- Bell Aliant
- NHTCU & FBI
- Peter Allor
- Marcel van den Berg
- Rainer Böhme
- Bob Burls
- William Cheswick
- Carlos Cid
- Anton Chuvakin
- Dave De Coster
- Lord Errol
- Boris Goranov
- Martijn de Hamer
- Elly van den Heuvel
- Jaap-Henk Hoepman
- Bart Jacobs
- Sari Kajantie
- Mark Koek
- Jos Kuijpers
- Brett Lambo
- Eric Luiijf
- Scott McIntyre
- Milton Mueller
- Pär Österberg Medina
- Carol Overes
- Richard Perlotto
- David Rice
- Marcus Sachs
- Jacques Schuurman
- Alex Shipp
- Lance Spitzner
- Don Stikvoort
- Gigi Tagliapietra
- Jan Joris Vereijken
- Rémon Verkerk
- Randal Vickers
- David Watson
- Tillmann Werner
- Maurice Wessling
- Colin Whittaker
- Georg Wicherski
- Nicholas Witchell
- Dave Woutersen
Sari Kajantie worked for almost 10 years at the University of 'Linux was born here' Helsinki where she also got her master's degree on computer science. She started at the IT department as an administrator at the network services group and later on was the head of IT security. She soon turned into a wholesales customer as well as an information proxy of the local cyber crime investigators. Since a large part of her time was spent on hunting network baddies, she switched to the other side (not the dark, mind) as a rather natural development. She's been lately severly bureaucratised (but still tries to hang on there).
Information exchange - Why are the LE so d*rn difficult? Wednesday 17 September, 14:35 - 15:20, Penn RoomThe CERT/CSIRT and Law Enforcement communities work on different time cycles and have different judicial abilities to exchange data, especially any data concerning identities. There is also a huge variation between various juristictions: some LE's may exchange intelligence rather easily, whereas some can't practically at all.
I'll try to sketch out some of the reasons why the LE are forced to be so difficult from anyone else's perspective. When we identify the boundary values, we could probably find a way to function more freely inside them.
I'll use examples to show that the collaboration is necessary and that it might also be useful to have an information flow from the LE to CERTs/CSIRTs, too (and not always the other way around ;-).