New York State InfraGard Conference – NextGen Cyber: The Advanced Persistent Threat-August 17, 2011

Biography

Since February 2010, Mr. Henry has served as assistant director in charge of the Washington Field Office, which is where he began his career with the FBI in 1989, investigating a variety of matters, focusing primarily on public corruption and serving as a member of the SWAT team.

In his 21 years with the Bureau, Mr. Henry has served in a variety of capacities at FBI Headquarters and in the field. Among his many assignments Mr. Henry has served as: a supervisory special agent in the Public Corruption Unit; chief of the Computer Investigations Unit in the National Infrastructure Protection Center; field supervisor of the Computer Crimes Squad for the FBI’s Baltimore Field Office; assistant inspector and team leader in the Inspection Division; assistant special agent in charge of the Philadelphia Field Office; and chief of the Executive Staff for the National Security Branch.

In 2007, Mr. Henry was named deputy assistant director of the FBI’s Cyber Division, with program management responsibility for all FBI computer investigations worldwide. He was an original member of the National Cyber Study Group, which developed the Comprehensive National Cyber Security Initiative (CNCI). In September 2008, Mr. Henry became assistant director of the Cyber Division, where he played a central role in restructuring the FBI’s cyber strategy and investigative programs.

Mr. Henry has earned a Bachelor of Business Administration from Hofstra University in New York, and a Master of Science in Criminal Justice Administration from Virginia Commonwealth University.

 The New World of Cyber Risk: Advanced Persistent Threats

Until recently, cyber-attacks were primarily “hit and run.” Bad guys access your network, steal information, and get out. While these attacks still occur and must be addressed, there’s a new and far more dangerous game being played. Advanced Persistent Threats (APTs) get into your network, stay there without detection for months or years, avoid removal, and gain sufficient privileges to allow cybercriminals to eventually control your network. These types of attacks have plagued highly classified government systems, and some of the largest providers of information security technologies. Investigate these attacks, how they work, how they target PII and PHI—among other targets—and the importance of evolving from perimeter defense to a more comprehensive doctrine of defense-in-depth.

What you’ll take away: 

Prior to joining Kroll, Alan served as Director, NYC Dept. of investigation.  Alan recently was the keynote speaker at the NATO Conference on Cyberterrorism in Ankara Turkey.

About SRC and SRCTec, Inc.
SRC is a research and development company with more than 50 years of experience in defense, environment and intelligence. SRCTec, an SRC company, provides manufacturing and logistics support for complex electronics systems. Together, through innovation in science, technology and information, they are redefining possible^®. The companies work with the customer for the best solution – not the bottom line – resulting in nationally significant, next generation products and services.

SRC and SRCTec employ more than 1,100 people in 14 offices throughout Colorado, Maine, Maryland, New York, Ohio, Texas and Virginia. There are more than 100 positions currently available nationwide. For more information, visit www.srcinc.com

Presentation Abstract

The presentation will provide an overview of the Division of Homeland Security and Emergency Services and the Office of Cyber Security (OCS).  Director Smith will discuss the current cyber threat environment, with an emphasis on those threats of greatest concern to state and local governments, and how entities can prioritize their efforts and resources to address the most significant threats. The session will also include a discussion of the resources and services available from the OCS, including the following: real-time advisories and alerts; assistance with incident response; managed security services; along with policies, standards and guidelines.

Before joining the Office of Cyber Security, Mr. Smith served as a supervising attorney at the State Office for Technology where he oversaw the legal team for the State Data Center and served as legislative liaison.  From 1986-2000, he worked in the New York State Office of the State Comptroller, where he served as an associate attorney in the Division of Legal Services/Municipal Law Section and the Division of Legal Services/Investments.

Mr. Smith graduated cum laude from Dartmouth College and earned his Juris Doctor from Albany Law School.  He and his wife reside in the City of Albany and have three children.