OCTOBER

SANS Network Security
www.sans.org
October 1–9
Las Vegas, NV

The 12th annual conference features 20 training courses with instructors Eric Cole, Stephen Northcutt, Ed Skoudis and Mike Poor, among others. Topics include wireless networks, hacker techniques, intrusion detection, and securing Windows and Unix. GSE, GSM, GSC certification exams will be offered.

Information Security Decisions
www.infosecurityconference.com
October 18–20
Chicago, IL
Hosted by Information Security

Information Security Decisions arms you with the expert advice it takes to tackle today's mission-critical security objectives, and with the essential strategies required to gain control over today's ever-changing corporate environment. Speakers include Joel Snyder and AT&T's Ed Amoroso.

CCS 2006
www.acm.org/sigs/sigsac/ccs/CCS2006/
October 30–November 3
Alexandria, VA

The 13th annual ACM conference on Computer and Communications Security features workshops on privacy, digital rights management, storage security, visualization, secure Web services and more. The keynote speaker is Peter G. Neumann, principal scientist at SRI's Computer Science Lab.

November

CSI 33rd Annual Computer Security Conference and Exhibition
www.gocsi.com/annual
November 6--8
Orlando, FL

CSI's annual conference tackles technology and risk management issues, including tracks on policy and compliance, forensics, awareness, IAM and working with developers, among others. Wikipedia founder Jimmy Wales will keynote. Panel discussions include corporate security priorities and compliance.

Conference & Expo on Control & Audit of Information Security
www.misti.com
November 13--15
Boston, MA

Tracks are geared for audit professionals and risk officers with sessions on conducting risk assessments, COBIT 4.0 and building a risk roadmap for management to be offered.

Numbers Don't Lie
According to the 2006 annual CSI/FBI Computer Crime and Security Survey, released in July, 25 percent of respondents reported security breaches to the Feds--up 5 percent over the last two years. Meanwhile, data breaches from information theft, lost laptops or network attacks accounted for 74 percent of financial losses.