Name: SANS-Webinar-Real-World-Implementation-Deception-Technologies
Start: 2020-02-19T18:40:00Z
End: 2020-02-19T19:40:34.000Z
Location: BrightTALK

Acalvio provides Advanced Threat Defense (ATD) solutions to detect, engage and respond to malicious activity inside the perimeter.  The solutions are anchored on patented innovations in Deception and Data Science.

Join our webinar to learn about the new integrated Acalvio Technologies Deception + Verizon MDR offering to detect and mitigate state-of-the-art, zero-day ransomware threats. Hear about advanced ransomware strains like Maze, Ryuk and REvil, that leverage APT style tactics and techniques that attackers use to target enterprises.

Countering Zero-Day Ransomware: Deception + MDR

Join us on this Webinar where we will show you how effective Next Gen Deception is in countering cyber threats.

The intensity, volume and success of breaches is impacting South African organisations almost on a daily basis. Malware and specifically Ransomware is a difficult breach vector to detect before it is too late. On gaining a foothold in your network, Ransomeware will (much like human hackers) use automation to probe your network, engage in propagation, establish CnC channels and execute when ready to do so. It is thus imperative that suspicious activity associated with the malware is detected before execution. Effective next gen fluid deception is exceptionally powerful in detecting this activity before it is too late. It does this by using AI to understand your network, your assets and your standards and then deploying hundreds of decoys and potentially thousands of lures and breadcrumbs across your IT estate in a matter of hours. To propagating malware and human hackers, these fake assets are indistinguishable from your real assets and thus when they scan a decoy or try to connect to it, you are immediately alerted of their presence.  The use of high interaction decoys then “engage” the malware or hacker to glean more intelligence on their modus operandi, intention and approach so that you can shut them down before execution.

Zero Day Ransomware wreaks havoc in SA networks: Combat it with Deception

Join our webinar to learn about the new integrated Acalvio Technologies + CrowdStrike offering to detect and mitigate state-of-the-art ransomware threats. Hear about advanced ransomware strains like Maze, Ryuk and REvil, that leverage APT style tactics and techniques to target enterprises.
Presented by Janani Nagarajan, CrowdStrike Sr. PMM Strategic Partnerships

Discover how:
-Modern ransomware attacks have evolved beyond data encryption, backup deletion to now include data exfiltration and data extortion.
-State-of-the-art ransomware like Maze and Ragnar Locker leverage deception to go around security layers in their campaign.

Learn how:
-The combination of Deception Technology + EDR enables precise detection of both known and unknown ransomware.
-This unique integrated offering enables automated, real-time remediation of advanced zero-day ransomware threats.
-This combination protects employees and their laptops from ransomware threats even when employees are in a WFH (Work From Home) model.

Effectively Combating Zero-Day Ransomware: Deception + EDR

The use of deception technology designed to throw off stealthy attackers from real assets and gather intelligence about how they operate is gaining ground in the enterprise. Enterprise Management Associates in 2019 conducted a research project to gauge interest in this evolving new defense and uncover deception technology usage trends and advantages it delivers that are unique in the market. Join Paula Musich, a research director in the IT Security and Risk Management practice at EMA, for a webinar that will explore the results of this study.  The webinar will highlight:
•Advantages such as more accurate detection of attackers, a dramatic decrease in dwell time for users, and greater understanding of attackers’ methods
•Use cases
•Expectations of those looking to adopt deception technology

Decoys, Lures & Breadcrumbs: Deception Technology Turns the Tables on Attackers

This recorded webinar covers:

1. What deception technologies are all about
2. How deception technologies can assist with common attack types, including account hijacking, human error, vulnerable applications and insider threats
3. How organizations can implement and automate deception technologies through a SOAR or SIEM
4. What open source tools are available to assist organizations in their implementation initiatives

SANS - Webinar - Implementers Guide to Deception Technology

Deception-based solutions can provide a wealth of information about how adversaries behave as they attempt to complete their mission. Depending on the level of engagement organizations desire to setup in their deception solution, information gleaned can include basic network connection information or every keystroke, command and action taken when a system is accessed. Understanding where in the attack life-cycle your deception information is coming from is critical to knowing how to utilize that information to strengthen your SOC / IR Operational Workflows. This webinar will discuss the types of information that can be gathered by Deception Solutions based on different levels of engagement and how that information can be used in the most effective manner with your Threat Intelligence and Security Analytics platforms.

About the Speaker:

John Bradshaw, Sr. Director, Solutions Engineering at Acalvio Technologies, has more than 25 years of experience in the Cyber Security industry focusing on advanced, targeted threats. He held senior leadership roles at Mandiant, ArcSight, Internet Security Systems, Lastline, and UUNET.

Decoding the Matrix: Deception-Borne Threat Intelligence

TAG-Cyber's Ed Amoroso Interviews Acalvio's John Bradshaw about advanced threats, deception and more.

TAG-Cyber's Ed Amoroso Interviews Acalvio

Three minutes. In general, front-line security operations analysts have three minutes to evaluate an alert on their front pane of glass and determine if it warrants further investigation or can be dismissed as "not impactful to the organization". Your analysts must be right every single time in order to prevent a breach that could cost millions of dollars, the adversary - they only need to be right one time. 

This session will illustrate: 

-  How SOC / IR teams can utilize high-fidelity alerts such as those generated by Deception-based solutions.
-  Power of correlation and data analytics to reduce the time it takes to answer basic triage questions on an alert.  
- How to develop actionable visualizations that improve the hunt for adversaries in your network.

Three Minutes Until the Apocalypse

The volume and frequency of cyber-attacks makes it impossible for security analysts to use manual threat analysis to keep up with a rapidly changing threat landscape. 

Innovations in artificial intelligence (AI) now make it possible to automate mundane security operations, and provide security analysts with access to large data sets. The benefits are significant: analyst time is freed-up, and they have access to better information enabling smarter, faster decisions about how to continually improve the security posture of their organization. 

Join this Q&A panel on how AI can help improve your organization's overall security.

Speakers: 
- Chris Roberts, Chief Security Architect, Acalvio 
- Chris Morales, Head of Security Analytics, Vectra 
- Vikram Kapoor, Co-Founder and CTO, Lacework
- Willy Leichter, Vice President of Marketing, Virsec﻿

Will Artificial Intelligence Strengthen Your Security Stance?

Recent cyber attacks and data breaches clearly show that traditional perimeter-based information security tools are ineffective against ransomware attacks, insider attacks, multi-stage attacks, and APTs. 

Cyber criminals have crafted tools and devised techniques that enable them to evade detection by traditional security tools. Also, even if real alerts are triggered, they can either get lost among a large number of false alerts or lost in a deluge of alerts, resulting in very low signal/noise ratio. 

Deception provides an alternative tool to traditional tools with nearly 0% false positive rate to detect, engage, trap and remediate inside-network attacks. Furthermore, by fusing deception with AI, one does not need to boil the ocean to detect anomalies in raw data. Instead anomalies are surfaced itself when an attacker bumps into the deceptions. Using AI, deception alerts are correlated with other data sources to provide actionable insights about the adversary profile, lateral movements and attack tactics. In this talk, we share our work on the fusion of deception and AI for active defense.

Fusion of Deception and AI for Active Defense

This session will discuss the ongoing problem of identifying attackers who have successfully evaded prevention technologies such as firewalls, IPS and antivirus. It will focus on deception technology and its practical approaches to quickly detecting attackers already inside your network. Special attention will be given to working with SIEMs to validate alerts, as well as incident response and forensic procedures.

Detecting Attackers Within Your Networks Using Autonomous Deception

Agentless Defense Against Ransomware with Splunk and Acalvio

Agentless Defense Against Ransomware

- Broadcast LIVE from Las Vegas during Black Hat 2017 -
As a society, we continue to focus on the capabilities that new technological products and services bring to bear, leaving the security - or rather, the safety - conversation for a later date and time… if at all.

Why is this? Perhaps it’s because we don’t care. Or, perhaps it’s because we don’t understand how things work. Or, maybe it’s because we don’t know all the technical mumbo jumbo. Or, it could just be that we expect “someone else” to take care of it for us. For example, every car has a seat belt, right? We don’t have to ask for the car dealer to add seat belts for us and there really aren’t different types of seat belts available in the commercial car arena. Cars just come with seat belts - period. We expect them to be there - even if some people choose to not wear them.

Regardless of the reason(s) behind the lack of conversation surrounding cybersecurity, we should all be able to agree on one simple fact: we use these new gadgets and services completely unfettered - with little to no regard to the risks we face for our privacy and even our safety.

Attend this session to gain the initial knowledge necessary by:
- Learning to ask is this thing secure?
- Understanding how or why it is or isn’t safe to use.
- Identifying your role in your own cyber safety and that of those around you.

It’s time to open our eyes and become aware of our surroundings. Join us to become aware.

Moderator:
- Debra Farber, Host of The Privacy Pact, ITSPmagazine

Panelists:
- Chris Roberts, Chief Security Architect, Acalvio Technologies
- Dr. Christopher Pierson, CSO and General Counsel, Viewpost
- Arun Vishwanath, Associate Professor at SUNY Buffalo & Black Hat Presenter

Power To The People - Knowledge Is Power

This presentation will cover some Practical Applications of Deception and use cases with examples from professor Mohammed Almeshekah, PhD from Purdue and MSc from RHUL. He is currently an assistant professor at KSU and actively consulting. He has worked with Google's Chrome security team, Firefox, and published dozens of papers and chapters in security, as well as built a number of tools.

Teaching Computers to Lie to Defend Themselves

Join this interactive Q&A session and learn the facts about the recent NotPetya attack on the Ukraine and the collateral damage it caused by crippling large businesses and organizations worldwide. 

Topics that will be discussed during this live Q&A panel will include:
- How is NotPetya different from Petya and Wannacry?
- Timeline of the attack
- Impact and aftermath
- What's next? How can companies better protect their data against similar attacks in the future?

Moderator:
- Vincent Tocce of the Vince in the Bay Podcast

Speakers:
- Chris Roberts, Chief Security Architect at Acalvio
- Jay Beale, COO & CTO of Inguardians
- John Bambenek, Threat Systems Manager at Fidelis Cybersecurity

NotPetya: Wiper or Ransomware & How to Protect Yourself

Cyber Deception Intro

Fintech may still be in its early stages, but it's seen tremendous growth and is expected to see global investments exceed $150 billion in 2017. With the proliferation of mobile apps, cybersecurity is extremely important. Trust is a key difference maker for customers, so fintech companies need to ensure that their sensitive client information stays secure. 

Join this panel roundtable of cyber security experts as they discuss:
- The top cyber threats financial institutions are facing
- Ransomware, data loss & BCDR
- Mobile banking apps and security vulnerabilities
- Recommendations on improving security and establishing consumer trust

Speakers:
- JP Bourget, CSO of Syncurity
- Ted Eull, VP Privacy and Risk at NowSecure
- RJ Gazarek, Product Manager at Thycotic
- Jason Kent, CTO of AsTech Consulting

Trends in Fintech Security - Mobile Payment Apps, Risks & Cybersecurity

Deception technologies are on the forefront of the battle to secure an organizations digital assets. Such technologies build on top of traditional detection technologies, which focus on finding evil, to uncover attacker behaviors that avoid looking malicious to penetrate organizational defenses. But how does that work in real life?

In this webcast, attendees will learn:

What deception technologies are all about
What types of technologies are available
How deception technologies can assist with common attack behaviors, including account hijacking, exploiting human error and vulnerable applications, and more advanced threats
How organizations can implement Acalvios ShadowPlex to leverage deception technologies and protect their assets

SANS-Webinar-Real-World-Implementation-Deception-Technologies

SANS

Deception Technology

Deception

Cyber Security

Security

Cyber Incident Response

Cyber Defence

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

Network infrastructure professionals understand that a reliable and secure infrastructure is crucial to enabling business execution. Join the network infrastructure community to interact with thousands of IT professionals. Browse hundreds of on-demand and live webinars and videos to learn about the latest trends in network computing, SDN, WAN optimization and more.

Network Infrastructure

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

SANS-Webinar-Real-World-Implementation-Deception-Technologies

Presented by

About this talk

More from this channel