Friday, November 03, 2006

DoD CyberCrime 2007

Right now, I'm scheduled to present on Windows Memory Analysis at the DoD CyberCrime 2007 conference. I'll be presenting early on Thu morning. This presentation will be somewhat expanded over the one I gave at GMU2006, and even though I've submitted the presentation for approval, I'm hoping that between my day job and writing my book, I can put some additional goodies together.

Going over the agenda for DC3, there seem to be some really good presentations, from Wed through Fri. I'd love to see/hear what Bill Harback is talking about regarding the Registry, and I see that Charles Garzoni will be talking about hash sets. Also, Alden Dima is talking about NTFS Alternate Data Streams, something near and dear to my heart.

Interestingly, there are a total of (I count) four presentations about Windows memory. Tim Vidas and Tim Goldsmith are presenting, as is Jesse Kornblum (title: Recovering Executables from Windows Memory Images). This topic must be getting pretty popular. I hope to have the opportunity to meet with many of the folks presenting and attending the conference.


Anonymous said...

Sigh. Looks like a better conference than ever (I've been to the last two). But why oh why OH WHY did they have to move it from sunny warm Tampa (on a beautiful resort/PGA tour golf course) to a hotel in St. Louis? In January! I think attendance will be way down this time.

Sorry Harlan, I know you have nothing to do with that, I just had to rant. :)

H. Carvey said...

Well, I can think of one reason why they moved it. Several years ago, I gave a presentation at the BlackHat Windows Security Conf, held in New Orleans during Mardi Gras. While the numbers of people attending the conference seemed to be good, the numbers of those people actually AT the conference weren't so good.

From a business/money perspective, having a conference at a nice resort with lots of great things to do is brings people in, and gets folks registered. However, with all the good things to do, there's no reason for them to actually attend the presentations...

Anonymous said...

I heard it was because the Westin priced them out of the running this year - if you looked at the prices, the rooms were being offered at a significant discount, which I guess they decided they didn't want to do this time.

I think St. Louis was selected this year because of the golf courses and riverboat casino nearby ;)