Virginia Tech and SANS Institute are pleased to offer the following 6-day SANS program covering the following courses:

March 3-4, 2008
Audit 521: Meeting the Minimum Standard for Protecting Credit Card and Other Private Information PCI CISP: The Visa Digital Dozen

March 5, 2008
Security 514: Advanced Network Worm and Bot Analysis - Hands On

March 6, 2008
Security 531: Windows Command-Line Kung Fu In-Depth for Info Sec Pros

March 7-8, 2008
Security 601: Reverse-Engineering Malware: The Essentials of Malware Analysis

Who Should Attend:

• Intrusion Detection Analysts
• Incident Handlers
• Network Engineers
• System Security and Network Administrators
• Hands-on Security Managers
• Managers overseeing PCI CISP compliance
• External auditors performing PCI CISP validation
• Security professionals operating in a PCI CISP compliant environment
• Internal auditors desiring to validate interim compliance
• System and network administrators wishing to deepen their understanding of malware analysis
• Professionals looking to advance their incident response and forensics skills
• Security professionals responsible for protecting the organization from malicious code and related attacks

Special pricing is available for any faculty or staff member from any accredited EDU site (K-12, community college or higher education institution) or member of law enforcement. Commercial or Government employees are also welcome to attend.

Instructor Biographies:

Randy is the Director of VA Tech's IT Security Laboratory and the University's Assistant IT Security Officer. He is a co-author of the original SANS Top 10 Internet Threats, the SANS Top 20 Internet Threats, the SANS Consensus Roadmap for Defeating DDoS Attacks, and the SANS Incident Response: Step-by-Step guides. He is a member of the Center for Internet Security development team that produced and tested the CIS Solaris, HPUX, AIX, Linux and Windows2000/XP security benchmarks and scoring tools. He was a member of the White House Partnership for Critical Infrastructure Security working group that developed a Consensus Roadmap for responding to the DDOS attacks of 2000.

Randy will be teaching Audit 521: Meeting the Minimum Standard for Protecting Credit Card and Other Private Information PCI CISP: The Visa Digital Dozen.

Mike is a founder and Senior Security Analyst for the DC firm Intelguardians LLC. In his recent past life he has worked for Sourcefire, as a research engineer, and for the SANS Institute leading their Intrusion Analysis Team. As a consultant, Mike conducts forensic analysis, penetration tests, vulnerability assessments, security audits, and architecture reviews. His primary job focus however is in intrusion detection, response, and mitigation. Mike currently holds both GSEC and GCIA certifications, and is an expert in network engineering and systems, network and web administration. Mike is an author of the international best selling Snort 2.1 book from Syngress, and is a Handler for the Internet Storm Center.

Mike will be teaching Security 514: Advanced Network Worm and Bot Analysis - Hands On.

Ed Skoudis is a co-founder and Senior Security Analyst with Intelguardians, a Washington DC based information security consulting firm. Ed teaches SANS Security 504, "Hacker Techniques, Exploits and Incident Handling," and 517, "Cutting Edge Hacking Techniques," on a regular basis. Ed's expertise includes hacker attacks and defenses, the information security industry, and computer privacy issues. He has performed numerous security assessments, provided detailed expert witness services in cases involving major credit card theft, and responded to computer attacks for clients in the financial, high technology, healthcare, and other industries. Ed conducted a demonstration of hacker techniques against financial institutions for the United States Senate and is a frequent speaker on issues associated with hacker tools and defenses. He has published several articles on these topics, as well as the books Counter Hack Reloaded and Malware: Fighting Malicious Code. Ed was also awarded 2004, 2005, and 2006 Microsoft MVP awards for Windows Server Security, and is an alumnus of the Honeynet Project. Previous to Intelguardians, Ed served as a security consultant with International Network Services (INS), Predictive Systems, Global Integrity, SAIC, and Bell Communications Research (Bellcore).

Ed will be teaching Security 531: Windows Command-Line Kung Fu In-Depth for Info Sec Pros.

Lenny Zeltser leads the information security practice at Gemini Systems, a premier IT consulting firm headquartered in New York. He is also an instructor at The SANS Institute and a handler at SANS Internet Storm Center. Lenny co-authored a number of security books, and is one of the few individuals in the world who has earned the highly-regarded GIAC Security Expert (GSE) designation. He has an MBA degree from MIT Sloan and a BSE degree from the University of Pennsylvania. More information about Lenny's projects and interests is available at www.zeltser.com.

Lenny will be teaching Security 601: Reverse-Engineering Malware: The Essentials of Malware Analysis.

Additional Information:

If you wish to receive additional information about this program, please contact Randy Marchany, IT Security Lab, Virginia Tech by e-mail at marchany@vt.edu.

General Information | Course Descriptions | Location & Lodging | Schedule | Sponsorship | Register On-Line