Report phishing emails, pharming sites and crimeware to the Anti-Phishing Working Group and help stop this insidious threat to e-commerce. Click "Report Phishing" link below for
instructions.
2006 APWG General Meeting
Orlando, Florida
November 14 - 15, 2006
Meeting Logistics
The APWG is please to announce th 2006 Fall General Meeting. Please join us at this oportunity to bring yourself up-to-date on the latest status of phishing's evolution across
the globe. Count on two full days of presentations, panel discussions and in-depth roundtables.
At this two-day members-only meeting, the APWG will examine crimeware's evolution, the roles of Registrars and Registries in managing phishing attacks, public health approaches to
managing the Botnet scourge, behavioral vulnerabilities and human factors that contribute to phishing's success as well as breaking news on counter-e.crime tools and resources.
APWG Members and Non-Members Please Note: The sessions at the Fall General Meeting are open to APWG Members Only. APWG organizers will vet all registrants
that sign up for the conference. Interlopers will not be accomodated. If you haven't already, check membership rules and benefits at: http://www.antiphishing.org/membership.html Membership is open to qualified financial institutions, online
retailers, ISPs, the law enforcement community, security solutions providers and research institutions. Members at the individual level and above are eligible to attend
conferences.
REGISTRATION WARNING: Registration for this General Members meeting is for the ONE event on November 14 and 15 and does NOT entitle the registree to attend the eCrime
Researchers Summit on November 16 and 17. To also attend that event will require a separate registration that can be made onthis page.
Working Agenda (under
construction) Times and Days Subject to Change
Tuesday, November 14
08:00
Breakfast & Registration
09:00
Opening Remarks and Conference Overwier
Dave Jevans
Chairman
APWG
Peter Cassidy
Secretary-General
APWG
09:15
Statistical Overview & Interpretation
Bassam Khan Cloudmark
09:30
International Field Reports
Enrique González Ochoa
Panda Labs Surveillance Department
Dr. Waldemar Grudzien
Bundesverband deutscher Banken e.V. Retail Banking und Banktechnologie
Colin Whittaker APACS, UK
Yurie Ito Director, Technical Operation
JPCERT/CC
Terrence Park
KrCERT
11:00
Break
11:15
APWG Crimeware Roundtable: Contemporary Challenges in
Corralling and Neutralizing
the New Crimeware Mutations
Hiep Dang (Moderator)
McAfee
Zulfikar Ramzan Symantec on Global Crimeware Proliferation
Dan Hubbard Websense, Inc. on Zero-Day: And the Day After
Cristine Hoepers Brazil CERT on AntiVirus Technology's Falling Crimeware Detection Rates
Jason Milletary CERT/CC on Crimeware Counter-offensive: Survivability Tactics of the
Criminal Software Tradecraft
Richard Wang Manager
SophosLabs US
12:45
Lunch
Thank you to our sponsor for Thursday's Lunch, RSA Security.
13:30
APWG Practicum on Phish Data:Distinguishing Phish from Generic Spam for Alerting & Forensic Applications
Thomas Rickert Association of the German Internet Industry German ISPA Roadmap of the European Spotspam Database
Ian Fette
Carnegie Mellon University
14:30
Law Enforcement, Regulation
and Public Policy Precipitates
of Phishing
Donald R. Saxinger
Division of Supervision
and Consumer Protection
Federal Deposit Insurance Corporation
Jonathan Rusch Special Counsel for Fraud Prevention
US Department of Justice
Criminal Division
15:30
Case Study: eBay/Paypal Email Authentication: Important Lessons Learned During Implementation and
Deployment
Mike Vergara PayPal
16:15
Break
16:30
APWG Steering Committee Meeting
19:30
APWG Rump Session
All attendees are invited to an informal meet and greet hosted by the APWG.
Wednesday, November 15
08:00
Breakfast
09:00
APWG Policy Rountable: Phishing and the Role of
Registrars and Registries
Rod Rasmussen (Moderator)
InternetIdentity
Jorge Aguila e-la Caixa CSIRT
Ben Butler GoDaddy.com
Dan Whetzel Verisign
Brad Keller eCommerce Business Risk Manager
Wachovia Corporation
John Crain Chief Technology Officer
ICANN
Jon Nevett VP and Chief Policy Counsel Network Solutions Chair: Registrar Constituency of ICANN GNSO
ICANN
10:45
Break
11:15
APWG Technology Roundtable: Epidemiological and Public Health Approaches to BotNet Scourges
Dr. Randy Vaughn (Moderator)
Professor of Information Systems
Hankamer School of Business
Baylor University
David Dagon Georgia Institute of Technology
Rick Wesson Alice's Registry
Joe Stewart SecureWorks
Gary Warner PIRT
Richard E. Perlotto ShadowServer
Dave Monnier REN-ISAC
Jordan Medlen Sago Networks
Scott Chasin MX Logic
13:00
Lunch
13:45
Case Study: You've Got Espionage! A Corporate Phish Tale
Christopher Burgess Cisco Systems
14:30
APWG Research Roundtable: Behavioral Vulnerabilities
and Human Factors
Aaron Emigh(moderator)
APWG Research Fellow
Jeff Wilbur Iconix on User Reaction to Spoof Messages
Dr. Lorrie Faith Cranor Associate Research Professor
Computer Science and Engineering
& Public Policy
Carnegie Mellon University on Phinding Phish: How accurate are today's toolbars? What hope for training users?
Dr. Markus Jacobsson
Associate Professor of Informatics
Associate Director of CACR
Indiana University on What Instills Trust? A Qualitative Study of Phishing
Dan Schutzer Executive Director
Financial Services Technology Consortium on Testing and Evaluating the
Usability of Solutions to
Authenticating the Finacial Institution to the Consumer
16:15
Break
16:30
Counter-e.Crime Data Resources
Tools, Techniques and Schema
Pat Cain
APWG Research Fellow on
The IODEF Extensions: A Universal Syntax for e-Crime Reporting Kent Davidson ioflux, inc. APWG Abuse Manager Contact System
Dave Jevans APWG Chairman on the APWG Phishing Attack Data Repository
17:15
Closing Remarks
Dave Jevans Chairman
APWG
BOF Sessions
17:30
eMail Authentication
18:00
Phisherman phishing data collection industry utility
The General Meeting and all pre-event meetings are being held at the Radisson University Hotel Orlando. With a prime East Orlando location near Orlando's top
corporate, government and military offices and the University of Central Florida, the Hotel Orlando offers the kind of warm hospitality and topnotch services sure to please business
and leisure travelers alike.
Local Attractions * Central Florida Research Park - .5 miles
* University of Central Florida - 2 miles
* Waterford Lakes Town Center Shopping Outlet
* Eastwood, Stoneybrook Golf Course within 5 miles
* Orlando International Airport - 15 miles
* Orlando Convention Center - 15 miles
* Major area attractions easily accessible via expressway
Hotel Room Reservations
For reservastions please contact Radison at +1.800.333.3333 or visit their website. The negotiated APWG discount rate is
availalbe for the nights of November 13 through November 19, based on availability. To qualify for the APWG rate registrations must be received before October 24. Please mention
"APWG" when registering for this special rate. After October 24, please contact the hotel directly to determine availability and rate.
Standard Rooms $89 single/double * (Rate subject to 11.5% local taxes)
Check In Info / Cancellation Policy Check-in time is 3:00 PM, and the standard check-out time is 12:00 noon. An advance deposit will be taken at time of booking. Deposit is refundable only if
reservation is cancelled 72 hours prior to arrival date. No-shows and reservations cancelled less than 72 hours in advance will be charged in full plus taxes.
* This room rate is not commissionable to travel agents.
Call for Presentations
For this meeting, the APWG is still developing, reviewing and receiving, proposals for research presentations from the membership and from visiting
scholars. Financial institutions, technology, vendors, ISPs, law enforcement representatives and inter-disciplinary study groups working within the APWG research committees are all
invited to send their proposals to Deputy Secretary-General Peter Cassidy at pcassidy@antiphishing.org.
Vendor Sponsorship
Opportunities
APWG is offering an opportunity to build relationships while marketing your company to a targeted audience of communications service, technology companies, security companies,
regulatory and law enforcement officials and financial institutions during its Spring 2006 General Meeting in April.
Sponsorships are a personal, non-intrusive way of conveying your message. Additionally, your participation can help support activities vital to the overall success of the APWG
and its research partners, which ultimately contributes to the success of the entire counter-phishing stakeholders' community.
The following benefits are available to Meeting Sponsors, once your sponsorship is confirmed:
Recognition in on-site signage displayed during the meal or break
Distribution of one giveaway such as a literature pack
There are a number of meal or break sponsorship opportunities available for APWG members who want to use the meetings as an opportunity to communicate their brand and message to
members of the APWG and presenters, each either a critical decision maker or a thought leader in his or her own right.
For more information on sponsoring oportunities please contact APWG Deputy Secretary-General Foy Shiver at fshiver@antiphishing.org.
About the Anti-Phishing Working
Group
The Anti-Phishing Working Group (APWG) is focused on giving industry stakeholders a confidential forum to discuss phishing issues, define the scope of the
phishing problem in terms of hard and soft costs, and share information and best practices for eliminating the problem. Where appropriate, the APWG will also look to share this
information with law enforcement. Membership is open to qualified financial institutions, e-commerce companies, the law enforcement community, and industry. Because phishing attacks
and email fraud are sensitive subjects for many organizations that do business online, the APWG has a policy of maintaining the confidentiality of member organizations.
The Web site of the Anti-Phishing Working Group is www.antiphishing.org. It serves as a public and industry resource
for information about the problem of phishing and email fraud, including identification and promotion of pragmatic technical solutions that can provide immediate protection and
benefits against phishing attacks.
The APWG was founded by Tumbleweed Communications and a number of member banks, financial services institutions, and e-commerce providers. It held its first
meeting in November 2003 in San Francisco. The APWG, an organization of more than 2300 members and more than 1500 member companies, police and government agencies worldwide was
officially established as an independent organization in June 2004, controlled by its executives and board of directors and an advisory steering committee.
