Meet Marty in Tokyo or New York

Hey Everyone,

Here's your chance to come meet Marty as he travels the globe presenting =
on
Snort! In the next few weeks, he'll be in 2 of the biggest technology =
hubs
in the world: New York City and Tokyo.

On November 10th, Marty will be at New IBM's New York office (590 =
Madison)
at the first meeting of the New York City Snort Users Group, presenting =
on
Target Based Snort: The Future of the Industry. The meeting will begin =
at
5:30 pm, and run until 7:00 pm. There will be cocktails provided =
afterward
at a location not yet determined. A full description of the topic is =
below:

First generation solutions, including IPS, suffer from lack of =
information
that leads to ambiguity - sensors operate with no compositional =
knowledge of
the network components they are defending, leading to false
positives/negatives and evasions. To solve this, Sourcefire is =
developing a
target-based detection engine that auto-configures itself in real-time =
based
on the attributes of the targeted system. This methodology requires a
continuous feed of all the attribute data for all the devices on the
protected network, even as it evolves - information provided by =
Sourcefire
RNA. The system will work by feeding attribute data from RNA, enabling
policy application to occur at a per-flow level of granularity, which =
will
maximize the blocking capability while minimizing chances of accidental =
DoS
as a result of false positives or misapplication of policies to improper
targets.

Register now at http://www.snort.org/registrations/rsvp.html.
NOTE: Registration is required for building access!


Then, on November 14th, immediately preceding the PacSec/core05 =
conference,
Marty will be teaching a Security Masters Dojo in Tokyo's Aoyama Diamond
Hall about Advanced IDS Deployment and Optimization. Attendees will =
learn
how to get the most from their Snort deployments from the man who =
started it
all.=20

Interested? Register at https://www.pacsec.jp/courses.html. Don't wait =
too
long, though, the courses max out at 10 students per session!=20

More information on Marty's dojo including pre-requisites and detailed
description can be found at http://pacsec.jp/dojoids.html.=20

Have questions about either of these events? E-mail
[email protected]. We look forward to hearing from you!

Thanks!

Jennifer Talcott
Sourcefire Marketing




-------------------------------------------------------
SF.Net email is sponsored by:
Tame your development challenges with Apache's Geronimo App Server. Download
it for free - -and be entered to win a 42" plasma tv or your very own
Sony(tm)PSP.  Click here to play: http://sourceforge.net/geronimo.php