Episode91Script

(15 Seconds of silence)

(Play FiT stinger)

(Record the Welcome Intro)

(More silence)

Theme Music, Episode 91 for December 6th, 2007

Welcome to PaulDotCom Security Weekly, Episode 91 for December 6th, 2007

Sponsors

This episode is sponsored by Core Security Technologies, helping you penetrate your network. Version 7.5 just out, including the all new Web application testing! Listen to this podcast and qualify to receive a 10% discount on Core Impact, worlds best penetration testing tool.

This podcast is also sponsored by Tenable network security. Tenable is a developer of enterprise vulnerability, compliance and log management software, but most notibly the creators of Nessus, the worlds best vulnerability scanner. Tenable Security Center software extends the power of Nessus through reporting, remediation workflow, IDS event correlation and much more. Tenable also offers a Direct Feed subscription for immediate access to new Nessus plugins, and compliance checks” Tenable – Unified Security Monitoring!

Intro

"Welcome to PaulDotCom Security Weekly, Episode 91 for December 6th, 2007

Welcome to PaulDotCom Security Weekly, an entertaining look at the current information security news, vulnerabilities and research. I am your host Paul Asadoorian, and I am your co-host Larry Pesce.

We have a special Guest Host this week! Joel Esler!

Joe's Bio:

Joel Esler (GCIA, SnortCP, SFCP, SFCE) is a Senior Security Consultant at Sourcefire. He began his post-school career in the United States Army as a Communications Engineer and was honorably discharged in 2003. Following his 6 years of service, Joel continued to work for the Department of Defense as a Security Analyst for the Regional Computer Emergency Response Team -- South, contracted through Lockheed Martin. Joel was initially brought on the team as a Network Security Analyst, where he excelled at in-depth packet and forensic analysis., Joel developed and deployed his own NSM system, based on Snort, tcpdump, p0f, and pads throughout the Army's networks. Joel's expertise allowed him to be selected to lead the Computer Defense and Information Assurance Branch of the RCERT-S. Which held him responsible for many aspects of Vulnerability Scanning, IDS Deployment, and Snort Rule creation for the Army. Mr. Esler left the RCERT-S to work for Sourcefire, Inc; where he travels the world installing and configuring customer Sourcefire and Snort deployments. Mr. Esler teaches classes concerning Sourcefire and Snort, and participates in other public speaking engagements throughout the year. Mr. Esler is also an Incident Handler for SANS at the Internet Storm Center, the largest free threat analysis cell in the world. Through www.dshield.org, which encompasses the largest Distributed Intrusion Detection System on the planet. Mr. Esler is also a GIAC Gold Advisor responsible for assisting people through the SANS Gold certification process, as well as a technical grader in the process.

Announcements

• We have a deal with SANS! If you register for a SANS conference use http://pauldotcom.com/sans/. It helps us buy more cool t-shirts and stickers to give to you!

• SEC535 - New Orleans!

• Offensive Security - You write up how you used the backtrack CD in fun and interesting ways (with technical details), and submit it to psw@pauldotcom.com. Paul and Larry will pick the best one, and you can come on the show and present it if you like!

• Check out the beer listing by episode in the wiki.

• We're trying something new - User submitted stories!

• Check out an upcoming episode of the Linux Reality Podcast with Chess Griffin (not Peter Griffin)!

• Larry speaking at DC401 on Monday Dec 10th

[SWEEPERS] Listener Feedback and News

Episode91 Show Notes

[SWEEPERS] Closing

[Syngress Question of the Week]

Core Impact discount code is impactbsg

- Frappr, iTunes comments, Cafepress, FiT Forums, IRC Channel

Thank you for listening, psw@pauldotcom.com, http://pauldotcom.com Phone number Pauldotcom Security Weekly, PO Box 860, Greenville RI, 02828

<outro>