PRE-CONFERENCE TRAINING

Enhance your GFIRST Conference experience with one of our Pre-Conference Training Sessions. Discover up-to-the-minute IT cyber security solutions, policies and procedures, and management issues, such as security training and awareness. Leading the sessions are industry-recognized experts. Training sessions will be scheduled on June 2.

Monday, June 2

Introduction to Control Systems Security for the IT Professional (8 hours)

Pre-Conference Training Part I:     8:00 a.m. - 12:00 p.m.
Pre-Conference Training Part II:    1:00 p.m. - 5:00 p.m.

Overview: This course is directed to those with IT Security responsibilities or background but have no previous experience in critical infrastructure control systems and their relationship to modern IT networks.

Four training sessions will guide attendees from basic definitions, components, and protocols to the major applications and architectures within critical infrastructure and key resources (CIKR). Control system network architectures, cyber threats and vulnerabilities, and mitigations will be presented. Current and emerging government and industry activities that are addressing the issue of risk reduction will be discussed.

Intermediate Control Systems Security (8 hours)

Pre-Conference Training Part I:     8:00 a.m. - 12:00 p.m.
Pre-Conference Training Part II:    1:00 p.m. - 5:00 p.m.
Hands-on format - Intermediate Technical Level
Limited Seating!
Please note: You must pre-register for the Intermediate Control Systems Security training session by sending an email to gfirst@us-cert.gov.

Overview:
This hands-on course is structured to help students understand exactly how attacks against process control systems could be launched and why they work and to provide mitigation strategies to increase the cyber security posture of their control systems networks.

Because this course is hands-on, students will get a deeper understanding of how the various tools work. Accompanying this course is a sample process control network that demonstrates exploits used for unauthorized control of the equipment and mitigation solutions. This network is also used during the course for the many hands-on exercises that will help the students develop control systems cyber-security skills they can apply when they return to their jobs.

Every student attending this course must have a laptop computer that they can configure and bring to the class. All students in the class should have basic coding skills and a fairly deep understanding of network details, from UDP to TCP, from MAC to IP.

InfraGard Congress

Pre-Conference Training Part I:     8:00 a.m. - 12:00 p.m.
Pre-Conference Training Part II:    1:00 p.m. - 5:00 p.m.
Closed Session: InfraGard Chapter Members Only

Overview:
Each of the 86 InfraGard Members Alliances (IMAs) is allowed to have one Delegate represent their IMA in the official business of the Congress. Additionally, the FBI Coordinators are invited to attend. The Delegate for each IMA must register as the Delegate at the GFIRST Conference registration page https://forms.us-cert.gov/gfirst-reghttps://forms.us-cert.gov/gfirst-reg . All Delegates, Coordinators, and InfraGard members are invited to attend the GFIRST Conference June 3-6.

Internet Health Service (IHS) Training

Pre-Conference Training Part I:    8:00 a.m. - 12:00 p.m.
Closed Session: Only Federal Employees and/ or Contractors

Overview:
US-CERT introduced the Internet Health Service (IHS) in May 2005 and has enhanced the service to include data from prominent Internet Data Providers. The service now provides the GFIRST user with access to the following data tools:

• Cymru
• ISS X-Force Threat Analysis Service (XFTAS)
• Renesys
• Symantec DeepSight™ Threat Management System

IHS has been enhanced in the last few months to provide the GFIRST community with actionable situational awareness information. The benefits to the users of IHS are the following:

• IHS is accessible through the HSIN/US-CERT secure portal without having to remember a different login and password for each tool,
• US-CERT is providing the IHS to the GFIRST community at no cost to Federal agencies or organization, and
• Information can be shared with agency or organization.

IHS Training will be provided at the 4th Annual GFIRST conference. The training provides insight from the vendors on how the data can be used in the GFIRST user's day-to-day operations. The training will be offered in a four hour training opportunity where each of the IHS vendors presented in-depth training on their data service.

GFIRST Analyst Jam:

Pre-Conference Training Part II:    1:00 p.m. - 5:00 p.m.
Closed Session: Only Federal Employees and/ or Contractors
Open to Government employees and contractors directly supporting Federal Government contracts. This session is primarily geared toward the network security analysts and operators of Federal networks.

Overview:
This will be a technical oriented session between the organizers of the Jam and the audience. US-CERT and GFIRST members will discuss a number of technological and analytical issues that have a direct affect on the operators and analysts in the GFIRST community

• Trusted Internet Connection (TIC)
• Future Operations
• US-CERT Authorities
• US-CERT current operations
• Incident reporting
• Einstein
• US-CERT Products
• US-CERT Procedures
• Constituent concerns

New CHIP Welcome and Orientation

Pre-Conference Training Part II:    1:00 p.m. - 5:00 p.m.
Closed Session: CHIPS Only

Overview:
Coming Soon!!