OWASP MSP PRESENTS

 

David M. N. Bryan

Do VLANs allow for good application security?

 

Date: Monday, April 26th, 2010

Location / Venue Sponsor: US Bank, 2751 Shepard Rd, St Paul MN 55116 

(You must register in advance for this meeting to be admited to US Bank location.)

Agenda:

5:30 PM Room opens for networking

6:00 PM Welcome: OWASP chapter updates

6:15 PM David M. N. Bryan - Do VLANs allow for good application security?

8:00 PM Upcoming events reminder and meeting wrap-up

Thank You: US Bank for sponsoring our meeting location. Please contact Lorna at lorna.alamri@owasp.org or 651-338-0243 if you would like to sponsor a meeting or meeting location for an upcoming OWASP meeting.

Speaker Topic:

Virtual Local Area Networks (VLANs) are not a new concept, and can help any organization better control network access. David will present some of the previous issues identified, what was the root cause, and how these have been fixed in current technology. In addition he will talk about how this can help to enhance security in your environment, and what controls must be in place in order to implement such an environment. He will also touch on how this can complicate your application environment, but improve overall security.

David will touch on the controls that need to be reviewed and audited when working with VMware, VLANs, and web applications to ensure that these networks are secure, and what to look for to potentially pass audit criteria. He will also talk about where and how these controls have been implemented in order to protect thousands of users while accessing one of the most hostile networks in the world.

Speaker Bio:

David has over 9 years of computer security experience, including consulting, engineering, and administration. He has performed security assessment projects for health care, nuclear, manufacturing, pharmaceutical, banking and educational sectors. As an active participant in the information security community, he volunteers at DEFCON where he designs and implements the Firewall and Network for what is said to be the most hostile network environment in the world.

He is also an active participant in the local Minneapolis security groups both as a board member of OWASP MSP and DC612. His roots and experience come from working for a large enterprise bank, and designing and managing enterprise security systems. In the more recent years he has been working as an Information Security Consultant to review the security and architecture of information computing environments.