Defend Against the Data Miner for Financial Services

Recent news of the SolarWinds compromise has highlighted the risk we assume with third-party software supply chains. Attacks targeting accidental zero-day bugs or intentionally malicious backdoors like SUNBURST in our 3rd party code are the new norm. Adapting your security is critical.

Join us for a virtual panel discussion to hear how information security leaders are reducing their organization’s exposure to supply chain attacks. This thought-leadership roundtable will be hosted by Imperva on Thursday, February 4th, at 1 p.m. ET/10 a.m. PT.

Panelists:
Brian Higdon: Information Security Officer, Application Security, Freddie Mac
Troy Bowen: Sr. Manager - Security Engrg, Verizon
Dwayne Mann: Risk and Financial Advisory, Deloitte
Samir Sherif: Chief Information Security Officer, Imperva

We know SUNBURST won’t be the last attack on the third-party supply chain. Hear how your peers are working to prevent the next one.

Ransomware is a growing issue with the number of attacks and amounts demanded on the rise. Ransom DoS (RDoS) campaigns are extortion-based Distributed Denial of Service (DDoS) threats motivated by financial gain and 2020 saw a considerable increase in the number of serious RDoS threats targeting thousands of large commercial organizations globally, especially the financial services industry.

Imperva helped several of its customers mitigate against this spate of RDoS attacks and in this webinar their experts will tell the story of what happens when you are targeted by RansomWare extortionists.

In this session you will learn:

- How a Ransom DoS Attack begins and what the attackers demand
- How attack tactics can differ
- How to mitigate against a Ransom DoS attack

Recent news of the SolarWinds compromise has highlighted the risk we assume with third-party software supply chains. Attacks targeting accidental zero-day bugs or intentionally malicious backdoors like SUNBURST in our 3rd party code are the new norm. Adapting your security is critical.

Join us for a virtual panel discussion to hear how information security leaders are reducing their organization’s exposure to supply chain attacks. This thought-leadership roundtable will be hosted by Imperva on Thursday, February 4th, at 1 p.m. ET/10 a.m. PT.

Panelists:
Brian Higdon: Information Security Officer, Application Security, Freddie Mac
Troy Bowen: Sr. Manager - Security Engrg, Verizon
Dwayne Mann: Risk and Financial Advisory, Deloitte
Samir Sherif: Chief Information Security Officer, Imperva

We know SUNBURST won’t be the last attack on the third-party supply chain. Hear how your peers are working to prevent the next one.

Customers, governments, and enterprises have become more sensitive than ever about Personal Identification Information (PII) - where it resides, who has access to it, and what is done with it. As a result, regulatory bodies at all levels of government are making enterprises that keep customer PII more accountable for securing it and enabling customers to have more control over it.

In most enterprises, the people responsible for successful regulatory audits do not choose or implement the data privacy technology solutions that make it easy and fast to ensure compliance. There is often lack of communication and technology gaps that if left unaddressed can become very costly. In this webinar, Imperva’s data privacy experts will:
- Explain the main data privacy challenges facing most organizations in 2021
- Help you understand common elements of the most important data privacy regulations for specific industries, nations, regions and states
- Show why good data discovery and classification tools are critical factors in achieving effective data privacy
- Articulate Imperva’s current, medium-term, and long-term strategic vision for helping enterprises master data privacy
- Offer a way for you to assess the status of your existing data privacy posture and suggest how to improve it

2020 proved to be a year of global disruption on a variety of levels. As a result, IT professionals were forced to quickly reprioritize their approach to cyber and data security. Now in 2021, security leaders must continue to adapt to the changing public health, political and technological landscapes that are impacting organizations’ data security strategy and posture.

Please join security experts from the Imperva Office of the CTO, Brian Anderson and Peter Klimek, as they provide key trends, insights and examples to consider this year.
• The new digital “normal” puts greater reliance on microservices
• Digital transformation projects implode into data security liabilities
• Serverless computing becomes a playground for cybercriminals
• The maturity of 5G and expansion of IoT fuels botnet armies
• The U.S. catches up with the world on data privacy

2020 proved to be a year of global disruption on a variety of levels. As a result, IT professionals were forced to quickly reprioritize their approach to cyber and data security. With 2021 fast approaching, security leaders must continue to adapt to the changing public health, political and technological landscapes that are impacting organizations’ data security strategy and posture.

Please join security experts from the Imperva Office of the CTO, Brian Anderson and Peter Klimek, as they provide key trends, insights and examples to consider going into 2021.
• The new digital “normal” puts greater reliance on microservices
• Digital transformation projects implode into data security liabilities
• Serverless computing becomes a playground for cybercriminals
• The maturity of 5G and expansion of IoT fuels botnet armies
• The U.S. catches up with the world on data privacy

Host and Data Security expert Terry Ray predicts that a sea of 2020 data breaches will come home to roost in 2021 due to the significant rise in cyber-attack activity amid the global pandemic.  Some we already know of while countless others have yet to be reported. 
 
Join this webinar for a discussion of how the New Year will reveal a record-pace of exploitations using stolen credentials and millions of exposed files and data . If you are unfortunate enough to experience a breach, how you react, and what you do in the immediate aftermath will have a big impact on public perception and regulatory intervention.  You will hear about the challenges and gaps post breach that most organizations experience
 
* What information is necessary to identify the breach specifics
* What are regulators going to require
* What are some best practices to remediate 
* The differences between manual and automated post-breach analysis
 
The discussion will also include expert advice about appropriate levels of data security within  cybersecurity programs, expectations for complying with stricter data privacy regulations, and specific security measures you should consider to fully protect the data in both your data center, and in the cloud, to avoid problems in 2021.

The rise of ransom DDoS attacks is just one indication that application security attacks are more complex and targeted than ever. Attacks are now targeting business logic via APIs and microservices, leveraging malicious bots to steal your customers' accounts. Application security that only protects against the OWASP top 10 attacks delivers insufficient protection in today’s threat landscape. Join our CTO, Kunal Anand, as he explores these challenges and offers insight into what you can be doing today to help protect your tomorrow.

COVID-19 has made 2020 a year to remember.

While the world has been changing around us adapting to the ‘new normal’, so too has the cyber security landscape.

Organizations were abruptly forced to adapt to protecting remote workers on a massive scale, to protect their critical data and to maintain stability of business operations during times of global disruption.

The growing number of people relying on online services for work and personal reasons changed the cyber threat landscape and presented new opportunities for attackers.

Availability has been difficult to guarantee as DDoS attacks grow not just in number, but also in impact.

In this webinar you will learn:

- How DDoS attack trends changed during COVID-19
- How different industries have been targeted by DDoS attacks
- How Imperva DDoS Protection mitigates against multi-vector attacks to protect your business
- How Imperva mitigated its largest DDoS attack this year

Join us to hear a dynamic conversation between Kunal and Ron as they discuss what’s driving the data security market, give you practical steps to improve your security posture, and provide a peek into what Imperva is doing to help make it simpler for everyone.

Whether you’re a data security guru, or new to the space, this session will be a unique opportunity to dive into the minds of two experts in their domains:

Ron Bennatan, also known as the “data security guy”, co-founded Guardium and jSonar, has written 11 technical books, and held roles at J.P. Morgan, Merrill Lynch, Intel and AT&T Bell labs.

Kunal Anand, serial entrepreneur, CTO of Imperva and former co-founder of Prevoty, has held leading roles in MySpace, BBC Worldwide and NASA’s Jet Propulsion Lab.

Application security that only protects against the OWASP top 10 attacks delivers insufficient protection in today’s threat landscape.
Join Imperva’s Matt Hathaway, VP of Product Marketing, as we analyze the key insights from the new 2020 Gartner Magic Quadrant for Web Application Firewalls and how these trends have impacted 2020 to date.

From this session you will understand:

• Trends in the consideration of cloud deployments
• How your security requirements should adapt to the changing web application and API threat landscape (WAAP)
• The role of WAF services in your overall security strategy

The NIST Cybersecurity Framework standardizes the practices and controls that mitigate constantly evolving cyberthreats and adopted by both government entities as well as global businesses is increasingly becoming the basis of other key industry security standards.

The most recent evolution of the framework highlights the Software Development Lifecycle and identifies the need to implement automated security instrumentation as a critical approach to detect and block the impact of software vulnerabilities and increase the speed of release cycles.

NIST 800-53 now specifically calls out Runtime Application Self-Protection (RASP) as a control to mitigate risk due to software security vulnerabilities, such as insecure code, software supply chain vulnerabilities, and other factors.

The addition of this control by NIST is a recognition that automated application security instrumentation is critical to lowering the risk posed by such software vulnerabilities.
Imperva RASP detects and blocks attacks from inside the application. Using patented LangSec techniques which treat data as code, RASP has full context of potentially malicious payloads before the application completes its processes. The result? Fast and accurate protection with NO signatures and NO learning mode.

Join Dr. Edward Amoroso, CEO at Tag Cyber and Kunal Anand, CTO at Imperva to find out how NIST is evolving to cover the SDLC and what that means for cybersecurity. Learn also how our analyst leading RASP solution enables DevOps teams to release applications efficiently, with stronger security and lower risk.

One in every four web requests is a bad bot looking to hurt your business. From price scraping to credential stuffing, bots are all over your website and mobile app. In today's environment, bad bots are also trying to legitimize their behavior. Data from Imperva's annual “Bad Bot Report,” prepared by its threat researchers, will explain what bots are doing and why you should be concerned.

Join Imperva and a leading Forrester Analyst to learn more about the bot problem and understand the latest data from the Bad Bot Report 2020.

Key takeaways will include:
•How Forrester sees the bot problem and the solutions available to you.
•The current state of the bot landscape supported by data from Imperva’s annual “Bad Bot Report 2020”
•Why bot operators are actively trying to rebrand
•How to enhance security and protect against bad bots with an Advanced Bot Protection solution

The rapid growth of personal data and the simultaneous increase in cyberattacks and breaches is making data security a top priority for businesses around the world driving more stringent data privacy regulations.

The California Consumer Privacy Act (CCPA) which came into effect on January 1, 2020 with regulatory enforcement beginning July 1, is meant to improve privacy rights and consumer protection for residents of California by providing them with the right to know when their personal data is being collected, whether their personal data is being disclosed or sold, and to whom. All businesses that collect the personal data of California residents, even those businesses with no physical presence in the state, must comply with the legislation, and failure to do so could result in severe financial and reputational penalties.

Imperva offers a range of data security solutions to help organizations meet data privacy and protection compliance obligations whether in the Cloud or on-premises.

Join Dr. Edward Amoroso, CEO at Tag Cyber and Terry Ray, Senior VP Strategy for Finance and Healthcare to learn how Imperva solutions support CCPA compliance and many other data privacy regulations.

When it comes to data and databases, security and compliance are essential. Solutions like Amazon Relational Database Service (Amazon RDS) provide built-in security with features including network isolation, data encryption, and automated backups.

Hear Mactores, an Amazon Web Services (AWS) Partner Network (APN) Advanced Consulting Partner, share why it deploys Imperva to provide evidence of compliance and gain visibility of its data for regulated industries. See a demo of how to protect Amazon Aurora MySQL and learn how quickly Imperva Cloud Data Security gets you in command of your data.



Learning objectives:
Quickly achieving compliance using a frictionless SaaS-based monitoring solution
Automatic discovery of databases and classification of sensitive data
Continuous visibility to track threats and data activity
Machine Learning and AI to reduce risk of data loss
Using at-the-ready, correlated reports for audits including HIPAA, PCI, and GDPR

Your business is moving data to the cloud without all the security controls mandated for on-prem. After all, the promised economics and business agility are far too attractive for business leaders to ignore. But, attackers are after data, auditors demand evidence, and Security is still responsible for protecting data. You need to catch up with that data before attackers and auditors find it, and you need to catch up right now.

Join Imperva's experts to learn how to reconcile Security's need for visibility with the business's need for speed and agility - in minutes.

The webinar will include:
- Learn the fast path to getting control of your data already in cloud
- What capabilities you will have to bring to make cloud DBaaS secure and audit-ready
- How business leaders can help mitigate data breaches and prevent audit driven rollbacks
- How cloud-native data security can be frictionless to the business

You will also see a demonstration of Imperva Cloud Data Security protecting AWS Aurora MySQL.

Healthcare organizations have always been a target for cyberattackers who are out to get their hands on valuable PHI (Protected Health Information). In recent years a number of developments have made cybersecurity even more of a priority for healthcare providers.

Regulatory Compliance
Healthcare is one of the most highly-regulated industries in the world with mandates like HIPAA in the US enforcing strict data privacy laws to protect patient data which, if compromised, could potentially impact the patient directly. As a result implementing the right compliance strategies is critical for healthcare providers.

Transformation and Connected Devices
As more and more people rely on apps and connected devices to access healthcare data the threat surface for attackers is rapidly expanding. With such sensitive information at stake, healthcare providers are constantly at risk of a data breach.

COVID-19
Finally during the COVID-19 crisis healthcare providers in the US and internationally have come under increased attacks by bad threat actors attempting to steal intellectual property and cause disruption to the sector at the center of the crisis.

Join Terry Ray, Senior Vice President Strategy for Finance and Healthcare and Imperva Fellow to learn more about how cyber threats to the healthcare industry are evolving and how Imperva Security solutions can protect your assets from the edge to your data to help you comply with the most stringent regulatory requirements.