Correlation & Analysis: The Cisco MARS appliance is a proven correlation and analysis tool for literally thousands of devices and message types. Geoff will be presenting the concepts necessary for understanding correlation analysis with this tool from a high level as well as what it takes to implement, manage and utilize the Cisco Monitoring, Analysis and Response System.
What: AZ Security Practitioners' Forum
When: April 24, 2006 - 6:30 PM to 8:30 PM
Where: Interface Technical Training, Park Central Mall
Why: It will be interesting and there will be Pizza.
Presenter: Geoff Poer
Topic: Cisco Security Monitoring, Analysis and Response System (Cisco Security MARS)
Cisco MARS is a powerful event correlation, anomaly detection and vector analysis, engine.
Location:
Interface Technical Training
Park Central Mall
3110 N Central Ave, Ste 160
Phoenix, AZ
Presenter Bio: Geoffrey Poer is a Manager in the Security Consulting Practice for Calence, LLC. He has over 10 years of combined information technology, network operations center and security integration experience. Geoffrey holds several certifications from the SANS institute (www.sans.org) including; GCIH, GCIA, GCFW, GCUX and GCWN. He also holds a CISSP certification and has written several\npractical papers published on www.sans.org, dealing with a variety of\nsubjects including intrusion detection, perimeter security, incident\nhandling and UNIX security. Geoffrey has facilitated training programs\nranging from deeply technical to executive level on varied topics from\nsecurity architectures to network application security. He is also\nactively engaged in the SANS training program, offering his services as\na SANS Local Mentor.
See you there!
Posted on Behalf of: Christian Price