ITBN 2009

In 2009, we made a big decision and moved from the MOM Park cinema, which had been hosting the event until then, to a more spacious venue with more convenient parking. We chose the Cinema City Aréna (the Aréna cinema) as the new venue. We also introduced new solutions: the in-house developed Event Monitor – an event tracking and access control system – made RFID tracking of participants moving around the event, the 2D Datamatrix that facilitates networking, and electronic registration and program booklet available to ITBN.

MAIN TOPICS OF THE CONFERENCE

Data protection, content filtering, authorization management In the section, we found presentations that deal with the two areas of data leakage and data protection. Content filtering primarily deals with the protection of content found in data, its recognition and filtering. Authorization management is a much broader, more complex task, in which we seek the answer to how to administer and manage the role assignment, authorizations, access and identification of employees.

Communication Security Most of the daily security tasks are related to communication. Networks now form a coherent unit and the communication system between them is increasingly complex. With the strengthening of mobile communication, other aspects of security have come to the fore. This section is about these, also discussing the topics of remote access or LAN identification.

Encryption, Identification and Applications This section covers several topics. The presentations focused primarily on identification, electronic signature, PKI, secure storage procedures and related topics. These are very important questions, because at the peak of data protection problems, in addition to defining roles, protecting "data at rest" is one of the most difficult issues to deal with. Therefore, the questions raised here and the answers given to them are important.

Fighting against threats Among the security questions, the most difficult to answer is always how to prepare for the unknown. Most security problems arise from sources that we do not yet know. A practicing security manager or operator can therefore rightly fear such problems. Among other things, the presentations of the section sought to answer this question and reported on interesting or new security events and achievements.

Compliance This session discussed how to maintain security, what opportunities exist to comply with external standards and maintain it. Given that security exists in a constantly changing environment, it is especially important that solutions exist for this. These solutions are reported by the speakers in this session, which draws from the daily life of this strange "marriage" of theory and practice.

Network Security The most classic security area. Yet it has something new to say every year. This year, the presentations were grouped around network consolidation, WiFi security, virtualization, and many other interesting topics.

Log Analysis Collecting, processing, evaluating log data from individual security products and applications and generating alerts. These are the most essential elements of a log analysis solution. But they are also the most challenging tasks. Therefore, it is important to choose solutions that are flexible enough to accommodate the log data of individual solutions.

Data Protection, DLP This section covers topics related to data protection and leakage from the perspective of data handling, tracking, and management. The vendor solutions and project experiences we hear about here basically fall into the DLP (Data Loss Prevention) category.

Application Security The problem of protecting applications is one of the biggest challenges in IT Security. The diversity of applications and the individually developed solutions make it difficult and complex to defend against attacks against them. Therefore, it is important to learn how to combat such problems, whether by hardening the application, involving perimeter or network security tools, or ethical hacking and risk assessment.