Topic: Secure DNS, DHCP and IPAM – 20 minutes

• Importance of DNS as a foundational control in your organization
• How DNS is abused and misused by attackers
• Over 90% of attacks use tunneling – we will show you what this is and how it works
• Why “simple interception” is only a partial solution
• Demonstration of Data Exfil, attendees will ‘see this in action’

Presenter

Don Murdoch is a Security Specialist supporting the Ohio Valley Region at Infoblox.  The first half of Don’s career emphasized software development, network and systems management, and database administration. At his career midpoint, he worked as the Information Systems Security Officer for Old Dominion University in Virginia, where he spent most of his days in the Wild, Wild West of academic computing and put most of his SANS education to the test. For the remainder of his career, Don has worked in computer, network, and information security as the lead Security Engineer/Security Architect, and then Director for the Strategy and Planning team for the Infrastructure division within a Fortune 500 Medicaid focused Insurance company, Director of a 24/7 SOC MSSP organization, lead detection engineer for a Fortune 50 company, and is now the Security Director for the NetWintess division within RSA.

Don is the author of the Blue Team Handbook: Incident Response edition, #3 of 100 Best Cyber Security Books of All Time on bookauthority.com and BThB: SOC, SIEM, and Threat Hunting, a 5 star book changing SOC's worldwide. BTHb:SOCTH is adopted by many SOC teams and is reshaping how those teams conduct business. Many MSSP's, SOC's, and colleges worldwide use his books.

Topic – Rapid Fire-Chat – 40 minutes

Description:  This session of the meeting will get all the attendees involved.  We will be having a rapid fire-chat on IT topics which are top of mind with our members.  This session will engage each table and participants will help decide on the topics for the rapid fire-chat.  So, get ready to not only listen but to participate and help us make this a fun event.

About our Sponsor – Infoblox

Infoblox is the creator and Global market leader for DDI Technology (DNS, DHCP, IPAM).  As of late, Infoblox has instilled over twenty years of R&D experience into our Cloud Native DDI Platform: BloxOne, and the accompanying Enterprise Security Solution: BloxOne Threat Defense.  Infoblox delivers a consistent Core Networking experience and extends Secure DNS to Data Centers, Regional Offices, Remote Users, and all Public Clouds.  Additionally, Infoblox Customers find extended value through our API Integration, Reporting, Network Discovery, and Automation.