Browse communities
Presenting a webinar?
Share this content

Uncontrolled Privilege Creep – The Danger Within

McAfee and Avecto
“Privilege Creep” is defined as the gradual dissemination of admin rights for standard users. While organizations enable privileged accounts to meet specific business requirements, “privilege creep” exposes the company to malware risk, compliance litigation and increased operational costs.

This session discusses the hidden internal dangers of “privilege creep”. It offers an integrated approach to solving the “privilege creep” problem including:

• How to introduce granular levels of control improving security, productivity and achieving compliance
• Using McAfee ePO to provide reports and audit trails of privileged activity
• Ensuring user productivity and experience within the standard user function
Aug 14 2012
39 mins
Uncontrolled Privilege Creep – The Danger Within
McAfee Avecto Privilege management
More from this community:

IT Security

Webinars and videos

  • Live and recorded (2605)
  • Upcoming (175)
  • Date
  • Rating
  • Views
  • There has been a lot of press lately on the escalating cyber threats especially from China. A panel of security experts and practitioners will discuss focus on how this press coverage has changed how organizations think about these cyber threats and what countermeasures they need or plan to implement to address escalating crimes, espionage, or warfare cyber risks.
    Read more >
  • More and more organizations are exploring the ramifications of Big Data on their enterprises. Deployments of Smart Meters to better manage the electric grid, Industrial Control Systems (ICS) across a variety of sectors, and the promise of always on and always connected systems are pushing organizations to gather more data than previously imagined. What are the implications from a privacy and intellectual property perspective and how can we as security professionals provide a level of control and risk management over the coming wave of The Internet of Things? Join (ISC)2 and Capella University on May 23, 2013 at 1:00pm Eastern for a discussion on these important concerns.
    Read more >
  • How do you monitor and assess performance in the cloud? Do you need more visibility and control over your managed cloud environments? Learn how HOSTING 360° Report™ delivers a level of visibility to cloud performance that has historically been unavailable to cloud customers. Aggregating key performance and operational data in a concise and usable format provides full visibility into the availability, performance, recovery, security and capacity (AppRisk™) of HOSTING’s cloud services.
    Read more >
  • The explosion of social media in recent years means that there are millions of users or ‘fans’ to reach and add to your customer base. While there are clear benefits to end-users and the organizations that accept their social identities for account creation and authentication, there are important risk factors that have to be considered as well.

    Please join CA and ISACA for this webinar, where we will review the pros and cons of social media login and Bring Your Own Identity (BYOI), and provide guidance and best practices based on real use cases to help guide organizations to a model that meets their risk profile.
    Read more >
  • BYOD is inevitable and unstoppable. Maybe even uncontrollable and unmanageable. But is it the real issue? We seem to be very interested in mobile device management and security risks and data breaches, as, of course, we should be. But, isn’t the real issue the fact that traditional IT is fast becoming irrelevant. Nearly all of us use our personal devices for work and have multiple personal clouds full of data – personal and business. Today’s users believe that they need traditional IT less than before. Crowdsourcing is replacing the Service Desk while Web self-service is replacing live people. But, there’s more to running IT than mobile device buzz words and doom & gloom blogs and tweets. Check out this webinar with CA Technologies & Pink Elephant to find out what’s really happening and what IT can do to embrace this new world. 1 PriSM CPD.
    Read more >
  • For the IT employer utilizing contingent or contract worker(s) services there are best practices and considerations that need to be made in order to protect yourself and your employees.

    - Do you know how to discuss pay rates, increases or bonuses?
    - Do you know how to deal with full-time employment queries, how to properly deal with timecards or forms?
    - How do you deal with punctuality, attendance, dress code etc?
    - What do you do when you want to terminate or suspend a contingent worker?

    These are the common questions we receive and we will provide tangible tools and information that can help protect you as an employer.
    Read more >
  • For the IT employer utilizing contingent or contract worker(s) services there are best practices and considerations that need to be made in order to protect yourself and your employees.

    - Do you know how to discuss pay rates, increases or bonuses?
    - Do you know how to deal with full-time employment queries, how to properly deal with timecards or forms?
    - How do you deal with punctuality, attendance, dress code etc?
    - What do you do when you want to terminate or suspend a contingent worker?

    These are the common questions we receive and we will provide tangible tools and information that can help protect you as an employer.
    Read more >
  • By 2014, 60% of global companies are expected to pilot, deploy or expand their BYOD programs (RainKing). As BYOD has become a fixture in the workplace, with 72% of employees clamoring to have their personal devices work-enabled, the IT industry has watched as the familiar “perimeter" model has become untenable. Data is going to more places, and ending up on a wider variety of devices, than ever before. A new model for protecting data has become a necessity. Organizations have tried to do so in a multitude of ways: extending policies to cover mobile devices, monitoring usage, MDM solutions, and even NAC; all have been methods used to try and create the most stable environment for mobile technology. Let Integralis security expert Mike Gabriel explain how to best balance mobile productivity and security in this Security Talks installment.

    Why Attend?

    1.Discover how your peers are trying to protect mobile data.
    2.See how the perimeter is being sculpted (or not) by the IT industry.
    3.Find out what the future holds for BYOD in the workplace.
    Read more >
  • Over the years true MSPs have had to work diligently to differentiate themselves from companies that are at best, not true MSPs and at worst, are shady fly-by-night operators. This is where the Unified Certification Standard or (UCS) for Cloud & Managed Service Providers comes in.

    The UCS was created by a team of dedicated MSPs to address the shortfalls of existing standards like ISO 27001, ITIL, CoBIT, SSAE 16, which were never intended for managed services organizations and offered little in the way of consumer protection.

    CASE IN POINT: Many MSPs do NOT fail because of technical deficiencies, but due to financial risk. Because of this, customers have very little insight into the service provider's business practices and financial strengths and capabilities.

    Attend this webcast and you will hear from real MSP executives on how the UCS certification and audit has helped them to:

    - Win new business
    - Provide needed transparency to customers
    - Achieve compliance objectives
    - Quickly develop trust with customers and prospects
    - Provide documentation on how those MSPs deliver their services
    - And much more...

    Both Cloud and Managed Service Providers should attend this webcast and at least begin to follow the standards necessary to achieve managed services and cloud computing excellence.
    Read more >
  • Doug Turner, CEO of Mantis Technology Group, talks about how his team built Pulse Analytics, a sentiment analysis solution using text analytics tool running on SAP HANA One. Hear how his team strengthened the capabilities of this solution while simplifying their data architecture by replacing 20 servers with only 1 SAP HANA One instance.
    Read more >
  • Channel
  • Channel profile

Security Connected

Up Down
  • Managing Mobility Costs in Real Time Jun 4 2013 5:00 pm UTC 45 mins
    With the increase in adoption of smart phones, tablets and laptops as essential working tools, companies have to wage a war against bill shock.

    Join McAfee and Tangoe to hear how our combined solution allows enterprises to win this war and save money with increasing security.
    In this webcast learn how McAfee and Tangoe:
    •Deliver cost containment and plan optimization solutions
    •Provide real-time monitoring of mobile devices to help protect against:
    oCost overruns
    oOut of plan international roaming
    oDevice loss or theft
    oAbuse from excessive usage
    oReal-time detection of potential security risk events
  • Next-Gen Security Management – A risk-based approach to mitigating cyber-attacks Recorded: May 14 2013 41 mins
    Minimizing cyber security risks to avoid potential data breaches and maintaining continuous compliance remains a challenge in today’s dynamic network environments. Security data abounds, yet the risk picture is often incomplete and outdated. Transform IT security management with a next-generation approach that combines comprehensive network visibility and security analytics to continuously minimize risk.

    Learn how Skybox leverages your McAfee Enterprise Firewall and Vulnerability Management solutions, adding a layer of network visibility, continuous monitoring and security analytics. In this webinar you will learn how to:

    • Prioritize vulnerabilities based on exploitability and criticality of assets
    • Reduce risk by identifying access paths and simulate attack scenarios
    • Automate and optimize your network security, even with hundreds of devices
  • Protecting against IP Theft - Fighting an effective battle Recorded: Apr 30 2013 33 mins
    With internal and external threats seeking to gain control of companies intellectual property, a new approach is necessary in order to enable companies to effectively defeat intellectual property theft attempts. In this session, Securonix and McAfee will present their combined solution that secures data by leveraging on existing DLP technologies and a powerful layer of in-context intelligence. This allows for unprecedented, real time detection of theft by leveraging on behavioral profiling and accurate comparative algorithms that significantly reduce the number of false positives and enable security teams to focus on the most critical events.
  • Defending Against Persistent Attackers: The Need for Incident Response 360° Recorded: Apr 9 2013 40 mins
    Every day nation-states and other cyber-adversaries are targeting organizations to access confidential information. Adaptive, persistent cybercriminals easily circumvent traditional security methods such as signatures that require previous knowledge of the attack. Organizations need to detect both known and unknown malware and the attackers’ tactics, techniques and procedures to respond on their own – without using expensive consulting services.

    Join McAfee and HBGary to learn how your organization can provide continuous response to the latest cyberthreats affecting your business environment. Topics will include how to:

    • Proactively and reactively identify compromised computers.
    • Conduct incident response – physical memory & disk forensic search and collection
    • Obtain actionable threat intelligence to update network security devices like IPS and Firewall
    • Automate reverse engineering malware to collect actionable threat intelligence
  • Security Intelligence Meets Vulnerability Management Recorded: Mar 26 2013 27 mins
    We’ve all heard about the “evolving threat landscape.” In biology, evolution is a process that occurs over millions of years as a result of small changes in successive generations. Mutations, on the other hand, are sudden, sometimes spontaneous occurrences, and the changes are often dramatic and harmful.

    McAfee and CORE Security are working together to transform security intelligence and vulnerability management. In this webcast, McAfee and CORE will:

    • Review the evolution of traditional vulnerability management solutions
    • Examine the mutating threat landscape
    • Describe how to achieve greater security situational awareness
  • Privileged Identity Management: Combine McAfee security with privileged user acc Recorded: Feb 26 2013 48 mins
    Do you have complete visibility into who is on your network, what data they are seeing, and which actions they are taking with that data? Are you able to manage and continuously monitor privileged account usage across IT environments? Attend this webinar to learn how McAfee and Cyber-Ark have partnered to provide a solution that will help you:

    • Prevent intranet threats by detecting role violations through monitoring all privileged user activity
    • Comply more readily with PCI, SOX, NERC, HIPAA and other industry requirements with pre-packaged dashboards and reports
    • Conduct stronger forensics analysis and evidence collection by drilling down into privileged user sessions
  • Understand the Business Impact of Endpoint Risk Recorded: Feb 14 2013 24 mins
    Enterprises often identify such large amounts of risks and vulnerabilities that it is difficult to ‘see the forest for the trees.’ A better understanding of how these findings affect business processes allow managers to focus their resources and enable better business decisions on prioritizing security improvement and remediation.

    Join McAfee and WCK and learn how the combined solution allows you to easily see how each ePO endpoint affects business processes and organizational units.

    • How to get a clear picture of the risks and understand how they impact the business?
    • How to prioritize mitigation based on business criticality?
    • How to enforce more stringent policies for the company’s ‘crown jewels?
  • Controlling Privileged User Access: Six Practical Best Practices Recorded: Feb 12 2013 41 mins
    Studies show that malicious insider fraud costs an organization even more time and money to recover from than a denial of service or web-based attack. Are you still relying on sudo, password vaulting, or monitoring to control privileged user access to your Unix, Linux and Windows servers and desktops? If so, you may be leaving yourself wide open to a security breach, which will cost your organization, on average, $8.9M dollars.

    Join McAfee and FoxT to discover the latest best practices and recent innovations for privileged access management. Topics covered include:

    • Granular authorization: Enforcing privileged access down to the command level
    • Best practices for management and granular enforcement of SSH user and host keys
    • Automating user account creation and removal across diverse systems
    • How to streamline audits and achieve compliance with automated logging and reporting
  • Virtualize More While Improving Your Risk Posture from Bare Metal to Endpoint Recorded: Dec 18 2012 39 mins
    Do you know the "4 Must Haves" in virtualization security designed to help large organizations understand the challenges of securing virtualized environments? Gain insights into the rapidly-evolving virtualization security landscape, compliance mandates, and understand a comprehensive offering by McAfee, Intel, and HyTrust that can help you scale your VMware infrastructure while staying compliant and secure.

    Underpinned by Intel TXT for safe boot, and integrated with McAfee security management, HyTrust Appliance is a suite of management applications designed to protect administrative error and abuse. Join HyTrust and McAfee to learn about virtualization optimized solutions covering:

    • Access Control and Account Management
    • SIEM and Log Management
    • Network and Endpoint Security
    • Configuration Management and Hardening
  • Securing the UK Public Sector with Least Privilege Recorded: Dec 14 2012 51 mins
    Growing concerns within the public sector stem from how to manage the security of data and protect the enterprise while ensuring user productivity and experience. Historically, many public sector organisations have enabled privileged accounts to meet specific user needs. As a result users with admin rights expose the business to malware risk, compliance litigation, and increased operational costs.

    This session discusses the hidden internal dangers of users with admin rights and offers an integrated approach to solving the security concerns of the UK’s Public Sector bodies. During the webcast we’ll illustrate:

    • How least privilege is being used to increase security, operational effectiveness and adhere to compliance within NHS, local government, defence, and education
    • How organisations can gain granular levels of control over the user, desktop and server
    • How reporting and auditing is streamlined to provide detailed areas of information
  • 10 Reasons Why Risk Management Fails in Healthcare Recorded: Dec 12 2012 51 mins
    Description: Maximize the value of risk assessments beyond compliance and HIPAA mandate. Learn how assessments can give practical steps on guiding the limited resources that healthcare leaders are challenged with in this industry.
  • Making the GRC Grade – How to Realize Continuous Compliance Recorded: Dec 11 2012 34 mins
    All compliance frameworks reference endpoint integrity, host defenses, and access control. You’ve invested in host-based security, systems management, and SIEM in order to reduce malware, data leakage, and other security exposures. But what innovative approaches can you use to not only improve your organization’s GRC grade but also achieve continuous compliance?

    This session shares a reference solution for continuous compliance based on smart integrations between McAfee security management and ForeScout’s automated security control platform. This expert / practitioner session will cover:

    • Common endpoint compliance gaps
    • NAC integration with host-based security and policy management systems
    • Extending correlation rules to enable endpoint remediation
    • How to create a closed-loop endpoint security and compliance program
  • SIEM With Integrated Identity Intelligence Recorded: Nov 29 2012 47 mins
    McAfee experts will take attendees through the rich capabilities and scalable architecture of McAfee ESM. Securonix experts will explore the advantages of integrated identity risk intelligence, including real world success stories and an in-depth demonstration. Learn how to Increase attack detection accuracy; combat advanced persistent threats; effectively manage risk and identify suspicious insider behavior in real-time.
  • Complete Vulnerability Management from McAfee and RedSeal Recorded: Nov 6 2012 45 mins
    Most large enterprises identify thousands of vulnerabilities every time they conduct a vulnerability assessment. But scanning for vulnerabilities is only the first step—figuring out which vulnerabilities truly matter is the subsequent challenge.

    • Is critical financial information at risk because a vulnerability is exposed to the Internet or extranet?
    • Has a vulnerability already been effectively mitigated with network-level controls?
    • Do vulnerabilities in minor systems allow a hacker to leapfrog to more critical systems?

    Join McAfee and RedSeal for an informative webcast to learn why prioritizing remediation efforts according to risk is essential to effective vulnerability management and how the RedSeal Vulnerability Advisor software integrates and analyzes the vulnerability information collected by McAfee’s Vulnerability Manager to give organizations true insight into their vulnerability risk.
  • How to Regain Control of the Network Perimeter – A Comprehensive Solution Recorded: Oct 16 2012 31 mins
    Firewalls are the first line of defense for critical enterprise network and endpoint assets. But two challenges reduce the effectiveness of the traditional firewall: (1) The eroding network perimeter brought on by an increasingly remote workforce, virtualization, BYOD, and targeted attacks; (2) Firewall misconfigurations, which according to Gartner account for 95% of firewall breaches (as opposed to firewall flaws).

    Join McAfee and AlgoSec to learn how to regain control of the perimeter and achieve high assurance that critical assets are secured, including:

    • How to improve visibility of your network security policy – and what it’s actually doing!
    • What firewall capabilities you really need and what configurations are right
    • A real-life case study of this combined solution
  • Reduce Deployment Costs with Next Generation SIEM and Security Intelligence Recorded: Oct 10 2012 41 mins
    McAfee experts will take attendees through the rich capabilities and scalable architecture of McAfee ESM and Securonix experts will explore the advantages of integrated identity risk intelligence, including real world success stories and in-depth demonstration. Learn how to Increase attack detection accuracy; Combat advanced persistent threats; and Effectively manage risk and identify suspicious insider behavior in real-time.
  • Create a Competitive Advantage Using SaaS and Identity Recorded: Sep 26 2012 55 mins
    Beverly Hills Wealth Management (BHWM) is a boutique investment advisory firm started by a team of Wall Street veterans. They wanted to create a cutting edge investment advisory practice, but wanted to avoid the cumbersome, proprietary systems used by traditional Wall Street firms.

    John Stuart—CIO at BHWM—and his colleagues decided to leverage the power and flexibility of the cloud to create a virtualized, dynamic investment advisory solution that would allow them to deliver a wide range of services to individuals with high net worth, without making a huge capital investment in hardware, software, and professional services.

    They quickly realized they needed an identity and access management infrastructure that would maximize productivity and ensure a high level of protection for the sensitive, personal information their applications store.

    In this webinar, you’ll learn:
    • How to architect and deploy a cloud-based application infrastructure
    • The competitive advantages and challenges of the cloud
    • How to use an identity and access management (IAM) platform to protect sensitive, personal financial data
    • Pitfalls and potential issues to consider
    • The key capabilities you will need from your IAM solution provider
  • Defending Against Data Leakage Through Covert Channels Recorded: Sep 25 2012 37 mins
    Insiders can compromise critical systems and leak sensitive information using unauthorized applications and tools that are classified by McAfee as potentially unwanted programs (PUPs). Savvy criminals employ PUPs that use data-hiding techniques, including steganography, facilitating stealthy exfiltration from the enterprise.

    In this webinar, you’ll learn how McAfee and Allen Corporation’s cyber security division, WetStone Technologies, are working to:

    • Provide a joint McAfee-Allen solution that detects and blocks the execution of PUPs particularly relevant to insider attacks.
    • Enable digital investigators to search for evidence in data breach incident investigations, revealing the use of these malicious data-hiding tools.
    • Leverage McAfee endpoint software to pre-empt such dangerous software from executing.
  • Securely Embracing the Cloud: From Data Security through Identity Management Recorded: Sep 18 2012 32 mins
    Organizations are concerned about how to protect data and manage access on the cloud. The data that is pushed to the cloud needs to be reported on; where is my data, who was on it, what they did, etc. There are also many different clouds that are password protected including the public cloud, private cloud, and hybrid cloud. How can I use the same password across all types of the cloud? The cloud can be embraced by centralizing cloud sign in services and encompassing all clouds into one.

    This webcast proposes best practices for:
    • Learning how to protect data and manage access on the cloud
    • Enabling could reporting so activity in the cloud can be viewed
    • Maximizing security by centralizing different cloud spaces into one secure cloud
  • Emerging Industrial Control Vulnerabilities – A Proactive Solution Recorded: Sep 6 2012 33 mins
    Operators of Critical Infrastructure are facing rapidly changing threats to their industrial control systems. Plant failure or disruption can be very expensive to operators in terms of revenue and brand image. Wurldtech and McAfee have developed mitigations to protect your systems effectively, without patching or plant shutdown.

    This session offers practical advice on how to protect your critical assets including:
    • An analysis of the current threat landscape within the industries
    • The importance of utilizing IPS and ICS focused rule sets
    • An overview of Wurldtech and McAfee’s industrial control system IPS signature offering
Security Connected for Enterprises
Security Connected provides McAfee customers the ability achieve optimized security each day, enabling their business while reducing risk, driving compliance and realizing operational efficiencies
  • Upcoming webinars (1)
  • Recorded webinars (61)
  • Subscribers (4,524)
Channel RSS feed
Up Down

Embed in website or blog

Successfully added emails: 0
Remove all
  • Title: Uncontrolled Privilege Creep – The Danger Within
  • Live at: Aug 14 2012 5:00 pm
  • Presented by: McAfee and Avecto
  • From:
Your email has been sent.
or close
You must be logged in to email this
OK