Mr. Gula is known in the global security community as a visionary, innovator, and engineer of extraordinary talent. He traces his passion for his work in security to starting his career in
information security at the National Security Agency conducting penetration tests of government networks and performing advanced vulnerability research.

Since co-founding Tenable in 2002, Mr. Gula has been CEO and CTO at Tenable, maker of the world renowned Nessus Vulnerability Scanner and Unified Security Monitoring enterprise solution. As CEO/CTO of Tenable, he is responsible for product strategy, research and development, and product design and development. Mr. Gula is also a leader in his community and a passionate advocate for
education and scientific research.

Prior to Tenable, Mr. Gula was the original author of the Dragon IDS and CTO of Network Security Wizards which was acquired by Enterasys Networks. At Enterasys, Mr. Gula was Vice President of IDS Products and worked with many top financial, government, security service providers and commercialcompanies to help deploy and monitor large IDS installations. Mr. Gula was also the Director of RiskMitigation for US Internetworking and was responsible for intrusion detection and vulnerabilitydetection for one of the first application service providers. Mr. Gula worked for BBN and GTE Internetworking where he conducted security assessments as a consultant, helped to develop one of the first commercial network honeypots and helped develop security policies for large carrier-class networks. Mr. Gula began his career in information security while working at the National SecurityAgency.

Mr. Gula has a BS from Clarkson University and an MSEE from the University of Southern Illinois. Ron Gula was the recipient of the 2004 Techno Security Conference "Industry Professional of the Year" award.

Topic:

Ron Gula will discuss how organizations should leverage the strengthsand weaknesses of their security monitoring technology. Does your NIDSlook into SSL traffic? Does your network scanning find client side
vulnerabilities? Does your SIM really help you find compromised servers?If you are gathering logs, do you have any idea what you are looking for in them? This talk will help you understand how you should be using security monitoring technology that you likely already have and make better
decisions about the types of monitoring and reporting you need to add in the future.