Come see Luca Gibelli of the ClamAV team will be presenting a talk on Security Governance. The talk is part of the 5th annual Net & System Security Convention. The Conference is scheduled for November 27th, at Pisa’s Palazzo dei Congressi. A brief summary of Luca’s talk is below:

Security Governance: A Systematic Approach to Threat Management
Confidentiality, integrity and availability of information should be recognized as a critical business issue rather than the sole domain of IT. In today’s threat environment effective network security is an important part of ITs ability to support the business. IT security governance helps to make sure that the business priorities and opportunities of the company are aligned with the services offered by IT, including security projects. Turn-key solutions that cover both technical and management issues related to information security are available to facilitate a comprehensive network security program. This integrated approach is more effective when compared to occasional network audits, which often fail to account for systemic issues responsible for security weaknesses.

You may also want to see a talk by Georg Wicherski about the Nepenthes Platform: Automated Botnet Detection and Mitigation. A summary of Georg’s talk is below.

Automated Botnet Detection and Mitigation
With the Nepenthes Platform, we are able to collect malware autonomously. Centrally collecting this malware over months yielded to a vast, unmanagable, giant heap of binary data.
We show, how we managed to eventually do something useful with this data, by extracting different information using – sandboxing – recording of attacker information – botnet monitoring and introduce the functionality of the tools, we developed for these means.

The conference is free of charge, however pre-registration is strongly encouraged.

For more information on the conference visit: http://www.atsystemgroup.org/convegni/nss07/