Name: 2018 Cyberthreat Defense Report
Start: 2018-06-19T08:00:00Z
End: 2018-06-19T08:00:59.000Z
Location: BrightTALK
Rating: 4.29

Gigamon offers a deep observability pipeline that harnesses actionable network-level intelligence to amplify the power of observability tools. This powerful combination enables IT organizations to assure security and compliance governance, speed root-cause analysis of performance bottlenecks, and lower operational overhead associated with managing hybrid and multi-cloud IT infrastructures.

It’s not a matter of “if” but “when” organizations are breached. That’s the premise that Federal agencies operate under and it’s one that would be prudent to follow. With an Assumption of Compromise, it’s assumed that threat actors are currently living off the land (LTOL) using applications and protocols already available in workloads. Why LTOL and similar attacks can go unnoticed is because of a critical gap in traditional logging that is often overlooked. Learn why relying on logs from a firewall or router as the single source of truth is not enough. In this session, we will take a broad look at logging from the perspective of government threat hunting, and how it can be greatly enhanced with network-derived intelligence to make it far more resilient and harder for bad actors to defeat.

The “Assumption of Compromise”: Government Agency Best Practices

Every security organization owns a suite of solutions composed of tools covering endpoints, applications, cloud, and network hardware.  While these tools deliver the functionality promised, threats are still getting through – so we know more work needs to be done. Folks, it’s 2024 and we still don’t know what’s running on our network!  Join us as we walk through: how you can identify critical gaps in your organization’s security posture, the components of a “modern” security posture and finally, how to use network-derived intelligence and telemetry to consolidate tool functions across multiple areas (cloud, observability, security, network) into a single cohesive and proactive security posture.

What Today’s Security Stack Can... and Can’t Do

Enterprise Strategy Group (ESG) research data shows that 83% of organizations are lifting and shifting workloads to the cloud. As companies utilize cloud services for productivity, scale, and modernizing software development, security needs a means of keeping up and effectively securing these hybrid cloud environments. 

However, the complexity of today’s attack surface, new stakeholders involved in security decisions, and limited cloud knowledge in SecOps teams impede effective hybrid cloud protection.

Register for this Fireside Chat to understand how to close the hybrid cloud security gap, with our expert speakers ESG Cybersecurity Practice Director Melinda Marks and Martyn Crew, Senior Director of Solutions Marketing and Partner Technologies at Gigamon. Together, Crew and Marks will cover, alongside rich ESG data:
• Cloud modernization trends 
• Hybrid cloud security best practices 
• AI preparedness: Cyber-adversary advantages gained from AI 
• And the components of Gigamon Deep Observability Pipeline, which provides app monitoring across cloud environments.

Hybrid Cloud Security: Closing the Preparedness Gap & Resolving Top Challenges

Meeting compliance standards for data privacy and security is mission critical. Whether you’re in healthcare, retail, financial services, or in the public sector, data privacy regulations require that all data-in-motion and data-at-rest for cloud applications adhere to strict security standards. However, ensuring compliance for applications running on public clouds has proven extremely challenging... until now.  In this session, we will discuss and demonstrate how organizations apply Gigamon Application Metadata Intelligence to meet and maintain regulatory compliance.

Closing the Data-in-Motion Compliance Gap

Even with encryption, ransomware and other threats can find their way into your environment. While encryption is foundational for security and privacy, adversaries can take advantage of encrypted channels to hide activities within virtual workloads and to traverse laterally across the hybrid cloud infrastructure. Gigamon Precryption™ technology is the gamechanger that gives SecOps teams plaintext visibility into encrypted traffic and lateral movements – without the complexity or overhead of traditional decryption.  This session will go through how Precryption technology reveals hidden threats plus the latest enhancements to this innovative technology.

Applying Precryption™ Technology to See What's Lurking in Encrypted Cloud Traffic

A hybrid cloud infrastructure provides significant benefits in terms of operational agility, efficiency and scalability. However, the management and security of hybrid and multi-cloud environments can be a serious challenge. Join this session to learn how the Gigamon Deep Observability Pipeline and Nutanix’ hyper-converged infrastructure optimizes use of resources to deliver end-to-end visibility; real-time operational insights; fast, precise threat detection, and robust security in even the most sophisticated hybrid and multi-cloud environments.

Enhancing Hybrid Cloud Visibility and Security with Nutanix & Gigamon

Join our opening keynote to hear the latest business and market updates from President and CEO Shane Buckley, followed by an update from Chief Product Officer Michael Dickman on the latest technology innovations to the Gigamon Deep Observability Pipeline, including a peak into the future roadmap. This session will also include the presentation of our 2024 Giga HERO customer awards, recognizing select customers for their ability to better secure and manage their hybrid cloud infrastructure with Gigamon.

Safeguarding Hybrid Cloud Networks for Leading Organizations: Business and Technology Updates

The digital transformation within the public sector and educational institutions calls for an urgent enhancement of technological capabilities and security measures.  

This event will address the unique challenges and opportunities in implementing advanced technologies and robust security systems in public and educational environments. Experts from market-leading vendors will provide insights into the latest tools and strategies for improving service delivery, safeguarding sensitive data, and ensuring compliance with regulatory standards. 

Join this webinar to learn more about Gigamon use cases and the latest technology solutions that cater to the unique needs of your sector while optimizing tool efficiency.

Supercharging Public Sector and Education Technology and Security

Critical infrastructure houses our nation’s most crucial assets, making it a prime target for adversaries. To address this threat, robust cybersecurity measures are necessary. In this panel, we’ll hear how Congress has worked together to pass legislation and policy that bolster our nation’s cybersecurity efforts and safeguard crucial assets. The discussion will shed light on recent incidents involving critical infrastructure, including the recent AT&T outage, and will also highlight the work that remains.

Presenters:
[Moderator] Karen Evans, Managing Director, Cyber Readiness Institute
Slate H. Herman, Counsel, Communications and Technology, Energy and Commerce Committee (Majority)
Johanna Thomas, Counsel, Communications and Technology Subcommittee, House Energy and Commerce Committee

Safeguarding Critical Infrastructure

No agency wants to rip and replace existing solutions that support Zero Trust goals. Integration of existing and complementary capabilities is key to the creation of a unified Zero Trust solution that spans on-premises and cloud infrastructure, applications, and services across the five Zero Trust pillars and three cross-cutting capabilities. In this panel discussion, industry experts will outline how they come together to help agencies fully leverage existing solutions to achieve an ‘assume breach’ mindset, enterprise-wide visibility, and a comprehensive Zero Trust reference architecture.

Presenters:
[Moderator] Travis Rosiek, Public Sector Chief Technology Officer, Rubrik
Kam Amir, Director of Technical Alliances, Cribl
Rizwan Jan, Vice President, Chief Information Officer, Center for Naval Analyses
Tim Jones, Regional Vice President of Systems Engineering, Federal, Forescout Technologies, Inc.
Jason White, Senior Solutions Architect and Technical Strategist, Public Sector, Trellix

Build a Unified, Comprehensive Zero Trust Solution

Use of encryption for network traffic continues to rise, for both good and bad. Today over 85% of malware relies on encryption to hide in plain sight. The need to decrypt and inspect traffic is easy to see and is recommended by The NSA. Deploying actual decryption in a cost-effective and scalable way while meeting privacy and compliance requirements might not have been easy. However, it doesn’t need to be difficult or expensive. 

Gigamon TLS/SSL Decryption offers a centralized, high-performance solution that improves existing security tools by decrypting traffic once and inspecting it many times. Decrypting traffic exiting the network enables command and control detection, preventing data exfiltration and strengthening the company’s compliance stance. By being able to selectively choose what traffic to decrypt and what not to, it becomes possible to engage the right tools to enhance the security posture effectively.  

This webinar is designed to equip security and network architects with knowledge of current decryption trends, known challenges, and recommended solutions by demonstrating real-world use cases.

Practical Advice for Inline and Out-of-Band Decryption

Microsegmentation, like EDR, NDR, and a myriad of other tools, is an important part of an organization’s defense-in-depth strategy. But, like any one of those tools, microsegmentation is not an answer in itself. Join Gigamon Security CTO, Ian Farquhar, and Technology Partner Senior Director, Martyn Crew, as we discuss how to get the most out of your existing or planned microsegmentation investment.  

In this webinar, Ian and Martyn will discuss: 
- The pros and cons of microsegmentation 
- Where microsegmentation fits within a defense-in-depth security strategy 
- How Gigamon can increase the technical effectiveness and ROI of your microsegmentation investment

Getting the Most from your Investment in Microsegmentation

The complexity of hybrid application environments obscures root cause identification hinders proactive incident resolution, and negatively impacts user experience. Organizations need a unified observability solution that delivers full-stack visibility, leverages AI for predictive and prescriptive insights, establishes user-centric Service Level Objectives (SLOs), and generates timely, actionable alerts to maintain optimal service delivery. 

By combining Dynatrace’s automated application and infrastructure monitoring with application metadata and network-derived intelligence from Gigamon, Trace3 created a truly Unified Observability architecture.  

Join our webinar to learn how this innovative coupling helps clients achieve a holistic view across the hybrid estate, allowing operators to efficiently go from issue detection to root cause by leveraging Davis AI and the Dynatrace Grail Data. Asking questions of application telemetry can now be combined with that of deep infrastructure telemetry to remove the limitations in understanding what affects the outcomes our clients desire.

Presenters:
Chris Nicholas, SVP, Cloud Solutions Group, Trace3
Adam Hicks, Practice Director, Cloud Platform Engineering, Trace3
Nishant Rama, Director Solutions Engineering, Dynatrace
Chris Dittert, Strategic Alliances Director, Gigamon

Achieving a Holistic View of What Is Happening in Your Hybrid Infrastructure

“Gaining complete visibility into the network is like lighting up the whole street. When it comes to implementing Zero Trust, this is the best place to start”. 
-- John Kindervag, Creator of Zero Trust 
 
As organizations come to terms with the complexity of designing and implementing Zero Trust policies, procedures and the technologies required to support them, they realize the importance of having visibility into everything that’s happening on the network. This need for visibility is also recognized in the latest iterations of the CISA and DoD Zero Trust models. Gigamon is the visibility foundation for many of today’s most demanding Zero Trust implementations. Join Michael Dickman, Chief Product Officer at Gigamon, to discuss key, real-world Zero Trust issues including: 

What are the key visibility attributes needed for Zero Trust success? 

Do logs provide the visibility you need? 

How do you verify and establish trust in your Zero Trust implementation?

Network Visibility is the Foundation of Zero Trust

Feeding traffic from AWS to security and performance monitoring tools can become very expensive as environments scale and deploy NDR/XDR sensors. Organizations can be overwhelmed by the surprisingly high costs of AWS, especially when load balancers are needed to support large amounts of volume. 

But are there alternatives to using native AWS tools to access cloud traffic? Alternatives that might be more cost-effective and easier to deploy and manage?   

Join us to learn how the Gigamon Deep Observability Pipeline provides architectural alternatives to native AWS tools that can eliminate the costs of network gateways and load balancers. Jim Mandelbaum, Gigamon Field CTO and Ryan Mahoney, Product Marketing Manager, will discuss alternatives ways to acquire, broker, and transform AWS traffic that provide a significantly more cost-effective approach without compromising the quality of the data being acquired.

Design a Cost-Efficient AWS Visibility Architecture

As agencies forge ahead in their cloud security and resilience journeys, they must consider what gaps have been filled and what remain to cover. Many turn to frameworks such as the five pillars of Zero Trust in CISA’s Zero Trust Maturity Model. In this panel, agency leaders will share how they incorporate these pillars – identity, devices, network, data, and applications and workloads – into their everyday cloud security frameworks, and where they see the most important remaining gaps and risks across hybrid infrastructure.

Presenters:
[Moderator] Michael Dickman, Chief Product Officer, Gigamon
Beth Cappello, Deputy Chief Information Officer, Department of Homeland Security
Guy Cavallo, Chief Information Officer, Office of Personnel Management
Peder Jungck, Vice President and General Manager, BAE

Zero Trust in Multi-cloud Environments

Les outils basés sur les logs rendent presque impossible pour les équipes CloudOps et DevOps de localiser rapidement les problèmes d'expérience client et de performance. Bien que les logs soient importants pour comprendre ce qui s'est passé sur le réseau, ils ne peuvent pas fournir la visibilité Nord-Sud et Est-Ouest en temps réel qui est nécessaire pour une surveillance et un diagnostique efficace. Découvrez comment l’observabilité avancée pour les flux de données de Gigamon fournit des informations provenant du réseau aux outils d'observabilité et de SIEM basés sur MELT (Metrics, Events, Logs, and Traces) tels que Dynatrace et Splunk.

Observabilité avancée: Une expérience utilisateur supérieure des applications

L'observabilité apporte une valeur ajoutée considérable à l'entreprise, mais les organisations qui la mettent en œuvre souffrent souvent d'une accumulation de données et d'une visibilité incomplète des applications du réseau. Cette session se concentrera sur la façon dont Gigamon améliore la valeur des outils SIEM et d’Observabilité en ajoutant de l’intelligence provenant du réseau et plus encore à l'ensemble des outils.

L’apport de Gigamon à l’observabilité

New research from CyberEdge’s 2018 Cyberthreat Defense Report shows that in spite of increasing their security budgets, companies are finding that there is too much data even for new tools to analyze, not enough skilled IT security professionals and little confidence in current investments. Sign up for this webinar to gain key insights into the cyberthreat landscape and how to protect your organization.

Attendees will learn how to:

- Deal with cyberthreat headaches such as increased breaches, vulnerabilities and encrypted traffic.
- Reduce incident response and remediation time with automation.
- Find products that use automation to minimize their dependency on skilled security personnel.

Now in its fifth year, this report provides a comprehensive review of the perceptions of 1,200 IT security professionals representing 17 countries and 19 industries. Register now to learn how your colleagues plan to defend against cyberthreats!

2018 Cyberthreat Defense Report

IT Security

Cyber Security

Network Security

Cyber Threats

Cyber Attacks

Incident Response

Incident Resolution

Threat Analysis

Threat Detection

Threatscape

Welcome to the virtualization community on BrightTALK! Whether it affects servers, storage, networks, desktops or other parts of the data center, virtualization provides real benefits by reducing the resources needed for your
infrastructure and creating software-defined data center components. However, it can also complicate your infrastructure. Join this active community to learn best
practices for avoiding virtual machine sprawl and other common virtualization pitfalls as well as how you can make the most of your virtualization environment.

Virtualization

Are you an IT service management professional interested in developing your knowledge and improving your job performance? Join the IT service management community to access the latest updates from industry experts. Learn and share insights related to IT service management (ITSM) including topics such as the service desk, service catalog, problem and incident management, ITIL v4 and more. Engage with industry experts on current best practices and participate in active discussions that address the needs and challenges of the ITSM community.

IT Service Management

Cloud computing has exploded over the past few years, delivering a previously unimagined level of workplace mobility and flexibility. The cloud computing community on BrightTALK is made up of thousands of engaged professionals learning from the latest cloud computing research and resources. Join the community to expand your cloud computing knowledge and have your questions answered in live sessions with industry experts and vendor representatives.

Cloud Computing

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

The data center management community focuses on the holistic management and optimization of the data center. From technologies such as virtualization and cloud computing to data center design, colocation, energy efficiency and monitoring, the BrightTALK data center management community provides the most up-to-date and engaging content from industry experts to better your infrastructure and operations. Engage with a community of your peers and industry experts by asking questions, rating presentations and participating in polls during webinars, all while you gain insight that will help you transform your infrastructure into a next generation data center.

Data Center Management

Enterprise applications have become a crucial piece of infrastructure for many businesses. The enterprise applications community on BrightTALK features the latest insights in enterprise application integration, enterprise application architecture and EAS software. Join the community to gain access to thousands of videos and webinars presented by recognized enterprise information systems experts and arm yourself with the knowledge you need to succeed.

Enterprise Applications

Join thousands of engaged IT professionals in the application management community on BrightTALK. Interact with your peers in relevant webinars and videos on the latest trends and best practices for application lifecycle management, application performance management and application development.

Application Management

Network infrastructure professionals understand that a reliable and secure infrastructure is crucial to enabling business execution. Join the network infrastructure community to interact with thousands of IT professionals. Browse hundreds of on-demand and live webinars and videos to learn about the latest trends in network computing, SDN, WAN optimization and more.

Network Infrastructure

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

2018 Cyberthreat Defense Report

Presented by

About this talk

More from this channel