Aaron Riley

This presentation talks about logging and monitoring. This subject is backed with real world scenarios and technical details. We will discuss how to set up a network logging program as well as how to parse the logs. After discussing how to parse the logs we will need to monitor for any unusual or malicious activity. We will discuss how to set up alerts for any unusual criteria we have set. By doing this you will easily be more capable of finding the bad actor/actors within your network.

This session will focus on web injections and how they can give a malicious actor insight into your network. We will cover cross site scripting (XSS), Structured Query Language (SQL) injections, and Local File Inclusion (LFI) injections. We will show real world examples as well as a live demonstration of the injections and techniques used. This will be a basic informational session on how these techniques work and how to avoid them with your internal web page code.

The theme of the talk is to show how to be effective doing the basics within cyber security. We will cover the NIST framework as well as the OWASP top ten. The audience should walk away with a better understanding of what they can do for a cyber security program within any size business. This presentation is also for people who already understand the basics of cyber security by giving them confirmation they are covering the basics within their established programs. The goal of this session is to give a better insight of what the basics of cyber security are and how they can be accomplished.