Technical Sessions
Download the Program Guide for the National Homeland Security Conference in PDF format. You will need Acrobat Reader to open the document. Download Acrobat Reader, if you do not already have it.
Download the Conference Registration Form (PDF), print the form and either fax it to us at (412) 799-0271 or call us at 888-799-0270 with the registration information.
Session 1 Homeland Security & Emergency Preparedness
Session 2 Tools For Minimizing Security Risks
Session 3 Bio-terrorism, Aviation & Transportation
Session 4 Cyber Security & IT Solutions
SESSION 1 - HOMELAND SECURITY & EMERGENCY PREPAREDNESS
Wednesday Morning, February 25, 2004 · Grand Ballroom Salon 1
8:00 AM - 8:10 AM; Opening Remarks - Dr. Michael J. DiGeronimo, Technical Program Chairman
8:10 AM - 8:40 AM; Paper #1-1
Achieving Public Safety Communications Interoperability
Chuck Jackson, VP of System Operations, Motorola
Pubic safety communications interoperability is an imperative operating condition for all public safety agencies. This seminar will review the types of interoperability, highlight the best applications for each and discuss where they best fit in your organization's regional interoperability plan, both now and for the future. The presentation will focus discussions on gateways/patches and full standards based system solutions.
8:40 AM - 9:10 AM; Paper #1-2
Homeland Security: The Complete Picture
Christopher Faletra, Director of Sales, Newpoint Technologies, Inc.
September 11 represents a fundamental transformation in our understanding of how things work, and why things happen. Today’s distributed monitor and control/network management systems (NMS) collect information from all parts of your systems, provide immediate information via multiple transports (internet, wireless, POTS, satellite) and assist in Risk Management. By upgrading your existing system with today’s NMS your reaction time is reduced and your system will sustain minimal downtime.
9:10 AM 9:40 AM; Paper #1-3
Using Automation to Assure Compliance with the Federal Information Security Management Act of 2002
Chris Pick, VP of Market Strategy, NetIQ Corporation
The Federal Information Security Management Act of 2002 (FISMA) places significant new security management requirements on Federal computing environments. It also provides a significant oversight and management of security risks. Moreover, standards such as NIST Special Publications 800-37, 800-53 defines more specific objectives and requirements for security management. By attending this presentation, you will understand exactly how commercially available solutions can meet many of your FISMA-related needs.
9:40 AM 10:10 AM; Paper #1-4
Crisis Management Planning for Automotive Suppliers
Chuck Koehn, AIAG Loaned Executive from DaimlerChrysler Corp., Automotive Industry Action Group (AIAG) & Morris Brown, Materials Management Program Manager, Automotive Industry Action Group (AIAG)
Whether facing a critical incident or natural disaster, companies that have an active and validated crisis management program will have a much greater chance of staying in business than those that do not. Crisis management can prevent or decrease the risk when a natural disaster or other major business disruption occurs. The first guideline on crisis management for automotive suppliers, “AIAG’s Crisis Management Best Practices Guideline” forms the backbone of a comprehensive emergency management plan.
10:10 AM 10:30 AM; REFRESHMENT BREAK
10:30 AM 11:00 AM; Paper #1-5
Gain Control Over The Internet With A Globally Distributed Applications Infrastructure
Andy Ellis, CISSP, Chief Security Architect, Akamai Technologies, Inc.
The growth of Internet infrastructure needed to support the myriad demands of hundreds of millions of users has been explosive. But, there are problems with the Internet's infrastructure. Threats to online operations include distributed denial of service attacks, application-level penetration, protocol exploits, viruses, worms, physical disasters, and system failure. For example, the Code Red virus was designed to attack the White House web infrastructure. The recent Blaster worm was designed to attack Microsoft's web infrastructure. In other cases, a virus or worm can act as a Trojan Horse, leaving the infected computer in a vulnerable state. This session invites attendees to learn about the Internet's vulnerabilities, and the most secure way to deliver sensitive assets online by use of a distributed applications infrastructure.
11:00 AM 11:30 AM; Paper #1-6
The SAIC Public Safety Integration Center (PSIC)
James W. Morentz, Ph.D., Corporate Vice President, Homeland Security Technology, Science Applications International Corporation (SAIC)
As a full public safety solutions provider, SAIC, integrates Homeland Security/Defense (HLS/HLD) capabilities into a holistic “service and systems” approach. These solutions have been designed to meet specific customer problems, from cargo screening at the nation’s ports, to development of command and control applications for collaborative counterterrorism and weapons of mass destruction (WMD), incident response, to interoperability for the 2002 Winter Olympics in Utah (and now the 2004 Olympics in Athens), and extensive weapons of mass destruction training and exercises for first responders and the National Guard. SAIC has developed a Public Safety Integration Center in McLean, Virginia, where such integrated HLS/HLD solutions are demonstrated. This presentation describes the PSIC’s purpose, operation, and capabilities to date, and “use-case-based” demonstrations of these integrated holistic solutions.
11:30 AM 12 NOON; Paper #1-7
Hispanics in Cities and the USA Patriot Act
Prof. Al Gonzalez, PE, Affiliate Professor and Lecturer, University of Missouri-Rolla
This paper presents an assessment based on the latest Census of the various population centers having the largest concentration of Hispanic population in the United States, and based on facts theorizing the impact of the USA Patriot Act in view of its socio-political implications. The paper proposes ideas on how the Patriot Act can be implemented and the role the Hispanic community can play in supporting the introduction of this necessary legislation. The presentation is from the perspective of what the Hispanic Community can do to provide the necessary support and the possible information’s channels that should be used in order to support the required legislation to “Provide Appropriate Tools Required to Intercept and Obstruct Terrorism”.
SESSION 2 - TOOL FOR MINIMIZING SECURITY RISKS
Wednesday Afternoon, February 25, 2004 · Grand Ballroom Salon 1
1:10 PM 1:40 PM; Paper #2-1
Homeland Defense and the Radio Frequency (RF) Environment
Mark Rasor, Senior Systems Engineer, SAT Corporation
Since the World Trade Center attack, Americans have been working to reduce vulnerabilities in our infrastructure and increase the capabilities of first response teams to large disasters. This is no small undertaking, and while progress has been made, these efforts will continue for years. Emergency services and first response teams need reliable RF communication networks to operate effectively in response to sudden, large-scale disasters involving local, state and federal agencies. Accidental and intentional interference must be regularly and rapidly cleared from emergency bands. This paper addresses some wireless communications aspects of these activities.
1:40 PM 2:10 PM; Paper #2-2
An Integrated, Single Approach to Homeland Security, Executive Order 13148 and ISO 14001
Jerry Skaggs, P.E., Program Manager, Underwriters Laboratories, Inc.
Presidential Executive Order 13148, “Greening The Government Through Leadership In Environmental Management,” requires the implementation of an Environmental Management System. In addition, post September 11, 2001 Homeland Security issues require the identification of potential emergency situations (to include terrorist threats) and an appropriate response to mitigate the impacts of these threats. Implementation of an effective ISO 14001, Environmental Management System (EMS), addresses both requirements. This presentation will demonstrate how ISO 14001 EMS requirements provide a single, integrated management system able to minimize the cost and inefficiencies and reduce environmental liability.
2:10 PM 2:40 PM; Paper #2-3
Certifiable Change: An ISO 9000 Registrar’s Perspective on Effective Methodologies to Implement Management System for Homeland Security
Calin Moldovean, Product Director, Management Service, TUV America, Inc.
Our economic climate is one of constant change affected by restructuring industry standards and now the requirements of the new Homeland Security Regulations. History shows that implementing new standards and regulations requires human and financial resources. Such implementation projects are often costly and can create major disruptions in any organization. TUV is involved in the Department of Homeland Security and ANSI Panel (jointly called the HSSP) to help establish Security Certification Standards and Certification/Accreditation Policies. This presentation will help managers and officers to identify effective tools to implement change in order to accommodate Homeland Security Issues.
2:40 PM 3:10 PM; Paper #2-4
Committing to Security: A CompTIA Analysis of IT Security and the Workforce
Kris Madura, MBA, PMP, The Computing Technology Industry Association, CompTIA
Because of America’s growing dependence on IT networks, maintaining proper IT security has become a necessity. This presentation reveals highlights from “Committing to Security: A CompTIA Analysis of IT Security and the Workforce,” performed by NFO Prognostics in December 2002, surveying 638 U.S. public and private sector respondents who are associated with IT security in their organizations. The survey assessed security breach frequency and common causes, security resources, responsibility and enforcement practices, investment in security training and certification, and steps taken in response to governmental regulative and legislative mandates.
3:10 PM 3:30 PM; REFRESHMENT BREAK
3:30 PM 4:00 PM; Paper #2-5
Digital Video Surveillance Solutions: Protecting Homeland Security
Ray Patalano, Sr. Product Manager, Video Solutions, Vanguard Managed Solutions
Surveillance systems have undergone increased scrutiny in recent years due to the changing political and social landscapes of living in the 21st century. Today, the surveillance market is undergoing a significant shift from the traditional analog security model to a digital, fully integrated networked system, in order to meet the needs of the homeland security issues. The presentation will review numerous case studies of organizations that have recognized the need for managed surveillance systems, ranging from college campuses, state and local police departments to airports.
4:00 PM 4:30 PM; Paper #2-6
Using Computer Simulation To Validate and Improve Security and Prevention Procedures
Hosni Adra, Product Manager, CreateASoft, Inc.
Learn how process simulation software, currently used in manufacturing and service industries, can help in reducing risk and improving the overall responsiveness of new and existing security measures. Use the same tools to develop capacity planning, resource needs, and effective response time based on single or multiple scenarios.
4:30 PM 5:00 PM; Paper #2-7
An Integrated Approach to Security and Environmental Management: Results and Key Learnings From an Industry Pilot Project
John F. Milliman, PhD, Department of Management, College of Business, University of Colorado
& John W. Grosskopf. P.E. DEE, President, ERE, Inc., & Ozzie Paez, Simplicity Data Systems
This presentation will report findings on a federally funded grant from the Network Security and Space Systems Center (NISSC) at the University of Colorado at Colorado Springs to design and implement an integrated systems approach to security, environmental, health and safety management (SEH&S). Proven international standards (e.g. ISO 14001), best industry practices, and interviews with a broad spectrum of industry managers were used to model the approach and the applications. This presentation will report key findings and lessons learned from this pilot project and present implications for new approaches and practices for organizational homeland security programs.
SESSION 3 - BIO-TERRORISM, AVIATION & TRANSPORTATION
Thursday Morning, February 26, 2004 · Grand Ballroom Salon 1
8:10 AM - 8:40 AM; Paper #3-1
The Economic Impact of A Bioterrorist Attack: Are Prevention and Post-Attack Intervention Programs Justifiable
Martin I. Meltzer, MS, Ph.D., Center for Disease Control (CDC)
Martin Meltzer is Senior Health Economist, National Center for Infectious Diseases, Center for Disease Control and Prevention (CDC). His presentation will review the cost-benefit and cost-effectiveness analyses of health interventions for use of health technologies, such as vaccines, used for the purpose of counter-terrorism. Much of his work is multidisciplinary and has included potential responses to smallpox as a bioterrorist weapon; evaluating the cost effectiveness of Lyme disease and hepatitis A vaccination; assessing the economic impact of infectious diseases, from pandemic influenza to dengue; and modeling of raccoon rabies control by oral vaccine. Dr. Meltzer has published more than 100 publications and has received many honors and awards, among them, CDC's Charles C. Shepard award and the James H. Nakano citation.
8:40 AM - 9:10 AM; Paper #3-2
A Practical Approach to Developing Effective Security Programs for Food Processors
Ray Pettit, Ray Pettit Enterprises
This session will address the possible risk of terrorist attacks to the food industry and will focus on using practical security principles, methods and protocols, which have proved successful in past incidents. It will explore a range of difficult questions, including: “How can we meet FDA and customer expectations without spending vast amounts of money?” “How do we protect against malicious contamination by a diverse array of potential attackers (from terrorists to disgruntled employees)?” The presenter will explain best practices for emergency response to security situations. Using simple language, he will explain how to measure effectiveness of security programs.
9:10 AM 9:40 AM; Paper #3-3
General Aviation and Homeland Security: Analysis of General Aviation Security Policies Using the New Castle County (DE) Regional Airport as a Case-Study
Sean Hildebrand, M.P.A., North Carolina State University
In response to the events of September 11, 2001 the federal government implemented several new regulations affecting aviation in an effort to prevent future aviation related terrorism. The greatest regulatory increase in this area focused upon commercial air travel while general/private aviation received far less attention. Problems with general/private aviation security, such as coordination between airport officials, government officials, and those who utilize the facilities along with the basic implementation of security related procedures and physical structures/barriers still exist over two years after the attacks. This presentation examines the potential harm of security gaps in general/private aviation including aspects directly from the Aviation and Transportation Security Act, local emergency planning and response, as well as the specific statutes from the DHS.
9:40 AM 10:10 AM; Paper #3-4
Portable Gas Detector Array Comprising a Combination of Gas Sensors and Ion Mobility Spectrometer for the Detection of Hazardous Gases
Dr.-Ing. A. Walte, Dipl.-Ing. Wolf Münchmeyer, Airsense Analytics GmbH
& Prof.-Dr. Gerhard Matz, Dipl.-Ing. Peter Rusch, Technical University Hamburg-Harburg, Dept., Germany
In case of accidents at chemical plants, during transportation of chemicals or during terrorist attacks, hazardous compounds may be released and harm the population. To prevent this, a simple chemical hazard monitor is required. A novel measuring system is based on different detection principles, like ion mobility, photo ionization and chemical sensing. The portable gas detector array (GDA), selected sensors and signal interpretation are presented. With reports of first practical use at accidents new measuring capabilities offered by the instrument are discussed.
10:10 AM 10:30 AM; REFRESHMENT BREAK
10:30 AM 11:00 AM; Paper #3-5
Development of Autonomous Sensing and Navigation: Using Mobile Wireless Networking
Masanori Sugisaka, Department of Electrical and Electronic Engineering, Oita University, Japan
This paper establishes the theoretical foundation for an efficient sensor fusion, synthesizing and understanding the data, and formulating the next course of action in autonomous unmanned ground vehicle robots (UGV) using mobile wireless networking. Namely, an efficient sensor fusion from many sensors (vision, audio, geographic, etc.), synthesizing and understanding the data obtained, formulate the next course of action in UGV. The platform of an unmanned ground vehicle robot is used to develop autonomous sensing and navigation using the public internet system.
11:00 AM 11:30 AM; Paper #3-6
Freight Security Requirements
Roger Ritterbeck Jr., Product Manager, New Products, QMI, Division of CSA Group
The Freight Security Requirements (FSR) is a security standard that focuses on the physical security of the distribution of high technology products. The FSR was developed by the Technology Asset Protection Organization (TAPA). There is a process in place for organizations to obtain FSR certification. The technical presentation of the FSR certification process will give the attendee an overall knowledge of the requirements of the FSR and the process for getting a facility certified.
11:30 AM 12 NOON; Paper #3-7
Benchmarking of Face Recognition Systems - Project BIOFACE
Christoph Busch, Fraunhofer-IGD & René Salamon, Bundesamt für Sicherheit in der Informationstechnik, Germany
This presentation reports about the project BIOFACE, within the scope of which face recognition systems available to the market were tested. The main focus of the project was benchmarking of biometric face recognition algorithms operating on large-scale database with approximately 50,000 test samples. The project was carried out in collaboration between Federal Bureau of Criminal Investigation (Bundeskriminalamt, BKA) and the Federal Office for Information Security (Bundesamt für Sicherheit in der Informationstechnik, BSI) and the Fraunhofer-IGD.
SESSION 4 - CYBER SECURITY & IT SOLUTIONS
Thursday Afternoon, February 26, 2004 · Grand Ballroom Salon 1
1:10 PM 1:40 PM; Paper #4-1
Smart Card Deployments: The Public Key Infrastructure (PKI) Trojan Horse
Michael Seguinot, Public Sector Technical Manager, VeriSign
Remember, it only took the combined armies of Greece 10 years and a big wooden horse to sack the great city of Troy. Surely PKI is much simpler. Today, the US government deploys thousands of ID badges each day that they refer to as the “CAC” (Common Access Card) each with a little Greek on board, a digital certificate. In this presentation Michael Seguinot, Public Sector Technical Manager for VeriSign will explain why there was no “year” rather an ongoing “decade” of PKI. Michael served as an integrator to the US Department of Justice, evaluated and deployed some of the first PKI pilots in the DOJ. Today he leads VeriSign’s efforts evangelizing and deploying PKI solutions in Federal, State and Local government. This is a presentation and open discussion on where we are and where we are going.
1:40 PM 2:10 PM; Paper #4-2
Implementing a New Paradigm for Addressing Cyber Security Issues
Larry Clinton, CEO, Internet Security Alliance
The Internet ties all of the world’s critical infrastructures together. Without cyber security, there can be no physical security, and vise versa. As technology becomes more user-friendly, so too do the methods to attack it. The number of vulnerabilities and threats to the Internet are increasing at a pace of over 500% a year. Yet, establishing a defense system for the Internet is more complicated than for traditional infrastructures. Traditional regulatory and defense structures are ill suited to manage such an entity. A “new paradigm” of information security is needed. Issues that still must be addressed include the integration of cyber security into the broader physical security debate, creating a public outreach program on issues ranging from home security practices to ethics and developing a positive of cost benefit analysis, for internet security.
2:10 PM 2:40 PM; Paper #4-3
Web-Enabled Management Systems: Readiness with Business Efficiency
Peter Grier, VP of Environmental Services, Prism eSolutions, LLC
Terrorism preparedness on the domestic side versus intelligence collection is all about having the correct procedures/processes/equipment/staff in place and ready 24/7/365 a year for the one time that they are needed. Maintaining that level of readiness to respond requires diligence and constant attention to staff training and equipment readiness. Managing this effort requires countless hours of attention. Integration of multiple criteria for the regulatory aspects of homeland security and the ability to track that things are getting done can be effectively accomplished with web-enabled management systems that are customizable.
2:40 PM 3:10 PM; Paper #4-4
Cyber Threat: Building Evidence for Cyber Security Investigations & Regulatory Compliance
Kevin M. Hanrahan, Director of Security Strategy, Addamark Technologies
Recent hacker attacks, legislation, and the threat of "cyber-terrorism" have exposed existing information security strategies for what they are: piece-meal at best. Organizations depend on secure data and are now being held to even higher data integrity standards in light of government regulations such as USA Patriot Act and Gramm-Leach-Bliley Act (GLBA). When a hacker strikes or an insider abuses their privileges, companies must be prepared to launch an immediate electronic investigation. In this presentation, attendees will learn best practices on the technologies and processes necessary to respond to pressing regulatory compliance and security threats.
3:10 PM 3:30 PM; REFRESHMENT BREAK
3:30 PM 4:00 PM; Paper #4-5
Discovering Hidden Threats Through Data and Text Mining of Historical Safety Reports
Sergei Ananyan, President and CEO, Megaputer Intelligence, Inc.
Modern analytical technologies of data and text mining have opened new opportunities for better safety management through automated intelligent analysis of available safety reports. Advanced analysis of historical safety reports can reveal important hidden information about existing vulnerabilities and threats. This information arms safety officer with key knowledge necessary for easier prevention of future security breakdowns. This presentation will review the methodology, analytical tools and results of recent flight safety data analysis projects carried out for Federal Aviation Administration, Southwest Airlines and International Air Traffic Association.
4:00 PM 4:30 PM; Paper #4-6
Web-based Community-wide Emergency Preparedness Training
Timothy A. Boone, Ph.D., MC Strategies, Inc.
Current risks require that emergency operations agency; hospital and school personnel work together in highly coordinated ways when a disaster occurs. Drills and exercises are vital but expensive tools for building preparedness. Web-based Emergency Standard Operating Procedures & Guidelines spelled out in Community Emergency Operations Plans can cost-effectively enhance emergency operations performance. Of particular note is the use of brief lessons available on a secure internet link wherever the first responders can connect; at the fire station, police station, school, or at home. This presentation will include the approach as well as preliminary results and lessons learned.
4:30 PM 5:00 PM; Paper #4-7
Halt Hacking - a Guide to Application Protection
Tal Gilat, CEO & Co-founder, KaVaDo
Government is demanding that departments and agencies move their content and services online to increase physical security while saving money and time. Unfortunately, when information is made available online, it may be also available in some ways to hackers. Web application attacks represent over 70% of all attempted hacks according to analysts. Without comprehensive protection; the Web-application layer often represents the most vulnerable entryway into critical networks. Senate is currently investigating an anti-cyber crime law that would require consumers notification if "hackers" steal personal information from the Web. In this session, attendees will learn how to make information secure.
|