BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//Hunter Storm - ECPv6.17.2//NONSGML v1.0//EN
CALSCALE:GREGORIAN
METHOD:PUBLISH
X-ORIGINAL-URL:https://hunterstorm.com
X-WR-CALDESC:Events for Hunter Storm
REFRESH-INTERVAL;VALUE=DURATION:PT1H
X-Robots-Tag:noindex
X-PUBLISHED-TTL:PT1H
BEGIN:VTIMEZONE
TZID:America/Phoenix
BEGIN:STANDARD
TZOFFSETFROM:-0700
TZOFFSETTO:-0700
TZNAME:MST
DTSTART:20060101T000000
END:STANDARD
END:VTIMEZONE
BEGIN:VEVENT
DTSTART;TZID=America/Phoenix:20071126T183000
DTEND;TZID=America/Phoenix:20071126T203000
DTSTAMP:20260731T154038Z
CREATED:20260608T051220Z
LAST-MODIFIED:20260731T154038Z
UID:41955-1196101800-1196109000@hunterstorm.com
SUMMARY:EVENT — Live Presentation | University of Advancing Technology (UAT) — Featured Speaker: IDS/IPS & Event Correlation: Separating Fact from Fiction
DESCRIPTION:This page documents the November 26\, 2007 Arizona Security Practitioners’ Forum session where Hunter Storm presented “IDS/IPS & Event Correlation: Separating Fact from Fiction\,” a practitioner‑level examination of detection fidelity\, false‑positive reduction\, and correlation logic in enterprise SOC environments. \n  \n\nOverview | IDS/IPS & Event Correlation: Separating Fact from Fiction\nIn this 2007 Arizona Security Practioners Forum (AZSPF) session\, Hunter Storm delivered a practitioner‑level examination of IDS/IPS tuning\, false‑positive reduction\, and event‑correlation logic from the perspective of a working SOC engineer and correlation‑tool architect. The presentation separated operational fact from vendor fiction\, clarified common misconceptions about detection fidelity\, and explored practical strategies for improving signal‑to‑noise ratios in enterprise environments. \nThe session included live practitioner participation\, reflecting the AZSPF community’s collaborative\, hands‑on approach to security engineering. \n  \n\nKey Themes\n\nIntrusion Detection — operational realities vs. vendor claims\nIntrusion Prevention — tuning for fidelity\, not noise\nEvent Correlation — logic design\, rule construction\, and context weighting\nFalse‑Positive Reduction — practical SOC‑tested strategies\nSOC Engineering — workflow\, triage\, and analyst burden\nThreat Analysis — interpreting signals in context\n\n  \n\nHistorical Significance\nThis event is a key entry in the 2007 technical‑presentations cluster\, representing Hunter Storm’s early public work in intrusion detection and prevention engineering\, event correlation modeling\, and SOC‑level operational fidelity. It complements the Hacking Humans debut event by documenting the parallel technical lineage of Storm’s security engineering career. \n  \n\nAudience and Format\nPresented to the Arizona Security Practitioners’ Forum — an organic community of InfoSec professionals — the session blended structured content with open discussion\, scenario analysis\, and practitioner‑driven Q&A. \n\n\n\n\nHunter Storm | Event Highlights\n\nEVENT — Digital Broadcast | Public Broadcasting Service (PBS) Jobs Explained! Series — Interview: Cybersecurity Career Paths (2026)\nEVENT — Live Presentation | INTERFACE Phoenix Conference — Keynote: Hacking Humans | The Ports and Services Model of Social Engineering (June 21\, 2013)\nEVENT — Live Presentation | Phoenix Fan Fusion — Panel: Live for the Synthetic Swarm: The Science of Drones (June 5\, 2026\, 7:30 PM)\nEVENT — Virtual Presentation | ISACA Central Ohio — Featured Speaker: Femme Fatale to Federal Whistleblower: Lessons in Risk\, Governance\, and Resilience (May 28\, 2026)\nEVENT — Virtual Presentation | ISACA Central Ohio — Featured Speaker: Femme Fatale to Federal Whistleblower: Lessons in Risk\, Governance\, and Resilience (January 8\, 2026)\nEVENT — Live Presentation | Texas A&M Department of Computer Science & Engineering — Panel: Career Panel (April 1\, 2025\, 2:00 PM)\nEVENT — Live Presentation | ISSA Phoenix — Featured Speaker: The Overlooked Cyber Strategy: Protection from the New Wave of CyberThreats (Professional Attacks\, Character Assassination\, Doxing\, Impersonation\, and more) — (June 13\, 2019\, 2:00 PM)\nEVENT — Live Presentation | U.S. Department of Homeland Security and City of Phoenix Information Security Office (ISPO) Brown Bag Series — Featured Speaker: Spooky Security (October 29\, 2013)\nEVENT — Live Presentation | University of Advancing Technology (UAT) — Featured Speaker: IDS/IPS & Event Correlation: Separating Fact from Fiction (November 26\, 2007\, 6:30 PM)\nEVENT — Live Presentation | University of Advancing Technology (UAT) — Featured Speaker: Social Engineering: Building a More Secure World Thru Innovative Use of the Truth (September 24\, 2007 6:30 PM) – First public presentation of Hacking Humans: The Ports and Services Model of Social Engineering\n\n  \n\nMedia and Appearances\n\nEvents\nGallery\nInterviews\nMedia\n\nNews\nPresentations\nPress\nVideos\n\n  \n\n\nDiscover More from Hunter Storm\n\nAwards and Honors\nAudience and Global Influence\nBiography\nFemme Fatale to Federal Whistleblower — ISACA Central Ohio\nHacking Humans | The Ports and Services Model of Social Engineering\nHunter Storm Official Site\nMedia\nPlatform Visibility Review and Policy\nPresentations\nProfile and Career Highlights\nRésumé | Wells Fargo | SOC Site Lead | Black Ops Team\nSite Index\nSocial Engineering | Building a More Secure World Thru Innovative Use of the Truth\nSpeaker\nThe Storm Chronology | Institutional Resilience Through Architecting Through Systemic Risk with Google Gemini\n\n\n  \n\n 
URL:https://hunterstorm.com/event/ids-ips-event-correlation-2007/
LOCATION:University of Advancing Technology (UAT)\, 2625 W Baseline Rd\, Tempe\, AZ\, 85283\, United States
CATEGORIES:Cybersecurity and Resilience,Media Appearance
ATTACH;FMTTYPE=image/jpeg:https://hunterstorm.com/wp-content/uploads/hunter-storm-smiling-professional-headshot.jpg
ORGANIZER;CN="Arizona Security Practitioner%E2%80%99s Forum (AZSFP) %E2%80%94 later known as Southwest Cybersecurity Forum (SWCF)":MAILTO:https://swcsf.org/contact/
END:VEVENT
END:VCALENDAR