Name: Flipping the Economics of Cyber Attacks
Start: 2016-04-19T11:00:00Z
End: 2016-04-19T11:01:00.000Z
Location: BrightTALK
Rating: 4.25

Palo Alto Networks is the next-generation security company, leading a new era in cybersecurity by safely enabling applications and preventing cyber breaches for tens of thousands of organizations worldwide. Built with an innovative approach and highly differentiated cyberthreat prevention capabilities, our game-changing security platform delivers security far superior to legacy or point products, safely enables daily business operations, and protects an organization's most valuable assets. Find out more at www.paloaltonetworks.com or call us at 1-877-524-1031.

API security has been gaining a lot of attention in recent years due to the move of modern applications to cloud-native environments and microservice-based architectures. But securing the APIs that underpin these architectures can be a challenge for security teams due to their ever-changing nature and the lack of coverage from existing web security solutions.

You cannot protect what you don’t know. APIs are sprawling across your organization and pose a major security risk.

Join this session as Elad Shuster and Geoff Sindel from Palo Alto Networks share best practices all organizations should adopt to secure APIs. Get actionable insight into discovering and cataloging APIs, understanding attack surface, to applying protection and evaluating your security posture. Take your API security to the next level.

API Security 101: Best Practices for Securing APIs

Organizations across all industries are heading toward cyber transformation in the age of modern digital business. With the rapid pace of cyber transformation and the need to keep up, IT leaders face challenges in safeguarding their hybrid workforce, posing significant obstacles for many businesses. 

As a result, IT leaders are considering SASE as a potential remedy for their organizational complexities. However, many find the move toward SASE daunting. By taking an uncompromising approach to SASE, Deloitte and Palo Alto Networks help organizations simplify their businesses to meet the scale and complexity of a highly distributed and cloud-first world. 

Watch this webinar, where our subject matter experts discuss simplifying your Zero Trust strategy with SASE and the benefits it can bring in a constantly evolving work environment.

Moderator: Ben Cole, TechTarget
Speakers:
Jason Georgi, Global Field CTO, Prisma SASE at Palo Alto Networks
Andrew Rafla, Principal | Deloitte Risk & Financial Advisory
Chalan Aras, Cyber & Strategic Risk | Managing Director | Deloitte & Touche LLP, Risk & Financial Advisory

Accelerate your Zero Trust Strategy with Secure Access Service Edge (SASE)

Join Palo Alto Networks SVP & CISO, Niall Browne and North America CFO, Janice Tung as they provide their unique insights and advice on why organizations are turning to security vendor consolidation and tools integration and what are the key questions, considerations and recommendations when evaluating cybersecurity partners.

Disparate Security Vendors and Too Many Tools

Join us as Palo Alto Networks security experts share the benefits of a cybersecurity platform approach. Get the details on our holistic solutions that cover every defense vector with security tools that share intelligence and work together—from prevention to detection and response—to stop the most complex threats.

Cybersecurity Solutions That Work Better Together

Strengthen the security of hybrid working and safeguard your cloud resources while improving operational efficiency with managed SASE. NTT's Managed Service with Palo Alto Networks Prisma SASE enables enterprises to focus on their business priorities while fortifying their security posture - all from a single platform. Calibrating network security and performance to meet your organizational requirements has never been easier.
 
Watch this webinar, where our subject matter experts discuss the elements of what makes up a managed SASE solution, and the benefits it can bring to an organization in an environment of ever-changing business conditions and challenges.

Protect your digital infrastructure with a managed SASE solution

Uploaded_Video_No_Title

Today’s changing regulatory environments—from local governmental policies to international compliance mandates—makes a zero trust-based approach to operational technology (OT) more critical now than ever. 

This is especially true for legacy OT systems, which often don’t contain the proper protocols to prevent cybersecurity threats from targeting devices via your network connection. 

Save your seat for this upcoming Fireside Chat on August 10th at 1pm EST to learn how to integrate zero trust into OT security to accelerate the protection of these environments. 

John Grady, Principal Analyst at Enterprise Strategy Group (ESG) brings his years of market expertise to the conversation with Del Rodillas, Senior Product Marketing Manager at Palo Alto Networks, where the two also discuss:
• Palo Alto Networks’ supports for OT security use cases 
• How service providers can open additional business opportunities by partnering with Palo Alto Networks to deliver OT security

Zero Trust-Based OT Security Approach: Key Considerations for Service Providers

A comprehensive zero trust approach to securing your unmanaged devices

Unmanaged IoT, IoMT & OT devices make up more than 30% of all the connected devices on your organization’s network and are springboards for 25% of the cyber attacks targeting your organization. These devices often ship with vulnerabilities, run unsupported operating systems, and lack encryption, posing a huge security risk to organizations. But stopping threats and achieving Zero Trust security for IoT/ OT devices need not be complex or daunting. 

This session shares a set of best practices to help you protect your organization’s connected IoT/OT devices.

Key takeaways:

-What are the security risks introduced by increased connectivity?
-Why is it so challenging to secure unmanaged devices, and why do traditional network security approaches fail?
-How to implement a Zero Trust approach to securing IoT/OT devices?

IoT/OT Security: Secure Every Connected “Thing” from Edge to Enterprise

For your business to effectively support technologies like IoT and multi-cloud environments, your security strategy needs to be your priority #1. The rise of ransomware, phishing attacks, and new data privacy laws means enforcing security across your network has never been more important, especially in the era of permanent hybrid work. 

That’s where Zero Trust Network Access (ZTNA) 2.0 comes in. Current ZTNA solutions fall short of what you need for today’s hybrid workforces. Luckily ZTNA 2.0 provides the remedy your organization needs. 

Join us in this webinar from the Secure Network Infrastructure Summit where you will learn about: 

* Why current ZTNA solutions fail to deliver on their promise 
* Zero Trust vs. Zero Trust Network Access: What’s the difference? 
* Why is there a need for a new ZTNA approach? 
* How to start your ZTNA 2.0 adoption

The Need for ZTNA 2.0 and Why Your Current Solution Falls Short

How AI is Transforming Network Security and User Experience

During KubeCon + CloudNativeCon Europe 2023 in Amsterdam, Prisma Cloud presented one of the use cases with our booth attendees. We showed how our solutions could help monitor, automate, and protect many cloud-native applications and workloads. Our goal was to raise the cloud-native security awareness among these attendees in this conference.

Prisma Cloud Use Case - KubeCon + CloudNativeCon Europe 2023

Join us for a 30-minute demo session to see how to get fully embedded, full-stack code security coverage with Code Security by Prisma® Cloud.

In this demo, our code security expert covers:
Surfacing and remediating misconfigurations and exposed secrets in infrastructure as code (IaC) and Kubernetes® manifests.
Identifying vulnerabilities and license compliance issues in open source packages and dependencies with software composition analysis (SCA).
Visualizing sources of risk within your software supply chain with the Supply Chain Graph.
Integrating and automating security feedback and code fixes with native developer tool integrations and more.

Register now to learn how code security is a foundational component of a prevention-first cloud-native application protection platform (CNAPP).

DEMO - See Code Security in Action

Join us for a 30-minute demo session to see how to get complete security across your application lifecycle with Cloud Workload Protection by Prisma Cloud. In this demo, our workload protection expert covers:

- Scanning for vulnerabilities using both agent and agentless architectures
- Integrating security across your full application lifecycle to prevent the exploit of CVEs and web based attacks
- Prioritizing the highest-severity vulnerabilities in container registry images
- Enabling predictive and threat-based active protection for containers with ML runtime defense
- Customizing protections for web apps, such as protection against the OWASP Top 10, DoS attacks, access control, bot protection and custom rules 
- And more!

Register now to learn how cloud workload protection, WAF and API security can give you visibility into your hosts, containers, microservices-based applications and other heterogeneous cloud environments.

DEMO - See Workload Protection, WAF and API Security in Action

Secure infrastructure, secure pipelines, secure dependencies, secure code, oh my! None of these alone will provide security, with attackers always looking for the weakest part of the system. Before you throw in the towel, join us as we step through risks from code to runtime, and look at super simple steps which can be taken to give ourselves a much healthier security posture!

Matt is a Developer Advocate for all things cloud security and open source at Prisma Cloud (part of Palo Alto). Hobbyist pentester, network and container geek, he specializes in Cloud Infrastructure and developer ecosystem security.

Supply Chain Security Best Practices

Our journey to open source and GitOps heaven has exposed new security challenges as our CI platforms are exposed to the outside world. In this talk, we will look at a journey that started as an attack on our own GitHub Actions workflows. From there, we will show how simple misconfigurations or straight up bad practices in GitHub can leave a supply chain wide open to attackers.

Steve is enjoying life as a Developer Advocate with Prisma Cloud (by Palo Alto) specializing in Cloud Application and Infrastructure Security Automation, establishing DevSecOps best practices for enterprise CI/CD pipelines.

What I Learned About Supply Chain Security!

As organizations transition from traditional castle-and-moat to zero trust security strategies, they need to strengthen and enhance their authentication processes. Afterall, before you can trust someone, you need to ensure they are who they say they are.

However, traditional authentication presents a challenge: passwords are inherently insecure. Easy-to-remember passwords are weak and strong passwords are hard to remember, leading to account compromise via guessing, brute force attacks, password sharing, password reuse, and credential stuffing.

Multifactor authentication (MFA) may still be inadequate for zero trust requirements since MFA still relies on passwords. 
Many MFA techniques are prone to social engineering attacks, including phishing and push bombing. And MFA introduces user friction. 

For security professionals concerned about securing remote access to their apps and infrastructure in a zero trust world, join this panel to discover how Palo Alto Networks has partnered with Okta to provide passwordless authentication for Palo Alto Networks' platform.  

Gain insights on:
• Password and MFA-based authentication challenges
• How passwordless authentication works
• How to provide zero trust network access
• How to incorporate passwordless authentication and ZTNA
• And more

Passwordless Authentication for Zero Trust Access to Apps and Infrastructure

Cloud adoption continues to grow as organizations execute their digital strategies to compete. A recent ESG report validates cloud adoption and found that 90% of respondents are using two or more cloud service providers. While many might think that they are replacing their on-premises solutions with cloud; the reality from the survey demonstrated a momentum of organizations embracing a hybrid infrastructure. 

As digital projects along with modern attacks, privacy, and security regulations evolve, organizations will face newer challenges of managing complex infrastructures, resulting in a tool sprawl dilemma— especially when it comes to security. ESG reports that a third of organizations are using 25 or more unique security products. Organizations are facing hybrid environment challenges such as policy consistency, high cost, limited visibility, complex infrastructure, etc. 

Join this webinar with ESG and Palo Alto Networks where industry experts will dig into the real-world challenges that you and your peers are facing from securing today’s hybrid cloud applications — and discuss how to resolve them. 

Gain insights on:
— Unique security challenges of a heterogeneous environment
— Key solution attributes for hybrid cloud applications
— How to attain truly consistent security across hybrid clouds 
— And more.

Overcoming the security challenges of Hybrid Cloud Applications

While organizations find themselves moving to the cloud faster than ever, maintaining application security at the speed of development is often overlooked in the process.  

Cloud native security maturity benefits development, from faster remediation, to fewer incidents and faster response. Finding solutions that fit into developer workflows is key to ensuring your organization’s cloud security.

Join us in this session as we discuss: 
-  Key challenges faced on your cloud journey, and how to overcome them 
-  Enabling development  and security teams to work together
-  Keeping up with the pace of change without having security be a blocker 
-  Finding a solution that supports your hybrid/multicloud needs from code to cloud
-  And more!

Building a Mature AppSec Program for Faster Development and Business Results

There are two ends of the spectrum of an attack: the cost of a breach to the victim, and the economic motivation of the cybercriminal. Much focus has been spent on understanding the increasing cost of breaches, and potential damages they can cause organizations. As cybercrime has increasingly become a business, we must also understand the relationship between time, cost and potential profit for an attacker. Like any business, it is a simple math problem, the benefit must outweigh the cost. Security decision makers can use this information to increase the cost of conducting successful data breaches to their organization, taking away the economic incentive, and majority of motivation for attackers.

This session will present compelling new research, including:
• Average time to breach an organization
• Typical yearly earnings of a cybercriminal
• Cost of conducing a breach for an attacker
• Most effective methods for dissuading or preventing attacks

Flipping the Economics of Cyber Attacks

Cybersecurity

cyber

security

Cloud computing has exploded over the past few years, delivering a previously unimagined level of workplace mobility and flexibility. The cloud computing community on BrightTALK is made up of thousands of engaged professionals learning from the latest cloud computing research and resources. Join the community to expand your cloud computing knowledge and have your questions answered in live sessions with industry experts and vendor representatives.

Cloud Computing

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

Enterprise applications have become a crucial piece of infrastructure for many businesses. The enterprise applications community on BrightTALK features the latest insights in enterprise application integration, enterprise application architecture and EAS software. Join the community to gain access to thousands of videos and webinars presented by recognized enterprise information systems experts and arm yourself with the knowledge you need to succeed.

Enterprise Applications

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Flipping the Economics of Cyber Attacks

Presented by

About this talk

More from this channel