Analysis of the Stuxnet Worm
Rescheduled from November
On Wednesday, 8 February 2012, Liam O Murchu of Symantec will discuss the analysis of the Stuxnet Worm.
Abstract
Stuxnet has gained a lot of attention from researchers and media recently. There is good reason for this. Stuxnet is one of the most complex computer threats that have been discovered.
Stuxnet is a threat that was primarily written to target an industrial control system or set of similar systems. Industrial control systems are used in gas pipelines and power plants. Its final goal is to reprogram industrial control systems (ICS) by modifying code on programmable logic controllers (PLCs) to make them work in a manner the attacker intended and to hide those changes from the operator of the equipment. In order to achieve this goal the creators amassed a vast array of components to increase their chances of success. This includes zero-day exploits, a Windows rootkit, the first ever PLC rootkit, antivirus evasion.
The Symantec Stuxnet Dossier is available at:
http://www.symantec.com/connect/blogs/updated-w32stuxnet-dossier-available

About the Speaker
Liam O Murchu is the manager of Security Response Operations for North America with Symantec. In this role he leads the team of malware reverse engineers and is constantly combating the latest malware attacks and dealing with cutting edge threats of all sorts. Liam has analyzed the majority of the high profile threats that have emerged in the last number of years, both documenting their actions and working with both private parties and law enforcement agencies to counter these threats. His research has been presented before the US congress and the British and EU Parliaments. As part of his research he has been credited with discovering several zero day vulnerabilities. Recently Liam has analyzed the Stuxnet worm which targeted Uranium enrichment plants in Iran.
When
Wednesday, 8 Febrary 2012. 6:30 PM pizza/networking, 7 PM presentation, Q&A
Where
Richter Auditorium, Ahmanson Science Center, California Lutheran University
IEEE BV Section Dinner Event: “Internet Privacy”
From identity theft to cyberstalking, the Internet has been a mixed blessing of commercial success and privacy intrusions. Privacy protection has become ever more important as web-enabled devices become more and more a part of our lives.
The Buenaventura Section of the IEEE will hold its annual dinner & speaker event on Thursday, October 14. Speakers from industry and government will discuss methods of preserving your privacy on the Internet.
This event is open to the public.
- Event
- Personal Security: Keeping Your Life Private On The Internet
- Where
- Los Robles Greens, 299 S Moorpark Road, Thousand Oaks
- When
- Thursday, 14 October 2010
6:30 Networking / social; 7:00 dinner; 7:45-9:00 presentations and Q&A. - Tickets
- IEEE Members: $40; non-members: $50; students $10 (bring ID)
Register online at 123Signup
Visa, MasterCard, AmEx - Contact
- Steve Johnson, Buenaventura Section Chair
sfjohnso@ieee.org
See ieee-buenaventura.org for more information
Computer Society chapter members please note: this event replaces the regular CS chapter meeting for October. Come meet members in other IEEE Societies!
No Silver Bullet III: Business and Software Engineering in the Cloud
Wednesday 9 September 2009, Karl Geiger, Convergent Informatics, Inc. shows how life in the cloud can be heady, but few remember to bring ladders and parachutes.
Cloud computing and software as a service (SaaS) have received much press as the next “silver bullet” for business systems. Although they can lower technical, software development, and support costs, Cloud projects run like any other systems development/deployment effort. They require clear goals, well-defined requirements with testable endpoints, and diligent project oversight. This talk highlights how good software engineering practices applied to two projects: Convergent Informatics’s eCompany-in-a-Box™ and the resuscitation of an e-commerce company. It covers what works, what to beware, and where technical folks can have lots of fun.
About the Speaker
Karl Geiger is one of the founders and principals at Convergent Informatics, Inc., “The Virtual CIO Company”. Formerly he worked as Director of Enterprise Architecture at Amgen, Inc., where he and his staff guided development and set standards for infrastructure and global systems such ERP. Karl also did extensive work in clinical development and on research information retrieval systems. Prior to Amgen, he developed library systems and supported mainframes at the University of Southern California. He holds BA in Classics (Latin and Greek) from USC and an MS in Computer Science from California Lutheran University. Karl belongs to the IEEE, the ACM, and the AAAS.
RFID in Implantable Medical Devices
Wednesday, 10 June 2009, Nilanjan Dey Roy discusses his research into RFID systems used in implantable medical devices. Radio Frequency Identification (RFID) is the next generation identification technique with a cheap and simple design. As RFID finds its way into the medical environment, this paper tries to approach the various promises of RFID in medical devices and questions which of these are true. With all the possibilities of RFID, it is important to place all safeguards before we unleash the technology upon the world. In this paper we try to research and exploit security vulnerabilities of a RFID. In addition we propose a RFID system for a medical organization which processes the data from an implantable device.
At first, an overview of RFID technology and the involved system components will be given. In the subsequent sections, aspects of security and privacy will be presented. And finally an overall system with data management will be presented. In this project we try to present a set of research which will help us to understand the possibilities and level of risk involved in a RFID in implantable devices.




