North Carolina Cyber Patriot

06/18/2013

Next Quarter's Capital Markets Review will be July 15th at 6 pm at Rey's Restaurant in Cary, NC. Please mark your calendar and RSVP.

05/21/2012

China's Cyber Espionage: The United States continues to pay "very careful attention" to China's growing cyberspace capabilities, said Dave Helvey, acting deputy assistant defense secretary for East Asia. "There is the potential for these types of operations to be very disruptive" to the United States and its allies, said Helvey in briefing reporters May 18 on the contents of the Pentagon's newly issued annual report to Congress on Chinese military developments. The China report claims that "many" of the cyber intrusions and data thefts conducted on US systems in 2011 originated in China. The report infers that the Chinese government was behind at least some of those attacks, although Helvey declined to offer specifics. He also said he couldn't say whether such attacks are increasing in frequency. "We note that China's investing in not only capabilities to better defend their networks, but also they're looking at ways to use cyber for offensive operations," he said. "We also highlight a number of areas where we see China engaging in cyber activity focused on computer-network exploitation. That continues to be a concern of ours," said Helvey. (China report; caution, large-sized file.) (Helvey transcript)

05/03/2012

Seeking Elevated Status: Joint Chiefs Chairman Gen. Martin Dempsey is reportedly poised to recommend to Defense Secretary Leon Panetta that US Cyber Command's status be elevated to a full-fledged combatant command, reported ABC News Wednesday. "We regularly review the command structure," Pentagon spokesman George Little told the news service. He added, "Nothing has been decided." CYBERCOM began operations in May 2010 as a component of US Strategic Command. It is responsible for overseeing the activities to operate and defend US military information networks and, if directed, for conducting military cyber operations against adversaries. Supporters for making CYBERCOM a combatant command say its current status limits its resources and may slow its ability to respond to cyber attacks, according to ABC News' May 2 report. President Obama would have to approve the change. (See also Cyber Rules of Engagement.)

04/30/2012

http://batchgeo.com/map/77489c9dd18df77bce1d7847f335ef44

04/24/2012

Air Force Academy Wins Cyber Exercise: The Air Force Academy triumphed over the other services' military academies in the National Security Agency's 6th annual cyber defense exercise. "I believe one reason behind our success was a focus on fundamental security principles, rather than specific tools," said Capt. Sean Butler, officer in charge of the academy's winning team, in the school's April 21 release. He added, "Our cadets spent a lot of effort making sure they all had at least a basic familiarity with all the components of our network and how they fit together." The exercise took place April 10-14 at NSA's Fort Meade, Md., headquarters and at the academies. During the competition, NSA network specialists and military network experts formed the red cell team that challenged cadet blue cell teams to defend a closed-computer network that they designed, built, and configured at their respective academies. NSA graded each team's ability to maintain network services while dealing with security intrusions.

04/12/2012

International Cyber Partnerships: The Defense Department is looking to expand its cyber security-related partnerships beyond traditional NATO allies. Specifically, talks are under way with the Japanese, South Korean, and New Zealand defense ministries, said Pentagon officials. At the same time, the United States continues to work closely with Australia and Britain on "a whole spectrum of cyber interoperability," they said. Advancing threats in the cyber realm give the desire for cooperation a sense of urgency. "From our perspective, what we're looking at is a global cyber arms race [that] is not proceeding in a leisurely or even linear fashion but is, in fact, accelerating," said Army Gen. Keith Alexander, commander of US Cyber Command, Tuesday at a cyber symposium in Washington, D.C. One of the biggest challenges to building international cyber partnerships will be the "high-level classification" and "very strict rules" on sharing information with foreign governments beyond longstanding partners, said Rear Adm. Samuel Cox, CYBERCOM's director of intelligence, at the same event. (AFPS report by Cheryl Pellerin)

04/11/2012

Look! Up in the sky! It's a b.......

One Thousand in One Sweep: Next Monday, April 16, the 4th Fighter Wing at Seymour Johnson AFB, N.C., plans to launch 70 of its F-15Es to destroy more than 1,000 targets on bombing ranges across North Carolina. The training mission is meant to pay homage to the wing's heritage by marking the massive bombing raid against Germany on April 16, 1945, during which 4th Fighter Group fighters destroyed 105 enemy aircraft, vaulting the group's tally to 1,016 total enemy aircraft destroyed, "more than any group or wing in Air Force history," according to 4th FW officials. "We proudly carry on the legacy of the 4th Fighter Group's victory today with the F-15E Strike Eagle," said Col. Patrick Doherty, 4th FW commander, in a release. He will lead next week's training strike. "Even though today's fight is different, the dedication of our airmen has not wavered and we are still Fourth, but first," added Doherty.

04/10/2012

Game ON! For real.

America's longtime counterterrorism czar warns that the cyberwars have already begun—and that we might be losing

04/05/2012

Chapter Members, Fellow ITSec Professionals and Guests,

Pass the word to your organizations, companies and cohort.

Our next monthly chapter meeting is Thursday, April 5th, 2012, at the NCSU Computer Science Center, Rm 1231, Engineering Building II, Centennial Campus (not rpt not the McKimmon Center as normally). This is our annual NCSU Engineering Scholarship Endowment Celebration. Student Christopher Thunes our 2011-12 recipient is attending. Meeting attendance is worth 2 CPEs. ISC2 requires a minimum of 20 CPEs/year. Attending chapter meetings is the easy way to do so. Those who were among our March's 107 attendees enjoyed the excellent program in our new larger McKimmon Center space, hosted by the chapter, topic: The Death of Passwords, by our own Artem Kazantsev. Our chapter is now 252 active members strong!

** The Chapter's Jobs Networking meeting will be held in the NCSU/CSC EBII Room 1212 from 6:00-6:50 pm.

** Chapter Board meeting in NCSU/CSC EBII Room 1230, 6PM.

** Our 2012 Triangle InfoSec Conference is Thursday, 18 October 2012. Mark your calendars, plus sponsor and attendee registration is OPEN!
We have two keynote speakers already committed. Check out - www.raleigh.issa.org/conference.

** The TRIANGLE INFOSECON CHALLENGE COIN IS FOR SALE FOR $15, GO TO: www.infoseconchallengecoin.eventbrite.com Proceeds go toward our NCSU Scholarship Endowment. Coins are available for purchase and pick-up at our April meeting.

** The CISSP (ISC)2 Exam Date is Saturday, April 21st, 2012. And (ISC)2 seeks Exam Proctors. See Item V.

** Tenth Annual HOT TOPIC Conference May 2nd-4th, 2012, sponsored by CAD, at Grandover Resort, Greensboro, NC - register (free for ISSA Raleigh Chapter members) and info go to: www.cadincweb.com/hottopics2012/

** SecureWorld Expo, Charlotte NC Convention Center, May 2nd - 3rd, 2012, register and info go to: www.secureworldexpo.com/event/index.php/2012-charlotte-event-information
Discounts for all ISSA members. Our President Emeritus, Chip Kelly, is on the steering committee.

** Be sure to check our other i-Connections for chapter activities announcements.

** Members Job Networking Meeting Thursday, April 5th, 2012,NCSU/CSC EBII atrium lobby area, 6PM. See Item II.
I. Chapter Meeting - Thursday, April 5th, 2012, at 6:00 PM- Networking hour and buffet dinner, 7PM - business meeting, and @7:30 - presentation.

Sponsored By: The Raleigh ISSA Chapter

Location: Engineering Building II (EB2) , Room 1231, in Raleigh, North Carolina located on the Centennial campus of NC State University, 890 Oval Drive, Raleigh, NC 27606.

Presentation: Analysis Techniques for Mobile Operating System Security

Abstract: Over the last several years, smartphone application markets such as
Google's Android Market and Apple's App Store have become a thriving
industry with simplified distribution and little barrier to entry for
developers. Smartphone users face many security and privacy risks, the
most wide-spread of which results from applications operating within the
confines of existing operating system protections. In this talk, I will
discuss how to assess the current state of smartphone security using a
range of analysis techniques. Existing smartphone security is permission
oriented. First, I will use a formal model of permission policy to
understand the permissions an application asks for, defining a coarse
upper bound on its runtime behavior. Second, I will present a
performance efficient method of dynamic analysis to determine actual
application behavior, and subsequently identify several privacy concerns
in real applications. Finally, I will describe a static analysis
approach to characterize potential behavior based on implemented
functionality. Using these approaches, we identify trends and primary
security challenges so that future mobile operating system designs can
mitigate existing threats.

Presenter: William Enck, PhD
Bio: Dr. Enck is an Assistant Professor in the Department of Computer
Science at NC State University. William earned his Ph.D. and M.S. in
Computer Science and Engineering from the Pennsylvania State University
in 2011 and 2006, respectively, and his B.S. in Computer Engineering
from Penn State in 2004. His research focuses primarily on security in
smartphone and mobile device platforms and the challenges that arise in
this new computing environment. However, he is also interested in the
broader area of systems security. His previous research efforts have
included OS security, hardware security, telecommunications security,
network protocol security, voting systems security, and large-scale
network configuration.

II. The chapter's JOBS NETWORKING Meeting is before the main chapter meeting.

Chapter Members, join us if you're:
- looking for a job
- looking for employees
- have heard about jobs
- are a technical recruiter

The Jobs Networking meeting will be held in the NCSU/CSC EBII Room 1212 area from 6:00-6:50 pm.

The informal agenda will include: job search tips discussion / networking, resume review, sharing of advertised and unadvertised jobs, and what info / services future the meetings should include. For further information, Recruiters will be present

03/29/2012

http://www.dodbuzz.com/2012/03/26/has-the-cyber-pearl-harbor-already-happened/

The cyber-horse could be out of the cyber-barn, and now government and industry must figure out what comes next.

03/29/2012

The Air Force’s top cyber commander warned Thursday that the military may have a tough time finding all the qualified people it needs to stay ahead in the increasingly important world of attacking and defending networks.

03/26/2012

Nationa Winners Announced
CyberPatriot IV National Finals Awards
Presented at the CyberFutures Banquet featuring CyberPatriot Awards on
Friday March 23, 2012

All Service Division
1st - Colorado Springs Cadet Squadron Civil Air Patrol - Colorado Spring, CO
2nd – John R. Rogers High School AFJROTC – Spokane, WA
3rd – Clearfield High School AFJROTC – Clearfield, UT

Open Division
1st – Alamo Academies – San Antonio, TX
2nd – Lewis and Clark High School – Spokane, WA
3rd – Palos Verdes Peninsula High School – Rolling Hills Estates, CA

Forensics Competition
All Service Division: Big Sioux Composite Squadron – Brookings, SD
Open Division: Lewis and Clark High School – Spokane, WA

Top Service Award
Army JROTC: Leilehua High School – Wahiawa, HI
Marine Corps JROTC: Montachusett Regional Vocational School – Fitchberg, MA
Navy JROTC: South Aiken High School – Aiken, SC
Air Force JROTC: John R. Rogers High School – Spokane, WA
Civil Air Patrol: Colorado Springs Cadet Squadron – Colorado Springs, CO

International Exhibition
Garden Valley Collegiate - Winker, Manitoba Canada
Sisler High School - Winnipeg, Manitoba Canada

CyberPatriot IV National Finals Program

See more on the US CyberPatriot page