InfraGardNational Infrastructure Protection
Center
  Home   |   Mailing Lists   |   Meetings   |   Resources   |   About   |  
 
 




 




National Homeland Security Knowledgebase


Welcome to Birmingham InfraGard!

The Birmingham Chapter of InfraGard is celebrating its seventh year as a chapter. The 300+ members of the local chapter are part of the more than 30,000 national members who realize that it is *OUR* job to protect our nation's Critical Infrastructures. We do this by gathering together monthly and communicating on our mailing lists to share information between our members and with the federal government about risks to our nation's Critical Infrastructures. In many cases, we end up discussing Cyber Threats, because Cyber is the one Infrastructure that is present in all of the others.

For general questions about InfraGard, feel free to contact one of our officers:

  • President - John Giordano, john.giordano@sungard.com
  • Vice President - Gary Warner, gar@askgar.com
  • Secretary - Thomas Torgerson, ttorgerson@bcbsal.org
  • FBI InfraGard Coordinator - George Moore - George.Moore@ic.fbi.gov

Our Mailing Lists

We have two mailing lists sponsored by our chapter:

birmingham_chapter@infragard.org: this is our main chapter mailing list. Meeting announcements, alerts, and discussion of interest to the chapter occurs here. The strength of our chapter is the relationships we have with our fellow security professionals. This mailing list is what keeps those relationships strong between meetings.

To join this mailing list, please email our Secretary, Thomas Torgerson - ttorgerson@bcbsal.org and cc: the Vice President, Gary Warner - gar@askgar.com

ig_malware@infragard.org: This mailing list is the successor to the popular "packet-ninjas" mailing list that established Birmingham InfraGard as the geekiest chapter of the 86 national chapters. The purpose of this list is to escalate the value of our members' research in cyber security matters by allowing for information sharing across the 86 chapters. Perhaps each chapter only has five people who are truly analyzing malware and determining the threat level, the functionality, the proper defense, and the point of origin of a new virus, worm, or botnet. With 86 chapters that could still be a valuable pool of 430+ if they were all sharing their knowledge with each other. We call ourselves a "volunteer forensics community" and welcome queries regarding malware threats from law enforcement or the general membership.

To join this mailing list, please login to the InfraGard Secure VPN, and visit this URL after logging in:

https://igc.infragard.org/http/listserv.infragard.org:8080/mailman/listinfo/ig_malware

Birmingham InfraGard Next Meeting:


Birmingham InfraGard meets on the Second Tuesday of each month. Our meetings are in the morning, with refreshments at 8:30, and the program running from 9:00 to 11:00 AM.

The location and agenda for our May 12, 2009 meeting at UAB will be posted shortly.

Be Prepared

The top news story today (April 27, 2009) is about Swine Flu. We now have 40 cases in the US. If you are responsible for Risk Mitigation for your organization, this is definitely a subject to keep informed about. Birmingham InfraGard is in communication with Federal, State, and Local experts on this matter and will have more materials available shortly. In the meantime, here are some helpful links:

PLANNING AHEAD . . . . .

Go ahead and put us on your calendar for every SECOND TUESDAY. It would be a good idea to go ahead and put these on your calendar now to keep the time free!

May 12, 2009 - Meeting at UAB - details shortly.
June 9, 2009 -
July 14, 2009 -
August 11, 2009 -


If you would be interested in hosting a future meeting, please email InfraGard Vice President Gary Warner, at gar@askgar.com.


InfraGard Recent Meetings

April 14, 2009: Thanks to our hosts at Caritas, and our speaker, Daniel Clemens of Packet Ninjas, LLC, who shared a presentation about the use of Paterva's Maltego application, and its use in online investigations.

March 10, 2009: Thanks to Blue Cross Blue Shield of Alabama for hosting our meeting! The FBI's Joe Ronsigvalle shared with us about the Weapons of Mass Destruction program, and Gary Warner shared with us about an initiative to "Bring Cybercrime Home", a partnership to encourage state and local law enforcement to work more Cybercrime cases.

January 13, 2009: Thanks to the US Attorney's Office for hosting our meeting! Gary Warner from UAB Computer Forensics gave a presentation on the Cyber Propaganda War in Gaza, and Rob Saunders, a Certified Identity Theft Risk Management Specialist, shared a presentation on Identity Theft Compliance for companies.

InfraGard Out and About

August 19, 2008:Birmingham InfraGard president, John Giordano, played a big role in Tech Mixer University as the volunteer leading the Security Track. Birmingham InfraGard Vice President, Gary Warner, shared a presentation called Investigating Malware to open the track. August 13, 2008:Gary Warner shared a presentation on current malware threats with the Birmingham ASIS Chapter. ASIS is the American Society for Industrial Security.

Recent Meeting Topics:

  • August 12, 2008: Our meeting at Southern Research's campus had two excellent presentations. David Wharton of Regions Bank, shared a presentation called "Vulnerability Discovery for Fun and Profit", where he stressed the importance of thorough application testing, with several real-world examples. Lt. Bill Eller, the Commander of the Alabama Fusion Center, gave us an update on how the Fusion Center helps to share information with all parties to prevent and respond to terrorism and crime.
  • July 8, 2008: Our meeting to celebrate the 100th Anniversary of the FBI was held at the Birmingham FBI Office. Our featured speaker was Birmingham FBI's Assistant Special Agent in Charge Charles Regan, who shared with us about his three month assignment to Afghanistan as the commander of all FBI resources deployed there. The FBI plays a significant role in Explosive Device Analysis and Crime Scene Analysis, including processing of DNA and Fingerprints across the theater.
  • June 10, 2008: Our meeting at New Horizons featured a presentation called Current Trends in Identity Theft and Fraud by Gary Warner of UAB.
  • May 13, 2008: The theme of this meeting, hosted by Protective Life, was "A Look Underground". UAB's Gary Warner shared details on what's happening in Credit Card Trading, Botnet, and Phishing forums, and how bad guys are sharing information to better protect their malware from detection. After the break, UAB CIS Student Brian Tanner joined Gary to do a live demo of "Remote Administration Trojans" currently found in the wild.
  • April 8, 2008: The Birmingham FBI hosted our April meeting which featured Mike Whitt of Compass Bank sharing on "360 Degrees of Security", and Andy Willingham, from Atlanta's MARTA system, sharing with us about security risks to a transportation system, and his involvement in the Security Catalyst Community.
  • March 11, 2008: HealthSouth corporation hosted our March meeting, which featured training from the FBI's Special Technologies and Applications Section, lead by Joseph Opacki. Joseph and his team focused on how the FBI analyzes malware. Following the meeting, his team lead two days of training at UAB for Law Enforcement and InfraGard members on malware analysis, which is being put to good use throughout the chapter.
  • February 12, 2008: For something different, the chapter met for breakfast at the Piccadilly's Cafeteria in Riverchase. Our speakers were Supervisory Special Agent Dale Miskell, presenting "Cyber Intelligence Collection and how InfraGard Can Assist", and Dan Clemens of Packet Ninjas, who presented "Exploiting Low Environmental Risks to Compromise High Risk Assets" - a talk about his Penetration Testing experiences.
  • January 8, 2008: Blue Cross and Blue Shield of Alabama hosted our January meeting. Our special guest was Michael Waters, the Protective Security Agent from the FEderal Department of Homeland Security, who shared about the PSA program and the National Infrastructure Protection Plan. Following Mr. Waters, Mike Shaw presented "Introduction to OpenID".
  • December 11, 2007: Compass Bank hosted this meeting. Our speakers were Todd Miranda, speaking on "Threat Modeling", and John Giordano of SunGard, presenting the "SANS Top 20" and leading discussion.
  • November 13, 2007: SunGard hosted our November meeting. The speakers were Joe Vest, discussing "TJX and Card Theft in History", followed by Walter Bradford, presenting the concept of "Community Emergency Response Teams (CERTs)", including information on the National Highway
  • October 9, 2007: Regions Bank hosted our October meeting. We began with a review of the National InfraGard Congress, attended by Gary, John, and Steve, along with our FBI Cyber Squad, SSA Dale Miskell, SA Mike Mauldin, SA Kim Castillo, and SA Steve Ferguson. After that review, Joshua Smith gave us an update on "Wireless Hacking", including a demonstration of breaking WEP encryption in 60 seconds or less.
  • September - "Jihad in Historical Perspective" and "Security Through Obscurity: Why Not To Do It" were our topics this month. (hosted by Birmingham FBI)
  • August - "GAO: CyberCrime Challenges", with guests from FBI and US Secret Service responding (hosted by UAB)
Recent Presentations Available online:

Presentations from Meeting 67 - Estonian DDOS, Economics of DDOS, and DDOS Technical History and Response.

(other presentations coming soon!)


LOOKING BACK . . . .

May 8 - Second Annual Firearms Safety Day
Around 50 Birmingham InfraGard members joined the FBI to learn about how the FBI trains with firearms, to see a demonstration of the FBI SWAT Team in action, and to fire all of the weapons used by the FBI. Afterwards, lunch was prepared by Alagasco's Grill Team.

May 1 - Tech Mixer 3.0
Several of our members joined FBI Special Agent Mike Mauldin to share with many hundred attendees what our organization is about.

April 10 - Monthly Meeting: "ANI & The Myth of Anti-Virus".
We had a great turn-out at the FBI Building for our April meeting where we saw detailed analysis of the way criminals took advantage of the "Animated Icon" Microsoft exploit to distribute spyware, viruses, and trojans during the time for which there was no patch available. This led to a great group discussion on how companies can protect themselves from similar emerging threats in the future.

April 6 - FBI Wireless Security press release
An InfraGard conversation about Wireless Security and the new techniques for breaking WEP even faster (now less than one minute) led to a "headline" story on the national fbi.gov website. Got a Wireless Network? Its Time To Shore Up Security The story was covered by all Birmingham networks and appeared in the Birmingham News as well.

March 13-15 - The Birmingham Conference on Phishing
The FBI Birmingham CyberSquad and UAB's Computer Science and Justice Science Departments hosted a Law Enforcement Training Event on investigating phishing attacks. Instructors included Earthlink's Lindsey Wegrzyn, GoDaddy's Ben Butler, Birmingham InfraGard member Gary Warner, and a hacking demonstration from Smart Fox Solutions.

March 13 - Monthly Meeting: Wireless Security
Protective Life hosted our March meeting where Birmingham InfraGard member Joshua Smith explained how hackers break into our wireless networks and what we can do to protect ourselves.

Feb 13 - Monthly Meeting: "InfraGard: Curiosity Required"
HealthSouth hosted our February meeting where we investigated four recent Case Studies where suspicious activity observed by alert InfraGard members led to FBI investigations. As InfraGard members, being alert and curious, and FOLLOWING UP WITH ACTION helps to make our program valuable!

Jan 9 - Monthly Meeting: "Torpig: The Most Advanced Banking Trojan"
The FBI hosted our January meeting where we explained the function of an extremely wide-spread banking trojan. Torpig detects when infected machines visit more than 500 different websites and can alter the banking web pages in real-time! Members learned how to detect and report suspicious banking activity.

2006

In 2006 we stayed true to our cyber origins, but also discussed "Gangs in Birmingham", "Jihad Online", "The War on Terror", and hosted a special day-long meeting on "Pandemic Flu Planning" with speakers from Auburn University's Veterinary school, UAB's Geographic Medicine Department, Jefferson County EMA, the Red Cross, Jefferson County Board of Health, and Energen Corporation and Regions Bank.


PIRT: Special Anti-Phishing Opportunity

Birmingham InfraGard member, Gary Warner, is one of the team leaders of the PIRT project.
PIRT = Phishing Incident Reporting & Termination Squad
Learn more about PIRT


Earlier presentations

August - Daniel Uriah Clemens presented on SQL Injection techniques. If you sec ure your network, but not your web-based applications, you do not have security. His presentation is available here. He has also provided an Advanced SQL Inject ion presentation from Victor Chapela, one of his research partners.

April - at our April meeting Gary Warner discussed PHP Vulnerabilities. Some more information from that presentation is available here as: PHP Urgency

February - Two presentations from our Phocus on Phishing meeting are available in an edited-for-online form.

October - Presentation on Hurricane Ivan and Remote Administration Trojans are available from our October 12, 2004 meeting.

September - Presentations on Operation Web Snare and Privacy and Strong Encryption are available from our September 14, 2004 meeting.

Check out one our most eleet packet ninja's writings on sobig.e and many other things Joe Stewart



Membership Application

IMPORTANT:

Please make sure to fill out a MEMBERSHIP APPLICATION! If you have not filled out the new a pplication (released January 2004), you are no longer considered an active member!!!!



© 2005-2007 Birmingham InfraGard, Daniel Clemens and Gary Warner. Original Site design by airmobile.com.