Insider Threat/computer forensics
Fred came on to the FBI after the Robert P Hanssen incident. He was tasked to design and implement the FBI's first Enterprise Security Operations Center (ESOC) with a high-level focus on insider threats. During Fred's presentation he will take the chapter through the FBI's ESOC build out discussing the driving factors for this initiative, challenges they faced, lessons learned and the success's the FBI had before he left.
Fred Newberry, Director of Customer Solutions with Cisco Systems
Fred Newberry was former Chief Information Security Officer (CISO) of the FBI and Chief of the Information Assurance Section in the FBI’s Security Division.
Mr. Newberry started his FBI career in August, 2002, and developed the original concepts and design for the Enterprise Security Operations Center (ESOC), which is now operational and monitors the Bureau’s information systems for external intrusions and insider misuse. As a part of the ESOC, his team also developed the Advanced Technology and Investigations Group (ATIG), which supports Special Agents in internal investigations and analysis of case data using specialized automated tools. The ESOC is now providing capabilities that have never existed in the FBI and to date, has supported over 150 investigations, including two major “insider” cases. Correlation of disparate data and development of time lines, are now being accomplished accurately in minutes, rather than in weeks or months using manual means. As a result, Mr. Newberry’s contributions to the FBI were part of a strategy to reduce the likelihood of another espionage event like that of Robert P. Hanssen going undetected in the future.
Prior to coming to the FBI, Mr. Newberry was employed by the U. S. Navy and assigned to the National Reconnaissance Office (NRO) as Deputy Chief of the Enterprise Management Operations Center (EMOC). Similar to his work in the FBI, he was responsible for monitoring NRO’s information systems against external and internal intrusions, as well as monitoring NRO networks for performance. While serving in this role, the EMOC was involved in the detection and case support leading to subsequent conviction of accused spy, Brian Regan.
Mr. Newberry received his B.S. degree from the University of Georgia and received his Master of Science in Computer Science from The George Washington University with a major in software engineering. In addition, he received a Master of Science in National Resource Strategy (concentration in Information Systems) from The Industrial College of the Armed Forces (ICAF) at the National Defense University at Ft. McNair, Washington, DC.
Mr. Newberry is currently providing information technology security consulting services as a Director of Customer Solutions with Cisco Systems.
|
