<styles> <fill-style fill-type="none"/> <dash-style pattern="none"/> <shadow-style opacity="0" radius="0"/> </styles>

Keynote

update3-20030829_1

2005-05-08 22:56:09 -0400

dictionary 677 65

dictionary 0 0 508 328

root

Region 1 Region 2 2001 17 55 2002 26 43 2003 53 70 2004 96 58

0.285326 0.285326 0.285326

0 0 0

0.285326 0.285326 0.285326

g0.666667

0.285326 0.285326 0.285326

0 0 0

0.18429 0.225121 0.275401 0.85

0 0 0

0.18429 0.225121 0.275401 0.85

0 0 0

0.18429 0.225121 0.275401 0.85

0 0 0

0.18429 0.225121 0.275401 0.85

0 0 0

0.18429 0.225121 0.275401 0.85

0 0 0

0.18429 0.225121 0.275401 0.85

0 0 0

dictionary 0 0 508 328

dictionary 677 65

root

Region 1 Region 2 2001 17 55 2002 26 43 2003 53 70 2004 96 58

0.285326 0.285326 0.285326

g0.666667

0.285326 0.285326 0.285326

0 0 0

0.285326 0.285326 0.285326

0 0 0

0.202643 0.202643 0.202643

0 0 0

0.202643 0.202643 0.202643

0 0 0

0.202643 0.202643 0.202643

0 0 0

0.202643 0.202643 0.202643

0 0 0

0.202643 0.202643 0.202643

0 0 0

0.202643 0.202643 0.202643

0 0 0

root

Region 1 Region 2 2001 17 55 2002 26 43 2003 53 70 2004 96 58

0.285326 0.285326 0.285326

0 0 0

0.285326 0.285326 0.285326

g0.666667

0.285326 0.285326 0.285326

0 0 0

0.18429 0.225121 0.275401 0.85

0 0 0

0.18429 0.225121 0.275401 0.85

0 0 0

0.18429 0.225121 0.275401 0.85

0 0 0

0.18429 0.225121 0.275401 0.85

0 0 0

0.18429 0.225121 0.275401 0.85

0 0 0

0.18429 0.225121 0.275401 0.85

0 0 0

root

Region 1 Region 2 2001 27 55 2002 36 43 2003 63 80 2004 143 48

0.285326 0.285326 0.285326

g0.666667

0.285326 0.285326 0.285326

0 0 0

0.285326 0.285326 0.285326

0 0 0

0.18429 0.225121 0.275401 0.85

0 0 0

0.18429 0.225121 0.275401 0.85

0 0 0

0.18429 0.225121 0.275401 0.85

0 0 0

0.18429 0.225121 0.275401 0.85

0 0 0

0.18429 0.225121 0.275401 0.85

0 0 0

0.18429 0.225121 0.275401 0.85

0 0 0

dictionary 0 0 508 328

root

Region 1 Region 2 2001 17 55 2002 26 43 2003 53 70 2004 96 58

0.285326 0.285326 0.285326

g0.666667

0.285326 0.285326 0.285326

0 0 0

0.285326 0.285326 0.285326

0 0 0

0.18429 0.225121 0.275401 0.85

0 0 0

0.18429 0.225121 0.275401 0.85

0 0 0

0.18429 0.225121 0.275401 0.85

0 0 0

0.18429 0.225121 0.275401 0.85

0 0 0

0.18429 0.225121 0.275401 0.85

0 0 0

0.18429 0.225121 0.275401 0.85

0 0 0

root

Region 1 Region 2 1999 91 58 2000 76 44 2001 28 36 2002 26 50 2003 21 25 2004 18 20

0 0 0

g0.666667

0 0 0

g0.666667

0 0 0

0.18429 0.225121 0.275401 0.85

0.202643 0.202643 0.202643

0.18429 0.225121 0.275401 0.85

0 0 0

root

Region 1 Region 2 2001 27 55 2002 36 43 2003 63 80 2004 143 48

0.285326 0.285326 0.285326

g0.666667

0.285326 0.285326 0.285326

0 0 0

0.285326 0.285326 0.285326

0 0 0

0.202643 0.202643 0.202643

0 0 0

0.202643 0.202643 0.202643

0 0 0

0.202643 0.202643 0.202643

0 0 0

0.202643 0.202643 0.202643

0 0 0

0.202643 0.202643 0.202643

0 0 0

0.202643 0.202643 0.202643

0 0 0

dictionary 677 65

CPTextProperty sdfasdf CPStrokePatternProperty

CPCellOpacityProperty 1 CPStrokeWidthProperty 2 CPBorderOpacityProperty 1 TableNodeSnapShotProperty1 1.2 611 381 0 381 203.6669 381 0 254 203.6669 254 203.6669 381 407.3331 381 203.6669 254 407.3331 254 407.3331 381 611 381 407.3331 254 611 254 0 254 203.6669 254 0 127 203.6669 127 203.6669 254 407.3331 254 203.6669 127 407.3331 127 407.3331 254 611 254 407.3331 127 611 127 0 127 203.6669 127 0 0 203.6669 0 203.6669 127 407.3331 127 203.6669 0 407.3331 0 407.3331 127 611 127 407.3331 0 611 0 CPBorderColorProperty 0 0 0 version 1 CPVerticalAlignmentProperty 2 CPFillProperty

dictionary 677 30

dictionary 0 0 508 328

root

Region 1 Region 2 2001 17 55 2002 26 43 2003 53 70 2004 96 58

0.285326 0.285326 0.285326

g0.666667

0.285326 0.285326 0.285326

0 0 0

0.285326 0.285326 0.285326

0 0 0

0.54902 0.273301 0.290268

0 0 0

0.268722 0.259252 0.259835

0 0 0

0.20793 0.303965 0.4

0 0 0

0.227005 0.356828 0.172912

0 0 0

0.753304 0.574731 0.185837

0 0 0

0.337255 0.290196 0.415686

0 0 0

dictionary 0 0 508 328

dictionary 677 65

string VerticalBar

dictionary 677 65

dictionary 644 29

dictionary 0 0 508 328

dictionary 677 65

dictionary 0 0 536 258

CPTextProperty Sample CPStrokePatternProperty CPCellOpacityProperty 1 CPStrokeWidthProperty 2 CPBorderOpacityProperty 1 TableNodeSnapShotProperty1 1.2 676 375 0 375 225.3338 375 0 250 225.3338 250 225.3338 375 450.6661 375 225.3338 250 450.6661 250 450.6661 375 676 375 450.6661 250 676 250 0 250 225.3338 250 0 125 225.3338 125 225.3338 250 450.6661 250 225.3338 125 450.6661 125 450.6661 250 676 250 450.6661 125 676 125 0 125 225.3338 125 0 0 225.3338 0 225.3338 125 450.6661 125 225.3338 0 450.6661 0 450.6661 125 676 125 450.6661 0 676 0 CPBorderColorProperty 0 0 0 version 1 CPVerticalAlignmentProperty 2 CPFillProperty

dictionary 0 0 536 258

dictionary 677 29

dictionary 0 0 536 258

string VerticalBar

dictionary 0 0 536 258

dictionary 0 0 265 220

CPTextProperty CPStrokePatternProperty CPCellOpacityProperty 1 CPStrokeWidthProperty 2 CPBorderOpacityProperty 1 TableNodeSnapShotProperty1 1.2 326 375 0 375 108.667 375 0 250 108.667 250 108.667 375 217.333 375 108.667 250 217.333 250 217.333 375 326 375 217.333 250 326 250 0 250 108.667 250 0 125 108.667 125 108.667 250 217.333 250 108.667 125 217.333 125 217.333 250 326 250 217.333 125 326 125 0 125 108.667 125 0 0 108.667 0 108.667 125 217.333 125 108.667 0 217.333 0 217.333 125 326 125 217.333 0 326 0 CPBorderColorProperty 0 0 0 version 1 CPVerticalAlignmentProperty 2 CPFillProperty

dictionary 0 0 265 220

dictionary 338 29

dictionary 0 0 265 220

string VerticalBar

dictionary 0 0 266 221

dictionary 0 0 265 220

dictionary 338 29

dictionary 0 0 265 220

string VerticalBar

dictionary 0 0 266 221

dictionary 0 0 606 376

CPTextProperty Sample CPStrokePatternProperty

CPCellOpacityProperty 1 CPStrokeWidthProperty 2 CPBorderOpacityProperty 1 TableNodeSnapShotProperty1 1.2 676 477 0 477 225.3338 477 0 318 225.3338 318 225.3338 477 450.6661 477 225.3338 318 450.6661 318 450.6661 477 676 477 450.6661 318 676 318 0 318 225.3338 318 0 159 225.3338 159 225.3338 318 450.6661 318 225.3338 159 450.6661 159 450.6661 318 676 318 450.6661 159 676 159 0 159 225.3338 159 0 0 225.3338 0 225.3338 159 450.6661 159 225.3338 0 450.6661 0 450.6661 159 676 159 450.6661 0 676 0 CPBorderColorProperty 0 0 0 version 1 CPVerticalAlignmentProperty 2 CPFillProperty

dictionary 0 0 606 376

string VerticalBar

dictionary 0 0 606 376

dictionary 677 29

dictionary 0 0 606 376

dictionary 0 0 536 258

CPTextProperty Sample CPStrokePatternProperty

CPCellOpacityProperty 1 CPStrokeWidthProperty 2 CPBorderOpacityProperty 1 TableNodeSnapShotProperty1 1.2 676 375 0 375 225.3338 375 0 250 225.3338 250 225.3338 375 450.6661 375 225.3338 250 450.6661 250 450.6661 375 676 375 450.6661 250 676 250 0 250 225.3338 250 0 125 225.3338 125 225.3338 250 450.6661 250 225.3338 125 450.6661 125 450.6661 250 676 250 450.6661 125 676 125 0 125 225.3338 125 0 0 225.3338 0 225.3338 125 450.6661 125 225.3338 0 450.6661 0 450.6661 125 676 125 450.6661 0 676 0 CPBorderColorProperty 0 0 0 version 1 CPVerticalAlignmentProperty 2 CPFillProperty

dictionary 0 0 536 258

string VerticalBar

dictionary 0 0 536 258

dictionary 677 29

dictionary 0 0 536 258

dictionary 0 0 536 258

dictionary 677 29

dictionary 0 0 536 258

string VerticalBar

dictionary 0 0 536 258

dictionary 0 0 536 258

CPTextProperty Sample CPStrokePatternProperty

dictionary 0 0 536 258

string VerticalBar

dictionary 0 0 536 258

dictionary 677 29

dictionary 0 0 536 258

dictionary 0 0 265 220

string VerticalBar

dictionary 0 0 265 220

dictionary 338 29

dictionary 0 0 266 221

dictionary 0 0 265 220

CPTextProperty CPStrokePatternProperty

CPCellOpacityProperty 1 CPStrokeWidthProperty 2 CPBorderOpacityProperty 1 TableNodeSnapShotProperty1 1.2 326 375 0 375 108.667 375 0 250 108.667 250 108.667 375 217.333 375 108.667 250 217.333 250 217.333 375 326 375 217.333 250 326 250 0 250 108.667 250 0 125 108.667 125 108.667 250 217.333 250 108.667 125 217.333 125 217.333 250 326 250 217.333 125 326 125 0 125 108.667 125 0 0 108.667 0 108.667 125 217.333 125 108.667 0 217.333 0 217.333 125 326 125 217.333 0 326 0 CPBorderColorProperty 0 0 0 version 1 CPVerticalAlignmentProperty 2 CPFillProperty

dictionary 0 0 265 220

string VerticalBar

dictionary 0 0 265 220

dictionary 338 29

dictionary 0 0 266 221

dictionary 0 0 265 220

dictionary 338 29

dictionary 0 0 265 220

string VerticalBar

dictionary 0 0 266 221

dictionary 0 0 265 220

CPTextProperty CPStrokePatternProperty

dictionary 0 0 265 220

dictionary 338 29

dictionary 0 0 265 220

string VerticalBar

dictionary 0 0 266 221

Click to edit Master text styles

Second level

Third level

Fourth level

Fifth level

root

East West North 1st Qtr 20.4 30.6 45.9 2nd Qtr 27.4 38.6 46.9 3rd Qtr 90.0 34.6 45.0 4th Qtr 20.4 31.6 43.9

0 0 0

root

East West North 1st Qtr 20.4 30.6 45.9 2nd Qtr 27.4 38.6 46.9 3rd Qtr 90.0 34.6 45.0 4th Qtr 20.4 31.6 43.9

0 0 0

root

East West North 1st Qtr 20.4 30.6 45.9 2nd Qtr 27.4 38.6 46.9 3rd Qtr 90.0 34.6 45.0 4th Qtr 20.4 31.6 43.9

0 0 0

root

East West North 1st Qtr 20.4 30.6 45.9 2nd Qtr 27.4 38.6 46.9 3rd Qtr 90.0 34.6 45.0 4th Qtr 20.4 31.6 43.9

0 0 0

root

East West North 1st Qtr 20.4 30.6 45.9 2nd Qtr 27.4 38.6 46.9 3rd Qtr 90.0 34.6 45.0 4th Qtr 20.4 31.6 43.9

0 0 0

root

East West North 1st Qtr 20.4 30.6 45.9 2nd Qtr 27.4 38.6 46.9 3rd Qtr 90.0 34.6 45.0 4th Qtr 20.4 31.6 43.9

0 0 0

root

East West North 1st Qtr 20.4 30.6 45.9 2nd Qtr 27.4 38.6 46.9 3rd Qtr 90.0 34.6 45.0 4th Qtr 20.4 31.6 43.9

0 0 0

0.733333 0.878431 0.890196

0 0 0

0.2 0.2 0.6

0 0 0

0 0.6 0.6

0 0 0

0.6 0.8 0

0 0 0

version 1 CPBorderColorProperty 0 0 0 CPTextProperty

root

East West North 1st Qtr 20.4 30.6 45.9 2nd Qtr 27.4 38.6 46.9 3rd Qtr 90.0 34.6 45.0 4th Qtr 20.4 31.6 43.9

0 0 0

Click to edit Master text styles

Second level

Third level

Fourth level

Fifth level

root

East West North 1st Qtr 20.4 30.6 45.9 2nd Qtr 27.4 38.6 46.9 3rd Qtr 90.0 34.6 45.0 4th Qtr 20.4 31.6 43.9

0 0 0

root

East West North 1st Qtr 20.4 30.6 45.9 2nd Qtr 27.4 38.6 46.9 3rd Qtr 90.0 34.6 45.0 4th Qtr 20.4 31.6 43.9

0 0 0

root

East West North 1st Qtr 20.4 30.6 45.9 2nd Qtr 27.4 38.6 46.9 3rd Qtr 90.0 34.6 45.0 4th Qtr 20.4 31.6 43.9

0 0 0

root

East West North 1st Qtr 20.4 30.6 45.9 2nd Qtr 27.4 38.6 46.9 3rd Qtr 90.0 34.6 45.0 4th Qtr 20.4 31.6 43.9

0 0 0

root

East West North 1st Qtr 20.4 30.6 45.9 2nd Qtr 27.4 38.6 46.9 3rd Qtr 90.0 34.6 45.0 4th Qtr 20.4 31.6 43.9

0 0 0

root

East West North 1st Qtr 20.4 30.6 45.9 2nd Qtr 27.4 38.6 46.9 3rd Qtr 90.0 34.6 45.0 4th Qtr 20.4 31.6 43.9

0 0 0

root

East West North 1st Qtr 20.4 30.6 45.9 2nd Qtr 27.4 38.6 46.9 3rd Qtr 90.0 34.6 45.0 4th Qtr 20.4 31.6 43.9

0 0 0

0.733333 0.878431 0.890196

0 0 0

0.2 0.2 0.6

0 0 0

0 0.6 0.6

0 0 0

0.6 0.8 0

0 0 0

version 1 CPBorderColorProperty 0 0 0 CPTextProperty

root

East West North 1st Qtr 20.4 30.6 45.9 2nd Qtr 27.4 38.6 46.9 3rd Qtr 90.0 34.6 45.0 4th Qtr 20.4 31.6 43.9

0 0 0

Click to edit Master text styles

Second level

Third level

Fourth level

Fifth level

root

East West North 1st Qtr 20.4 30.6 45.9 2nd Qtr 27.4 38.6 46.9 3rd Qtr 90.0 34.6 45.0 4th Qtr 20.4 31.6 43.9

0 0 0

root

East West North 1st Qtr 20.4 30.6 45.9 2nd Qtr 27.4 38.6 46.9 3rd Qtr 90.0 34.6 45.0 4th Qtr 20.4 31.6 43.9

0 0 0

root

East West North 1st Qtr 20.4 30.6 45.9 2nd Qtr 27.4 38.6 46.9 3rd Qtr 90.0 34.6 45.0 4th Qtr 20.4 31.6 43.9

0 0 0

root

East West North 1st Qtr 20.4 30.6 45.9 2nd Qtr 27.4 38.6 46.9 3rd Qtr 90.0 34.6 45.0 4th Qtr 20.4 31.6 43.9

0 0 0

root

East West North 1st Qtr 20.4 30.6 45.9 2nd Qtr 27.4 38.6 46.9 3rd Qtr 90.0 34.6 45.0 4th Qtr 20.4 31.6 43.9

0 0 0

root

East West North 1st Qtr 20.4 30.6 45.9 2nd Qtr 27.4 38.6 46.9 3rd Qtr 90.0 34.6 45.0 4th Qtr 20.4 31.6 43.9

0 0 0

root

East West North 1st Qtr 20.4 30.6 45.9 2nd Qtr 27.4 38.6 46.9 3rd Qtr 90.0 34.6 45.0 4th Qtr 20.4 31.6 43.9

0 0 0

0.733333 0.878431 0.890196

0 0 0

0.2 0.2 0.6

0 0 0

0 0.6 0.6

0 0 0

0.6 0.8 0

0 0 0

version 1 CPBorderColorProperty 0 0 0 CPTextProperty

root

East West North 1st Qtr 20.4 30.6 45.9 2nd Qtr 27.4 38.6 46.9 3rd Qtr 90.0 34.6 45.0 4th Qtr 20.4 31.6 43.9

0 0 0

Click to edit Master text styles

Second level

Third level

Fourth level

Fifth level

root

East West North 1st Qtr 20.4 30.6 45.9 2nd Qtr 27.4 38.6 46.9 3rd Qtr 90.0 34.6 45.0 4th Qtr 20.4 31.6 43.9

0 0 0

root

East West North 1st Qtr 20.4 30.6 45.9 2nd Qtr 27.4 38.6 46.9 3rd Qtr 90.0 34.6 45.0 4th Qtr 20.4 31.6 43.9

0 0 0

root

East West North 1st Qtr 20.4 30.6 45.9 2nd Qtr 27.4 38.6 46.9 3rd Qtr 90.0 34.6 45.0 4th Qtr 20.4 31.6 43.9

0 0 0

root

East West North 1st Qtr 20.4 30.6 45.9 2nd Qtr 27.4 38.6 46.9 3rd Qtr 90.0 34.6 45.0 4th Qtr 20.4 31.6 43.9

0 0 0

root

East West North 1st Qtr 20.4 30.6 45.9 2nd Qtr 27.4 38.6 46.9 3rd Qtr 90.0 34.6 45.0 4th Qtr 20.4 31.6 43.9

0 0 0

root

East West North 1st Qtr 20.4 30.6 45.9 2nd Qtr 27.4 38.6 46.9 3rd Qtr 90.0 34.6 45.0 4th Qtr 20.4 31.6 43.9

0 0 0

root

East West North 1st Qtr 20.4 30.6 45.9 2nd Qtr 27.4 38.6 46.9 3rd Qtr 90.0 34.6 45.0 4th Qtr 20.4 31.6 43.9

0 0 0

0.733333 0.878431 0.890196

0 0 0

0.2 0.2 0.6

0 0 0

0 0.6 0.6

0 0 0

0.6 0.8 0

0 0 0

version 1 CPBorderColorProperty 0 0 0 CPTextProperty

root

East West North 1st Qtr 20.4 30.6 45.9 2nd Qtr 27.4 38.6 46.9 3rd Qtr 90.0 34.6 45.0 4th Qtr 20.4 31.6 43.9

0 0 0

Click to edit Master text styles

Second level

Third level

Fourth level

Fifth level

root

East West North 1st Qtr 20.4 30.6 45.9 2nd Qtr 27.4 38.6 46.9 3rd Qtr 90.0 34.6 45.0 4th Qtr 20.4 31.6 43.9

0 0 0

root

East West North 1st Qtr 20.4 30.6 45.9 2nd Qtr 27.4 38.6 46.9 3rd Qtr 90.0 34.6 45.0 4th Qtr 20.4 31.6 43.9

0 0 0

root

East West North 1st Qtr 20.4 30.6 45.9 2nd Qtr 27.4 38.6 46.9 3rd Qtr 90.0 34.6 45.0 4th Qtr 20.4 31.6 43.9

0 0 0

root

East West North 1st Qtr 20.4 30.6 45.9 2nd Qtr 27.4 38.6 46.9 3rd Qtr 90.0 34.6 45.0 4th Qtr 20.4 31.6 43.9

0 0 0

root

East West North 1st Qtr 20.4 30.6 45.9 2nd Qtr 27.4 38.6 46.9 3rd Qtr 90.0 34.6 45.0 4th Qtr 20.4 31.6 43.9

0 0 0

root

East West North 1st Qtr 20.4 30.6 45.9 2nd Qtr 27.4 38.6 46.9 3rd Qtr 90.0 34.6 45.0 4th Qtr 20.4 31.6 43.9

0 0 0

root

East West North 1st Qtr 20.4 30.6 45.9 2nd Qtr 27.4 38.6 46.9 3rd Qtr 90.0 34.6 45.0 4th Qtr 20.4 31.6 43.9

0 0 0

0.733333 0.878431 0.890196

0 0 0

0.2 0.2 0.6

0 0 0

0 0.6 0.6

0 0 0

0.6 0.8 0

0 0 0

version 1 CPBorderColorProperty 0 0 0 CPTextProperty

root

East West North 1st Qtr 20.4 30.6 45.9 2nd Qtr 27.4 38.6 46.9 3rd Qtr 90.0 34.6 45.0 4th Qtr 20.4 31.6 43.9

0 0 0

Click to edit Master text styles

Second level

Third level

Fourth level

Fifth level

root

East West North 1st Qtr 20.4 30.6 45.9 2nd Qtr 27.4 38.6 46.9 3rd Qtr 90.0 34.6 45.0 4th Qtr 20.4 31.6 43.9

0 0 0

root

East West North 1st Qtr 20.4 30.6 45.9 2nd Qtr 27.4 38.6 46.9 3rd Qtr 90.0 34.6 45.0 4th Qtr 20.4 31.6 43.9

0 0 0

root

East West North 1st Qtr 20.4 30.6 45.9 2nd Qtr 27.4 38.6 46.9 3rd Qtr 90.0 34.6 45.0 4th Qtr 20.4 31.6 43.9

0 0 0

root

East West North 1st Qtr 20.4 30.6 45.9 2nd Qtr 27.4 38.6 46.9 3rd Qtr 90.0 34.6 45.0 4th Qtr 20.4 31.6 43.9

0 0 0

root

East West North 1st Qtr 20.4 30.6 45.9 2nd Qtr 27.4 38.6 46.9 3rd Qtr 90.0 34.6 45.0 4th Qtr 20.4 31.6 43.9

0 0 0

root

East West North 1st Qtr 20.4 30.6 45.9 2nd Qtr 27.4 38.6 46.9 3rd Qtr 90.0 34.6 45.0 4th Qtr 20.4 31.6 43.9

0 0 0

root

East West North 1st Qtr 20.4 30.6 45.9 2nd Qtr 27.4 38.6 46.9 3rd Qtr 90.0 34.6 45.0 4th Qtr 20.4 31.6 43.9

0 0 0

0.733333 0.878431 0.890196

0 0 0

0.2 0.2 0.6

0 0 0

0 0.6 0.6

0 0 0

0.6 0.8 0

0 0 0

version 1 CPBorderColorProperty 0 0 0 CPTextProperty

root

East West North 1st Qtr 20.4 30.6 45.9 2nd Qtr 27.4 38.6 46.9 3rd Qtr 90.0 34.6 45.0 4th Qtr 20.4 31.6 43.9

0 0 0

Click to edit Master text styles

Second level

Third level

Fourth level

Fifth level

root

East West North 1st Qtr 20.4 30.6 45.9 2nd Qtr 27.4 38.6 46.9 3rd Qtr 90.0 34.6 45.0 4th Qtr 20.4 31.6 43.9

0 0 0

root

East West North 1st Qtr 20.4 30.6 45.9 2nd Qtr 27.4 38.6 46.9 3rd Qtr 90.0 34.6 45.0 4th Qtr 20.4 31.6 43.9

0 0 0

root

East West North 1st Qtr 20.4 30.6 45.9 2nd Qtr 27.4 38.6 46.9 3rd Qtr 90.0 34.6 45.0 4th Qtr 20.4 31.6 43.9

0 0 0

root

East West North 1st Qtr 20.4 30.6 45.9 2nd Qtr 27.4 38.6 46.9 3rd Qtr 90.0 34.6 45.0 4th Qtr 20.4 31.6 43.9

0 0 0

root

East West North 1st Qtr 20.4 30.6 45.9 2nd Qtr 27.4 38.6 46.9 3rd Qtr 90.0 34.6 45.0 4th Qtr 20.4 31.6 43.9

0 0 0

root

East West North 1st Qtr 20.4 30.6 45.9 2nd Qtr 27.4 38.6 46.9 3rd Qtr 90.0 34.6 45.0 4th Qtr 20.4 31.6 43.9

0 0 0

root

East West North 1st Qtr 20.4 30.6 45.9 2nd Qtr 27.4 38.6 46.9 3rd Qtr 90.0 34.6 45.0 4th Qtr 20.4 31.6 43.9

0 0 0

0.733333 0.878431 0.890196

0 0 0

0.2 0.2 0.6

0 0 0

0 0.6 0.6

0 0 0

0.6 0.8 0

0 0 0

version 1 CPBorderColorProperty 0 0 0 CPTextProperty

root

East West North 1st Qtr 20.4 30.6 45.9 2nd Qtr 27.4 38.6 46.9 3rd Qtr 90.0 34.6 45.0 4th Qtr 20.4 31.6 43.9

0 0 0

Click to edit Master text styles

Second level

Third level

Fourth level

Fifth level

root

East West North 1st Qtr 20.4 30.6 45.9 2nd Qtr 27.4 38.6 46.9 3rd Qtr 90.0 34.6 45.0 4th Qtr 20.4 31.6 43.9

0 0 0

root

East West North 1st Qtr 20.4 30.6 45.9 2nd Qtr 27.4 38.6 46.9 3rd Qtr 90.0 34.6 45.0 4th Qtr 20.4 31.6 43.9

0 0 0

root

East West North 1st Qtr 20.4 30.6 45.9 2nd Qtr 27.4 38.6 46.9 3rd Qtr 90.0 34.6 45.0 4th Qtr 20.4 31.6 43.9

0 0 0

root

East West North 1st Qtr 20.4 30.6 45.9 2nd Qtr 27.4 38.6 46.9 3rd Qtr 90.0 34.6 45.0 4th Qtr 20.4 31.6 43.9

0 0 0

root

East West North 1st Qtr 20.4 30.6 45.9 2nd Qtr 27.4 38.6 46.9 3rd Qtr 90.0 34.6 45.0 4th Qtr 20.4 31.6 43.9

0 0 0

root

East West North 1st Qtr 20.4 30.6 45.9 2nd Qtr 27.4 38.6 46.9 3rd Qtr 90.0 34.6 45.0 4th Qtr 20.4 31.6 43.9

0 0 0

root

East West North 1st Qtr 20.4 30.6 45.9 2nd Qtr 27.4 38.6 46.9 3rd Qtr 90.0 34.6 45.0 4th Qtr 20.4 31.6 43.9

0 0 0

0.733333 0.878431 0.890196

0 0 0

0.2 0.2 0.6

0 0 0

0 0.6 0.6

0 0 0

0.6 0.8 0

0 0 0

version 1 CPBorderColorProperty 0 0 0 CPTextProperty

root

East West North 1st Qtr 20.4 30.6 45.9 2nd Qtr 27.4 38.6 46.9 3rd Qtr 90.0 34.6 45.0 4th Qtr 20.4 31.6 43.9

0 0 0

Click to edit Master text styles

Second level

Third level

Fourth level

Fifth level

root

East West North 1st Qtr 20.4 30.6 45.9 2nd Qtr 27.4 38.6 46.9 3rd Qtr 90.0 34.6 45.0 4th Qtr 20.4 31.6 43.9

0 0 0

root

East West North 1st Qtr 20.4 30.6 45.9 2nd Qtr 27.4 38.6 46.9 3rd Qtr 90.0 34.6 45.0 4th Qtr 20.4 31.6 43.9

0 0 0

root

East West North 1st Qtr 20.4 30.6 45.9 2nd Qtr 27.4 38.6 46.9 3rd Qtr 90.0 34.6 45.0 4th Qtr 20.4 31.6 43.9

0 0 0

root

East West North 1st Qtr 20.4 30.6 45.9 2nd Qtr 27.4 38.6 46.9 3rd Qtr 90.0 34.6 45.0 4th Qtr 20.4 31.6 43.9

0 0 0

root

East West North 1st Qtr 20.4 30.6 45.9 2nd Qtr 27.4 38.6 46.9 3rd Qtr 90.0 34.6 45.0 4th Qtr 20.4 31.6 43.9

0 0 0

root

East West North 1st Qtr 20.4 30.6 45.9 2nd Qtr 27.4 38.6 46.9 3rd Qtr 90.0 34.6 45.0 4th Qtr 20.4 31.6 43.9

0 0 0

root

East West North 1st Qtr 20.4 30.6 45.9 2nd Qtr 27.4 38.6 46.9 3rd Qtr 90.0 34.6 45.0 4th Qtr 20.4 31.6 43.9

0 0 0

0.733333 0.878431 0.890196

0 0 0

0.2 0.2 0.6

0 0 0

0 0.6 0.6

0 0 0

0.6 0.8 0

0 0 0

version 1 CPBorderColorProperty 0 0 0 CPTextProperty

root

East West North 1st Qtr 20.4 30.6 45.9 2nd Qtr 27.4 38.6 46.9 3rd Qtr 90.0 34.6 45.0 4th Qtr 20.4 31.6 43.9

0 0 0

Click to edit Master text styles

Second level

Third level

Fourth level

Fifth level

root

East West North 1st Qtr 20.4 30.6 45.9 2nd Qtr 27.4 38.6 46.9 3rd Qtr 90.0 34.6 45.0 4th Qtr 20.4 31.6 43.9

0 0 0

root

East West North 1st Qtr 20.4 30.6 45.9 2nd Qtr 27.4 38.6 46.9 3rd Qtr 90.0 34.6 45.0 4th Qtr 20.4 31.6 43.9

0 0 0

root

East West North 1st Qtr 20.4 30.6 45.9 2nd Qtr 27.4 38.6 46.9 3rd Qtr 90.0 34.6 45.0 4th Qtr 20.4 31.6 43.9

0 0 0

root

East West North 1st Qtr 20.4 30.6 45.9 2nd Qtr 27.4 38.6 46.9 3rd Qtr 90.0 34.6 45.0 4th Qtr 20.4 31.6 43.9

0 0 0

root

East West North 1st Qtr 20.4 30.6 45.9 2nd Qtr 27.4 38.6 46.9 3rd Qtr 90.0 34.6 45.0 4th Qtr 20.4 31.6 43.9

0 0 0

root

East West North 1st Qtr 20.4 30.6 45.9 2nd Qtr 27.4 38.6 46.9 3rd Qtr 90.0 34.6 45.0 4th Qtr 20.4 31.6 43.9

0 0 0

root

East West North 1st Qtr 20.4 30.6 45.9 2nd Qtr 27.4 38.6 46.9 3rd Qtr 90.0 34.6 45.0 4th Qtr 20.4 31.6 43.9

0 0 0

0.733333 0.878431 0.890196

0 0 0

0.2 0.2 0.6

0 0 0

0 0.6 0.6

0 0 0

0.6 0.8 0

0 0 0

version 1 CPBorderColorProperty 0 0 0 CPTextProperty

root

East West North 1st Qtr 20.4 30.6 45.9 2nd Qtr 27.4 38.6 46.9 3rd Qtr 90.0 34.6 45.0 4th Qtr 20.4 31.6 43.9

0 0 0

<body visibility="tracks-master" vertical-alignment="tracks-master"/> </drawables> <transition-style type="inherited"/> <thumbnails> <thumbnail byte-size="8370" size="60 45" file="thumbs/st0.tiff"/> </thumbnails> <bullets> <bullet level="0" marker-type="inherited"> <content font-color="0 0 0" paragraph-alignment="right" tab-stops="L 28" font-size="50" font-name="Times-Roman"> <![CDATA[Effective Patch Management: ]]> <span font-name="Times-Italic">How to make the pain go away</span> </content> </bullet> <bullet level="1" marker-type="inherited"> <content font-color="0 0 0" paragraph-alignment="right" tab-stops="L 28" font-size="28" font-name="Times-Italic">Adam Shostack</content> </bullet> <bullet level="1" marker-type="inherited"> <content font-color="0 0 0" paragraph-alignment="right" tab-stops="L 28" font-size="28" font-name="Copperplate-Light">adam@InformedSecurity.com</content> </bullet> </bullets> </slide> <slide master-slide-id="master-slide-2"> <drawables> <title visibility="tracks-master" vertical-alignment="tracks-master"/> <body visibility="tracks-master" vertical-alignment="tracks-master"/> </drawables> <transition-style type="inherited"/> <thumbnails> <thumbnail byte-size="8370" size="60 45" file="thumbs/st1.tiff"/> </thumbnails> <bullets> <bullet level="0" marker-type="inherited"> <content font-color="0 0 0" paragraph-alignment="center" tab-stops="L 75" font-size="50" font-name="Times-Roman">Overview</content> </bullet> <bullet level="1" marker-type="inherited"> <content font-color="0 0 0" paragraph-head-indent="8" paragraph-first-line-indent="8" tab-stops="L 43" font-size="36" font-name="Times-Italic"/> </bullet> <bullet level="1" marker-type="inherited"> <content font-color="0 0 0" paragraph-head-indent="8" paragraph-first-line-indent="8" tab-stops="L 43" font-size="36" font-name="Times-Italic">Why patch?</content> </bullet> <bullet level="1" marker-type="inherited"> <content font-color="0 0 0" paragraph-head-indent="8" paragraph-first-line-indent="8" tab-stops="L 43" font-size="36" font-name="Times-Italic">Why is patching so painful?</content> </bullet> <bullet level="1" marker-type="inherited"> <content font-color="0 0 0" paragraph-head-indent="8" paragraph-first-line-indent="8" tab-stops="L 43" font-size="36" font-name="Times-Italic">What can make it easier?</content> </bullet> <bullet level="1" marker-type="inherited"> <content font-color="0 0 0" paragraph-head-indent="8" paragraph-first-line-indent="8" tab-stops="L 43" font-size="36" font-name="Times-Italic">Thinking about risk management</content> </bullet> <bullet level="1" marker-type="inherited"> <content font-color="0 0 0" paragraph-head-indent="8" paragraph-first-line-indent="8" tab-stops="L 43" font-size="36" font-name="Times-Italic">How can we get out of the rat race?</content> </bullet> </bullets> </slide> <slide master-slide-id="master-slide-2"> <drawables> <title visibility="tracks-master" vertical-alignment="tracks-master"/> <body visibility="tracks-master" vertical-alignment="tracks-master"/> </drawables> <transition-style type="inherited"/> <thumbnails> <thumbnail byte-size="8370" size="60 45" file="thumbs/st2.tiff"/> </thumbnails> <bullets> <bullet level="0" marker-type="inherited"> <content font-color="0 0 0" paragraph-alignment="center" tab-stops="L 75" font-size="50" font-name="Times-Roman">Why Patch?</content> </bullet> <bullet level="1" marker-type="inherited"> <content font-color="0 0 0" paragraph-head-indent="8" paragraph-first-line-indent="8" tab-stops="L 43" font-size="36" font-name="Times-Italic">Vendors issue patches to correct bugs</content> </bullet> <bullet level="2" marker-type="inherited"> <content font-color="0 0 0" paragraph-head-indent="8" paragraph-first-line-indent="8" tab-stops="L 43" font-size="36" font-name="Times-Italic">Performance/Reliability</content> </bullet> <bullet level="2" marker-type="inherited"> <content font-color="0 0 0" paragraph-head-indent="8" paragraph-first-line-indent="8" tab-stops="L 43" font-size="36" font-name="Times-Italic">Security is a subset of reliability</content> </bullet> <bullet level="1" marker-type="inherited"> <content font-color="0 0 0" paragraph-head-indent="8" paragraph-first-line-indent="8" tab-stops="L 43" font-size="36" font-name="Times-Italic">End users apply patches to fix problems</content> </bullet> <bullet level="2" marker-type="inherited"> <content font-color="0 0 0" paragraph-head-indent="8" paragraph-first-line-indent="8" tab-stops="L 43" font-size="36" font-name="Times-Italic">Preventative/Reaction models</content> </bullet> </bullets> </slide> <slide master-slide-id="master-slide-2"> <drawables> <title visibility="tracks-master" vertical-alignment="tracks-master"/> <body visibility="tracks-master" vertical-alignment="tracks-master"/> </drawables> <transition-style type="inherited"/> <thumbnails> <thumbnail byte-size="8370" size="60 45" file="thumbs/st3.tiff"/> </thumbnails> <bullets> <bullet level="0" marker-type="inherited"> <content font-color="0 0 0" paragraph-alignment="center" tab-stops="L 75" font-size="50" font-name="Times-Roman">Security Patches</content> </bullet> <bullet level="1" marker-type="inherited"> <content font-color="0 0 0" paragraph-head-indent="8" paragraph-first-line-indent="8" tab-stops="L 43" font-size="36" font-name="Times-Italic">Vendors release code</content> </bullet> <bullet level="2" marker-type="inherited"> <content font-color="0 0 0" paragraph-head-indent="8" paragraph-first-line-indent="8" tab-stops="L 43" font-size="36" font-name="Times-Italic">All code has bugs</content> </bullet> <bullet level="1" marker-type="inherited"> <content font-color="0 0 0" paragraph-head-indent="8" paragraph-first-line-indent="8" tab-stops="L 43" font-size="36" font-name="Times-Italic">People find bugs</content> </bullet> <bullet level="2" marker-type="inherited"> <content font-color="0 0 0" paragraph-head-indent="8" paragraph-first-line-indent="8" tab-stops="L 43" font-size="36" font-name="Times-Italic">Sometimes they tell the vendor</content> </bullet> <bullet level="1" marker-type="inherited"> <content font-color="0 0 0" paragraph-head-indent="8" paragraph-first-line-indent="8" tab-stops="L 43" font-size="36" font-name="Times-Italic">Vendor triages, and may release a fix</content> </bullet> <bullet level="1" marker-type="inherited"> <content font-color="0 0 0" paragraph-head-indent="8" paragraph-first-line-indent="8" tab-stops="L 43" font-size="36" font-name="Times-Italic">Some want to install it to forestall problems</content> </bullet> </bullets> </slide> <slide master-slide-id="master-slide-2"> <drawables> <title visibility="tracks-master" vertical-alignment="tracks-master"/> <body visibility="tracks-master" vertical-alignment="tracks-master"/> </drawables> <transition-style type="inherited"/> <thumbnails> <thumbnail byte-size="8370" size="60 45" file="thumbs/st4.tiff"/> </thumbnails> <bullets> <bullet level="0" marker-type="inherited"> <content font-color="0 0 0" paragraph-alignment="center" tab-stops="L 75" font-size="50" font-name="Times-Roman">Where we are</content> </bullet> <bullet level="1" marker-type="inherited"> <content font-color="0 0 0" paragraph-head-indent="8" paragraph-first-line-indent="8" tab-stops="L 43" font-size="36" font-name="Times-Italic">Why patch?</content> </bullet> <bullet level="1" marker-type="inherited"> <content font-color="0.0772372 0 0.870588" paragraph-head-indent="8" paragraph-first-line-indent="8" tab-stops="L 43" font-size="36" font-name="Times-Italic">Why is patching so painful?</content> </bullet> <bullet level="1" marker-type="inherited"> <content font-color="0.578199 0.114157 0.120974" paragraph-head-indent="8" paragraph-first-line-indent="8" tab-stops="L 43" font-size="36" font-name="Times-Italic">What makes it easier?</content> </bullet> <bullet level="1" marker-type="inherited"> <content font-color="0.578199 0.114157 0.120974" paragraph-head-indent="8" paragraph-first-line-indent="8" tab-stops="L 43" font-size="36" font-name="Times-Italic">Thinking about risk management</content> </bullet> <bullet level="1" marker-type="inherited"> <content font-color="0.578199 0.114157 0.120974" paragraph-head-indent="8" paragraph-first-line-indent="8" tab-stops="L 43" font-size="36" font-name="Times-Italic">How can we get out of the rat race?</content> </bullet> </bullets> </slide> <slide master-slide-id="master-slide-2"> <drawables> <title visibility="tracks-master" vertical-alignment="tracks-master"/> <body visibility="tracks-master" vertical-alignment="tracks-master"/> </drawables> <transition-style type="inherited"/> <thumbnails> <thumbnail byte-size="8370" size="60 45" file="thumbs/st5.tiff"/> </thumbnails> <bullets> <bullet level="0" marker-type="inherited"> <content font-color="0 0 0" paragraph-alignment="center" tab-stops="L 75" font-size="50" font-name="Times-Roman">Why is patching painful?</content> </bullet> <bullet level="1" marker-type="inherited"> <content font-color="0 0 0" paragraph-head-indent="8" paragraph-first-line-indent="8" tab-stops="L 43" font-size="36" font-name="Times-Italic">Patch notification</content> </bullet> <bullet level="1" marker-type="inherited"> <content font-color="0 0 0" paragraph-head-indent="8" paragraph-first-line-indent="8" tab-stops="L 43" font-size="36" font-name="Times-Italic">Inventory & Roll-out</content> </bullet> <bullet level="1" marker-type="inherited"> <content font-color="0 0 0" paragraph-head-indent="8" paragraph-first-line-indent="8" tab-stops="L 43" font-size="36" font-name="Times-Italic">Mobile</content> </bullet> <bullet level="1" marker-type="inherited"> <content font-color="0 0 0" paragraph-head-indent="8" paragraph-first-line-indent="8" tab-stops="L 43" font-size="36" font-name="Times-Italic">Low bandwidth</content> </bullet> </bullets> </slide> <slide master-slide-id="master-slide-2"> <drawables> <title visibility="tracks-master" vertical-alignment="tracks-master"/> <body visibility="tracks-master" vertical-alignment="tracks-master"/> </drawables> <transition-style type="inherited"/> <thumbnails> <thumbnail byte-size="8370" size="60 45" file="thumbs/st6.tiff"/> </thumbnails> <bullets> <bullet level="0" marker-type="inherited"> <content font-color="0 0 0" paragraph-alignment="center" tab-stops="L 75" font-size="50" font-name="Times-Roman">Lies and Excuses!</content> </bullet> <bullet level="1" marker-type="inherited"> <content font-color="0 0 0" paragraph-head-indent="8" paragraph-first-line-indent="8" tab-stops="L 43" font-size="36" font-name="Times-Italic"> <![CDATA[The problems of notification, inventory and roll-out, and mobile and low-bandwidth systems are roughly solved.]]> </content> </bullet> </bullets> </slide> <slide master-slide-id="master-slide-2"> <drawables> <title visibility="tracks-master" vertical-alignment="tracks-master"/> <shape path="M 85.3553 14.6447 C 104.882 34.1709 104.882 65.8291 85.3553 85.3553 C 65.8291 104.882 34.1709 104.882 14.6447 85.3553 C -4.88155 65.8291 -4.88155 34.1709 14.6447 14.6447 C 34.1709 -4.88155 65.8291 -4.88155 85.3553 14.6447 Z M 85.3553 14.6447" transformation="1.98 0 0 1.93 156 219"> <styles> <fill-style fill-type="color" fill-color="0.530344 0.297705 1"/> </styles> </shape> <g transformation="1 0 0 1 334 164"> <shape path="M 85.3553 14.6447 C 104.882 34.1709 104.882 65.8291 85.3553 85.3553 C 65.8291 104.882 34.1709 104.882 14.6447 85.3553 C -4.88155 65.8291 -4.88155 34.1709 14.6447 14.6447 C 34.1709 -4.88155 65.8291 -4.88155 85.3553 14.6447 Z M 85.3553 14.6447" transformation="1.98 0 0 1.93 334 164"/> <textbox grow-horizontally="true" size="148 43" transformation="1 0 0 1 359 239"> <content font-color="0 0 0" paragraph-alignment="center" tab-stops="L 78" font-size="36" font-name="Times-Italic">Inventory</content> </textbox> </g> <textbox grow-horizontally="true" size="114 43" transformation="1 0 0 1 198 278"> <content font-color="0 0 0" paragraph-alignment="center" tab-stops="L 78" font-size="36" font-name="Times-Italic">Deploy</content> </textbox> <shape path="M 85.3553 14.6447 C 104.882 34.1709 104.882 65.8291 85.3553 85.3553 C 65.8291 104.882 34.1709 104.882 14.6447 85.3553 C -4.88155 65.8291 -4.88155 34.1709 14.6447 14.6447 C 34.1709 -4.88155 65.8291 -4.88155 85.3553 14.6447 Z M 85.3553 14.6447" transformation="1 0 0 0.950001 92 357"> <styles> <fill-style fill-type="color" fill-color="0.414393 1 0.460218 0.5"/> </styles> </shape> <textbox grow-horizontally="true" size="86 29" transformation="1 0 0 1 99 390"> <content font-color="0 0 0" paragraph-alignment="center" tab-stops="L 78" font-size="24" font-name="Times-Italic">Analyze</content> </textbox> <line tail="83 169" head="83 463.72"/> <line tail="83.0226 465" head="784.712 463"/> <textbox size="181 37" transformation="-4.37114e-08 -1 1 -4.37114e-08 37.5 390"> <content font-color="0 0 0" paragraph-alignment="center" tab-stops="L 78" font-size="36" font-name="Copperplate-Light">Maturity</content> </textbox> <textbox grow-horizontally="true" size="229 37" transformation="1 0 0 1 267.5 473.5"> <content font-color="0 0 0" paragraph-alignment="center" tab-stops="L 78" font-size="36" font-name="Copperplate-Light">Deployment</content> </textbox> <textbox grow-horizontally="true" size="82 23" transformation="1 0 0 1 341 377.5"> <content font-color="0 0 0" paragraph-alignment="center" tab-stops="L 78" font-size="18" font-name="Times-Italic">Unicenter</content> </textbox> <textbox grow-horizontally="true" size="52 23" transformation="1 0 0 1 342 352.5"> <content paragraph-alignment="center" tab-stops="L 78" font-size="18" font-name="Times-Italic">Tivoli</content> </textbox> <textbox grow-horizontally="true" size="119 23" transformation="1 0 0 1 339.5 405.5"> <content paragraph-alignment="center" tab-stops="L 78" font-size="18" font-name="Times-Italic">ZenWorks (etc)</content> </textbox> <body visibility="hidden" vertical-alignment="tracks-master"/> </drawables> <transition-style type="inherited"/> <thumbnails> <thumbnail byte-size="8370" size="60 45" file="thumbs/st7.tiff"/> </thumbnails> <bullets> <bullet level="0" marker-type="inherited"> <content font-color="0 0 0" paragraph-alignment="center" tab-stops="L 75" font-size="50" font-name="Times-Roman">State of Software Tools</content> </bullet> </bullets> </slide> <slide master-slide-id="master-slide-2"> <drawables> <title visibility="tracks-master" vertical-alignment="tracks-master"/> <body visibility="tracks-master" vertical-alignment="tracks-master"/> </drawables> <transition-style type="inherited"/> <thumbnails> <thumbnail byte-size="8370" size="60 45" file="thumbs/st8.tiff"/> </thumbnails> <bullets> <bullet level="0" marker-type="inherited"> <content font-color="0 0 0" paragraph-alignment="center" tab-stops="L 75" font-size="50" font-name="Times-Roman">The Real Problems</content> </bullet> <bullet level="1" marker-type="inherited"> <content font-color="0 0 0" paragraph-head-indent="8" paragraph-first-line-indent="8" tab-stops="L 43" font-size="36" font-name="Times-Italic">Patches are beta software</content> </bullet> <bullet level="1" marker-type="inherited"> <content font-color="0 0 0" paragraph-head-indent="8" paragraph-first-line-indent="8" tab-stops="L 43" font-size="36" font-name="Times-Italic">Intense pressure to roll out beta software</content> </bullet> <bullet level="1" marker-type="inherited"> <content font-color="0 0 0" paragraph-head-indent="8" paragraph-first-line-indent="8" tab-stops="L 43" font-size="36" font-name="Times-Italic">Poor data about patches</content> </bullet> <bullet level="1" marker-type="inherited"> <content font-color="0 0 0" paragraph-head-indent="8" paragraph-first-line-indent="8" tab-stops="L 43" font-size="36" font-name="Times-Italic">Conflict between IT & IT Security</content> </bullet> <bullet level="1" marker-type="inherited"> <content font-color="0 0 0" paragraph-head-indent="8" paragraph-first-line-indent="8" tab-stops="L 43" font-size="36" font-name="Times-Italic">Patches which can’t roll back </content> </bullet> </bullets> </slide> <slide master-slide-id="master-slide-2"> <drawables> <title visibility="tracks-master" vertical-alignment="tracks-master"/> <body visibility="tracks-master" vertical-alignment="tracks-master"/> </drawables> <transition-style type="inherited"/> <thumbnails> <thumbnail byte-size="8370" size="60 45" file="thumbs/st81.tiff"/> </thumbnails> <bullets> <bullet level="0" marker-type="inherited"> <content font-color="0 0 0" paragraph-alignment="center" tab-stops="L 75" font-size="50" font-name="Times-Roman">Uptime vs. Security</content> </bullet> <bullet level="1" marker-type="inherited"> <content font-color="0 0 0" paragraph-head-indent="8" paragraph-first-line-indent="8" tab-stops="L 43" font-size="36" font-name="Times-Italic">IT is rated on measured uptime</content> </bullet> <bullet level="2" marker-type="inherited"> <content font-color="0 0 0" paragraph-head-indent="8" paragraph-first-line-indent="8" tab-stops="L 43" font-size="36" font-name="Times-Italic">Every admin knows patching can break things, require reboots</content> </bullet> <bullet level="1" marker-type="inherited"> <content font-color="0 0 0" paragraph-head-indent="8" paragraph-first-line-indent="8" tab-stops="L 43" font-size="36" font-name="Times-Italic">Security is rated on break-ins</content> </bullet> <bullet level="2" marker-type="inherited"> <content font-color="0 0 0" paragraph-head-indent="8" paragraph-first-line-indent="8" tab-stops="L 43" font-size="36" font-name="Times-Italic">Need to deploy patches to prevent</content> </bullet> <bullet level="1" marker-type="inherited"> <content font-color="0 0 0" paragraph-head-indent="8" paragraph-first-line-indent="8" tab-stops="L 43" font-size="36" font-name="Times-Italic">Huge fights come from different priorities.</content> </bullet> </bullets> </slide> <slide master-slide-id="master-slide-2"> <drawables> <title visibility="tracks-master" vertical-alignment="tracks-master"/> <body visibility="tracks-master" vertical-alignment="tracks-master"/> </drawables> <transition-style type="inherited"/> <thumbnails> <thumbnail byte-size="8370" size="60 45" file="thumbs/st10.tiff"/> </thumbnails> <bullets> <bullet level="0" marker-type="inherited"> <content font-color="0 0 0" paragraph-alignment="center" tab-stops="L 75" font-size="50" font-name="Times-Roman">Where We Are</content> </bullet> <bullet level="1" marker-type="inherited"> <content font-color="0 0 0" paragraph-head-indent="8" paragraph-first-line-indent="8" tab-stops="L 43" font-size="36" font-name="Times-Italic">Why patch?</content> </bullet> <bullet level="1" marker-type="inherited"> <content font-color="0 0 0" paragraph-head-indent="8" paragraph-first-line-indent="8" tab-stops="L 43" font-size="36" font-name="Times-Italic">Why is patching so painful?</content> </bullet> <bullet level="1" marker-type="inherited"> <content font-color="0 0.0321779 1" paragraph-head-indent="8" paragraph-first-line-indent="8" tab-stops="L 43" font-size="36" font-name="Times-Italic">What makes it easier?</content> </bullet> <bullet level="1" marker-type="inherited"> <content font-color="0.578199 0.114157 0.120974" paragraph-head-indent="8" paragraph-first-line-indent="8" tab-stops="L 43" font-size="36" font-name="Times-Italic">Thinking about risk management</content> </bullet> <bullet level="1" marker-type="inherited"> <content font-color="0.578199 0.114157 0.120974" paragraph-head-indent="8" paragraph-first-line-indent="8" tab-stops="L 43" font-size="36" font-name="Times-Italic">How can we get out of the rat race?</content> </bullet> </bullets> </slide> <slide master-slide-id="master-slide-2"> <drawables> <title visibility="tracks-master" location="61 36" size="677 70" vertical-alignment="tracks-master"/> <body visibility="tracks-master" vertical-alignment="tracks-master"/> </drawables> <transition-style type="inherited"/> <thumbnails> <thumbnail byte-size="8370" size="60 45" file="thumbs/st101.tiff"/> </thumbnails> <bullets> <bullet level="0" marker-type="inherited"> <content font-color="0 0 0" paragraph-alignment="center" tab-stops="L 75" font-size="50" font-name="Times-Roman">Reconciling The Views</content> </bullet> <bullet level="1" marker-type="inherited"> <content font-color="0 0 0" paragraph-head-indent="8" paragraph-first-line-indent="8" tab-stops="L 43" font-size="36" font-name="Times-Italic">Patch risk falls with time</content> </bullet> <bullet level="1" marker-type="inherited"> <content font-color="0 0 0" paragraph-head-indent="8" paragraph-first-line-indent="8" tab-stops="L 43" font-size="36" font-name="Times-Italic">Exploit risk grows with time</content> </bullet> <bullet level="1" marker-type="inherited"> <content font-color="0 0 0" paragraph-head-indent="8" paragraph-first-line-indent="8" tab-stops="L 43" font-size="36" font-name="Times-Italic">Can we put numbers on them?</content> </bullet> <bullet level="1" marker-type="inherited"> <content font-color="0 0 0" paragraph-head-indent="8" paragraph-first-line-indent="8" tab-stops="L 43" font-size="36" font-name="Times-Italic">Can we engage in a risk trade-off?</content> </bullet> </bullets> </slide> <slide master-slide-id="master-slide-2"> <drawables> <title visibility="tracks-master" location="61 36" size="677 82" vertical-alignment="tracks-master"/> <image byte-size="53223" display-name="graph.jpg" transformation="1 0 0 1 67 159" lock-aspect-ratio="true" image-data="graph.jpg" natural-size="634 412"/> <body visibility="hidden" vertical-alignment="tracks-master"/> </drawables> <transition-style type="inherited"/> <thumbnails> <thumbnail byte-size="8370" size="60 45" file="thumbs/st12.tiff"/> </thumbnails> <bullets> <bullet level="0" marker-type="inherited"> <content font-color="0 0 0" paragraph-alignment="center" tab-stops="L 75" font-size="40" font-name="Times-Roman">Timing the Application of Security Patches for Optimal Uptime</content> </bullet> </bullets> </slide> <slide master-slide-id="master-slide-2"> <drawables> <title visibility="tracks-master" vertical-alignment="tracks-master"/> <body visibility="tracks-master" location="61 163" size="677 377" vertical-alignment="tracks-master"/> </drawables> <transition-style type="inherited"/> <thumbnails> <thumbnail byte-size="8370" size="60 45" file="thumbs/st13.tiff"/> </thumbnails> <bullets> <bullet level="0" marker-type="inherited"> <content font-color="0 0 0" paragraph-alignment="center" tab-stops="L 75" font-size="50" font-name="Times-Roman">Timing the Application...</content> </bullet> <bullet level="1" marker-type="inherited"> <content tab-stops="L 28 L 56 L 84 L 112 L 140 L 168 L 196 L 224 L 252 L 280 L 308 L 336" font-size="36" font-name="Times-Roman"> <![CDATA[ Steve Beattie, Seth Arnold, Crispin Cowan, Perry Wagle, Chris Wright, and Adam Shostack. ]]> </content> </bullet> <bullet level="1" marker-type="inherited"> <content tab-stops="L 28 L 56 L 84 L 112 L 140 L 168 L 196 L 224 L 252 L 280 L 308 L 336" font-size="36" font-name="Times-Roman">Presented at the<span font-color="0 0 0"> USENIX 16th Systems Administration Conference (LISA 2002)</span> </content> </bullet> <bullet level="1" marker-type="inherited"> <content tab-stops="L 28 L 56 L 84 L 112 L 140 L 168 L 196 L 224 L 252 L 280 L 308 L 336" font-size="24" font-name="Times-Roman">http://www.homeport.org/~adam/time-to-patch-usenix-lisa02.pdf</content> </bullet> <bullet level="1" marker-type="inherited"> <content tab-stops="L 28 L 56 L 84 L 112 L 140 L 168 L 196 L 224 L 252 L 280 L 308 L 336" font-size="24" font-name="Times-Roman">(Don’t copy down the URL: Google finds my homepage, that’s bullet #7)</content> </bullet> </bullets> </slide> <slide master-slide-id="master-slide-2"> <drawables> <title visibility="tracks-master" vertical-alignment="tracks-master"/> <body visibility="tracks-master" vertical-alignment="tracks-master"/> </drawables> <transition-style type="inherited"/> <thumbnails> <thumbnail byte-size="8370" size="60 45" file="thumbs/st14.tiff"/> </thumbnails> <bullets> <bullet level="0" marker-type="inherited"> <content font-color="0 0 0" paragraph-alignment="center" tab-stops="L 75" font-size="50" font-name="Times-Roman">Where We Are</content> </bullet> <bullet level="1" marker-type="inherited"> <content font-color="0 0 0" paragraph-head-indent="8" paragraph-first-line-indent="8" tab-stops="L 43" font-size="36" font-name="Times-Italic">Why patch?</content> </bullet> <bullet level="1" marker-type="inherited"> <content font-color="0 0 0" paragraph-head-indent="8" paragraph-first-line-indent="8" tab-stops="L 43" font-size="36" font-name="Times-Italic">Why is patching so painful?</content> </bullet> <bullet level="1" marker-type="inherited"> <content font-color="0.00473934 0.000935717 0.000991593" paragraph-head-indent="8" paragraph-first-line-indent="8" tab-stops="L 43" font-size="36" font-name="Times-Italic">What makes it easier?</content> </bullet> <bullet level="1" marker-type="inherited"> <content font-color="0 0.00596857 1" paragraph-head-indent="8" paragraph-first-line-indent="8" tab-stops="L 43" font-size="36" font-name="Times-Italic">Thinking about risk management</content> </bullet> <bullet level="1" marker-type="inherited"> <content font-color="0.578199 0.114157 0.120974" paragraph-head-indent="8" paragraph-first-line-indent="8" tab-stops="L 43" font-size="36" font-name="Times-Italic">How can we get out of the rat race?</content> </bullet> </bullets> </slide> <slide master-slide-id="master-slide-2"> <drawables> <title visibility="tracks-master" vertical-alignment="tracks-master"/> <body visibility="tracks-master" location="61 163" size="677 403" vertical-alignment="tracks-master"/> </drawables> <transition-style type="inherited"/> <thumbnails> <thumbnail byte-size="8370" size="60 45" file="thumbs/st15.tiff"/> </thumbnails> <bullets> <bullet level="0" marker-type="inherited"> <content font-color="0 0 0" paragraph-alignment="center" tab-stops="L 75" font-size="50" font-name="Times-Roman">Risk Management</content> </bullet> <bullet level="1" marker-type="inherited"> <content font-color="0 0 0" paragraph-head-indent="8" paragraph-first-line-indent="8" tab-stops="L 43" font-size="36" font-name="Times-Italic">You can do this at home!</content> </bullet> <bullet level="1" marker-type="inherited"> <content font-color="0 0 0" paragraph-head-indent="8" paragraph-first-line-indent="8" tab-stops="L 43" font-size="36" font-name="Times-Italic">Easy math leads to useful results</content> </bullet> <bullet level="1" marker-type="inherited"> <content font-color="0 0 0" paragraph-head-indent="8" paragraph-first-line-indent="8" tab-stops="L 43" font-size="36" font-name="Times-Italic">Cost to deploy, cost to fix problems (security or broken patch)</content> </bullet> <bullet level="1" marker-type="inherited"> <content font-color="0 0 0" paragraph-head-indent="8" paragraph-first-line-indent="8" tab-stops="L 43" font-size="36" font-name="Times-Italic">Goal is to move away from argument and worry</content> </bullet> <bullet level="1" marker-type="inherited"> <content font-color="0 0 0" paragraph-head-indent="8" paragraph-first-line-indent="8" tab-stops="L 43" font-size="36" font-name="Times-Italic">Consider Security Risk, Patch Risk, Business Impact</content> </bullet> </bullets> </slide> <slide id="slide-1" master-slide-id="master-slide-2"> <drawables> <title visibility="tracks-master" vertical-alignment="tracks-master"/> <body size="677 410" visibility="tracks-master" vertical-alignment="tracks-master" location="61 165" id="body-1"/> </drawables> <transition-style type="inherited"/> <thumbnails> <thumbnail byte-size="8370" size="60 45" file="thumbs/st16.tiff"/> </thumbnails> <bullets> <bullet level="0" marker-type="inherited"> <content font-color="0 0 0" paragraph-alignment="center" tab-stops="L 75" font-size="50" font-name="Times-Roman">Security Issues</content> </bullet> <bullet level="1" marker-type="inherited"> <content font-color="0 0 0" paragraph-head-indent="8" paragraph-first-line-indent="8" tab-stops="L 43" font-size="36" font-name="Times-Italic">Patch criticality</content> </bullet> <bullet level="2" marker-type="inherited"> <content font-color="0 0 0" paragraph-head-indent="8" paragraph-first-line-indent="8" tab-stops="L 43" font-size="36" font-name="Times-Italic">Software Vendor</content> </bullet> <bullet level="2" marker-type="inherited" id="bullet-1"> <content font-color="0 0 0" paragraph-head-indent="8" paragraph-first-line-indent="8" tab-stops="L 43" font-size="36" font-name="Times-Italic">CERT metrics (ADDED: CVSS)</content> </bullet> <bullet level="2" marker-type="inherited"> <content font-color="0 0 0" paragraph-head-indent="8" paragraph-first-line-indent="8" tab-stops="L 43" font-size="36" font-name="Times-Italic">CNN</content> </bullet> <bullet level="1" marker-type="inherited"> <content font-color="0 0 0" paragraph-head-indent="8" paragraph-first-line-indent="8" tab-stops="L 43" font-size="36" font-name="Times-Italic">Mitigating controls</content> </bullet> <bullet level="2" marker-type="inherited"> <content font-color="0 0 0" paragraph-head-indent="8" paragraph-first-line-indent="8" tab-stops="L 43" font-size="36" font-name="Times-Italic">Firewalls</content> </bullet> <bullet level="2" marker-type="inherited"> <content font-color="0 0 0" paragraph-head-indent="8" paragraph-first-line-indent="8" tab-stops="L 43" font-size="36" font-name="Times-Italic">Configurations</content> </bullet> </bullets> </slide> <slide master-slide-id="master-slide-2"> <drawables> <title visibility="tracks-master" vertical-alignment="tracks-master"/> <body visibility="tracks-master" vertical-alignment="tracks-master"/> </drawables> <transition-style type="inherited"/> <thumbnails> <thumbnail byte-size="8370" size="60 45" file="thumbs/st17.tiff"/> </thumbnails> <bullets> <bullet level="0" marker-type="inherited"> <content font-color="0 0 0" paragraph-alignment="center" tab-stops="L 75" font-size="50" font-name="Times-Roman">Patch Issues</content> </bullet> <bullet level="1" marker-type="inherited"> <content font-color="0 0 0" paragraph-head-indent="8" paragraph-first-line-indent="8" tab-stops="L 43" font-size="36" font-name="Times-Italic">How big is the patch?</content> </bullet> <bullet level="1" marker-type="inherited"> <content font-color="0 0 0" paragraph-head-indent="8" paragraph-first-line-indent="8" tab-stops="L 43" font-size="36" font-name="Times-Italic">How many issues does it fix?</content> </bullet> <bullet level="1" marker-type="inherited"> <content font-color="0 0 0" paragraph-head-indent="8" paragraph-first-line-indent="8" tab-stops="L 43" font-size="36" font-name="Times-Italic">Can it be backed out?</content> </bullet> <bullet level="1" marker-type="inherited"> <content font-color="0 0 0" paragraph-head-indent="8" paragraph-first-line-indent="8" tab-stops="L 43" font-size="36" font-name="Times-Italic">Does it require a reboot?</content> </bullet> <bullet level="1" marker-type="inherited"> <content font-color="0 0 0" paragraph-head-indent="8" paragraph-first-line-indent="8" tab-stops="L 43" font-size="36" font-name="Times-Italic">Testing (internal, external, web & lists)</content> </bullet> </bullets> </slide> <slide master-slide-id="master-slide-2"> <drawables> <title visibility="tracks-master" vertical-alignment="tracks-master"/> <body visibility="tracks-master" vertical-alignment="tracks-master"/> </drawables> <transition-style type="inherited"/> <thumbnails> <thumbnail byte-size="8370" size="60 45" file="thumbs/st18.tiff"/> </thumbnails> <bullets> <bullet level="0" marker-type="inherited"> <content font-color="0 0 0" paragraph-alignment="center" tab-stops="L 75" font-size="50" font-name="Times-Roman">Business Issues</content> </bullet> <bullet level="1" marker-type="inherited"> <content font-color="0 0 0" paragraph-head-indent="8" paragraph-first-line-indent="8" tab-stops="L 43" font-size="36" font-name="Times-Italic">What’s the business function of the system?</content> </bullet> <bullet level="1" marker-type="inherited"> <content font-color="0 0 0" paragraph-head-indent="8" paragraph-first-line-indent="8" tab-stops="L 43" font-size="36" font-name="Times-Italic">Is there an impending deadline?</content> </bullet> <bullet level="1" marker-type="inherited"> <content font-color="0 0 0" paragraph-head-indent="8" paragraph-first-line-indent="8" tab-stops="L 43" font-size="36" font-name="Times-Italic">What’s your MTTR?</content> </bullet> <bullet level="2" marker-type="inherited"> <content font-color="0 0 0" paragraph-head-indent="8" paragraph-first-line-indent="8" tab-stops="L 43" font-size="36" font-name="Times-Italic">(Mean Time To Repair)</content> </bullet> </bullets> </slide> <slide master-slide-id="master-slide-2"> <drawables> <title visibility="tracks-master" vertical-alignment="tracks-master"/> <body visibility="tracks-master" vertical-alignment="tracks-master"/> </drawables> <transition-style type="inherited"/> <thumbnails> <thumbnail byte-size="8370" size="60 45" file="thumbs/st19.tiff"/> </thumbnails> <bullets> <bullet level="0" marker-type="inherited"> <content font-color="0 0 0" paragraph-alignment="center" tab-stops="L 75" font-size="50" font-name="Times-Roman">Making it concrete</content> </bullet> <bullet level="1" marker-type="inherited"> <content font-color="0 0 0" paragraph-head-indent="8" paragraph-first-line-indent="8" tab-stops="L 43" font-size="36" font-name="Times-Italic">Know your cost to deploy a patch</content> </bullet> <bullet level="1" marker-type="inherited"> <content font-color="0 0 0" paragraph-head-indent="8" paragraph-first-line-indent="8" tab-stops="L 43" font-size="36" font-name="Times-Italic">Know your cost of downtime</content> </bullet> <bullet level="1" marker-type="inherited"> <content font-color="0 0 0" paragraph-head-indent="8" paragraph-first-line-indent="8" tab-stops="L 43" font-size="36" font-name="Times-Italic">Estimate the risk of attack</content> </bullet> </bullets> </slide> <slide master-slide-id="master-slide-2"> <drawables> <title visibility="tracks-master" vertical-alignment="tracks-master"/> <body visibility="tracks-master" location="61 163" size="677 422" vertical-alignment="tracks-master"/> </drawables> <transition-style type="inherited"/> <thumbnails> <thumbnail byte-size="8370" size="60 45" file="thumbs/st20.tiff"/> </thumbnails> <bullets> <bullet level="0" marker-type="inherited"> <content font-color="0 0 0" paragraph-alignment="center" tab-stops="L 75" font-size="50" font-name="Times-Roman">Some sample numbers</content> </bullet> <bullet level="1" marker-type="inherited"> <content font-color="0 0 0" paragraph-head-indent="8" paragraph-first-line-indent="8" tab-stops="L 43" font-size="36" font-name="Times-Italic">1,000 node network with manual patching by $100 techies, at 1 hour/node:</content> </bullet> <bullet level="1" marker-type="inherited"> <content font-color="0 0 0" paragraph-head-indent="8" paragraph-first-line-indent="8" tab-stops="L 43" font-size="36" font-name="Times-Italic">$100,000 to deploy a patch</content> </bullet> <bullet level="1" marker-type="inherited"> <content font-color="0 0 0" paragraph-head-indent="8" paragraph-first-line-indent="8" tab-stops="L 43" font-size="36" font-name="Times-Italic">So what do you do if:</content> </bullet> <bullet level="2" marker-type="inherited"> <content font-color="0 0 0" paragraph-head-indent="8" paragraph-first-line-indent="8" tab-stops="L 43" font-size="36" font-name="Times-Italic">Attack that would cost you $1,000,000</content> </bullet> <bullet level="2" marker-type="inherited"> <content font-color="0 0 0" paragraph-head-indent="8" paragraph-first-line-indent="8" tab-stops="L 43" font-size="36" font-name="Times-Italic">Attack that would cost you $105,000</content> </bullet> <bullet level="2" marker-type="inherited"> <content font-color="0 0 0" paragraph-head-indent="8" paragraph-first-line-indent="8" tab-stops="L 43" font-size="36" font-name="Times-Italic">Attack that would cost you $25,000</content> </bullet> </bullets> </slide> <slide master-slide-id="master-slide-2"> <drawables> <title visibility="tracks-master" vertical-alignment="tracks-master"/> <body visibility="tracks-master" location="61 187" size="677 377" vertical-alignment="tracks-master"/> </drawables> <transition-style type="inherited"/> <thumbnails> <thumbnail byte-size="8370" size="60 45" file="thumbs/st21.tiff"/> </thumbnails> <bullets> <bullet level="0" marker-type="inherited"> <content font-color="0 0 0" paragraph-alignment="center" tab-stops="L 75" font-size="50" font-name="Times-Roman">The $105,000 question</content> </bullet> <bullet level="1" marker-type="inherited"> <content font-color="0 0 0" paragraph-head-indent="8" paragraph-first-line-indent="8" tab-stops="L 43" font-size="36" font-name="Times-Italic">Expected 5% ROI on cash</content> </bullet> <bullet level="2" marker-type="inherited"> <content font-color="0 0 0" paragraph-head-indent="8" paragraph-first-line-indent="8" tab-stops="L 43" font-size="36" font-name="Times-Italic">Didn’t specify time</content> </bullet> <bullet level="1" marker-type="inherited"> <content font-color="0 0 0" paragraph-head-indent="8" paragraph-first-line-indent="8" tab-stops="L 43" font-size="36" font-name="Times-Italic">Alternate activities?</content> </bullet> <bullet level="1" marker-type="inherited"> <content font-color="0 0 0" paragraph-head-indent="8" paragraph-first-line-indent="8" tab-stops="L 43" font-size="36" font-name="Times-Italic">Cost of capital/ROI?</content> </bullet> </bullets> </slide> <slide master-slide-id="master-slide-2"> <drawables> <title visibility="tracks-master" vertical-alignment="tracks-master"/> <body visibility="tracks-master" vertical-alignment="tracks-master"/> </drawables> <transition-style type="inherited"/> <thumbnails> <thumbnail byte-size="8370" size="60 45" file="thumbs/st22.tiff"/> </thumbnails> <bullets> <bullet level="0" marker-type="inherited"> <content font-color="0 0 0" paragraph-alignment="center" tab-stops="L 75" font-size="50" font-name="Times-Roman"/> </bullet> <bullet level="1" marker-type="inherited"> <content font-color="0 0 0" paragraph-head-indent="8" paragraph-first-line-indent="8" tab-stops="L 43" font-size="36" font-name="Times-Italic">Why patch?</content> </bullet> <bullet level="1" marker-type="inherited"> <content font-color="0 0 0" paragraph-head-indent="8" paragraph-first-line-indent="8" tab-stops="L 43" font-size="36" font-name="Times-Italic">Why is patching so painful?</content> </bullet> <bullet level="1" marker-type="inherited"> <content font-color="0 0 0" paragraph-head-indent="8" paragraph-first-line-indent="8" tab-stops="L 43" font-size="36" font-name="Times-Italic">What makes it easier?</content> </bullet> <bullet level="1" marker-type="image"> <content font-color="0 0 0" paragraph-head-indent="8" paragraph-first-line-indent="8" tab-stops="L 43" font-size="36" font-name="Times-Italic">Thinking about risk management</content> <image-bullet-style byte-size="167325" offset="-2" size="0.25" size-technique="relative" image-data="bullet_circle-blk.pdf"/> </bullet> <bullet level="1" marker-type="image"> <content font-color="0.021328 0 1" paragraph-head-indent="8" paragraph-first-line-indent="8" tab-stops="L 43" font-size="36" font-name="Times-Italic">How can we get out of the rat race?</content> <image-bullet-style byte-size="167325" offset="-2" size="0.25" size-technique="relative" image-data="bullet_circle-blk.pdf"/> </bullet> </bullets> </slide> <slide master-slide-id="master-slide-2"> <drawables> <title visibility="tracks-master" vertical-alignment="tracks-master"/> <body visibility="tracks-master" vertical-alignment="tracks-master"/> </drawables> <transition-style type="inherited"/> <thumbnails> <thumbnail byte-size="8370" size="60 45" file="thumbs/st221.tiff"/> </thumbnails> <bullets> <bullet level="0" marker-type="inherited"> <content font-color="0 0 0" paragraph-alignment="center" tab-stops="L 75" font-size="50" font-name="Times-Roman">Better Patch Mgmt SW</content> </bullet> <bullet level="1" marker-type="inherited"> <content font-color="0 0 0" paragraph-head-indent="8" paragraph-first-line-indent="8" tab-stops="L 43" font-size="36" font-name="Times-Italic">Research and risk data</content> </bullet> <bullet level="1" marker-type="inherited"> <content font-color="0 0 0" paragraph-head-indent="8" paragraph-first-line-indent="8" tab-stops="L 43" font-size="36" font-name="Times-Italic">Workflow</content> </bullet> <bullet level="1" marker-type="inherited"> <content font-color="0 0 0" paragraph-head-indent="8" paragraph-first-line-indent="8" tab-stops="L 43" font-size="36" font-name="Times-Italic">Testing support</content> </bullet> <bullet level="1" marker-type="inherited"> <content font-color="0 0 0" paragraph-head-indent="8" paragraph-first-line-indent="8" tab-stops="L 43" font-size="36" font-name="Times-Italic">Risk Management support</content> </bullet> </bullets> </slide> <slide master-slide-id="master-slide-2"> <drawables> <title visibility="tracks-master" vertical-alignment="tracks-master"/> <body visibility="tracks-master" vertical-alignment="tracks-master"/> </drawables> <transition-style type="inherited"/> <thumbnails> <thumbnail byte-size="8370" size="60 45" file="thumbs/st23.tiff"/> </thumbnails> <bullets> <bullet level="0" marker-type="inherited"> <content font-color="0 0 0" paragraph-alignment="center" tab-stops="L 75" font-size="50" font-name="Times-Roman">More Managable Deployments</content> </bullet> <bullet level="1" marker-type="inherited"> <content font-color="0 0 0" paragraph-head-indent="8" paragraph-first-line-indent="8" tab-stops="L 43" font-size="36" font-name="Times-Italic">Use security software (Okena, Immunix, Sana, etc) to stop classes of attack</content> </bullet> <bullet level="1" marker-type="inherited"> <content font-color="0 0 0" paragraph-head-indent="8" paragraph-first-line-indent="8" tab-stops="L 43" font-size="36" font-name="Times-Italic">Use software to deploy and manage systems</content> </bullet> <bullet level="1" marker-type="inherited"> <content font-color="0 0 0" paragraph-head-indent="8" paragraph-first-line-indent="8" tab-stops="L 43" font-size="36" font-name="Times-Italic">Work to increase MTBF, decrease MTTR</content> </bullet> </bullets> </slide> <slide master-slide-id="master-slide-2"> <drawables> <title visibility="tracks-master" vertical-alignment="tracks-master"/> <body visibility="tracks-master" vertical-alignment="tracks-master"/> </drawables> <transition-style type="inherited"/> <thumbnails> <thumbnail byte-size="8370" size="60 45" file="thumbs/st24.tiff"/> </thumbnails> <bullets> <bullet level="0" marker-type="inherited"> <content font-color="0 0 0" paragraph-alignment="center" tab-stops="L 75" font-size="50" font-name="Times-Roman">More Secure Software</content> </bullet> <bullet level="1" marker-type="inherited"> <content font-color="0 0 0" paragraph-head-indent="8" paragraph-first-line-indent="8" tab-stops="L 43" font-size="36" font-name="Times-Italic">The core problem is that security is not a buying criteria</content> </bullet> <bullet level="1" marker-type="inherited"> <content font-color="0 0 0" paragraph-head-indent="8" paragraph-first-line-indent="8" tab-stops="L 43" font-size="36" font-name="Times-Italic">Make it one</content> </bullet> <bullet level="1" marker-type="inherited"> <content font-color="0 0 0" paragraph-head-indent="8" paragraph-first-line-indent="8" tab-stops="L 43" font-size="36" font-name="Times-Italic"> <![CDATA[Push your vendor to discuss and then improve their software processes: Design, Development, Testing, Deploy]]> </content> </bullet> </bullets> </slide> <slide depth="1" master-slide-id="master-slide-12"> <drawables> <title visibility="visible" location="54.2 -13.4" size="691.1 158.8" vertical-alignment="tracks-master"> <styles> <fill-style fill-type="none"/> </styles>

Bug (and software) Development

How To Move? It’s actually worse than that That’s a graph for a single program You deploy lots of programs

How To Get There Better software tools Internal, external Better Deployment tools Security Operations

Where The Tools Fit

Static Checkers Work with source code Lots of different languages Results generally easier to fix They’re associated with lines of code High false positive rates Find “sins of commission” like strcat() Fast

Dynamic Checkers Work on binary code Never wonder if the optimizer was too clever Find “Sins of Omission” like SQL injection Slow! (Can be hours or days)

Language Selection Some languages seem to be more prone to security flaws C, PHP We may not have found the classes of flaws in Java, C# New classes keep showing up (integer underflows, etc)

Adding Resilience to Code How to deploy operate Buggy code more securely

Free UNIX techniques chroot/jail Unprivileged daemon accounts Painful if you need fast code on port 80 Free security enhanced OSes: OpenBSD, SELinux

More advanced tools OS hardening tools Immunix subdomain Sana kernel enhancements Application hardening Stackguard & company (Recompile vs kernel modules)

Issues with Hardening Tools How to measure their effectiveness Configuration effort Costs (percieved and real) Cash up front Speed Supportability + Vendor finger pointing

Selling Your Boss Or, Security folks are from Mars, businesspeople are from Wheaton

How You Buy Software Functionality, supportability, price Can you get security in there? The above can be used for that

Sample Scoring 0-1 point for a good language 0-1 point for documented use of tools to check code 0-1 point for unprivileged, chroot install 0-1 point for logging 0-1 point for local analysis

Deployment Budgets Cash for wires, hubs, power, air Where does security fit? What’s the real cost of a failure? (Hint, its not $1m, unless you’re a large bank)

Deployment Business Cases Cost of operations with and without tool X Cost of special events: Patching Breakins Worms Frequency of special events