CSA CloudBytes was launched as a webinar series to help us educate the industry on all matters related to the cloud. Our channel is designed to inform our audience about trending topics, new technologies, and latest research. Learn more at cloudsecurityalliance.org.  Join the Cloud Security Alliance on LinkedIn and follow us on twitter: @cloudsa

In this webinar, you will learn:

• Why doxxing happens, and the most common doxxing methods used by attackers
• How to instruct a non-security audience on the security mindset
• What recycling slogans can teach us about maintaining our online presence

News reports on doxxing (the practice of researching private or identifying information about someone online, typically with the intent to publicize it) have increased exponentially over the last several years. While most of these reports focus on exposed individuals involved in high-profile or controversial current events, these same investigative methods are used by bad actors every day when researching targets for tailoring spearphish and other human-based attacks. Since many of the public records and social media resources used for this research fall outside the scope of the workplace, keeping corporate users safe requires arming them with education they can use at the office or at home. 

Join Duo Security Strategist Zoe Lindsey for an accessible introduction to doxxing, what tools attackers reach for first, and how researching as an attacker might teaches valuable skills to make users a harder target.

Go Dox Yourself: Staying Safe(r) Online Through a Security Mindset

Panel Discussion

Pakistan’s National Cyber Security Policy 2021 was recently approved by the cabinet. The policy was drafted by the Ministry of Information Technology and Telecommunications, Government of Pakistan. The policy document comprehensively covers the governance, management, operational, technical, and capacity building aspects of cybersecurity. This panel discussion will cover the following important questions regarding protection of national cyberspace of Pakistan.

MODERATOR: Dr. Muhammad YOUSAF (Head of Department, Cybersecurity & Data Science, Riphah International University) 
​
PANELISTS:
- Dr. Rafi us SHAN (Project Director Digital Transformation, Ministry of IT & Telecom, Pakistan)
​- Jawad Khalid MIRZA (CISO, Askari Bank)
- Muhammad Samiul HAQ  (Department Head, IT Security, Zarai Taraqiati Bank)

Pakistan National Cybersecurity Policy

Panel Discussion 

The adoption of cloud computing brings numerous advantages in both public and private sector organizations, however successful cloud computing adoption requires expertise and understanding of various fields. In this panel discussion, the focus is on identifying cloud adoption barriers/challenges and advantages/enablers. It also discusses the related security concerns related to cloud adoption and how cloud computing can in actual address these concerns.

MODERATOR : Dr. Sheheryar MALIK (Director, Riphah School of Computing & Innovation)
​​
​PANELISTS: 
- Mehzad SEHAR (Group Head, Information Security, Engro Corp)
- Dr. Jawwad Ahmed SHAMSI (​Dean, Faculty of Computing at National University of Computer & Emerging Sciences, FAST Karachi)
- Jibran ILYAS  (Managing Director, Mandiant)
- M. Tauseef ASLAM (President, ISC2 Islamabad Chapter)

Cloud Computing & Security Adoption & Challenges in Pakistan

As emphasized by the recent announcements on the quantum advantage, quantum computers can already perform computations, deemed impossible or at least very lengthy with classical computers. Having access to improved computing power is great news in many areas. However, this also represents a threat for most of our communications. Indeed, cryptography, which is underpinning the security of our communication infrastructure, is based on some hard mathematical problems, which will become tractable with a quantum computer. Our complete cybersecurity infrastructure has to be revamped.

​In this talk, we start with a brief explanation of the quantum computer and explain the quantum threat. We then present possible solutions. Some solutions are based on new algorithms. They are known as quantum-resistant algorithms. These can be complemented with quantum solutions, which utilize the same peculiar properties of the quantum world to thwart the quantum computer threat. Together, they will be part of a new quantum-safe infrastructure.  Any organisation or person relying on secure communication for his business or personal life has to start taking this new threat into account.

Cybersecurity in the Quantum Era

Since 2010, the CSA Top Threats report has revealed major security concerns in cloud computing from top industry professionals. John shares how the report can be used to protect against the latest attacks and high profile breaches of the past year. Leveraging the latest Deep Dive attack model, popular breaches are broken down into the threats, risks, and vulnerabilities that were exposed. Critical mitigations and controls are also shared to make sure your organization is prepared for these types of attacks.

Modeling Against the Top Threats in Cloud

Cloud computing performs amazing things for startups, providing young companies with access to enterprise grade infrastructure. But it is also a double-edged sword.  The lack of proper security controls can lead to multiple challenges varying from longer sales cycles to losing customers & investors trust.  The CSA has identified those unique challenges and developed a cloud security for startups guidelines. In this presentation, the guidelines co-author, Moshe Ferber, will explain the 3-phase cyber security strategy that is recommended for cloud based startups.

Cloud Security for Startups - From A to E(xit)

As organizations migrate to the cloud, they need information security professionals who are cloud-savvy. The Certificate of Cloud Security Knowledge (CCSK) is widely recognized as the standard of expertise and provides an individual with the foundation they need to secure data in the cloud. Learn how CCSK can bridge the gap and provide an important first step in establishing baseline knowledge for individuals in cloud security.

Securing the Cloud via CCSK

Understanding the trends, security concerns and state of the Industrial Control Systems (ICS) cloud helps pave the way. ICS with access to the cloud via web-enabled services are where IT and OT (Operational Technology) converge resulting in an integrated process and information flow that brings with it a more complex architecture. As ICS advances from communicating with networks within the enterprise to interacting externally via IoT platforms and the cloud, the efficiency, effectiveness and scalability improve. These advances create additional complexity and a larger attack surface which in turn has increased the opportunity for cyberattacks.

Embracing ICS with Cloud Computing Necessitate Clarity of Vision

within Niche Manufacturing

Modern manufacturing practices are increasingly modular, relying on a number of different independent parts to deliver the final product. These parts are manufactured by different suppliers who may in turn rely on their own suppliers, creating a web-like structure. Although benefits of modern manufacturing practices are remarkable, their success depends upon enhanced visibility into the product's supply chain to streamline movement of materials, identify and eliminate defects, ensure standardisation, and achieve effective inventory management.

A number of established enterprise solutions (MES, ERP) help streamline supply chain processes, however the visibility provided by such systems is limited to 'tier 1' suppliers. The blind spot left by these systems limits the ability of a modern manufacturing organisation in many ways such as limiting ability to estimate lead times for materials, lack of provenance for materials traceability, and affecting business's ability to achieve standardisation across the supply chain especially for make-to-order products where adherence to custom design specifications is critical to success.

This talk will outline the efforts to design and develop a blockchain-based framework to achieve supply chain visibility within niche manufacturing. Specifically, it will highlight use of distributed ledger technologies to achieve parts traceability across different tiers of the supply chain as well as exploring use-cases such as digital Certificates of Conformity and critical parts.

A Blockchain-based Framework to Achieve Supply Chain Visibility

Keynote 

With accelerated digital transformation across different sectors, citizens across the world are expecting the same level of seamless service delivery from the public sectors as the services they receive from the private sector. This requires an increased level of data sharing among public sector entities and an enhanced level of availability of e-services to citizens. The agility and quality of services offered by the private sector is very difficult to achieve with a fragmented ICT infrastructure by public sector​ entities. Moreover, with traditional procurement practices, the time to market for public sector e-government solutions is very long. Furthermore, the cost of maintaining individual data centers is high, their efficiency low and their security is below par. Therefore, public sector entities in many countries are gradually moving away from investing in individual data centers towards a cloud model.
​
Through the Pakistan Cloud First Policy, MoITT aims to contribute to the GOP’s goal to promote e-Governance in order to make Pakistan the frontrunner in good governance through IT enablement at all levels. MoITT also aims to reduce the burden of import bills of Pakistan by discouraging the investments in organization specific data centers in public sector organizations and taking advantage of the economies of scale offered by the cloud.

Digital Transformation in Public Sector through Cloud Adoption

Welcome Remarks
​Dr. Hing-Yan LEE (EVP APAC, CSA) 

Opening Remarks
Dr. Muhammad SADIQ (Chair, CSA Pakistan Chapter)
​
Opening Address 
Jim REAVIS (Co-Founder & CEO, CSA)

Welcome Remarks, Opening Remarks & Opening Address

In the next 3 years, it is anticipated that 70% of workloads will be hosted in a cloud environment. The ease of deploying these workloads within cloud-based infrastructure enables rapid adoption of cloud services and greater business agility, but what are the risks? This presentation will discuss the top threats associated with utilizing cloud-based infrastructure and explore how they are different from threats to your on-premises infrastructure. 

Key takeaways will include:
• Migration planning - should you go all in?
• Shared responsibility model - what are you on the hook to secure?
• Threat trends - how is cloud different?
• Monitoring and Response - what solutions should you be considering?

How to Build and Secure a Robust Cloud Infrastructure

According to 2021 research, 89% of organizations experienced a negative outcome in the time between detection and investigation of a cyber attack on their cloud environments. With cloud attacks continuously growing in number and sophistication, organizations are looking for innovative ways to reduce this window of opportunity for attackers. To this end, 2022 will — without a doubt — bring DFIR transformation for the cloud era. But what will this transformation look like?     Join James Campbell, life-long DFIR-er and Cado Security’s CEO & co-founder and Jessica Stanford, Cado Security’s Chief Marketing Officer on December 15th at 12 PM ET to discuss what’s to come over the next year. From the top cloud threats to watch out for, to the biggest cloud DFIR challenges and trends.

What to do in 2022: Cloud DFIR Predictions

In security, “Living off the Land” (LotL or LOTL)-type attacks are not new. Bad actors have been using legitimate software and functions to target systems and carry out malicious attacks for many years. And although it’s not novel, LotL is still one of the preferred approaches even for highly skilled attackers. Why? Because hackers tend not to reinvent the wheel and prefer to keep a low profile, i.e., leave no “footprints,” such as random binaries or scripts on the system. Interestingly, these stealthy moves are exactly why it’s often very difficult to determine which of these actions are a valid system administrator and which are an attacker. It’s also why static rules can trigger so many false positives and why compromises can go undetected.

Most antivirus vendors do not treat executed commands (from a syntax and vocabulary perspective) as an attack vector, and most of the log-based alerts are static, limited in scope, and hard to update. Furthermore, classic LotL detection mechanisms are noisy and somewhat unreliable, generating a high number of false positives, and because typical rules grow organically, it becomes easier to retire and rewrite the rules rather than maintain and update them.

The security intelligence team at Adobe set out to help fix this problem. Using open source and other representative incident data, we developed a dynamic and high-confidence program, called LotL Classifier, and we have recently open sourced it to the broader security community. In this webcast you will learn about the LotL Classifer, intended usage and best practices, and how you can obtain and contribute to the project.

Introducing our latest AI/ML open source project: LotL Classifier

A common control framework is a set of controls and requirements -- aggregated, correlated, and rationalized from the roster of industry compliance standards, that enable your organization to meet privacy and security laws while minimizing the risk of becoming over-controlled. It protects your organizations, employees, customers -- while giving customers peace of mind that you can be trusted with their data.

In this webinar, come hear from two seasoned compliance professionals --Johan Olivier (Security and Compliance Director at Qorus Software), and  Enrico Telemaque (Manager - Technical Programs: Cloud Services Compliance at Nutanix) on how they’ve implemented common control frameworks within their organizations. They will share their hard-earned experience on building a common controls framework that:
• supports operational effectiveness
• helps you meet your compliance obligations across the globe  
• makes your organization more resilient, and
• supports continuous compliance

Why Using Common Controls Changed The Game for Nutanix & Qorus Software

Bad actors are compromising cloud applications and assets with malware and Trojans. After establishing a foothold, they use command and control servers to manipulate cloud applications and other resources to move laterally towards crown jewel data.

Join John Alexander, Orca Security’s Director of Technical Product Marketing, as he reveals the latest research, pressing challenges, and practical solutions surrounding malware in the cloud.

Key Takeaways Include:

• How supply chain attacks have become a stealthy way to spread cloud malware
• Best practices for stopping malware in the cloud
• Orca Security’s latest research on what to look out for including the most common malware file types and where they are probably hiding within your cloud estate

And get ready to ask John your toughest cloud security questions!

Malware in the Cloud: Challenges, Latest Research, and Best Practices

Growing the Pool of Cloud Security Professionals

In cloud incidents, it is necessary to coordinate and share information with stakeholders and other organizations which will be discussed. This presentation is for all cloud customers as well as cloud service providers who need a clear framework for sharing incident response practices with customers.

Cloud Incident Response Framework

We can safely predict that an insider threat targeting cloud will be the cause of a major data breach over the next 12 months. While cloud insider threats consistently rank as a top concern, they have not been decomposed and mitigated like enterprise exploits. We will uncover threat vectors and behavioural traits and present new techniques for discovering and mitigating cloud insider threats. This webcast will also include a breakdown and comparison of different cloud models.

Attendees will also learn:

• Techniques for reconstructing audit trails to help with the deconstructing of an insider threat

• Ways to quickly recover from the effects of an insider threat to minimize business disruption and impact

Myth or Reality: Insider Threat Victims DON'T Have Their Heads in the Cloud

Cloud Security

Insider Threats

Cloud computing has exploded over the past few years, delivering a previously unimagined level of workplace mobility and flexibility. The cloud computing community on BrightTALK is made up of thousands of engaged professionals learning from the latest cloud computing research and resources. Join the community to expand your cloud computing knowledge and have your questions answered in live sessions with industry experts and vendor representatives.

Cloud Computing

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Myth or Reality: Insider Threat Victims DON'T Have Their Heads in the Cloud

Presented by

About this talk

More from this channel