Browse communities
Presenting a webinar?
Share this content

Securing Your Applications – Get Started Now

Derek Brink, VP
Today’s headlines provide ongoing evidence that IT Security teams are losing the battle against attackers, reinforcing the need to address the security of enterprise applications. If your organization hasn’t gotten started yet in the area of application security – in spite of the dynamic nature of the application security threat landscape, the size and diversity of your application software portfolio, and the significant financial impact of the average application security-related incident – do it because of the positive impact on your bottom line. This web seminar will outline and provide tangible directives for you to build and execute an Application Security initiative.
Oct 27 2011
34 mins
Securing Your Applications – Get Started Now
Aberdeen application security vulnerability
More from this community:

IT Service Management

Webinars and videos

  • Live and recorded (1075)
  • Upcoming (39)
  • Date
  • Rating
  • Views
  • Automating your data center is the easiest way to free up your IT department's time to work on more strategic projects. Tune in to this webinar as Jeff Hart from M2 Technology discusses how automation can be the key to increase efficiency while reducing your IT costs.
    Read more >
  • The mega-trends of SaaS, mobile and Big Data are converging, generating a new wave of business opportunity for enterprises. The convergence demands a new kind of platform – one that connects and takes advantage of the explosion of endpoints and data caused by organizations each choosing a uniquely diverse set of best-of-breed applications to power their business. Ross Mason will discuss his vision for this new platform and demonstrate how MuleSoft’s solutions are making it a reality.

    Questions to be discussed include:

    How will SaaS and mobility impact my business?
    Is SOA really dead?
    Does my business need an API strategy? Where should we start?
    Can the Anypoint platform help me secure a competitive advantage?
    Read more >
  • In this webinar, learn about new innovations in IT collaboration and how they can benefit your IT Service Management initiatives.
    Read more >
  • In this session, we’ll cover the techniques used to properly and consistently assess the financial and business benefits of a technology investment. We’ll review the tools used to build a financial business case and examine the strengths and weaknesses of metrics such as ROI, TCO, NPV, and Payback. We’ll look at the challenges of credibly estimating direct and indirect benefits, and outline a straight-forward process for estimating indirect benefits.
    Read more >
  • Most people in IT entered the profession due to their interest and proficiency in technology. Not yet many IT practitioners set out to be accountants or marketers – although we constantly send out messages that state the need for skills in these areas.

    There are more and more examples of accountants (or people from an accountancy, financial and other backgrounds) working in IT and there is a real need for commercial and financial skills and experience in this area.

    The changing role and position of technology, the growth of managed services and the emergence of SIAM (Service Integration and Management) are driving the need for a new set of capabilities and competencies in IT and the management of technology. Clearly this presents a number of challenges for IT organisations and professionals alike – many of whom do not see themselves as being ‘bean counters’ or accountants…

    This session examines the following:

    What are the new challenges for IT?
    What skills are needed?
    What roles and responsibilities are required?
    How can ‘traditional’ IT people and enterprise IT organisations adapt to meet these challenges?
    What does the IT industry and e.g. enterprise of the future look like?
    Read more >
  • One of the significant changes resulting from the current economic climate has been the level of external scrutiny applied to IT initiatives. CFOs are demanding comprehensive business cases that can both articulate the value that IT brings to a business and withstand vetting by financial analysts. This session will integrate traditional financial models with business value metrics in order to provide an understandable vehicle for obtaining approval for IT Initiatives. Learn how to quantify financial costs and benefits in order to bridge the gap between what a CIO wants and what a CFO needs to justify the IT investment.
    Read more >
  • In a rapidly changing business climate, the allocation of resources and budgets are closely tied to a CISO's ability to selectively target and manage information security risk. The problem, of course, is that many organizations have little control, understanding or management of risks due to the traditional, reactionary nature of information security spending. Depending on company culture, information security budgets are usually controlled by the wrong metrics, often driven by prior year spending, audit findings, or through reactionary senior management decisions that ignore the stark reality of the organizational situation. In this webinar, Integralis discusses how to prioritize risk through a metrics-driven risk management process that is aligned with business objectives. Using this approach, organizations can experience an effective budgeting exercise while enabling business leaders to understand and accept the appropriate level of risk tolerance for the business.
    Read more >
  • In today’s business environment, CIO’s are facing enormous pressure to drive value from their IT budgets and maximize investments to drive innovation.

    Any ROI or cost benefit analysis requires well documented use cases that are not summarized in a single report, but rather a series of steps outlined to capture value. ROI or cost benefit analysis should be a process that is prescriptive and proactive – not an afterthought.

    This session explores the following four common use cases that justify the IT Financial Management Implementation and shows attendees where to find value and revenue as well as where there is waste and hidden cost savings.

    1. IT Portfolio Optimization and Cloud – show me the value
    2. IT Financial Management for Application and Support Rationalization – show me the money
    3. Data Center Consolidation and Transformation – show me the waste & the big bucks
    4. Servers, Storage and Desktops Delivers Tangible Savings – show me the hidden cost of savings

    The Fab Four in use cases are key measures of success that demonstrate the value to both IT and the organization. The session will provide attendees with the framework to establish these key measures for success in their organizations and gain insight into a better process for data collection, synthesis of the data, costing and the planning that is required.
    Read more >
  • In the average organization, finances are typically tracked by functional groupings or IT units, for example server or network costs. This view may be helpful to a CIO or the head of those units but provides little value to the business. It contributes to the view of IT as a “black hole” – money goes in but nothing comes out. This webinar looks at service-based Financial Management and the benefits of accounting and budgeting that can be tied back directly to business outcomes. This form of financial management enables the business to understand the costs and value of a particular service, say Inventory Management services in a retail chain. It also enables IT to have meaningful service reviews with the business, by transforming bits and bytes into dollars and “sense”.
    Read more >
  • Technology Business Management (TBM) provides a practical, applied discipline for technology leaders and their business partners to collaborate on business-aligned decisions. Developed by thoughtleading CIOs and CTOs from The Coca-Cola Company, Goldman Sachs, DIRECTV, Microsoft, Cisco, Xerox and more, TBM defines core disciplines and decision-making capabilities, such as cost transparency, demand-based planning, cost optimization, and portfolio rationalization. In this workshop, Todd Tucker, Research Director for the TBM Council, will share how to use the TBM Index™ to benchmark your organization, compare it against industry peers, and create a roadmap based on your current state and business goals.

    Attendees will learn:
    * How innovative technology leaders leverage Technology Business Management to improve value delivery
    * How to interpret TBM Index results, including peer group comparisons, to shape your roadmap
    * The operational cadence for TBM, including key reports for sustaining and communicating optimizations
    Read more >
  • Channel
  • Channel profile

HP Enterprise Security Products

Up Down
  • Gaining Threat Intelligence and Combating the Four Most Common Attack Vectors Jun 12 2013 5:00 pm UTC 45 mins
    The HP Security Research team (HPSR) is hard at work monitoring the threat landscape for new campaigns, profiling actors to understand their motivations, identifying the tools they use and determining how credible certain threats might be. It’s part of a long-term strategy for developing a new threat intelligence-sharing model. Why is that important? It will provide real-time info from the larger security community-- enterprises like yours, industry security organizations and security vendors-- that can be used to automate and catch these breaches immediately.

    Learn about HP’s findings, including these culprits: injection flaws, DDoS, various phishing techniques and zero day vulnerabilities. How can you address the inevitable breaches that will occur?
  • Why Your Cloud Provider Security Logo Doesn’t Mean a Thing Recorded: May 16 2013 49 mins
    As more applications have moved to the cloud, the industry has seen a proliferation of application security issues. In 2012, several cloud service providers were breached as a direct result of application security vulnerabilities. Before you choose a cloud service provider, make sure that it answers the series of security questions created by the Cloud Security Alliance (CSA). CSA has created a checklist of industry-accepted ways to document what security controls exist in IaaS, PaaS, and SaaS offerings – creating more transparency for enterprises. The speakers will walk attendees through this blueprint, helping them to become more adept at identifying service provider security readiness. They'll also discuss some of the most common application vulnerabilities, including unencrypted passwords, SQL Injection, and those that impact poorly architected mobile apps.
  • Your VP Just Resigned, What Did He Take With Him? Recorded: Apr 17 2013 49 mins
    Your VP just resigned and took a position at your biggest competitor. Did you remember to examine the Salesforce logs to see if he downloaded your entire customer database and history of purchases? Do you even have access to those logs? And if you did, and found the obvious, how would it help now? Catching Bradley Manning who stole sensitive government information, Ross Klein who took with him an entire hotel brand concept and Gary Min that copied chemical formulas was too late for the US government, DuPont and Starwood hotels respectively.

    In this presentation we look into how to proactively monitor user activity to detect potential threats from employees before the damage occurs. Focusing on how to effectively collect activity logs and analyze them against user, role and entitlement information, to detect abnormal activity, predict which employees may pose more threat if not loyal and to reduce the associated risk.
  • Enhance Your Security Operations with Big Data Recorded: Mar 13 2013 37 mins
    More and more security operations centers are transforming their operations from being reactive, to proactive and even predictive. Hear how big data technologies like Autonomy IDOL can be leveraged with traditional security monitoring tools for Social Network Monitoring and Data Loss Prevention (data in motion) to drive value and empower a “next generation SOC.”
  • Mobile Application Integrity: Being Good When No One is Watching (Your Security) Recorded: Feb 14 2013 49 mins
    Mobile devices are a hot trend amongst security topics this year. While most cover the angle of the device management, only few go into testing the applications. Since the mobile application vulnerability landscape is still young, there is a need to classify these vulnerabilities so that development teams can focus and root them out of their codebases. Join us as we explore the OWASP Mobile Top 10 classification system and metrics from a large case study of a real enterprise facing the deployment and assessment of a large number of mobile applications. Developers, Managers, and team leads will leave with resources and guidelines to start mobile security both at the process level and code level, including how to handle external mobile development teams they might contract. Get ahead of upcoming PCI compliance by addressing your mobile software early!
  • Top 10 Tips to be Compliant and Secure Together Recorded: Jan 17 2013 45 mins
    Compliance and security are better together and there are tools and resources that can be combined to achieve both. Learn the top 10 tips - such as continuous monitoring, assessing the controls, and cost-effective audit logs - to understand and implement best practices of compliance and security together.
  • Modular Security For Today’s Cyber Threats and Cloud-Based Data Centers Recorded: Jan 17 2013 49 mins
    Network security is not just about eliminating bad traffic, it is also about making sure applications and critical data are always available to the right audience at the right time. The right network security architecture can provide security for physical assets, but also extend protection for virtual and cloud computing infrastructures without impacting performance. In fact, unlike in the past, a network security product should never be considered a bottleneck due to deep packet inspection, but should actually be capable of improving bandwidth and performance.

    About the Presenter:
    Sanjay Raja, Director of Product Marketing for HP TippingPoint, is responsible for marketing of HP TippingPoint’s Network and Cloud Security solutions. He has over 12 years of experience in various Product Marketing, Product Management, and Alliances roles primarily in IT Security. He has been in the IT industry for the last 18 years with experience in Security, Networking, Servers and Storage and Network and Application Performance Testing. In addition he has authored several papers and presented at various industry events on security, compliance and testing. Prior to HP he has worked at Cabletron Systems, 3Com, Nexsi Systems, Spirent Communications, Top Layer Networks, Symantec and most recently Crossbeam Systems. Sanjay currently holds a B.S.EE and MBA from Worcester Polytechnic Institute.
  • Secure your Enterprise with Big Data Recorded: Jan 16 2013 46 mins
    While organizations continue to battle cyber criminals, it seems that security professions are always fighting a losing war. However, a new weapon has been building up within the domain of most organizations, one that can help tip the balance in favor of the good guys. Find out how we can take the massive amounts of information we are generating and turn it to help bring valuable intelligence that can stop cyber-attacks from compromising your enterprise.
  • Mobile Apps under Attack – How to Secure and Protect Your Apps Recorded: Dec 12 2012 48 mins
    Join us to explore the mobile application threat landscape and identify ways to prepare for reverse engineering and tampering attacks.

    The mobile App Economy is growing explosively as businesses are seeking to embrace innovation to provide new products and services to consumers, partners, and employees. However, malicious hackers and criminal organizations are now targeting these applications with a growing number of sophisticated attacks. Security of mobile apps, rather than devices, has become the new focal point as well as a top level concern for all stakeholders.

    In this webinar, mobile security experts, Jason Schmitt, Director of Product Management of HP Fortify and Vince Arneja, VP of Product Management of Arxan Technologies will explore the mobile application threat landscape to identify a wide range of threats from vulnerability based attacks to reverse engineering and tampering attacks. The presenters will also address how to achieve comprehensive mobile application security within the SDLC to manage risk and exposure for B2C, B2E and B2B applications and protect today’s App Economy from theft, fraud, malware invasion, and tampering. You will gain insights how to develop and launch vulnerability-free, self-defending, and tamper-proofed applications that can withstand the new attacks.

    HP Fortify is the leader in Software Security Assurance with solutions that contain, remove, and prevent software vulnerabilities. Arxan Technologies is the leader in protecting the App Economy with application protection solutions that are deployed on over one hundred million devices by Fortune 500 and global financial services.
  • EMEA 2012 3rd Annual Cost of Cyber Crime Study Results - UK & Germany Recorded: Nov 8 2012 60 mins
    Don’t miss the results presentation of the 3rd Annual Cost of Cyber Crime Study, conducted by Ponemon Institute, sponsored by HP Enterprise Security. This research indicates that both the cost and frequency of cyber crime have continued to rise for the third straight year. According to this study of a benchmark sample of U.S. organizations, the occurrence of cyber attacks has more than doubled during this period, while the financial impact has increased by nearly 40 percent. This year’s study found that the average annualized cost of cybercrime incurred was $8.9 million. This represents a six percent increase over the average cost reported in 2011, and a 38 percent increase over 2010.

    This webinar will focus on the UK and Germany results.
    Attend this webinar and learn about how:

    • Information theft and business disruption continue to represent the highest external costs.

    • Recovery and detection remain the most costly internal activities associated with cyber crime.

    • Deploying advanced security intelligence solutions can mitigate the impact of cyber attacks.

    Register now!
  • 2012 3rd Annual Cost of Cyber Crime Study Results Recorded: Nov 7 2012 61 mins
    Don’t miss the results presentation of the 3rd Annual Cost of Cyber Crime Study, conducted by Ponemon Institute, sponsored by HP Enterprise Security. This research indicates that both the cost and frequency of cyber crime have continued to rise for the third straight year. According to this study of a benchmark sample of U.S. organizations, the occurrence of cyber attacks has more than doubled during this period, while the financial impact has increased by nearly 40 percent. This year’s study found that the average annualized cost of cybercrime incurred was $8.9 million. This represents a six percent increase over the average cost reported in 2011, and a 38 percent increase over 2010.

    Attend this webinar and learn about how:

    •Information theft and business disruption continue to represent the highest external costs.
    •Recovery and detection remain the most costly internal activities associated with cyber crime.
    •Deploying advanced security intelligence solutions can mitigate the impact of cyber attacks.

    Register now!
  • 2012 3rd Annual Cost of Cyber Crime Study Results, APJ, Oct 25 Recorded: Oct 24 2012 82 mins
    2012 3rd Annual Cost of Cyber Crime Study Results
    Live Webinar
    Presented by Larry Ponemon, Ponemon Institute
    Sponsored by HP Enterprise Security

    Don’t miss the results presentation of the 3rd Annual Cost of Cyber Crime Study, conducted by Ponemon Institute. This research indicates that both the cost and frequency of cyber crime have continued to rise for the third straight year. According to this study of a benchmark sample of U.S. organizations, the occurrence of cyber attacks has more than doubled during this period, while the financial impact has increased by nearly 40 percent. This year’s study also found that the average annualized cost of cybercrime incurred was $8.9 million. This represents a six percent increase over the average cost reported in 2011, and a 37 percent increase over 2010.

    In conjunction with the third annual study of U.S. companies, for the first time cyber crime cost studies were also conducted in Japan, Australia, Germany, and the United Kingdom in 2012. Join us for this live webinar where we will compare the U.S. study findings with those from the Japan and Australia studies.

    Attend this webinar and learn about how:

    • Information theft and business disruption continue to represent the highest external costs.
    • Recovery and detection remain the most costly internal activities associated with cyber crime.
    • Deploying advanced security intelligence solutions can mitigate the impact of cyber attacks. Register now!
  • Embracing the Cloud – 5 Key Ways to Reduce Risk Recorded: Oct 18 2012 48 mins
    As organizations develop their strategy for cloud computing, maximizing business benefit while minimizing risk is key. This talk focuses on the 5 most critical considerations when adopting cloud as a business enabler. As IT complexity grows exponentially with choice, security is often an afterthought that places the business at a disadvantage. Learn the key considerations that can keep your security posture up, your risk down, and business benefit maximized.
  • Don’t be a Wiki Leak! Preventing Insider Threat Breaches Recorded: Oct 3 2012 39 mins
    In the wake of Wikileaks breaches in recent years, resulting from insider threat breaches, organizations began looking not only at perimeter defense but also at solutions that serve as a “Single Pane of Glass” in order to monitor and thwart insider threat and data loss activities. Specifically, organizations want to incorporate disparate applications, processes and mobile devices into the Single Pane of Glass view. In this webinar, you will learn how HP Enterprise Security solved these types of customer challenges to ensure that their “Wiki doesn’t leak.”

    Speaker: Ray Patterson, Vice President of Global Services, HP Enterprise Security Products

    About Ray Patterson
    Ray is a veteran information security executive, having held leadership roles at VeriSign, Oracle, ArcSight, and currently at HP Enterprise Security Products (ESP). In his present role, Ray leads the Global Government Services business where his organization solves critical cyber security challenges for customers through the ESP portfolio of security solutions such as ArcSight, Fortify and Tipping Point. He also frequently presents and speaks on emerging cyber security issues impacting business and government. Ray is a retired Lieutenant Colonel, U.S Army, and is a graduate of George Washington University (MBA), George Mason University (BS), Virginia Tech (BA), and is a Certified Public Accountant.
  • How secure is your IT operations? Making SOC/NOC integration work for you Recorded: Sep 20 2012 58 mins
    The emergence of Enterprise 2.0 with social, mobile, local, and cloud applications within the enterprise has increased IT infrastructure management challenges with an increasing number of IT assets. Bring your own device (BYOD) is no longer an option for the enterprise. Your business needs an open IT architecture to facilitate collaboration between customers and employees, but your IT operations cannot fully support it due to security issues. How do you align business and IT needs while keeping your enterprise secure? This webcast talks about how to seamlessly integrate the Network Operations Center (NOC) and the Security Operations Center (SOC) to secure your IT infrastructure and empower your organization to collaborate with your ecosystem effectively.

    Speaker Bio:
    Sridhar Karnam, Product Marketing Manager, HP Enterprise Security Products. Sri Karnam is a subject matter expert on IT operations and security challenges, and has over 10 years of experience managing IT and security software products through their entire lifecycle. He has an MBA from Wigan & Leigh College in the UK, and an MS in Engineering Management from Santa Clara University. In his spare time, Sri enjoys building robots.
  • Social Networking: Risky for the Enterprise? Recorded: Sep 6 2012 49 mins
    Social networking for most of us is becoming wrapped into our DNA. This is especially important for the next generation workforce. Additionally, the employees today and those of tomorrow will expect the capability to blog and social network with corporate assets and corporate bandwidth. Additionally, these technologies are being widely used for corporate marketing and communication. That is why it's important to look at all aspects of securing your infrastructure and more importantly, the people that drive your organization today. This involves educating people, corporate process and the right security technologies. The following session will cover the benefits and the security risks inherit with social networking across all business verticals. Additionally, the author will provide a use case analysis of information that is gathered via web beacons that harvest information unknowing to the user.
  • Security Intelligence for a Faster World Recorded: Aug 8 2012 49 mins
    The amount of digital data is exploding exponentially. It is being generated, transmitted and exchanged much faster, by more sources and in different formats than ever before. At the same time, the number of attempts to infiltrate organizations to steal and profit from the unauthorized use of critical data is skyrocketing. Not only are financially motivated criminals conducting more attacks on organizations, there has also been a dramatic increase in the number of data theft attempts by nation states and politically motivated hacking groups. We will discuss new technological innovation that enables HP ArcSight SIEM solutions to maintain the security of organizational IT assets by detecting more incidents and addressing larger sets of log data.
  • Mobile Apps under Attack – How to Secure and Protect Your Apps Recorded: Jul 11 2012 47 mins
    Join us to explore the mobile application threat landscape and identify ways to prepare for reverse engineering and tampering attacks.

    The mobile App Economy is growing explosively as businesses are seeking to embrace innovation to provide new products and services to consumers, partners, and employees. However, malicious hackers and criminal organizations are now targeting these applications with a growing number of sophisticated attacks. Security of mobile apps, rather than devices, has become the new focal point as well as a top level concern for all stakeholders.

    In this webinar, mobile security experts, Jason Schmitt, Director of Product Management of HP Fortify and Vince Arneja, VP of Product Management of Arxan Technologies will explore the mobile application threat landscape to identify a wide range of threats from vulnerability based attacks to reverse engineering and tampering attacks. The presenters will also address how to achieve comprehensive mobile application security within the SDLC to manage risk and exposure for B2C, B2E and B2B applications and protect today’s App Economy from theft, fraud, malware invasion, and tampering. You will gain insights how to develop and launch vulnerability-free, self-defending, and tamper-proofed applications that can withstand the new attacks.

    HP Fortify is the leader in Software Security Assurance with solutions that contain, remove, and prevent software vulnerabilities. Arxan Technologies is the leader in protecting the App Economy with application protection solutions that are deployed on over one hundred million devices by Fortune 500 and global financial services.
  • Understanding Vulnerabilities to Better Mitigate Threats Recorded: Jun 21 2012 45 mins
    Vulnerabilities that exist in today’s commercial and custom software are the primary target for attackers. The most severe of these vulnerabilities are those that can result in remote code execution – that is an attacker can take complete control of another system for the purposes of stealing information, defacing property or just causing trouble. In this session, Brian Gorenc, will demonstrate how to analyze a vulnerability and the steps required to weaponize it. Centering on a vulnerability in a Microsoft application, the demo will show you how an attacker can quickly move from proof-of-concept to remote code execution. The discussion will also include thoughts on mitigation strategies for reducing risk.
  • Hacktivists Declare War Against All Organizations – What Can YOU Do About It? Recorded: Jun 20 2012 44 mins
    Are you wondering what you should do to fight cyber terrorism? Hacktivist groups like Lulzsec and Anonymous are encouraging fellow hackers to open fire on any organization or agency that crosses their path. That adds a lot of pressure on all security professionals. Join cyber security expert Narayan Makaram, Director of Solutions Marketing, Enterprise Security at Hewlett-Packard, to learn:

    · Why hackers are going after big and small organizations worldwide

    · What you should do… and NOT do

    · How to prepare for The Day should things go south

    We will also cover the best practices organizations worldwide have implemented to better prepare themselves against cyber terrorism.
Leading Security Intelligence & Risk Management Enterprise Platform
HP is a leading provider of security and compliance solutions for modern enterprises that want to mitigate risk in their hybrid environments and defend against advanced threats. Based on market leading products from ArcSight, Fortify, and TippingPoint, the HP Security Intelligence and Risk Management (SIRM) Platform uniquely delivers the advanced correlation, application protection, and network defense technology to protect today’s applications and IT infrastructures from sophisticated cyber threats. Visit HP Enterprise Security at: www.hpenterprisesecurity.com.
  • Upcoming webinars (1)
  • Recorded webinars (60)
  • Subscribers (3,068)
Channel RSS feed
Up Down

Embed in website or blog

Successfully added emails: 0
Remove all
  • Title: Securing Your Applications – Get Started Now
  • Live at: Oct 27 2011 5:00 pm
  • Presented by: Derek Brink, VP
  • From:
Your email has been sent.
or close
You must be logged in to email this
OK