What Air Disasters Can Teach Us about Incident Response
08-27, 15:00–15:50 (US/Eastern), Room 402 - "Re-Imagine" track

Computer Forensics is a relatively new field when compared to other related fields. By contrast, the men and women of the NTSB have been investigating air accidents for as long as there have been airplanes, and well before the advent of computers. Computer Intrusions and Air Disasters share a lot in common. While computer intrusions thankfully seldom involve loss of life or serious injury, just as with Air Disasters, they are cascade failures of people, process and technology. In this talk a look is taken at how Air Disasters are investigated, and how we can apply that to Computer Forensic investigations.

Tony Drake has been involved in computer security roles beginning with his first job out of college. He has held positions in most aspects of computer security, system administration, and application administration over a career spanning 22 years and 4 states.