OWASP Event

Attracting & retaining Women in the Cybersecurity Industry

THU, MAY 26 AT 6:30 PM, DUBLIN

More information available

DAMA Ireland: Data Protection event : 5th May

We have our next DAMA Ireland event/meeting coming up on the 5th May, and will be in our usual venue of Bank of Ireland, 1 Grand Canal Dock.

Our meeting will cover two topics. The main topic for the evening will be on Data Protection. We have Daragh O'Brien (MD of Castlebridge Associate) presenting on this. Daragh is also the Global Data Privacy Officer for DAMA International. He has also been invoked in contributing to the next version of the DMBOK, that is coming out very soon.

\
 
We also have Katherine O'Keefe who will be talking the DAMA Certified Data Management Practitioners (CDMP) certification. Katherine has been working with DAMA International on updates to the new CDMP certification.

To check out more details of the event/meeting, click on the Eventbrite image below. This will take you to the event/meeting details and where you can also register for the meeting.


Cost : FREE
When : 5th May
Where : Bank of Ireland, 1 Grand Canal Dock

PS: Please register in advance of the meeting, as we would like to know who and how many are coming, to allow us to make any necessary arrangements.

Q6C Student Satisfaction Survey

We need you to evaluate the quality of your Programme and student services provided for this academic year.  Obtaining your input is a vital part of the Institute’s Quality Enhancement procedures.  This anonymous feedback enables the programme committees to review which parts of your programme are functioning well and which parts may need improvement and it enables the Institute to ensure that student services are meeting the needs of students.  This is how the Institute uses your voice to assure and improve the quality standard of our programmes and services.

Each student in the Institute is requested to complete this process (max 10 minutes) in advance of Sunday 24^th April 2016; please follow this link to begin http://www.surveygizmo.com/s3/2665603/DIT-Student-Feedback-Form-2015-16

We would be very grateful if you could take the time to complete this evaluation.

Invited talk to the School of Computing - Security

On the 19th April 2016 at 4:00 - 6:00 pm we will host two invited talks, room KE G-007, Kevin Street, College of Sciences and Health, Dublin Institute of Technology:

The first talk will be given by Rahim Jina a Director at BCC Risk Advisory (http://www.bccriskadvisory.com and http://www.edgescan.com/). Rahim's talk will be on penetration testing on Web applications. He will specifically, show how hacking web application takes place by demonstrating two examples. In the last four years BCC Risk Advisory have employeed six of our graduates.

The second talk will be given by Eimear Dunk and Jonathan Lally of Mazars, one of Ireland's leading firms of accountants and business advisors providing professional services in audit, accounting, taxation, and consulting. In this talk Eimear and Jonathan will share their experiences in IT Security Audit with view of attacting some of our current students to join Mazars. Please note that Eimear is our graduate from DT228.


Bio Rahim Jina
Rahim is a director at BCC Risk Advisory, a security consultancy firm and parent company of edgescan™, a SaaS-based managed service, based in Ireland. Rahim is responsible for operational excellence and has extensive experience delivering penetration testing services to a wide range of organizations globally across many industry verticals.

Prior to this, Rahim was Head of Product & Operational Security for Fonality, a VOIP provider based in Los Angeles and was also a senior security consultant for a ‘Big 4’ consultancy firm for many years. He has been heavily involved with the Open Web Application Security Project (OWASP) as a contributor and volunteer since 2007 and was part of the Dublin chapter board for a number of years. Rahim graduated in 2002 from Trinity College Dublin (Ireland), with a Bachelor’s degree in Computer Science and in 2006, he completed a Master’s in Security & Forensic Computing from Dublin City University (Ireland).

Bio Eimear Dunk
Eimear joined Mazars in August 2015 after completing a BSc in Computer Science in DIT. Since joining Eimear has begun training to sit both the Certified Information Systems Auditor (CISA) and Prince 2 project management exams. From her work completed, Eimear has been able to gain significant experience in both public and private sectors with work in performing network security, access management and data analytics projects. Eimear’s technical areas of expertise include: (1) Data Privacy, (2) Logical security, (3) Data analysis and interrogation using CAATs and (4) Penetration testing and Vulnerability Assessments.

Bio Jonathan Lally
Jonathan joined Mazars 3 years ago after completing a BSc in Computer Applications and a MSc in Security & Forensic Computing in DCU. Since joining Jonathan has completed his qualifications in Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM) and Prince 2 project management. From the work Jonathan has completed he has gained significant experience in the conduction of IT audits in the public and private sectors. Jonathan’s technical skills include: (1) Network security, (2) Penetration testing and vulnerability assessments (3) Vulnerability Threat Analysis and (4)  Security code review

On completion of his training contract in November this year Jonathon will be a fully qualified IT Auditor & Security Specialist and will be managing his own client portfolio in Mazars.

Guest lecture tonight - Dr. Lorcan Coyle

Dr. Lorcan Coyle will deliver tonight's guest lecture. Lorcan has extensive experience of implementing and using Big Data solutions in both Academy and Industry. Currently Lorcan is at Intercom, an Irish based startup that focuses on building better customer relationships and that recently raised a round of $50 million.

Next week we will resume the introduction to Spark.

Thanks,

j

Invited talk to the School of Computing - Security

To all Postgraduate students,

On the 12th April 2016 at 4:00 - 5:00 pm we will host the first invited talk by Colm Murphy Director and Head of eDiscovery & Forensics at Espion. Colm is a graduate of DIT and we are proud to have one of our own coming along and sharing his experience in Security and Forensics with us.

Under Colm Murphy’s direction, Espion is now one of the largest eDiscovery & Digital Forensics service providers in Europe.

Colm holds a BA from Trinity College, Dublin and with a Post Graduate Diploma from Dublin Institute of Technology, Colm has worked in the ICT industry for 17 years, - specialising in eDiscovery for more than 12 years.  Colm has performed over 200 computer based forensic investigations and has led some of the largest electronic discovery projects conducted to date in Europe.

In 2007, Colm was appointed as an expert evaluator by the European Commission for the Preparatory Action on Security Research, and the FP7 Security call in 2010.  In 2012, under his guidance, Espion was appointed by a number of government and corporate enforcement agencies to implement eDiscovery process procedures and technology solutions to assist in new and ongoing investigations.  Currently, he is leading a large multi-jurisdictional eDiscovery initiative for a major European Bank.

As well as regularly presenting evidence in court, he has written extensively on Information Security, Digital Forensics and eDiscovery.  Most recently, he was among leading industry peers spearheading standards for eDiscovery in Ireland when he co-authored the Good Practice Guide to eDiscovery. 

In addition to working with top in-house counsel, law firms, corporations and government agencies in Ireland, Colm has built a highly qualified and experienced international team with multi-jurisdictional expertise capable of navigating the obstacles associated with collecting and moving data from European countries (i.e. European Data Protection Legislation and European Banking Secrecy laws).

Regards

Fred

Invitation to Guest Lecture/Tutorial on Model Based Testing

Stephane Maag from Sud Telecom Paris (http://www.telecom-sudparis.eu/fr_accueil.html) will be visiting DIT, School of Computing from April 18th to April 22nd 2016. During his visit he will be giving a guest lecture and tutorial on Model Based Testing.


Model-based testing (MBT) is the automatic generation of software test procedures, using models of system requirements and behavior. Although this type of testing requires significantly more up-front effort in building the model, it offers substantial advantages over traditional software testing methods.

Stephane's lectures and tutorials will be 'protocol oriented', tackling black-box testing: from a formal model (Extended Finite State Machine (EFSM) based + Message Sequence Chart(MSC)), the automatic test suites generation techniques will be seen followed by testing architectures that may be used to execute the test suites in practice (after an  intro to TTCN3(Testing and Test Control Notation), coverage and concretisation).  Testing the functional aspects from the interface/PCO viewpoint.

In the practical element he will be using PragmadevStudio (http://www.pragmadev.com/) An academic version is available but this has been installed on SOCAPPSRV1 which is accessible from the lab machines.


The lecture sessions will be held on Monday April 18th 2016 from 14.00-15.00 in KA-320, and Tuesday  April 19th from 16.00 to 17.00 in KA-1-017.
The practical session will be held on Wednesday April 20th  2016 from 9.00 to 11.00  in AU-1-005 (Aungier St. Lab)
If you wish to attend please complete the SIGNUP SECTION available at the following link:

http://goo.gl/forms/q5mcPlwYdP

Invited Talk to the School of Computing - DIT (MSc Security and Forensics)

Hi all,

You are invited to attend a talk by Damir Kahvedzic, Technical Team Lead, Espion Group, on the 5th April 2016, from 6:00 - 7:00 pm in Aungier Street, room 1-005.

All students are invited to attend.

The outline of his presentation is as follows:

1. Theory of Mobile Phone Forensics
2. Forensic Procedures, Frameworks and Guidelines
3. The process
4. Getting the Data
5. Acquiring the Data
6. Analysing the Data

Damir will use the recent Apple vs FBI case as an example throughout the talk. The talk will focus on iPhone forensics and only touch upon Android.

“Damir holds a PhD in Digital Forensics and an Honours BSc in Computer Science both from UCD. Damir has been a member of Espion’s Forensics and eDiscovery team since 2011 and has provided support in some of the largest eDiscovery & Digital Forensic cases within Ireland.

He is a certified Symantec eDiscovery Technical Specialist and has extensive experience of eDiscovery following the EDRM requirements, including identification, collection, processing and production of documents. He has worked extensively on forensic projects involving large law firms and has led and managed eDiscovery and Digital Forensic projects for Ireland’s governmental agencies and other financial institutions.

Damir runs forensic training courses within Espion and has conducted knowledge transfer presentations with numerous European institutions with particular focus on Mobile Phone Forensics and Predictive Coding Analysis. Damir has extensive knowledge and expertise in digital forensics concepts, tools and related matters and has previously conducted original research focusing on evidence collection and reuse from, amongst other sources, the Windows registry and the files system”

Regards

Fred

Bring your Laptop - Programming for Big Data

Hey all,

Could everybody please bring their laptops for Wednesday's the 6th's Programming for Big Dat class? We will look at Spark - which is an advance on in-memory map-reduce - and I would like everybody to have a copy of the binary on their computer so you can play around with it.

In later classes, we may use the data-bricks (maker of Spark) academy but for the first lab we will use out own laptops.

ALSO THIS IS NOT AN APRILS FOOLS JOKE

Thanks,

Rgds,

j