSpot—The Gathering Place on the Gateway, 6724 Alexander Bell Drive Hub Spot, Suite 105, Columbia, MD, 21046
Chapter Business Meeting Slides: 2021-12-15 Meeting Slides
Meeting and Speaker Recording: Zoom Meeting Recording

Topic: Reducing Advanced Threat Dwell-Time with Behavior Analytics
Discussion on Security gap covered using Behavior analytics, both in the enterprise and cloud. We will discuss the traditional methods, quick overview of Behavior detection, value prop and operationalizing in a small team.

Speaker: Alex Attumalil, Global Cyber Security Leader at Under Armour
Mr. Attumalil is a technology leader with 21years of experience, developing and leading information security programs and global cyber operations teams. In this role, he has built great teams, empowered to deliver technical cyber risk mitigations, and aspires to increased accountability and ownership. His transformational vision drives risk-centric policies and innovative proactive mitigations, while his strong business acumen propels frictionless deployment of strategic global initiatives. Further, his cross-functional efforts to build consensus among leaders have allowed projects to be delivered on schedule and within budget. Mr. Attumalil builds strong, performance-focused partnerships with his technology providers, motivating them to improve their product offerings, thus driving business value to the partners and their customers. He is an active participant in customer advisory boards and technology conferences where he shares his vision and builds consensus to drive solutions for a secure enterprise.

Christmas Day
2021-12-25

New Year's Holiday
2022-01-01

Dark Web Forensics Deep Dive Workshop – Live Online
2022-01-12 09:00 - 17:00 | Virtual
This is an in-depth workshop on Dark Web Forensics investigations including technical details of how the dark web/TOR works, a tour of actual dark web markets; and specific investigative techniques or tools for dark web investigations.

This one-day workshop is a complete guide to dark web investigations. Students will learn the technical issues of the dark web, and will be given a thorough tour of the dark web. Students will also be taught specific investigative techniques with examples for a wide range of investigative needs. This training is useful for any forensic investigator, but is particularly interesting to those trying to trace data leaks, financial crimes, and related crimes. This course includes a lot of hands on labs.

Overview of TOR
Tour of markets

How to securely conduct a dark web investigation (i.e. keep your security and anonymity).
How to analyze dark web market sites for flaws.
Dark web crawlers
A specific investigative process

Register at https://iclass.eccouncil.org/schedule/dark-web-workshop-online/

Martin Luther King Jr. Day
2022-01-17

Cyber Trivia Competition
2022-01-25 06:30 - 20:00 | Virtual
Cyber Trivia Competition
Tuesday, January 25, 2022 from 6:30 PM – 8:00 PM
RSVP Online at: https://attendee.gotowebinar.com/register/1068163871937491213

Do you have what it takes to be a champion of cyber security knowledge? Join the ISSA DC, ISSA NOVA, and ISSA Central MD chapters for a Trivia Night and you can prove your cyber security knowledge and may even win a prize!
Schedule for the Event
· Opening remarks 6:30 PM – 6:45 PM
· Competition Time 6:45 PM – 8:00 PM

Individual Competition
Round 1: 20-minutes / 10 Questions (1st Place, 2nd Place, 3rd Place Winner)
Round 2: 20-minutes / 10 Questions (1st Place, 2nd Place, 3rd Place Winner)
Round 3: 20-minutes / 10 Questions (1st Place, 2nd Place, 3rd Place Winner)
ISSA Chapter Competition
ISSA Chapter Trophy Winner (ISSA DC, ISSA NOVA, and ISSA Central MD)

Jim Broad, Cyber Trivia Competition Host
Mr. James Broad (CISSP, C|EH, CPTS, Security+, MBA), authored the NIST RMF text book, Risk Management Framework: A Lab-Based Approach to Securing Information Systems which is utilized in cybersecurity MBA and graduate certificate programs focusing on risk management. He also co-authored Hacking with Kali. Mr. Broad serves as a faculty member for Concordia University SP. In that capacity he mentors and teaches online cybersecurity graduate certificate and MBA students to develop and apply the most current risk management methods embodied in the NIST RMF. He works with Mission Critical Institute to enable students to participate in the cloud based NIST RMF internship offered through Cyber-Recon. When they successfully complete internship students have a NIST RMF e- project portfolio which represents their cybersecurity risk management project experience. Mr. Broad is an experienced cybersecurity professional with a strong and proven background in leading people, managing programs and projects and driving improvement and change.
Mr. Broad established Cyber-Recon in 2008. Cyber-Recon provides information security consulting services as well as training and volunteer opportunities which enable security professionals to enhance their security skills while providing needed services to the community.
Mr. Broad has had extensive experience in implementing security at all phases of the development lifecycle. His expertise includes: Penetration Testing, Certification and Accreditation, Change Management, Vulnerability Assessment, Documentation and Instruction as well as compliance standards including Sarbanes Oxley (SOX), Payment Card Industry (PCI), Health Insurance Portability and Accountability Act (HIPAA), Department of Defense DoD), National Security Agency (NSA) and National Institute of Standards and Technology (NIST). Further, his experience extends to support risk management initiatives at the largest global hedge fund.

Membership Meeting 1/26/2022
2022-01-26 17:00 - 19:30 | HubSpot—The Gathering Place on the Gateway, 6724 Alexander Bell Drive Hub Spot, Suite 105, Columbia, MD, 21046
January Membership Meeting is Proudly Sponsored by:

Chapter Business Meeting Slides: 2022-01-26 Meeting Slides
Speaker Slides: Internet Crimes Against Children – Joe Dugan – 2022-01-26

Meeting and Speaker Recording: Zoom Meeting Recording
Topic: Origin and Mission of the ICAC Task Force
The presentation will explain the origin and mission of the Internet Crimes Against Children (ICAC) Task Force. We will discuss the many ways our children can find themselves in trouble on the internet, such as, loss of privacy, exposure to graphic content both from imagery and online games. We will touch on the subject of our children creating and sharing CSAM (Child Sexual Abuse Material, also referred to as child pornography) and how this can create a lifelong problem for our children. We will also talk about the dangers of Online Predators and how a child’s need to feel they belong, put them at risk Human Trafficking.
Speaker: Joe Dugan, Child Abuse/ICAC Detective at the Harford County Sheriff’s Office

Joe Dugan has 37 years Law Enforcement Experience. He has worked as a Homicide Detective in Baltimore City and as a member of the HIDTA Task Force. The last seven years of his career was as a Child Abuse/ICAC Detective at the Harford County Sheriff’s Office, Harford County Child Advocacy Center. He now works as an Internet Safety Specialist with the Maryland State Police
Click Here to register for the January 26, 2022 ISSA Membership Meeting.

The Convergence of Digital and Physical Security
2022-02-01 11:00 - 12:00
Managing risk under one unified platform results in streamlined communications and response, faster remediation of disruptions, and ultimately, reduced impact to business continuity. Whether your employees are working from home, in the office, or in a hybrid environment, it’s more important than ever to prioritize resilience via situational and operational intelligence.
Featuring Tracy Reinhold, CSO of Everbridge with over 20 years’ experience in the FBI, and Eric Yunag, VP of Technology and Innovation at Convergint with over 20 years’ experience in security integration, join this conversational panel to learn:

How to quickly identify and act on all threat vectors to produce a reduced risk gap
Ways to break down siloed response activity for optimal resilience
Best practices to build a robust risk platform for success, including analysis of past performance
What to look for in a technology that will facilitate and automate your response needs

Reserve My Seat

Washington's Birthday
2022-02-21

Membership Meeting 2/23/2022
2022-02-23 17:00 - 19:30 | HubSpot—The Gathering Place on the Gateway, 6724 Alexander Bell Drive Hub Spot, Suite 105, Columbia, MD, 21046
Chapter Business Meeting Slides: 2022-02-23 Meeting Slides
Business Meeting Recording: Zoom Meeting Recording

Topic: Emerging Technologies, Existing Policies and Architectures
This presentation we will discuss current architectures and policies and how it’s hard to match the speed of change. That the coalition of the willing can create change through sharing and leveraging the grassroots of organizations and drive-up consistencies in leveraging what you have to meet new constructs and open a discussion on what policies are required.
Speaker: Stephanie Neely, Defense Information Systems Agency

Stephanie Neely has 27 years of experience in cybersecurity and cyber operations. She has worked both sides of the fence as an ISSM to NOCs and SOCs. Currently she leads a team to ensure the Department of Defense Information Networks (DODIN) are postured through unified actions that deliver the successful evolution of modernized technology solutions. Currently we are working on defining zero trust minimum capability standards for the DODIN and will be performing risk assessments against each DAO’s architecture.

Membership Meeting 3/23/2022
2022-03-23 17:00 - 19:30 | HubSpot—The Gathering Place on the Gateway, 6724 Alexander Bell Drive Hub Spot, Suite 105, Columbia, MD, 21046
Chapter Business Meeting Slides: 2022-03-22 Meeting Slides
Speaker’s Recording: Zoom Meeting Recording – Speaker Recording

Meeting Sponsor Presentation: ASPG-Sponsor-Presentation-2022-03-22.pdf
Topic: Human Security Engineering: Stop Relying on the Failed Human Firewall
While the main perception is that the “user problem” is due to a malicious party trying to trick well intentioned users, users who are unaware, apathetic, careless, etc., are more likely to be the cause of loss. Either way, the cybersecurity industry realizes this and develops tactics such as awareness, MFA, DLP, etc. to mitigate the problem. Despite all of these tactics, 90%+ of all losses result from attacks targeting users. What this talk proposes is a comprehensive strategy to address the insider threat, whether it results from malicious or well meaning insiders.
Speaker: Ira Winkler, Chief Security Architect for Walmart

Ira Winkler, CISSP is Chief Security Architect for Walmart and author of You Can Stop Stupid. He is considered one of the world’s most influential security professionals, and has been named a “Modern Day James Bond” by the media. He did this by performing espionage simulations, where he physically and technically “broke into” some of the largest companies in the World and investigating crimes against them, and telling them how to cost effectively protect their information and computer infrastructure. He continues to perform these espionage simulations, as well as assisting organizations in developing cost effective security programs. Ira also won the Hall of Fame award from the Information Systems Security Association, as well as several other prestigious industry awards. CSO Magazine named Ira a CSO Compass Award winner as The Awareness Crusader. Most recently, Ira was named 2021 Top Cybersecurity Leader by Security Magazine.
Click Here to register for the March 23, 2022 ISSA Membership Meeting.

Mid-Atlantic Quarterly Meeting
2022-03-23 17:30 - 19:00 | HubSpot—The Gathering Place on the Gateway, 6724 Alexander Bell Drive Hub Spot, Suite 105, Columbia, MD, 21046
Click Here to register for the February 23, 2022 ISSA Mid-Atlantic Quarterly Meeting.

Topic: Emerging Technologies, Existing Policies and Architectures
This presentation we will discuss current architectures and policies and how it’s hard to match the speed of change. That the coalition of the willing can create change through sharing and leveraging the grassroots of organizations and drive-up consistencies in leveraging what you have to meet new constructs and open a discussion on what policies are required.
Speaker: Stephanie Neely, Defense Information Systems Agency

Stephanie Neely has 27 years of experience in cybersecurity and cyber operations. She has worked both sides of the fence as an ISSM to NOCs and SOCs. Currently she leads a team to ensure the Department of Defense Information Networks (DODIN) are postured through unified actions that deliver the successful evolution of modernized technology solutions. Currently we are working on defining zero trust minimum capability standards for the DODIN and will be performing risk assessments against each DAO’s architecture.
Click Here to register for the February 23, 2022 ISSA Mid-Atlantic Quarterly Meeting.

Maryland Day
2022-03-25

FutureCon Baltimore CyberSecurity Conference
2022-03-30
FutureCon Baltimore CyberSecurity Conference – FutureCon is hosting a cybersecurity conference on March 30th at the Hilton Baltimore BWI Airport and has graciously offered chapter members a free pass to the conference. For further details and to register, please visit https://futureconevents.com/events/baltimore-dc-2022/. Please use promo code ISSAMD to take advantage of the free pass. which includes all sessions, CPE Credits, light breakfast, lunch, and a celebratory happy hour. A conference flyer is attached as well.

Cyber Threat Day at JHU/APL
2022-03-31 | JHU Kossiakoff Conference Center, 11100 Johns Hopkins Road, Laurel, MD, 20723

Easter
2022-04-17

Membership Meeting 4/27/2022
2022-04-27 17:00 - 19:30 | HubSpot—The Gathering Place on the Gateway, 6724 Alexander Bell Drive Hub Spot, Suite 105, Columbia, MD, 21046
Chapter Business Meeting Slides: 2022-04-27 Meeting Slides
Speaker Presentation: PowerShell Remote Access and Demonstration Link
Meeting Recording (Business and Speaker): Zoom Meeting Recording – Meeting Recording
Topic: PowerShell Remoting
One of the powers of PowerShell is its ability to send commands to multiple machines at once. In this brief overview, I will cover all the various ways to use PowerShell remoting to accomplish your tasks. We will be connecting 1 on1, 1 to many, connecting to remote applications and even a Linux machine via SSH. That’s right PowerShell remoting via SSH instead of WinRM.

Speaker: James Honeycutt
Mr. Honeycutt has served in the military for 24 years. He has spent most of that time working in IT Operations in various positions, from helpdesk to a Microsoft Windows systems administrator. He currently works for the Maryland National Guard Cyber Protection Team (CPT) as a Cyber Operations Technician with a focus on incident response, forensics, and being the resident “Windows Expert”. In his off time, he likes to give back to the community by presenting at local community events. He spent time peer reviewing SANS SEC586: Blue Team Operations: Defensive PowerShell. He has presented at like BsidesCharm, AvengerCon, ISC2 Baltimore Chapter, ISSA Central Maryland Chapter, and University of Central Arkansas Community Outreach. He also enjoys teaching. He has been a SAN Mentor/Community instructor for SEC505: Securing Windows and PowerShell Automation, SEC511: Continuous Monitoring and SOC Operations. He was a teaching assistant for a Cyber Security Bootcamp offered by Trilogy. He also teaches at Howard Community College as an adjunct instructor. He currently holds a Bachelor of Science in Management in Information Systems, GIACx10, CISSP, C|EH, SEC+, VCP5-DCV.

Mid-Atlantic Quarterly Meeting
2022-05-17 18:30 - 20:00 | Virtual via Go To Meeting, MD

Membership Meeting 5/25/2022
2022-05-25 17:00 - 19:30 | HubSpot—The Gathering Place on the Gateway, 6724 Alexander Bell Drive Hub Spot, Suite 105, Columbia, MD, 21046
Chapter Business Meeting Slides: 2022-05-25 Meeting Slides
Speaker Slides: Speaker slides can be obtained from the VP of Operations (V_P_Operations@centralmarylandc-y5eorcwrmb.live-website.com)

Topic: Security, Identity and Compliance with AWS, Infrastructure and Services to Elevate Your Security in the Cloud

AWS has various security services, including identity management, detective controls, infra and data protection, and incident response services you can use in Amazon’s cloud. This presentation will discuss these services available via the Amazon AWS cloud.

Speaker: Conrad Fernandes, Principal Engineer at Amazon

Conrad Fernandes is an information security leader in Public Sector for the past 20 years. At Booz Allen, Conrad led the Computer Network Defense (CND) Reference Architecture initiative for the US Department of Defense (DoD) and the National Security Agency (NSA). He also conducted threat and forensics analysis at DoD Cyber Crime Center (DC3) to dissect nation-state activities targeted against the DoD and Defense Industrial Base (DIB). At the Johns Hopkins Applied Physics Laboratory, Conrad managed the Security Operations Center and extended defensive capabilities into commercial clouds such as Amazon Web Services (AWS) and Microsoft Azure. In his current role, Conrad is a Principal Engineer at Amazon and works closely with National Security customers to ensure secure workload deployments in AWS and on-premises. When he’s not busy innovating security in hybrid cloud architectures, Conrad enjoys most outdoor activities and exploring National Parks across the country with his wife and adult son.

Memorial Day
2022-05-30

PowerShell Training Class - Day 1
2022-06-04 08:00 - 17:00 | SigNet/Convergint Technologies, 6650 Eli Whitney Dr, Columbia, MD, 21046
2-day course (June 4th – Crash Course) and June 18th (Defensive).

Cost: $75 day/$125 for both days + Eventbrite fees.
Drinks + food (breakfast / lunch / snacks) to be provided for all attendees
PowerShell Crash Course (June 4th)
This course will give you the basics of PowerShell. You will learn the PowerShell syntax and Google if you need help. You will learn about repeating tasks, enumerating through a list of objects, and the various things you can do with PowerShell objects. You will learn new cmdlets, modules, and functions. You will gain experience by practicing what the instructor is teaching and demos production scripts and tools. The target audience is individuals new to scripting and new to PowerShell.
Defensive PowerShell (June 18th)
This workshop touches on the difference between PowerShell versions. It will detail how to use PowerShell to secure the systems, PowerShell remoting, and set up auditing. During this section, the specific modules discussed are PowerShell DSC (Desired State Configuration) and PowerShell JEA (Just Enough Admin). We will use PowerShell remoting to query system logs, query the registry, search for unwanted executables, and determine the type of file and if it is executable. The rest of the day, we will use PowerShell to investigate a system and hunt for evil.
Requirements
Participants must bring their own system (laptop) on which PowerShell 5.1 or above has been installed. (Note: 5.1 comes standard on Windows 10 or above.) It is helpful if the participant has escalated (Power User/Administrator) rights on the system.
