President
Data Security
Tim Pierson has been a technical trainer for the past 23 years and is an industry leader in both Security and Virtualization. He has been the noted speaker at many industry events including Novell's Brainshare, Innotech, GISSA and many military venues including the Pentagon and numerous nuclear facilities addressing security both in the US and Europe. He is contributor to Secure Coding best practices and Coauthor of Global Knowledge Windows 2000 bootcamp. Current projects include contributing author of "VMware Virtual Infrastructure Security:-Securing ESX and the Virtual Environment" to be released April 2009 by Pearson publishing and has done work for the bimonthly Virtualization Security Roundtable Podcast available as a download on iTunes and Talk Shoe.
Topic 1:
Security of Virtualization as a Service, the key to Cloud Security (Joint Presentation with Edward Haletky)
Securing Virtualization as a Service is the beginning to securing the
Cloud. However, in order to understand how to secure virtualization as
a service we need to understand the fundamentals of virtualization
security as well as the complexities involved with unified network
fabrics.This presentation will show how all the pieces fit together so
that you can create a secure virtualization as a service; the
beginnings of the Cloud.
Topic 2: (Reserve)
Secure Coding
The Applications that run on our servers, desktops, and networking equipment are the attack surface that hackers currently target. At one time it was the operating systems that were vulnerable. Now it is the applications that run on these operating systems. Microsoft and others have done a pretty good job and tightening up their exposed attack surfaces at the operating system level, but if an application runs at the same authority as the operating system or administrator or root then a breach of those applications would result in the same failure as the operating system itself. In this course we teach the developers and security personnel that oversees departments that run custom tailored or specifically crafted applications how to secure them. We go into depth to explain each vulnerability and then map that back to a particular language where it would apply. The course is not language specific although knowing a programming language or at least program logic is required. You will be exposed to today's modern languages and what makes them secure or in some cases insecure. And mostly how to secure what you yourself are developing.