Bigraphy

James Joshi is a professor of School of Computing and Information at the University of Pittsburgh, and the director/founder of the Laboratory of Education and Research on Security Assured Information Systems (LERSAIS), which has been designated as a Center of Academic Excellence in Information Assurance /Cyber Defense Education and Research (CAE and CAE-R). He is an elected Fellow of the Society of Information Reuse and Integration (SIRI), a Senior member of the IEEE and a Distinguished Member of the ACM. His research interests include access control models, security and privacy of distributed systems, trust management and network security. He is a recipient of the US NSF-CAREER award in 2006. He established and has been managing the NSF CyberCorp Scholarship for Service program at Pitt since 2006.

He has served as program co-chair and/or general co-chair of several international conferences/workshops, including, ACM SACMAT(2009/10), IEEE BigData2016, IEEE/EAI CollaborateCom, IEEE IRI, IEEE CIC2015, IEEE ISM2014. He currently serves as the steering committee chair of IEEE CIC, and has served as the steering committee member of ACM SACMAT, IEEE IRI, IEEE/EAI CollaborateCom and IEEE ICME. He was a founder and co-Editor-in-chief of EAI Endorsed Transactions on Collaborative Computing. Currently, he is the EiC of the IEEE Transactions on Services Computing. He had also served in or is in the editorial board of several international journals. His work has been recognized with Best Paper award in ACM CODASPY 2011 and BigData Congress in 2017. He is a co-editor of the book titled “Information Assurance: Dependability and Security of Networked Systems” published in 2007. He has published over 120 articles as book chapters and papers in journals, conferences and workshops, and has served as a special issue editor of several journals including Elsevier Computer & Security, ACM TISSEC (now TOPS), Springer MONET, IJCIS, and Information Systems Frontiers. His research has been supported by NSF, NSA/DoD, and Cisco. Earlier in 1995, he had led the efforts to establish the first Computer Science undergraduate degree program in Nepal.

Abstract

NSF's Office of Advanced Cyberinfrastructure (OAC) seeks to foster the advanced cyberinfrastructure that is critical to the advancement of all areas of science and engineering research and education. For over a decade, OAC's (and ACI and OCI before it) investments have consistently enabled new innovations and discoveries. However, recent years are witnessing dramatic changes in nature and requirements of science applications, in the scale and pervasiveness of data, and in the landscape of technologies and resources. It is essential that the research cyberinfrastructure ecosystem evolve in response to these changes, and the HPC community, its campus leaders, researchers and professional experts all have important roles to play. This talk will present an overview of OAC and its programs and investments. It will also present a vision for evolving program and priorities to transform science in the 21st century.

Bigraphy

Manish is Office Director of the Office of Advanced Cyberinfrastructure at NSF. He joins NSF from Rutgers, The State University of New Jersey, where he is currently a Distinguished Professor and the founding Director of the Rutgers Discovery Informatics Institute. His research interests are in the broad areas of Parallel and Distributed Computing and Computational and Data-Enabled Science and Engineering. Manish is Fellow of AAAS, Fellow of IEEE/IEEE Computer Society and ACM Distinguished Scientist.

Bigraphy

Jonathan Silverstein, MD, MS, FACS, FACMI, serves as Chief Research Informatics Officer and Professor of Biomedical Informatics at University of Pittsburgh School of Medicine. Previously he was Chief Medical Informatics Officer at Tempus and at Kanter Health Foundation and was Vice President and Davis Family Chair of Informatics at NorthShore University HealthSystem. Earlier, Dr. Silverstein served as the associate director of the Computation Institute at the University of Chicago and Argonne National Laboratory. He is internationally known for his expertise, and federally funded research, in the application of advanced computing architectures to biomedicine and on the design, implementation and evaluation of high-performance collaboration and visualization environments for anatomic education and surgery. Dr. Silverstein is recognized as one of three founding scientific directors of the Chicago Biomedical Consortium. He was an attending general surgeon for seven years while he was a lead physician informatician for enterprise EMR deployments at the University of Chicago and the University of Illinois at Chicago. Dr. Silverstein earned his medical degree from Washington University in St. Louis and his Master of Science from the Harvard School of Public Health. Additionally, he is a Fellow of the American College of Surgeons and a Fellow of the American College of Medical Informatics.

Abstract

Information privacy is about our ability to control the data that is collected about us and how it is used. Traditionally, this includes publishing privacy policies and potentially providing people with some settings that enable them to control the collection and use of their information such as opt-in or opt-out settings. In practice, this approach has proven to be rather ineffective, as few people read privacy policies or take time to configure privacy settings. With the emergence of the Internet of Things, where an increasingly diverse set of everyday devices and services collect and use our information, privacy is even more difficult to support, with many users simply unaware of the presence of IoT technologies let alone what data they collect. In this presentation, I will provide an overview of research at Carnegie Mellon University on personalized privacy assistants capable of learning models of their users, selectively informing them about data collection and use practices they care about, and helping them configure any available privacy settings. An important part of this work has involved the development and deployment of an infrastructure to advertise the presence of IoT resources and their data collection and use practices. As they go about their daily activities, users rely on privacy assistants residing on their smartphones to discover the presence of IoT resources in their vicinity and to learn about data collection and use practices likely to surprise them. These assistants also enable them to discover and configure privacy settings exposed by these resources (e.g., opting into facial recognition by a network of cameras in a building, or opting out of location tracking in a mall). This technology has been successfully deployed at UC Irvine and in parts of the Carnegie Mellon University campus. We expect to release a first version of it to the public later this summer.

Bigraphy

Norman Sadeh is a Professor in the School of Computer Science at Carnegie Mellon University (CMU). He is director of CMU’s Mobile Commerce Laboratory and its e-Supply Chain Management Laboratory, co-Founder of the School’s PhD Program in Societal Computing and co-Director of the MSIT Program in Privacy Engineering. He also co-founded and for 12 years co-directed the MBA track in Technology Leadership launched jointly by the Tepper School of Business and the School of Computer Science in 2005. Over the past dozen years, Norman’s primary research focus has included mobile computing, cybersecurity, online privacy, the Internet of Things, artificial intelligence, user-oriented machine learning, and semantic web technologies.

Norman received his Ph.D. in Computer Science at CMU with a major in Artificial Intelligence and a minor in Operations Research. He holds a MS degree in computer science from the University of Southern California and a BS/MS degree in electrical engineering and applied physics from the Free University of Brussels (Belgium) as “Ingénieur Civil Physicien”.

Norman’s research as well as his views on cybersecurity, privacy, mobile and IoT technologies are often covered in the press (e.g. Wall Street Journal, Wired, New York Times, Chronicle of Higher Education, Pittsburgh Post Gazette, Kiplinger, Huffington Post, Fast Company, Tech Crunch).

Biography

Joel has over 30 years of experience in engineering, technology, and information security. He has extensive knowledge and experience in security penetration testing, intrusion management, computer emergency response, secure system and network design, and policy and procedure development.

Joel is currently the Director of Information Security and Chief Information Security Officer for the University of Pittsburgh where he is responsible for information protection and compliance with security and privacy regulations related to computers and networks.

Previous positions include:Director of Information Security for Wake Forest University and the Chief Information Security Officer for Wake Forest Baptist Medical Center;Director of Information Security at NextEra Energy (parent company to Florida Power & Light);Director of Information Security at AFLAC;Senior Manager at PricewaterhouseCoopers.

Joel retired from the Air Force and his last assignment was at the Air Force Information Warfare Center. While there, he helped form the AF Computer Emergency Response Center (AF CERT), developed incident response techniques and procedures, worked with law enforcement, and worked on Air Force and DoD level cyber security strategy and policy.

Biography

As the Director of Information Security/New Initiatives at Duquesne University, Tom is responsible for the strategy and operations of the University’s comprehensive and unified information (cyber) security program for Duquesne University that includes detection, prevention, incident response, and cyber security awareness. He is also responsible for Identity and Access Management and Data Governance.

Biography.

Shane Filus has been with the Pittsburgh Supercomputing Center for over 15 years, first as a Network Engineer for PSC/3ROX, and currently as a Security Engineer. He is also a part of the XSEDE Operational Security group, contributes to NCSA's SDAIA project, and is a member of REN-ISAC. Shane has attended the security and training conferences of: Blackhat, Defcon, brocon, and Pittsburgh's BSides and InfraGard. His interests and expertise include: Bro Network Security Monitor, Security Onion, ELK, Vulnerability Scanning, Kerberos, firewalls, VPNs, Intelligence Sharing, Log Analysis, Incident Response, and software development/scripting.

Abstract

Data Loss Prevention (DLP) continues to be a concern as institutions across the world try to gain control over the proliferation of sensitive data and how to put policy and controls around it. Data breaches continue to affect institutions, resulting in tarnished reputations and costly identity protection services to those impacted. Nearly 2 years ago, Duquesne University began an endeavor to scan, identify and secure Personally Identifiable Information (PII) across campus endpoints and servers. In this session, we will share our experiences of planning, designing, and implementing a DLP solution that helped identify millions of records and what steps we've taken to reduce the risk.

Biography

Brad has been designing, implementing and maintaining systems & security architectures for over 15 years in higher education. In his current role as Manager of Secure Integrated Infrastructure at Duquesne University, Brad is tasked with ensuring the security and integrity of on and off-campus datacenter networks and infrastructure. He is a GIAC certified Incident Responder (GCIH) with additional certifications from Red Hat, VMware and Splunk.

Michael has been in the Information Technology field for over 17 years architecting, designing, managing, and securing all facets of the entire infrastructure stack. As a Senior Information Security Engineer at Duquesne University, Michael has a deep passion for mentoring users and raising awareness on information security activities, trends, and threats. Over the course of his career, he has successfully led enterprise-wide projects from inception to completion while ensuring security compliance and employing industry best practices. Michael consistently instills a culture of security to end-users in an overall effort to harden the security posture of the University. Michael holds several certifications from Microsoft, Cisco, Comp Tia, and Splunk, in addition to several privileged account management (PAM) certifications.

Abstract

New methods are required to address threats increasing in frequency, sophistication, and impact, in an increasing climate of cost constraints, and resource and skills shortage. Traditional security controls and response can’t possibly keep pace.

Private and State sponsored dark web actors are well orchestrated, using innovative AI technologies, leveraging Digital Currencies, their R&D producing wares designed to circumvent traditional security practices have changed the game. You now require innovative security approaches.

The art of effective Threat Hunting, Advanced Analytics, Incident Response, and the value of Cognitive Security are the new frontier.

Learn how to determine threats before your fences are tested, investigate non-obvious related offenses, obtain near-real-time insight and effectively trigger incident response as a single strategy.

Biography

IBM CyberSecurity Advisor, Certified Information Systems Security Professional, and recognized subject matter expert in Security Intelligence, Data Protection, Identity Access Governance, and Authorization. His unique security perspective is frequently reflected in his published articles. Consulting roles include: Lead architect for many of the largest secured authentication and authorization infrastructures. This includes Billion user authentication infrastructures.

Speaking engagements include passionate discussions correlating blended threats across physical and logical infrastructure boundaries, Cognitive Security, Threat Hunting, Security Intelligence and Response, Identity Access Management and Governance, Defense in Depth, Security Immune System, Cloud Security, and Billion User Identity Crisis.

Brian DeNoble

Bio of Brian DeNoble to be here

Brian Pasquini

Bio of Brian Pasquini to be here

Kenny Holmes

Kenny is the Director of Public Sector for the State, Local, and Education practice at Palo Alto Networks. He holds a master’s degree in Computer Engineering Technology from the University of Mississippi. He has been in Information Technology for more than twenty years with over fifteen years dedicated to security while holding ten industry certifications from ISC2, Microsoft, Sun, and IBM, and is currently a Computer Information System Security Professional. He is an advocate and evangelist for the Public Sector and Education and an expert in public-key cryptography. He currently works with the largest Research Universities in world on information security projects spanning network, endpoint, and cloud infrastructures to meet compliance and technology requirements.

Abstract/Bio here.

Biography

Gwendolyn (Wendy) Huntoon is the president and CEO of KINBER, the Keystone Initiative for Network Based Education and Research. As Pennsylvania’s statewide research, education and community network, KINBER is a trusted technology partner providing a strategic and competitive advantage to PA organizations in the use of digital technologies and services. She is known for her work to enhance high performance networking infrastructure, technology, and services for the research community, including cyberinfrastructure deployment and network performance analysis and tuning. While at KINBER, she has expanded KINBER’s PennREN network, grown the number of connections, expanded service offerings, and enhanced the support for research and education applications and drivers. Huntoon has held a number of positions in the community, currently is a member DoE Advanced Scientific Computing Advisory Committee and serves on the Internet2 Network Architecture, Operations and Policy program advisory group. She is the Principal Investigator on the NSF funded 2016 and 2017 NSF Campus Cyberinfrastructure and Cybersecurity Innovation for Cyberinfrastructure PI Workshops as well as the CC*IIE Region: Accelerating the Adoption of Campus Cyberinfrastructure Technologies in Pennsylvania. She is the co-PI on the NSF funded Women in IT Networking at SC (WINS) project aimed at addressing the prevalent gender gap that exists in Information Technology (IT) particularly in the fields of network engineering and high performance computing (HPC). Prior to joining KINBER, she was the Director of Advanced Networking at the Pittsburgh Supercomputing Center and also served in Intenet2’s CTO’s office as the Senior Director of Research and Science Engagement.