Track 2

CC-6: Identity Crisis: Security and Identity Management Challenges in the Cloud

05/03/10

3:15 PM - 4:30 PM

Tim Connors

Director

Cloud Services, AT&T

Tim Connors leads the AT&T global Cloud Services practice, focusing on scaling and growing the business to serve customer needs. He was appointed to the position in 2009, after successfully running the AT&T Managed Hosting Services, where his responsibilities included launching AT&T’s first Utility Computing, Server Virtualization and Application Acceleration services. His current focus includes Cloud Computing and Cloud Storage services, with particular attention to business customer buying patterns, user communities and encouraging cloud service enablers to drive adoption. Tim regularly briefs customer executive audiences on the full range of AT&T Hosting and Cloud services, and is a recipient of the AT&T Distinguished Speaker Award. He collaborates with customers to outline and focus their cloud strategies. Tim also works closely with influential industry analysts and consultants to keep them apprised of AT&T services and roadmap. After advancing through leadership roles in Customer Service, Finance and Information Technology in the Insurance industry, Tim joined AT&T at the beginning of its entry into Managed Hosting in 2001. Under his leadership, the business has progressed to its current spot in the leader category in all major external rankings. Tim is a New Jersey native, and holds a Bachelor of Arts degree from Drew University and a Master’s degree in Business Administration from Rutgers, the State University

Russell Dietz

VP & CTO

SafeNet

Russell Dietz joined SafeNet in February 2009 as vice president and Chief Technology Officer (CTO). In this role, Mr. Dietz, who has more than 25 years of industry experience, leads the strategic positioning and migration of new technologies into SafeNet, assuring the continued impact of new technologies on the Company’s highly successful solutions portfolio. Mr. Dietz has held multiple CTO positions for high tech companies including Hifn, Inc. where he led company efforts in defining the next generation of security, service and network processing solutions, and Apptitude where he drove the vision, strategy and architecture of the application and flow classification solutions, MeterFlow and MeterWorks. Mr. Dietz was the founder and VP of engineering for Technically Elite, and previously held various management and technical spots at Magnavox Electronic Systems and Digital Equipment Corporation. He is an active member of the Internet Engineering Task Force (IETF), IEEE, Optical Internetworking Forum (OIF) and the Cloud Computing Interoperability Forum (CCIF) and was the chairperson of the Network Processing Forum. To date, Mr. Dietz has been awarded 20 patents in the fields of data communications traffic analysis, behavior, security and data protection.

Scott Matsumoto

Founding Member & Co-Chair, IdM Working Group

Cloud Security Alliance

Scott Matsumoto is a Principal Consultant at Cigital bringing over 20 years of commercial software product development experience to the company. His experience encompasses executive management, software development management and software development. Mr. Matsumoto founded Xtremesoft, a software company that developed products for Microsoft-based applications where he served as both CEO and CTO. Mr. Matsumoto also served as the CTO for Spring Street Networks, an on-line social networking company. At Cigital, Mr. Matsumoto is responsible for the software architecture practice within the company. He consults for many of Cigital’s clients on enterprise architecture topics such as Cloud Computing Security, SOA Security, fine-grained entitlements systems and SOA Governance. He has also developed roadmaps for both large and small organizations which have enabled these organizations to build out their IT organizations in an orderly fashion while achieving best in Industry standards. Mr. Matsumoto has extensive experience developing commercial software products spanning a broad range of technologies including component-based middleware, performance management systems, graphical User Interfaces, language compilers, database management systems and operating system kernels.

Jeff Porter

Director, Platform Technology Division

Department of Information Technology, Fairfax County, VA

Jeff Porter Director, Platform Technology Division Department of Information Technology Fairfax County, Virginia Jeff Porter has spent over 29 years in the IT industry working in different roles, ranging from a technician to a director, in both public and private sectors. He spent the first 13 years of his technology career working for the Air Force, spending most of that time in Europe in support of the European theatre. Jeff spent five years in Government Service working in Heidelberg, Germany, providing support for over 200 IT facilities, and direct IT support for our troops in Bosnia. He spent 3 years as a IT consultant working as the Integration and Implementation manager for a major cable and internet provider. Currently, he manages the Infrastructure Platform Division for Fairfax County Government. He is responsible for the overall management of the IT Service Desk, Desktop Support, Server Support (UNIX and Microsoft Windows Servers), Database Support (SQL and Oracle), Microsoft Exchange, Microsoft SCCM, AntiVirus Support, Storage and Remote Access. Jeff attended the University of Maryland while in the Air Force in Europe, majoring in Information Systems.

Cybersecurity remains one of the biggest obstacles to cloud adoption and implementation. While the potential of cloud computing is great, agencies in the public sector have to know beyond the shadow of a doubt that cloud-based services are trustworthy for their data. Also at issue with the emergence of the cloud is identity management. As cloud computing takes hold, physical IT assets and business applications could run across the Internet. This model may be a mismatch for current federal government controls for identity management. How will government organizations maintain and manage access controls? Attendees will learn about:

> The necessary security controls
> Common myths and misconceptions about cloud security
> What to consider before implementing models for service delivery over the Web
> Case studies of successful secure cloud implementations
> Identity issues posed by cloud computing and how to consolidate identity control
> How to align cloud with current HSPD-12 and Common Access Card standards

 

Program Sponsor: