Hackers  Are Ready.  Are You?
 
September 20 - 25, 2009 Miami, Florida
   
Michael Scheidell | SECNAP

Founder/CTO

Michael Scheidell is a recognized expert, speaker and author in the network and data security community, with an extensive history of innovation and thought leadership in the security space.
 
Since founding SECNAP Network Security Corporation in 2001, he has aggressively pursued the development of security and anti-spam products and services in concert with well-known industry leaders. The impressive results include patent-pending intrusion detection technology and a revolutionary anti-spam product line, with three patents currently pending with the U.S. Patent and Trademark Office.
 
Prior to forming SECNAP, Mr. Scheidell founded Florida Datamation, a real-time network system integrator, and served as president and CEO. Responsible for managing marketing, OEM sales, research and development and engineering, he developed and distributed products and created international partnerships and distribution channels in the U.S., Europe, South America and Asia. Under his leadership, Florida Datamation grew to be the largest QNX distributor in the world. Mr. Scheidell began his entrepreneurial career in 1971 when he developed and sold his first computer software program to one of the original X.25 networks.
 
During his distinguished career he has discovered and resolved vulnerabilities that are currently represented on the Common Vulnerability and Exposures (CVE) list. A member of the FBI InfraGard program since 1996, Mr. Scheidell works with other information technology experts and educators to assist the FBIís investigative efforts in the cyber arena. He represents SECNAP in ICSA Labsí Anti-Spam Product Developersí Consortium, which is developing specifications and criteria for the ICSA Labs Anti-Spam Certification Program. He is a current member of the International Security Audit and Control Association (ISACA) and the Information Systems Security Association (ISSA) among others.

Topic:
 
Silver Lining. Dark Cloud. - What You Should Know About Security in The Cloud

It’s all the buzz. We read about ‘cloud computing’ or ‘computing in the cloud’ every day. It’s right up there with viral marketing in the Web 2.0 world.

Whether this marketing notion is simply a catchphrase that encompasses previous ASP, SaaS or Managed Software services, or is an accurate description of new options in service scalability and hardware virtualization—you can’t avoid having to confront it head-on, and fairly soon.

The silver lining promises scalability (“lease by the piece”) without substantial capital investment.  Instant CPU power and remote storage—virtually on demand.

But there’s a dark cloud behind that silver lining. Without knowing exactly what the cloud looks like, what’s in it, and where it is floating, you could be putting your company at risk.

For example, to gain flexibility and control costs, many healthcare organizations outsource their database servers or lease on-demand CPU cycles or remote data storage. Depending on where those cloud services are located, hard-won HIPAA compliance may suffer serious setbacks.

Or, if part of the cloud is in San Jose and another in India, for example, what is the impact on Sarbanes-Oxley compliance?  How can an organization be certain that SOX/ISO/SAS70 testing was done?

This presentation will bring clarity to the cloud by exploring its meaning in various contexts, examining how organizations leverage the cloud, and reviewing actions that information technology professionals can take to protect their companies and clients from cloudbursts.