The Information Assurance Club welcomes guest speaker Christopher King for a presentation on Insider Threat.

Tuesday, October 13th, 2009
205 IST — 7:00 PM

Insider Threat is a growing problem for today’s organizations. Often overlooked in favor of technological solutions, the “trusted insider” can commit tremendous damage to an organization. CERT has researched hundreds of cases of actual insiders, from a combination of open source reporting, Secret Service case files, and voluntary contributions from organizations. Using these case files, and statistical, psychological, and technical analysis, CERT was able to develop a model of malicious insiders and why they commit their crimes. This presentation will discuss some of the major cases we have studied, profiles of malicious insiders, and best practices for reducing the risk of insider threat.

Afterwards, Christopher will answer questions regarding future careers in government or contractors, and some general advice for “getting ahead” in the information security industry.

Speaker Biography:

Christopher King works for the Threat and Incident Management Team (TAIM) at the Computer Emergency Response Team (CERT), a federally funded research and development organization created by DARPA in 1988 after the first computer worm. TAIM researches insider threats and incident response solutions for the DoD, DHS, and other organizations. He is also a graduate student at Carnegie Mellon University, studying Information Security Policy and Management.

Previously, Christopher worked for the Defense Information Systems Agency (DISA) as an Information Assurance Manager, working in Command and Control technologies. Through his tenure at DISA, he managed multi-million dollar contracts, led a development team on the Net-Enabled Command Capability (NECC), and ensured secure architecture for the NECC program. Christopher has also worked for DHS Office of Inspector General, and CERT’s Vulnerability Analysis team.

Christopher attended Penn State University and received a degree in Information Sciences and Technology in 2007.