Network Security Podcast

Rich is on paternity leave, Zach is caught up at work and Martin is suffering from sleep deprivation, so we brought in Mike Rothman once again to pick up the slack and suffer the slings and arrows of recording a podcast.  We have to apologize for a minor mixup last week, a link to episode 209 was accidentally included in the show notes, so iTunes picked up on that as episode 210.  We fixed it the next morning, but it was already too late for a lot of people.  And despite the fact that Martin is confused and call this Episode 212 at the beginning of the podcast, it really is 211.

Network Security Podcast, Episode 211, September 7, 2010
Time:  36:03

Show Notes:

• Witty Banter (It’s in the show notes, it must be in the show)
• One Page to Share with Your Management
• NSA Director says US has a duty to secure the Internet 
• The 13th Requirement
• TechCrunch purges Zeus malware attack
• Every week 57000 fake web addresses try to infect users
• Alert:  Massive new survey worm spreading on Facebook
• The Twitter XSS post-game show
• Tonight’s music:  Black Coffee – Caffeine Remix by Chaz

Well, Martin, Rich and Zach all survived another trip to Las Vegas and the trio of conventions known as Black Hat, Defcon and Bsides. Our livers might argue that, but we ignored their cries last week and will probably continue to do so. We discuss a few of the presentations we saw, including the GSM and ATM breaking sessions, as well as the new vulnerability in Safari that uses a PDF rendering issue to jailbreak iOS devices, such as iPads and iPhones. And Zach got to be on the radio this week; now Martin is the only one left out.  Tonight’s episode is a little rough; Zach is on a cell phone and Martin is in Texas, so Rich gets to do all the fun stuff for a change.

Network Security Podcast, episode 207
Time: 30:00

Cisco recently released the 2010 Midyear Security Report and I caught up with one of the principal authors, Mary Landesman, Senior Security Researcher at Cisco.  Mary talks about the outcomes of the report and how the security landscape is changing.

NSP-BHDC2010-MaryLandesman.mp3

Rich and Zach are still sweltering in their perspective heat waves, but Martin managed to nab an interview with Bob Russo, the head of the PCI Security Standards Council. We also cover a couple of stories and some honest to goodness listener mail!

Network Security Podcast, Episode 205, July 13, 2010
Time:  44:44

Show Notes:

• Listener Mail
• Interview with Bob Russo
• FBI Raids ‘Electronik Tribulation Army’ Over Witness Intimidation.
• Letter to the client.
• Tonight’s Music:  Missing You by Blue Matters

New show. Zach late. Show still good. Martin’s birthday. Mongo like.

Network Security Podcast, Episode 203, June 29, 2010
Time: 32:57

Show Notes:

• The National Strategy for Trusted Identities in Cyberspace.
• Sen. Bond says DHS shouldn’t oversee cybersecurity.
• Why the disclosure debate doesn’t matter.
• Disclosure via court.
• Tonight’s music: All India Radio with Endless Night

We’re old-school this week since Zach was on the road and Martin and Rich managed to keep the show to under 30 minutes. And that’s despite our “witty banter” section running a tad long.

Network Security Podcast, Episode 202, June 22, 2010
Time:  29:21

Show Notes:

• Napolitano: US must balance liberties, security
• Doing Well by Doing Good (and Protecting the Kids)
• Better iPhone Encryption
• The WAF vs. SDL debate
• Tonight’s music:  Alex Cebe with Blue Clouds

Though away in sunny (cloudy?) Miami, FL at the FIRST 2010 Conference, Martin still manages to join Rich and Zach on tonight’s show — with a special guest, no less — friend-of-the-show Chris Hoff. Martin and Chris share a couple of highlights from the conference, most notably a talk from Google’s Heather Adkins discussing Google’s response to the “Aurora” attack. Rich snags an interview with web security researcher and consultant Mike Bailey. Finally, Rich and Zach begin rambling about vulnerability disclosure, but cut themselves off (as they could go on for days and days about the subject).

Network Security Podcast, Episode 201, June 15, 2010
Time: 52:58

Show Notes:

• FIRST 2010 Conference
• For Google, DNS log analysis essential in Aurora attack investigation
• Microsoft Windows Help Centre Handles Malformed Escape Sequences Incorrectly
• Rich’s Interview with Mike Bailey
• Tonight’s music:  Nada

Last week I had a chance to talk to Phil Reitinger, the Deputy
Undersecretary for the National Protection and Programs Directorate as
well as the Director of the National Cybersecurity Center.  Mr.
Reitinger shares a little of his challenges and accomplishments at the
Department of Homeland Security and talks briefly about his keynote
presentation at this year’s FIRST Conference.

2010.2: 
DUS Reitinger, US Department of Homeland Security