Workshop participants can choose one of two tracks for pre conference workshops that will each run from 1-5pm on Monday July 11 – cost $49 (in addition to the cost of the conference).  

Tech Track:

SQL Injection: Pitfalls and Prevention Workshop

SQL injection refers to an injection attack wherein an attacker can execute malicious SQL statements that control a web application’s database server.  Since an SQL injection vulnerability could possibly affect any website or web application that makes use of an SQL-based database, the vulnerability is one of the oldest, most prevalent and most dangerous of web application vulnerabilities.

Presenters:  Jonathan Crossett and/or Elijah Gagne – Database Administration, ITS, Dartmouth College

Email Protection with SPF, DKIM, and DMARC

Enterprise sender identity technologies—SPF, DKIM, and DMARC—when properly implemented and incorporated into your email security strategy, can help secure organization e-mail and mitigate the risk of phishing campaigns. SPF, DKIM, and DMARC are public domain frameworks that can assist higher education institutions with the authentication of e-mail senders and integrity of messages.

Presenter: Doug Plumley – Application Infrastrucure Group - Information Technology Services, Dartmouth College

Risk Management Track:

Spiders, Tornadoes, and Deterministic Sensitivity?  How the Discipline of Decision Analysis can help Manage Cyber Security Risk

This interactive (and dare we say entertaining!) workshop will introduce the concepts of Decision Analysis from a cyber security perspective.  Business leaders have benefited from such methodologies to make strategic decisions focused on "decision quality" and "value-creation".  Leveraging these same methods can help cyber security professionals overcome cognitive and motivational biases, address uncertainty, and tackle challenging risk management decisions.

Presenter: Adam Goldstein – IT Security Engineer - Information Technology Services, Dartmouth College