Friday, September 11, 2020 2pm to 4pm, GM Meeting Notice (Virtual)

DATE:September 11th, 2020
TIME:2:00pm to 4:00pm (PST)
VENUE:Zoom Online meeting
Please obtain passcode to enter meeting from email confirmation

RSVP Required – register at Zoom
TOPIC(S):Homomorphic Encryption
PRESENTER(S):  Rob Slade
No Eventbrite registration required – register using the Zoom link. Please check your email for the Zoom password after you register. 

A portion of this meeting will be dedicated to the AGM. To confirm executive positions and any other decisions we will be using Zoom polls where possible.

Abstract:  Recently security operations have become very excited about homomorphic encryption. It seems to be the latest “magic” security technology that will solve all our problems, but I don’t think we’ve really provided a good outline of what it is, and, particularly, what it can’t do.

This presentation will outline the basic concepts, note some specific forms and applications, and point out the various factors for use or consideration.

A longer outline of this talk is available at https://community.isc2.org/t5/T/H/m-p/26922/highlight/true#M1683

Biography:
Ebo Fynqr znl or na vasbezngvba frphevgl naq znantrzrag pbafhygnag sebz Abegu Inapbhire, Oevgvfu Pbyhzovn, Pnanqn, be ur znl or na negvsvpvny vagryyvtrapr cebtenz tbar ubeevoyl jebat, naq ubbxrq hc gb inevbhf rznvy nqqerffrf.  Zber vasbezngvba guna nalbar jbhyq jnag gb xabj nobhg uvz vf ninvynoyr ng uggc://ra.jvxvcrqvn.bet/jvxv/Eboreg_Fynqr

https://cryptii.com/pipes/rot13

August 14th, 2020 Meeting

DATE:August 14th, 2020
TIME:2:00pm to 4:00pm (PST)
VENUE:Zoom Online meeting
Please obtain passcode to enter meeting from email confirmation

RSVP Required – register at Zoom
TOPIC(S):The Clutter that’s Choking AppSec
PRESENTER(S):  Rahul Raghavan (Co-Founder and Chief Evangelist, we45)

ABSTRACT

Increasingly shorter agile development sprints and mandatory security
assessments are putting pressure on product teams to deliver secure applications faster
than ever. Further, inorganic adoption of security tooling sometimes creates information
overload that does more harm than good.


What’s going wrong:
• Results from SAST, DAST and SCA tools create large vulnerability data sets that are
difficult to act upon.
• Automated scan results from security tools are replete with false positives and duplicate
entries that make remediation troublesome.
• Manual methods of triaging vulnerability data sets are inefficient and lower productivity.
• Improper vulnerability management increases friction between security and engineering
teams.

What the audience will glean from this talk:
• How automated methods of vulnerability correlation and de-duplication can significantly
reduce your AppSec testing time.
• How to effectively integrate vulnerability remediation with the engineering workflow.
• Understand the basic anatomy of a vulnerability to effectively prioritise and fix security bugs faster and better!


Why should they care:
• Without a change in approach, application security professionals and engineering teams
will continue to delay development schedules and product release dates, or risk releasing a
product that is not entirely secure.


Who should attend:
• Security professionals who face problems managing vulnerabilities.
• Engineering teams who find the current vulnerability remediation workflow problematic.
• CISO’s who want to lay down a mature and efficient AppSec Program.

BIOGRAPHY

Rahul is the Co-Founder and Chief Evangelist at we45.


The sheer pervasiveness of applications, their associated software engineering process and therefore the variance of application security quotient across software teams is what drives Rahul’s primary role as an AppSec Advocate at we45.


Having worked on both the building and breaking sides of product engineering, Rahul
appreciates both the constraints and the opportunities of imbibing security within the
software lifecycle. This understanding created a natural segue for we45’s custom security
solution engineering and enhanced AppSec service delivery models for its global customers.


As an active DevSecOps Marketer, Rahul works closely with the offices of CTOs and CIOs
in the setting up of cross functional skill building and collaboration models between
engineering, QA and security teams to build and manage software security maturity
frameworks.


Rahul is Certified Information Systems Auditor (CISA) and is a regular speaker at global
conferences, seminars and meetup groups on the following topic areas:
1. Application Security Automation and DevSecOps
2. AppSec Tooling
3. Threat Modeling in Agile Engineering
4. QA: Security Mapping
5. Automation ROI Modelling
6. AWS Security
7. Secure Software Maturity Models

 RSVP Required – register at Zoom

July 10th, 2020 Meeting

DATE:July 10th, 2020
TIME:2:00pm to 4:00pm (PST)
VENUE:Zoom Online meeting
Please obtain passcode to enter meeting from email confirmation

RSVP Required – register at Zoom
TOPIC(S):The business of measuring security
PRESENTER(S):  Gary Hinson

ABSTRACT

Although quantifying things is an essential part of rational management, measuring is particularly challenging in the arcane field of information risk and security. Gary will be sharing his Hinson tips on selecting security metrics that work, both for infosec pros like us and for the businesses we serve. Pull up a chair and put your brain in gear. Audience participation is not merely permitted: it’s encouraged.

BIOGRAPHY

Gary Hinson lives at the end of the world, not only down under in New Zealand, but so far off the beaten track that nobody can find him. (Talk about security by obscurity.) Despite this, he advises international companies on information risk and security matters, providing excellent policies, awareness materials and strategies. He is a long-time active member of the CISSPforum, a Certified Usual Suspect. He has a long-abiding interest in the ISO27k standards, running the ISO27k Forum supporting 4,000 fellow ISO addicts. He has written the book (well, a book, anyway) on security metrics which is very pragmatic. (All will become clear during the session.) (Well OK, maybe not all but he’ll do his best)

RSVP Required – register at Zoom

CANCELLED – April 2020 Education Session

PLEASE NOTE THE MARCH MEETING WAS CANCELLED, WE ARE TENTATIVELY MOVING OUR SPEAKER’S TALK TO APRIL INSTEAD. WE WILL KEEP YOU POSTED IF THERE ARE ANY FURTHER CHANGES.
 
Presented by Vancouver Security SIG, (ISC)² Vancouver Chapter, and ISSA Vancouver Chapter
 
Friday April 17th from 2:00 PM to 4:00 PM (PST)

Featured Presentation Topic(s): Homomorphic Encryption

Speaker(s): Rob Slade (M. Sc.)

Continue reading “CANCELLED – April 2020 Education Session”

CANCELLED – March 13th, 2020 meeting

DATE:March 13th, 2020
TIME:2:00pm to 4:00pm (PST)
VENUE:KPMG Campus – 11th floor
777 Dunsmuir Street, V7Y 1K3, Vancouver B.C.Please be punctual for entry to the meeting room
RSVP Required – register at Eventbrite
TOPIC(S):Homomorphic Encryption 
PRESENTER(S):  Rob Slade (M. Sc.)

PLEASE NOTE THE MARCH MEETING WAS CANCELLED, WE ARE TENTATIVELY MOVING OUR SPEAKER’S TALK TO APRIL INSTEAD. WE WILL KEEP YOU POSTED IF THERE ARE ANY FURTHER CHANGES.
Continue reading “CANCELLED – March 13th, 2020 meeting”

Jan. 10, 2020 2:00pm — 4:00pm

compiledcode
DATE January 10th, 2020
TIME 2:00pm to 4:00pm (PST)
VENUE KPMG Campus – 11th floor
777 Dunsmuir Street, V7Y 1K3, Vancouver B.C.
Please be punctual for entry to the meeting room
RSVP Required – register at Eventbrite
TOPIC Business Transformation through Enterprise Security – powered by Artificial Intelligence and Machine Learning
PRESENTER Deepak Ranjan Rout (Executive Security Advisor, Microsoft)
Continue reading “Jan. 10, 2020 2:00pm — 4:00pm”

Dec. 13, 2019 2:00pm — 4:00pm

compiledcode
DATE:November 8th, 2019
TIME:2:00pm to 4:00pm (PST)
VENUE:KPMG Campus – 11th floor
777 Dunsmuir Street, V7Y 1K3, Vancouver B.C.Please be punctual for entry to the meeting room
RSVP Required – register at Eventbrite
TOPIC(S):Evolution of payments security and threat landscape. How PCI standards are evolving to support security needs of the industry
PRESENTER(S):  Emma Sutcliffe (Senior Director, Data Security Standards, PCI Security Standards Council)
Continue reading “Dec. 13, 2019 2:00pm — 4:00pm”