August 2016 SFISSA Meeting – Thursday August 18th, 6PM Nova Southeastern University – SFISSA

South Florida’s August 2016 meeting will be on Thursday, August 18th, 2016 at Nova Southeastern University. The meeting will take place in the Carl DeSantis Building from 6PM to 9:30PM, followed by their usual networking hour.

Presentation One

Title:
TBA

Presentation Two

Can you protect my Credit Card data? It is 2016 after all!
Talk Two Speaker:
Kelvin O. Medina

Mr. Kelvin O. Medina is currently a Senior Security Consultant for Trustwave. As part of Trustwave’s global security delivery services, Mr. Medina lead customer engagements to include the execution & completion of projects providing information security consultation and assessment services. Customers’ industries and complexities range from startups to Fortune Global 500 organizations in key industries such as banking & finance, retail, technology, among others. Emphasis around secure application development, source-code review, application testing and cryptography in alignment with both the Payment Application Data Security Standard (PA-DSS) and PCI Point-to- point Encryption (P2PE).

Previously, Mr. Medina worked as a Security Engineer at the University of Miami supporting various initiative such as logging & monitoring, incident handling, PCI-DSS.

In 2013, Mr. Medina received his Master of Science from Johns Hopkins University – Whiting School of Engineering. He also holds several industry leading security certifications.

Talk Abstract:
This presentation began with an introduction to the security strategies used in the past decades to protect sensitive data and mostly focused in securing the infrastructure. This is all right back to the PCI-DSS framework and how this apply to organizations dealing with Cardholder Data (CHD). Then, emerging technologies are brought into the discussion along with their pros and cons. This includes technologies such as Point-to-Point Encryption (P2PE), magnetic strip vs EMV, tokenization, virtual terminals, among others. A real life project aimed to implement services in the cloud to de-scope certain segments from PCI-DSS in a mid-size university/hospital is discussed.