Press Releases


MANDIANT Experts to Spotlight the Advanced Persistent Threat at US-CERT’s 5th Annual GFIRST National

Aug 21, 2009
Led by MANDIANT President and CEO Kevin Mandia, five in-depth presentations will spotlight technical and authentic details of the Advanced Persistent Threat (APT) and other computer security incidents

Presentation schedule:

Tuesday, August 25 – 1:00 pm – 2:00 pm
Kevin Mandia, President & CEO
The Evolution of Incident Response

Tuesday, August 25 – 3:45 pm – 5:00 pm
Rob Lee, Director
Live Incident Response:  Memory Analysis

Wednesday, August 26 – 10:30 am – 11:30 am
Jay Smith, Principal Consultant, and Scott Roberts, Consultant
Root Cause Analysis:  What You Find When You Look for It

Wednesday, August 26 – 10:30 am – 11:30 am
Wendi Rafferty, Director
The State of the Hack – Combating the Advanced Persistent Threat

Wednesday, August 26 – 1:00 pm – 2:00 pm
David Ross, Principal Consultant
Hammering Down the Nail

MANDIANT Corporation, a leading provider of incident response and computer forensics solutions and services, today announced their experts will spotlight the Advanced Persistent Threat (APT) and other computer security incidents seen at large organizations over the last year.

Presentations will be delivered at US-CERT’s Fifth Annual GFIRST National Conference, Aug. 25 and 26, at the Omni Hotel at CNN Center in Atlanta. US-CERT is the operational arm of the National Cyber Security Division (NCSD) at the Department of Homeland Security (DHS), and is a public-private partnership.

MANDIANT President and CEO, Kevin Mandia, will lead-off the five presentations with The Evolution of Incident Response, on Aug. 25.

“Over the last ten years, we have witnessed a shift in the motivation driving the perpetrators of computer security breaches,” Mandia said. “What was once a purely technical problem that served, at worst, as a nuisance to IT organizations, has become both a significant business concern and an issue of national security.”

The APT is a sophisticated and organized cyber attack focused on accessing and stealing information from compromised computers. Typical APT intruders target the defense industrial base, as well as the financial, manufacturing and research industries.

During his presentation Live Incident Response:Memory Analysis, Rob Lee, a director at MANDIANT, demonstrates how organizations can use live memory collection and analysis to combat sophisticated threats.

In State of the Hack - Combating the Advanced Persistent Threat, MANDIANT Director Wendi Rafferty will share information on specific threat vectors used by attackers and how attacks can escalate once incident response capabilities and remediation attempts have been observed.

Another MANDIANT presentation, Root Cause Analysis: What you find when you look for it, Principal Consultant Jay Smith and Consultant Scott Roberts will showcase a major federal agency’s cyber-security mission: the creation of a Security Operations Center designed for unified, coordinated network security monitoring and incident response.

In Hammering Down the Nail, MANDIANT Principal Consultant, David Ross, will pinpoint new ways to find the APT and scope the occupation of a victim network to allow for effective remediation.

For more information on US-CERT, please visit http://www.us-cert.gov


About MANDIANT

MANDIANT is the information security industry’s leading provider of incident response and computer forensics solutions and services. Headquartered in Alexandria, Va., with offices in New York, Los Angeles, San Francisco and Reston, Va., MANDIANT provides products, professional services and education to Fortune 500 companies, financial institutions, government agencies, domestic and foreign police departments and leading U.S. law firms. MANDIANT comprises one of the industry’s largest incident response and forensics forces. The authors of eleven books, MANDIANT security consultants and engineers hold top government security clearances and certifications and advanced degrees from some of the most prestigious computer science universities. To learn more about MANDIANT visit www.mandiant.com, read M-unition, the company blog: http://blog.mandiant.com, or follow on Twitter @MANDIANT.