SecDSM, a monthly meetup providing the opportunity to network with other InfoSec pros and listen to short tech talks presented by your fellow members (or give a presentation yourself!) while enjoying some beer/drinks/food. No sales pitches. The idea is to provide you actionable knowledge for you to take back to your $dayjob while building a top tier InfoSec community in the Des Moines area. If you have the desire to learn about real world InfoSec scenarios - get out of your comfort zone - and join us in a relaxed vendor neutral environment. No registration is required.

Schedule

We meet monthly on the 3rd Thursday of every month starting at 6pm at The Forge By Pillar Technology in Downtown Des Moines.

SecDSM 101 6:00 PM

A brief introduction to the group along with any announcements and general communication.

James Beal - SecDSM News 6:05 PM

Quick Review of the Month's InfoSec news.

Ben Schmitt and Nate Subra Memory Forensics 101.56:30 PM

Ben and Nate walk through the process of memory acquisition, analysis, and anti-forensics. Understand memory forensics from both Blue and Red team perspectives. A talk that will have something for every skill level, from volatility usage to analysis at scale.


Ben is the Vice President of Information Security at Dwolla, an Amateur brewer, competition BBQer, casual carpenter, husband of one, father of 3 and master of 2 dogs. Nate is a Senior Information Security Analyst at Leidos Commerical Cyber, a Cyber Operator at the Iowa Air National Guard, and an avid purple teamer.

Arden Meyer TOOOL: Lockpicking and Physical Security 1017:20 PM

We will go over the basics of lock picking with standard locks, both education and demonstration. Participants will be given a chance to learn hands-on with locks of varying difficulty. If time permits, we may discuss alternative ways to bypass physical security mechanisms.


Arden is a retired Air Force Senior Cyber Operator and now heads up the local chapter of The Open Organisation Of Lockpickers (TOOOL), an international group with the mission to advance public knowledge about locks and lockpicking.

SecDSM 101 6:00 PM

A brief introduction to the group along with any announcements and general communication.

James Beal - SecDSM News 6:05 PM

Quick Review of the Month's InfoSec news.

SecDSM 101 6:00 PM

A brief introduction to the group along with any announcements and general communication.

James Beal - SecDSM News 6:05 PM

Quick Review of the Month's InfoSec news.

SecDSM 101 6:00 PM

A brief introduction to the group along with any announcements and general communication.

James Beal - SecDSM News 6:05 PM

Quick Review of the Month's InfoSec news.

Merchandise and Donations

Shirts (and other items) are for sale at each meeting and online.

T-Shirt

Upcoming Events

The following events might be of interest to the SecDSM community.

Be sure to check out Des Moines Web Collective for updated list of local user groups

If you'd like to see an event listed, please email us at events@secdsm.org

Please reach out via our Slack channel or email us at events@secdsm.org if you have an idea for a presentation you would like to give.

July ISSA meetingJuly 24, 2017 11:30AM-1:00PM
FBL Financial, 5400 University Ave, West Des Moines, IA.
August ISSA meetingAugust 28, 2017 11:30AM-1:00PM
FBL Financial, 5400 University Ave, West Des Moines, IA.

Upcoming cons

Some members are anticipating attending the following conferences, reach out on slack to cordinate travel.

BSidesLV

BSides Las Vegas is an Information / Security conference that’s different. We’re a volunteer organized event, put on by and for the community, and we truly strive to keep information free.

There is no charge to the public to attend BSidesLV. Our costs are covered by our generous donors and sponsors, who share our vision of free dissemination of information. The conversations are getting more potent and the “TALK AT YOU” conferences are starting to realize they have to change. BSidesLV is making this happen by shaking-up the format.

Cost:

Free - but get a room or be a donor if you want a ticket

Schedule
Day Date Start End
Tuesday July 25 ?? ??
Wednesday July 26 ?? ??
Travel Details
Day Date Time
Depart Monday July 24 UNK
Return Monday July 31 after defcon
DEFCON

Originally started in 1993, it was a meant to be a party for member of Platinum Net, a Fido protocol based hacking network out of Canada. As the main U.S. hub I was helping the Platinum Net organizer (I forget his name) plan a closing party for all the member BBS systems and their users. He was going to shut down the network when his dad took a new job and had to move away. We talking about where we might hold it, when all of a sudden he left early and disappeared. I was just planning a party for a network that was shut down, except for my U.S. nodes. I decided what the hell, I'll invite the members of all the other networks my BBS (A Dark Tangent System) system was a part of including Cyber Crime International (CCI), Hit Net, Tired of Protection (ToP), and like 8 others I can't remember. Why not invite everyone on #hack? Good idea!

Cost:

$225 - estimated

Schedule
Day Date Start End
Thursday July 27 ?? ??
Friday July 28 ?? ??
Saturday July 29 ?? ??
Sunday July 30 ?? ??
Travel Details
Day Date Time
Depart Monday July 24 early for BSidesLV
Return Monday July 31 ???
BroCon

BroCon ’17 offers the Bro community a chance to meet face-to-face, share new ideas, and better understand and secure our networks. The conference is composed of presentations from members of the community and the Bro Development team.

Cost:

$100 - estimated

Schedule
Day Date Start End
Tuesday Sept 12 ?? ??
Wednesday Sept 13 ?? ??
Thursday Sept 14 ?? ??
Travel Details
Day Date Time
Depart Monday Or Tuesday Sept 11 or 22
Return Thursday Sept 14 ???
Derbycon Training

DerbyCon isn’t just another security conference. We’ve taken the best elements from all of the conferences we’ve ever been to and put them into one. DerbyCon is a place you can call home, where you can meet each other, party, and learn. Our goal is to create a fun environment where the security community can come together to share ideas and concepts. Whether you know Linux, how to program, are established in security, or a hobbyist, the ideal of DerbyCon is to promote learning and strengthen the community.

Cost:

$50 - estimated

Derbycon

DerbyCon isn’t just another security conference. We’ve taken the best elements from all of the conferences we’ve ever been to and put them into one. DerbyCon is a place you can call home, where you can meet each other, party, and learn. Our goal is to create a fun environment where the security community can come together to share ideas and concepts. Whether you know Linux, how to program, are established in security, or a hobbyist, the ideal of DerbyCon is to promote learning and strengthen the community.

Cost:

$175

MISC CONF

The Minnesota Information Security Community understands that the success of security is cross-disciplinary and relies on skills and knowledge from multiple domains of knowledge. The Minnesota Information Security Community is a local group with nationwide contacts in all areas of information security and skill levels from entry ­level to Vice Presidents and CEOs of major Security firms.

Cost:

$50 - estimated

Schedule
Day Date Start End
Saturday Oct 21 ?? ??
Sunday Oct 22 ?? ??
Travel Details
Day Date Time
Depart Friday Oct 20
Return Sunday Oct 22 ???
GrrCon

GrrCON is an information security and hacking conference that provides the Midwest InfoSec community with a fun atmosphere to come together and engage with like minded people. We keep GrrCON small with around 1,500 attendance to allow us to provide those things other events leave out. Whether you are a Fortune 500 executive, security researcher, industry professional, student, or a hacker of flexible morals you will find something for you at GrrCON.

Cost:

$50 - Student

$90 - Early Bird

$150 - GA

$350 - VIP

Schedule
Day Date Start End
Thursday Oct 26 ?? ??
Friday Oct 27 ?? ??
Travel Details
Day Date Time
Depart Wednesday Oct 25
Return Saturday Oct 28 ???
Wild West Hacking Fest

This conference is going to be about breaking things. Non-standard things. Often, this is called “Stunt hacking”. Or, it can be called hacking of the Internet of Things (IoT). The best example one hears about is hacking a toaster, or a fridge. Each of these exploits teach us all something about the type of testing we should be doing in our own organizations. It is these non-standard devices that are going to lead to the next wave of rampant security vulnerabilities that we’ll need to address and remediate. Unfortunately, we do not have a Patch Tuesday for these devices. Much like the Wild West, the IoT is a new frontier – it’s wild, untamed and full of amazing opportunities! Saddle up, grab your lasso, and join us for this adventure!

Cost:

$100 - Early Bird

$250 - GA

Schedule
Day Date Start End
Friday Oct 27 ?? ??
Saturday Oct 29 ?? ??
Travel Details
Day Date Time
Depart Thurday Oct 26
Return Sunday Oct 29 ???

Venue

We meet in The Forge by Pillar Technology. Enter on the west side of the building and then procede up to the 2nd floor.

More info about Pillar Technology

The Forge by Pillar Technology

1420 Locust St, Des Moines, IA 50309

Sign up for Slack!