Name: A defense-in-depth approach to defending web apps
Start: 2023-06-14T05:30:00Z
End: 2023-06-14T05:30:50.000Z
Location: BrightTALK
Rating: 5

Cloudflare is a global network designed to make everything you connect to the Internet secure, private, fast, and reliable. We offer Application Security, CDN, DNS, DDoS Protection, SASE, Zero Trust, and Developer Services. Find out how we can help to build a better Internet. 

Cloudflare sees up to 61 million requests per second, meaning we have an unprecedented view into Internet trends like application attacks and API traffic, and automated bot activity. We have put that incredible visibility to use by profiling a year of attacks targeting the applications that run business.

Join Cloudflare Field CTO Trey Guinn and Product Marketing Director, Dan Gould, as they discuss key attacks that organizational security postures must account for such as: 

Most commonly mitigated attacks
The rise of brute force account takeover
How DDoS attacks compares to application attacks
The role of bad bots vs. verified bot traffic
Where API traffic fits in - and how attackers target APIs

How Applications are attacked - A year in application security

Join Alex Krivit, Product Manager at Cloudflare, as he sits down for a Fireside Chat with Troy Hunt, the founder of Have I Been PWned. Hear how Cache Reserve  is helping Troy serve over 99% of requests from cache.

Developer Speaker Series: Fireside chat with Troy Hunt and Alex Krivit

Cloudflare’s Zero Trust platform helps organizations of any size secure hybrid work. We enable technology leaders to improve their teams’ productivity, reduce cyber risk, and improve tech efficiency as they navigate their security modernization journey toward a Security Service Edge (SSE) architecture.

Cloudflare recently got recognized in the 2023 GartnerⓇ Magic Quadrant™ for Security Service Edge (SSE) report as one of only 10 vendors acknowledged.

We believe this report recognition upon such recent entry into the SSE market validates Cloudflare’s commitment to continue advancing our Internet-native Zero Trust platform. Our track record of quick innovation will help us continue to push through the noise in this new and evolving security market to help our customers accelerate their digital maturity. And we’re just getting started.

Join this webinar to hear our product leaders discuss the future of Cloudflare’s Zero Trust platform and where we are headed next.

Cloudflare's vision for Security Service Edge (SSE) and Zero Trust

Cyber Weekend delivers plenty of holiday cheer for customers and online retailers alike. Last year it delivered record revenues topping $68 billion in the US, and as much as $281 billion worldwide. 

A reliable, fast, and fair user experience is essential for a successful Cyber Weekend. However, many factors can stand in the way. Traffic spikes — a common occurrence in the holiday season where too many users can overwhelm your applications and infrastructure with legitimate traffic — can lead to slow performance or downtime. Add to that malicious automated traffic, from bots like Grinch bots that can hoard inventory, and the impact to your business outcomes is only made worse.

When used together, Cloudflare Bot Management and Waiting Room not only protect your site reliability but also enhance your customers’ shopping experience. Discover how you can safeguard your business from overwhelming traffic spikes and greedy Grinch bots, ensuring a smooth and successful holiday season.

In this webinar, you will learn how Cloudflare:
- Protects your services from sudden traffic spikes to ensure a fast and reliable end-user experience
- Prevents bad bots from hoarding inventory and overwhelming your site
- Can maximize your savings with our limited time offer

Strategies for handling traffic spikes and bot attacks

Application programming interfaces (APIs) drive every aspect of business today — and their influence will only continue to grow--as will the risks they pose to business. Join us as John Engates and Saikrishna Chavali of Cloudflare explain what today’s business leaders need to understand about the benefits — and security concerns —associated with APIs. In this free one-hour webinar, moderated by business and technology journalist Wade Roush, you’ll learn:

● What APIs are.
● How APIs affect everything from transactions to mobile apps to supply-chain
relationships.
● What you need to know about potential data exposure from APIs.
● What to ask your security team about mitigating API risks.

APIs: Understanding the Business Benefits – and Risks

Leaders in cybersecurity, infrastructure, and IT are invited to join this annual roadshow featuring a critical topic today – Everywhere Security. We know that companies like yours are trying to drive an agenda of transformation while reducing risk, securing your hybrid workforce and managing a multi-cloud environment. All the time, threats are relentless, the talent shortage is real, and vendor sprawl means costs and complexity are spiraling out of control.

- Participants can expect a stimulating discussion in a closed, confidential environment.
- Attendance is by invitation only and complimentary.
- Registration is limited to a certain number of guests per event.

Cloudflare's "Everywhere security" Roadshow

Whether you call them browser supply chain attacks, 3rd party dependency attacks, Magecart style attacks, or anything else, compromised JavaScript dependencies are hard to detect, even with the best security teams. Compromised dependencies, such as in an analytics plugin, a chatbot, or a credit card payment tool, can compromise your users’ security and data – not to mention run afoul of regulations like PCI DSS compliance. 

Join this session to see our client-side security in action and learn how to integrate defense against browser supply chain attacks into your app security posture to:

- Monitor and track 3rd party scripts loaded in your web apps 
- Alert on changes to those dependencies 
- Comply with client-side security requirements in regulations like PCI DSS

Defending against client-side browser attacks

As a go-to productivity suite for many businesses, Microsoft 365 delivers excellent native security defenses to help teams collaborate and communicate safely. 

Over the years, built-in security for SaaS apps has improved to block some of the more common threats targeting organizations. However, bad actors are simultaneously evolving to become more evasive. Today’s attacks are increasingly more targeted and sophisticated with the ability to bypass native app security functionality. 

In this webinar, learn how layering a Zero Trust approach to enhance your Microsoft 365 security can proactively stop attacks and significantly minimize cyber threats like phishing, data exfiltration, account takeover, and more.

Join this session to:

Deep dive into how this joint solution targets Microsoft 365 security challenges and threats
Study the customer & vendor shared responsibility model for Microsoft security
Understand how Cloudflare Zero Trust services such as Area 1 Email Security, CASB, and Access can prevent, block, and isolate threats across Microsoft 365

Enhance your Microsoft 365 security with Cloudflare Zero Trust

Employees, applications, and infrastructure exist everywhere today – across geographies, cloud environments, and hybrid work settings. Managing this sprawling attack surface is challenging, and the wrong IT and security strategy can add complexity, inhibit productivity, and ultimately hold your business back.

In response, many modern enterprises are shifting their IT and security controls to a unified cloud platform that can deliver consistent, fast, and rigorous protections everywhere. Cloudflare helps customers reimagine their security approach to protect employees, applications, and networks – and is on that same strategic journey itself.

Join senior Cloudflare leaders Maha Pula (VP, Global Head of Solutions Engineering) and Jacqueline Keith (Senior Manager, Security Engagement) as they discuss:
- Common challenges and pitfalls organizations face when modernizing security
- Lessons learned from Cloudflare’s own security evolution
- The advantages of consolidating security onto a single platform, powered by an intelligent global network

Everywhere Security: How to secure employees, applications, and networks

With phishing campaigns still proving to be one of the top methods for breaching an organization, threat actors are increasingly targeting individual users through multiple channels of communication (email, web, SMS, and more). These multichannel threats deploy complex and evasive methods that bypass traditional security controls. The goal is simple —  trick users into clicking malicious content, paying fraudulent invoices, or divulging sensitive information. 

Multichannel phishing is emerging as a preferred method for exposing users to a wide range of threats. The rapid adoption of hybrid work has fueled this trend as well, providing additional opportunities for threat actors to capitalize on digital channels that support the productivity of remote workers.

In this webinar, we’ll go in-depth on why multichannel phishing attacks are so dangerous, how users are being exploited through their use of email and web browsing, and what can be done to insulate users from these malicious threats.

Join this session to learn more about:

- Multichannel phishing campaigns
- How attackers are exploiting users through email and web browsing
- Protecting against multichannel phishing attacks – without disrupting user productivity

360 Degrees of Protection: Combating the Rise of Multichannel Phishing

Cloudflare and Kyndryl present Network Transformation Insights. Cloudflare and Kyndryl leaders tackle the current and future state of the global modernization market: Navigate complex, multi-cloud networking, augment staff capabilities, improve agility, reduce costs, and enhance security.

Cloudflare Kyndryl present Network Transformation Insights

Moving to the cloud was billed as a way to save companies money, but the reality is that cloud spend is filled with hidden costs, and as your company grows, so does your cloud bill. Excessive cloud bills hinder innovation, limit architectural decisions, and divert money away from other areas needing investment. You soon learn that costs slowly creep up as your company scales due to the need for more seats or increased egress fees. 

Join this webinar as we discuss various topics related to cloud spend including: 

- How to scale your business without scaling your cloud costs 
- What egress fees are and how you can avoid them
- How you can avoid vendor lock-in and empower multi-cloud for your business

How to lower your cloud spend

As the concept of Zero Trust has gained momentum, organisations have embarked on initial projects to enhance their security posture. These projects often involve implementing multi-factor authentication (MFA) for critical applications or transitioning from VPNs to more advanced solutions. 

While Zero Trust conversations often focus on network security, we believe it is essential to address email security as well. Cyber risks associated with email attacks continue to pose significant threats to organizations. In this webinar, we will shed light on the critical role of email security as a vital component of a comprehensive Zero Trust strategy. 

Join this webinar as our Zero Trust experts discuss and demonstrate live what you need to do to go beyond the initial steps and projects to build a Zero Trust platform that provides the flexibility to secure hybrid work holistically:

- Extend beyond VPN augmentation with ZTNA and remote browser for an extra layer of security
- How to protect users and data with a Zero Trust approach
- Reduce cyber risk through email security, which is essential in the Zero Trust conversation

Accelerate your journey to Zero Trust with Email Security

Uploaded_Video_No_Title

It’s a new year and DDoS attacks continue to impact the availability of critical services. Cloudflare mitigated the largest DDoS attack on record launched from new VPS-based botnets — a change from traditional IoT botnets. We also saw pro-Russian hacktivist groups launching multiple cyber attacks against Western targets. And ransom DDoS attacks continue to plague organizations large and small.

Join this session to learn key trends from our Q1 2023 DDoS trends report and the key defenses you need to ensure business continuity through what is expected to be another busy year for DDoS attacks.

The State of DDoS Attack - Q1'2023

In this live webinar, our security experts will show a comprehensive demo on identifying risk/gaps within your business process and how to improve your security postures and reduce attack surface area by integrating Cloudflare's application security capabilities to your technology stack. 

The agenda includes:

Using fictional business to show how we can protect the different layers of the business
Risk identification during user’s journey
Integrate and protect with Cloudflare’s application security capabilities
The attacks that will be covered in the demo include: DNS Spoofing, DNS DDoS, L7 DDoS. L7 Vulnerabilities, Third-party scripts/tools 

The Cloudflare solution that will be demostrated involved: API Shield, Zaraz, DNSSEC, WAF (L7 Managed Rulesets, Leaked Credentials Check), Page Shield

A defense-in-depth approach to defending web apps

API Security

Third-Party Scripts

Bot Management

App Security

DDoS

IT Security

DDoS Attacks

Website Security

Bots

Cloud computing has exploded over the past few years, delivering a previously unimagined level of workplace mobility and flexibility. The cloud computing community on BrightTALK is made up of thousands of engaged professionals learning from the latest cloud computing research and resources. Join the community to expand your cloud computing knowledge and have your questions answered in live sessions with industry experts and vendor representatives.

Cloud Computing

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

The data center management community focuses on the holistic management and optimization of the data center. From technologies such as virtualization and cloud computing to data center design, colocation, energy efficiency and monitoring, the BrightTALK data center management community provides the most up-to-date and engaging content from industry experts to better your infrastructure and operations. Engage with a community of your peers and industry experts by asking questions, rating presentations and participating in polls during webinars, all while you gain insight that will help you transform your infrastructure into a next generation data center.

Data Center Management

The application development community features top thought leadership focusing on optimal practices in software development, SDLC methodology, mobile app development and application development platforms and tools. Join top software engineers and coders as they cover emerging trends in everything from enterprise app development to developing for mobile platforms such as Android and iOS.

Application Development

Network infrastructure professionals understand that a reliable and secure infrastructure is crucial to enabling business execution. Join the network infrastructure community to interact with thousands of IT professionals. Browse hundreds of on-demand and live webinars and videos to learn about the latest trends in network computing, SDN, WAN optimization and more.

Network Infrastructure

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

A defense-in-depth approach to defending web apps

Presented by

About this talk

More from this channel