Basic Cell Phone and PDA Forensics - Churchill, Matt

The NEbraskaCERT Conference is very fortunate to get some of the best speakers to present at our conference.  Here is the Class of 2007:

Belani, Rohyt

Rohyt Belani is a Managing Partner and co-founder of the Intrepidus Group, a boutique information security consulting company. Prior to starting Intrepidus, Mr. Belani was the Managing Director at Mandiant. Before joining Mandiant, he worked as a Principal Consultant at Foundstone and Researcher at the US-CERT.
He is a contributing author for Osborne's Hack Notes “Network
 Security”, as well as Addison Wesley's Extrusion Detection: Security
 Monitoring for Internal Intrusions.

Mr. Belani is a regular speaker at various industry conferences including Black Hat, OWASP, ASIS, Hack In The Box, Infosec World, DallasCon, CPM and several forums catering to the FBI and US Secret Service agents. He currently teaches a class at Carnegie Mellon University and has been invited to guest lecture at the University of Wisconsin.

As an industry expert he has opined on security issues via columns for online publications like Securityfocus and SC magazine, and interviews with BBC UK Radio.

Mr. Belani holds a Bachelor of Engineering in Computer Engineering from Bombay University and a Master of Science in Information Networking from Carnegie Mellon University. He currently leads the OWASP Java Project a world-wide consortium of Java security experts.

Churchill, Matt

Matt Churchill is a Douglas County Deputy Sheriff and is assigned to the Criminal Investigation Division.  As part of his duties Matt works with the Nebraska Cyber Crimes Task Force and is a computer forensic analyst.  Matt has received the Certified Forensic Computer Examiner and Certified Computer Examiner certifications.  He is a member of IACIS, ISFCE, HTCIA, and Infragard.


Garcia, Leonardo
 
Studied engineering at ESIME-UC obtaining his bachelor in 1992, the the ISC2 CISSP certification on November 2000, the CISM certification on March 2004 under the ISACA Godfathering program. BS7799LA on June 2005, IRCA ISMS LA on February 2006, and PMP on December 2005.
 
During his professional career has worked for PMI Comercio Internacional (A Mexican Oil Trading Company), Phibro the Energy Division of Salomon Inc., the National Bank of Mexico, Pemex Gas y Petroquimica Basica.
 
 His experience includes implementation & operation of Information Technology Architectures, Information Security Architectures & Management Systems under BS7799 / ISO 17799, ITIL, COBIT, NFPA1600, DRII, RAD

Haeder, Adam

Adam Haeder is the Vice President of Information Technology at the AIM Institute and is the Vice President of the Omaha Linux User's Group. Adam has been active in the technology and open source communities in greater Nebraska for 10 years. He holds numerous networking and Linux certifications, and sits on many IT boards, including the technology advisory boards for UNO, UNL and UNK, and the Linux Professional Institute Global Advisory Committee. Adam recently was a contributing author to the O'Reilly book LPI Linux Certification in a Nutshell.

Hayes, Bill

Bill Hayes has worked nearly six years for the Omaha World Herald Company corporate security department as an information security specialist where he conducts security audits for the World Herald's  nationwide firms. For the past 20 years, he has performed a variety of  information technology and information security duties in the corporate  and academic environments. Bill has a Bachelors degree in Journalism  from the University of Nebraska Lincoln and is a CISSP. He also does freelance writing  for computer magazines and web sites. His byline has appeared most  recently in Processor Magazine.

Hoesing, Mike

Mike has over 30 years of experience in the areas of information systems audit, information systems implementation, and financial audit.

His experiences span a variety of industries during his years with public accounting firms and his last 18 years has focused on the financial services with firms such as First National Nebraska Inc.,Pricewaterhouse Coopers, First Data Corp, and American Express.  Mike has been involved in both the external and internal audit processes and also has served as a software trainer, conference speaker at the Computer Security Conference, VMworld, ISACA's CACS, CERT conference in Omaha Nebraska, University involvement includes membership on the Creighton University College of Business advisory board, and facilitating sessions in their eSecurity lab. At the University of Nebraska at Omaha he developed and delivers the regions only class devoted to Information Systems Audit and has enrolled that school in the ACL partner program.

Mike has been published in the Information Systems Control Journal published by ISACA on network security,  operating systems and virtualization audit topics. Currently Mike leads the Information Systems Audit and Information Assurance groups for First National Nebraska Inc. conducting traditional IS and integrated audit activities, proactive control and risk management consulting, technical assessments, forensics, ediscovery litigation support,  and external assessment liaison with regulatory, financial and credit card association assessors, assessing risk and helping to improve the control environment for  technology sectors at the bank and the related non-banking subsidiaries.

James, Adam

Adam James is a Consultant with Continuum Worldwide. Prior to becoming a Consultant, Adam worked for four years at Mutual of Omaha gaining insight into multiple aspects of a Fortune 500 company while in positions including Provider Analyst, Business Analyst, Computer Programmer/Analyst, and Information Security Analyst. In his most recent position as an Information Security Analyst at Mutual of Omaha Adam was responsible for conducting information security risk assessments, penetration tests, application security assessments, developing audit responses, and providing information security consulting on business and infrastructure projects.

Adam holds a Bachelors of Science in Management Information Services from the University of Nebraska at Omaha and has completed his Masters degree in Information Assurance from the Peter Kiewit Institute at the University of Nebraska at Omaha . Adam also holds CCNA, GCFA, and GSNA certifications.

Kothz, Don

Don Kohtz is the Director of Investigative & Compliance Solutions with Continuum Worldwide.  He was formerly an Assistant Attorney General for the State of Nebraska, the Fraud Bureau Chief at the Nebraska Department of Insurance, and was legal counsel to insurance companies and financial institutions.

Don has presented and published articles on the topics of fraud, risk mitigation, and compliance matters.  He has investigated matters involving fraud, white collar crime and unethical behavior.

Don holds a Bachelor of Science degree, a Doctorate of Jurisprudence, and is certified as a HIPAA Professional (HIPPAP).  He is a member of the Nebraska Power Review Board, which regulates Nebraska’s publicly owned electrical utility industry.  He is a former executive board member of the Nebraska Crime Stoppers, Inc., and the Heartland Chapter of the Association of Certified Fraud Examiners (ACFE).  He is an associate member of both the local chapter and the national organization of the ACFE.  He is a recipient of the Distinguished Achievement Award from the ACFE for his efforts in the fight against fraud.

O'Gorman, James

Jim O'Gorman (GCIA, GCFA, CISSP) is an information security specialist who has been online long enough to remember saying "Who needs this http thing when all the good content is on gopher?". Currently working in Lincoln as IT Director for a local publisher, Jim lives in Omaha, Nebraska with his wife and two sons. Jim works under the two rules of "Learn how the underlying technology works and then you never have to worry about learning a new implementation." and "Security happens as a natural result of doing things right from the beginning, not as a secondary goal to pursue separately.”

Jim can be contacted at http://www.elwood.net/. He will also be running SANS "System Forensics, Investigation and Response" local mentor class in Omaha, NE starting Aug, 30th 2007.
Synop:  Ever get curious as to what is going over the wire, what is being sent from machine to machine on your network? If so, chances are you have ran a packet sniffer. Even though many network sniffers will interpret the data for you, odd are you have also seen the packet represented in hex as well. These hex dumps show up a quite a bit, and anyone using an IDS is sure to be very familiar with them.

Pearson, Lee

Lee Pierce is a consultant with Continuum Worldwide.  He was formerly employed, at two Fortune 500 companies, as a contract coordinator, business analyst and senior special investigator.

Lee’s professional experience includes investigating insurance fraud, white collar crime, and unethical corporate behavior. He has lead professionals through training workshops concerning insurance fraud, employee empowerment and team building.

Lee has a Bachelors degree in Criminal Justice and a Masters Degree in Human Relations.  He is an active member in his community and former chairperson of the Eastern Nebraska Anti-Fraud Association.  He is also an associate member of the Association of Certified Fraud Examiners.

Schreiner, Jeff

Jeff Schreiner (CISSP) worked for Mutual of Omaha Insurance Company for 9 years and now is the president of Continuum Worldwide - a subsidiary of Mutual of Omaha.  He has managed Security Compliance and Risk Management organizations and his responsibilities have included the creation of corporate-wide Information Security programs.  Jeff established information security policies, technology, risk assessment, awareness and incident response programs and has been responsible for compliance efforts related to State and Federal safeguarding regulations.  His programs have received national recognition by the Center for Medicare and Medicaid Services for best practice entity-wide security.  He has presented regionally and nationally on the topic of information safeguarding.

Prior to his current role, Mr. Schreiner served on the Mutual of Omaha’s Systems Management, Disaster Recovery, Infrastructure and Human Resource Advisory boards.  In 2005, Jeff received the Mutual of Omaha Chairman’s leadership award.


Woerner, Ron

Ron Woerner is a CISSP, IAM, CEH and CHFI with over 17 years experience in multiple industries. He graduated from Michigan State and Syracuse Universities and has worked for the US Air Force, State of Nebraska, Mutual of Omaha, and ConAgra Foods. He has spoken at the RSA Conference, the CSI Conference, CERT, Infotec and Information Security Decisions.  He is also on the Information Security Magazine Advisory Board. 

Zill, Greg

After ten years in the restaurant industry, Greg decided to get into technology. After obtaining an Associates Degree, he started programming with UNIX on IBM RS-6000 and some HP RX9000 iron. After a couple of years, he moved into System Administration of about 500 of these AIX and HP-UX systems. Greg has basically been in System Administration ever since for a national telecommunications company, an global cellular hardware provider, a securities broker, a national news organization, an online retailer and, finally, a global security services provider. He acquired the CISSP Security accreditation in 2005 as a result of employer need and has been teetering in both System Administration and Security disciplines exacting security engineering principles and enforcing security policy. Greg later moved into Linux and then Windows Administration and every imaginable enterprise application and network topology in between. Going back to the food metaphor was just too irresistible for this one.

Blaine Burnham, Ph.D.

 
Areas of Expertise

Information security and cyberterrorism.
 
Perspectives
 
Dr. Burnham's professional experience has provided him with the background to assess issues relating to information security and cyberterrorism:
 Believes that as the world becomes vitally dependent on networks of computers, it at the same time becomes increasingly and dangerously vulnerable to cyberterrorism.
 Thinks the threats of cyberterrorism range from something as simple as the hacking of a home-based personal computer to that of shutting down a company, power grid, communications system, military operation or entire government.
 Believes that in spite of the severity and immediacy of the problems, there is today an acute shortage of people and programs to meet the ever-increasing, critical challenges of cyberterrorism.
 
Academic Credentials
 
Dr. Burnham received a Ph.D. in Mathematics from Arizona State University in 1972, after having earned a M.S. in Mathematics from Arizona State four years earlier. He received a B.S. degree in Mathematics in 1966. He completed three years of post-graduate studies at the University of New Mexico in Heat Transfer, Fluid Mechanics and Thermodynamics.
 
Professional Credentials

Dr. Burnham has been the director of Nebraska University Consortium on Information Assurance and a senior research fellow for the College of Information Science and Technology for three years. He has served as technical advisor for the U.S. delegation to the NATO Office of Security, Technical Working Group (1991- 1992), a member of the Network Security Group of the National Secure Telecommunications Advisory Council and as vice chairman of the Research and Technology Working Group for the Security Policy Board. From 1998-2000, he was director of the Georgia Tech Information Security Center. Previously, Dr. Burnham worked in a variety of information assurance roles at the National Security Agency (NSA), Los Alamos National Laboratory and Sandia Laboratory. He also has done pro bono consulting with Information Security for the oil, gas and defense industries, specifically covering risk management and secure architectures and assurance studies. In addition, Dr. Burnham has been a member of the Computer Science Department Advisory Council for San Jose State University.