Name: Lunch & Learn: Exposing Ransomware-as-a-Service
Start: 2022-02-01T12:00:00Z
End: 2022-02-01T12:46:09.000Z
Location: BrightTALK

Gigamon provides active visibility into physical and virtual network traffic, enabling stronger security and superior performance. Gigamon’s Visibility Fabric and GigaSECURE, the industry’s first Security Delivery Platform, deliver advanced intelligence so that security, network and application performance management solutions in enterprise, government and service provider networks operate more efficiently and effectively.

The Covid-19 pandemic has forced communications service providers (CSPs) to alter how they operate their networks and deliver solutions to their customers. Digital transformation was already a strategic priority, but the pandemic has increased its importance and clarified the benefits: improved customer experience, reduce risk and costs and increase profits.
We have observed increased demand for both network volumes and availability, and this has placed greater emphasis on network visibility and security and a core challenge will be transitioning to a virtualized, service-based architecture whilst minimizing risks and costs.
During this Summit, we will discuss how network providers can optimise the cost of monitoring and securing their networks for a 5G future. How to optimise and shape the data traffic to effectively understand their customers and enable new digital services for growth.

Leveraging traffic shaping and monitoring to optimise network performance

You have all the cloud monitoring and security tools in place. Would you agree that it’s still difficult to: 
 - Have complete visibility and eliminate blind spots, like hybrid cloud application activities and container communications, and discover and monitor unmanaged hosts/apps and IoT? 
 - Provide comprehensive security, such as detect and respond to network-based threats, enumerate hosts on the hybrid cloud network, and support shared responsibility and Zero Trust frameworks, particularly as it relates to network traffic? 
 - Detect unwanted activities, such as shadow IT, crypto-mining, and P2P and torrent traffic? 
 - Comply with network-related compliance and SLOs, such as extending on-premises policies, controls, reports, and practice knowledge to cloud apps? 

Obviously, no security posture is 100% attack-proof. However, bringing the “network perspective” to hybrid-cloud workloads makes it easier to address the challenges above, and more. 

At this session we will dive into several use cases and we will demo the yet untapped advantage the network perspective brings to cyber defense.

Your Cloud Workloads Are Fully Secure, Right?

Gigamon recently co-hosted a thought leadership panel for cable and service providers with CIO Talk Network.
 
With millions of subscribers relying on service and cable providers for their entertainment and business needs, the security and reliability of the networks are critical. Any network downtime means enormous financial losses and dissatisfied customers. Evolving ransomware and other cybersecurity threats are only making matters worse.
 
So how are industry leaders shaping their security strategies, rethinking resiliency processes, and leveraging best practices to manage such menacing cyberthreats and ensure compliance proactively?

Creating a Winning Cyberthreat-Ransomware Management Strategy

Virtualization remains at the forefront of the data center, and is extending into the cloud to enable true hybrid and multi-cloud environments. These environments aren't an island and demand an ecosystem of solutions to perform at the level demanded by a company's applications.

To ensure those applications perform well and are highly available across the company, smart companies are leveraging innovative new technology, efficiently integrated into their VMware infrastructure.

The Tools that Supercharge a VMware Environment

Zero trust is increasingly a guiding principle for modern cybersecurity programs. With an ESG survey finding that for 51% of enterprise respondents it’s the top driver of adopting zero trust - ahead of reducing the number of cybersecurity incidents and supporting Digital Transformation - there’s no denying that zero trust is now central to cybersecurity modernization. 
You may ask: ‘Weren’t organizations starting to implement zero trust before the pandemic?’ While that’s certainly true, the leap in adoption of cloud services since March 2020, and the increased dependency on cloud infrastructure, has undoubtedly changed the game. As a result, it’s time to both reexamine zero trust’s applicability for securing growing cloud footprints and increase your knowledge of new zero trust use cases. In episode 3 of Revisiting Threat Models in the Cloud Era Doug Cahill, Senior Analyst at ESG, is teaching organizations how to apply zero trust in new cloud infrastructures and why it’s so critical today. 

Make sure you join and learn:
- What ESG’s definition of zero trust is
- What the scope of zero trust is and essential zero trust use cases
- How zero trust is different to default deny and the way enterprises have treated access previously
- If ZTNA is replacing VPNs
- What the role of monitoring in a zero trust approach is
- And more

[Ep.3]  Zero Trust for the Cloud Era: New Use Case Insights

The world is constantly changing and now more than ever, already pushed-to-the-brink IT departments are being called upon to help their organizations continue their transformation efforts, to reshape the end user computing experience, and to ensure that IT is secure, compliant, and financially sustainable. Legacy approaches to modern problems may still have a place, but as IT leaders and professionals work to ensure that their platforms are suitable for new needs, it's clear that thinking needs to revolve around supporting a new generation of IT and business.

Enterprise technology vendors are working hard to help their customers bring sanity to the madness through the development of solutions intended to solve critical business problems. Today’s enterprise IT solutions are supercharging the traditional IT organization with next-generation innovations, making what was seemingly impossible, possible.

Join us for this replay of an ActualTech Media Spring Summit presentation on Profiling and Posturing your IoMT Network. Learn how to gather accurate, reliable and timely information with little to no human intervention using the Gigamon Visibility Analytics Fabric Solution.

Profiling and Posturing your IoMT Network

Think your backups are a panacea for ransomware defense? Think again. Traditional backups are no longer enough and despite ransomware being a popular business model for cybercriminals for years, it’s gaining relevance with supply chain attacks, and big game hunting - attacks on enterprises - are increasing. Graff, JBS, Colonial Pipeline and software manager Kaseya are just some of the businesses held to ransom recently. With Colonial paying $4.4 million and JBS $11 million, it’s more essential than ever that CISOs are clued up on the latest in threat intelligence as enterprise ransomware attacks become more targeted and less ‘spray and pray’. 

This rise of ransomware is coupled with the shift from remote to hybrid working, which has seen the number of remote endpoints and intruder attack space both increasing exponentially. It’s the perfect storm, and organizations must know how to effectively battle ransomware by planning ahead and preparing for the inevitable. In episode 2 of Revisiting Threat Models in the Cloud Era, Doug Cahill, Senior Analyst at ESG, is sharing his expert opinion on exactly how to do that. 

Make sure you tune-in and learn:

- New insights into the shift to enterprises being attack targets and why
- Why ransoms have increased and what the role and relevance of cybersecurity insurance is
- Essential information about the threat actors themselves and how have they changed their approach to monetizing extortion
- Specific best practices for ransomware cybersecurity that businesses must implement
- And more

[Ep.2] The Rise of Ransomware: Planning for When, Not If

Fingers crossed, life is starting to get back to normal, and the winning streak cloud-based services saw as a result of the pandemic shows no sign of slowing down as businesses move to embrace hybrid and ‘work from anywhere’ models. Yet despite the numerous benefits of the rapid migration to cloud - collaboration where previously there were silos ranking near the top - the stark reality is that cyber security for the cloud era is facing a readiness gap. In fact, a recent ESG survey found that despite the benefits of cloud migration and adoption, 88% of enterprise respondents believe that their cybersecurity initiatives need to evolve in order to secure their cloud-native applications and use of public clouds.

87% of respondents to the same survey also fear that the differences between cloud-native applications and the rest of their apps and infrastructure require a different set of security policies and technologies. As such, questions around exactly who is responsible for securing the network are causing a lot of confusion for CISOs and IT leaders. In a bid to provide clarity, in episode 1 of Revisiting Threat Models in the Cloud Era, Doug Cahill, Senior Analyst at ESG, is exploring the dynamics of cloud migration and sharing why the shared responsibility model is foundational to cloud security. 

Join Doug to learn:
- What security trends analysts from ESG are seeing around SaaS, IaaS and PaaS service
- What the shared responsibility model is and why there’s confusion around what it means for CISOs
- Why organizations must gain greater visibility of the ‘cloud security visibility gap’
- The role of developers in the threat model and how they can help
- And more

[Ep.1] Cloud Migration: Who Is Responsible For Securing the Network?

Moving to hybrid cloud environments needn’t be labor intensive or overly complex. Attend to learn how VMware-based clouds with Gigamon next-generation visibility solutions enables application-level identification and filtering, with advanced metadata generation in a fully automated and virtualized NSX‑T environment. Organizations can reduce error-prone manual processes, enhance security tool effectiveness and maximize user experiences — including those scenarios involving vMotion and dynamic service insertion. You’ll also see two live demonstrations!

See, Secure and Optimise your VMware-based Cloud

In the event of a ransomware attack, security managers must be able to give business-relevant risk recommendations to CEOs and boards of directors. Most of the thought and effort required to do so must take place well before the attack. 

On this webcast, John Pescatore, SANS Director of Emerging Security Trends, and Benjamin Wright, lawyer and SANS Senior Instructor, will discuss key ransomware issues, including:
 - Key security processes to avoid ransomware attacks
 - Issues around ransomware payoffs if an attack succeeds
 - How cyber insurance can play a role in reducing the financial impact of an attack

Avoiding or Minimizing Ransomware Impact to the Bottom Line

Join our distinguished panel of Cybersecurity executives as they discuss why ransomware, extortion, and other attacks are becoming more prevalent and how you can prepare to get ahead of the curve.

The panel, moderated by Robert Rodriguez, Founder of SINET, will bring together industry leaders — Nick Shevelyov (CISO, Silicon Valley Bank and best-selling author of Cyber War…and Peace), Edna Conway (VP, Chief Security & Risk Officer, Azure, Microsoft) and Yonesy Núñez (CISO, Jack Henry & Assoc.) — to share insights and best practices that make will help you be better prepared for ransomware attacks. Stay to the end to get your burning questions answered.

What you’ll learn:
• Security best practices to stay secure and get complete network visibility
• How to prepare for ransomware and cybersecurity attacks
• The tools, models, and processes that successful companies implement

EXCLUSIVE OFFER: 100 lucky registrants will receive a complimentary copy of Nick’s highly acclaimed book, Cyber War…and Peace, after the event.

MODERATOR: 
Robert Rodriguez — Founder of SINET

SPECIAL GUEST EXPERTS: 
Nick Shevelyov — CISO for Silicon Valley Bank and Author
Edna Conway — VP, Chief Security & Risk Officer, Azure for Microsoft Corporation
Yonesy Núñez, — CISO for Jack Henry & Associates, Inc.

'Sin vi victim parabellum' — Ransomware is war. Are you prepared?

You have all the cloud monitoring and security tools in place. Would you agree that it’s still difficult to:   - Have complete visibility and eliminate blind spots, like hybrid cloud application activities and container communications, and discover and monitor unmanaged hosts/apps and IoT?   - Provide comprehensive security, such as detect and respond to network-based threats, enumerate hosts on the hybrid cloud network, and support shared responsibility and Zero Trust frameworks, particularly as it relates to network traffic?   - Detect unwanted activities, such as shadow IT, crypto-mining, and P2P and torrent traffic?   - Comply with network-related compliance and SLOs, such as extending on-premises policies, controls, reports, and practice knowledge to cloud apps?   Obviously, no security posture is 100% attack-proof. However, bringing the “network perspective” to hybrid-cloud workloads makes it easier to address the challenges above, and more.   At this session we will dive into several use cases and we will demo the yet untapped advantage the network perspective brings to cyber defense.

Hear guest speaker David Holmes talk about his recent Forrester research paper: “Maintaining Visibility in the TLS 1.3 Era.” Holmes will share how three internet protocols will soon be modified to enhance consumer and citizen privacy while having a detrimental effect when used in an enterprise.

The coming changes, TLS 1.3, DNS-over-HTTPS and encrypted SNI, will mask or remove the metadata that both snoopers rely on (for nefarious tracking) and IT rely on (to protect the organisation’s users). Holmes will share how quickly these changes are coming, and which security monitoring tools will be affected first.

You’ll learn:
• What changes are coming and how they impact network visibility
• Which tools are at risk of going dark in the new world
• How long architects have to turn the lights back on
• How IT security can mitigate the impact of what’s coming
• Where DNS security is headed

The Imminent Impact of TLS 1.3 on Network Security Controls

With Network Traffic increasing as Bandwidth costs decrease and the delivery of Applications changing in favour of Cloud environments, monitoring Networks at scale is becoming an increasing challenge. One of the approaches which is gaining popularity is the use of Metadata - but what is Metadata exactly? If you elect to employ Metadata as your method for monitoring your Network what format should you choose? Join Gigamon and (ISC)2 as we discuss the rise in popularity of Metadata, what problem it's trying to solve along with the pros and cons of its use. We'll also investigate how it can be implemented, examining the various formats that can be used to generate this Metadata. Lastly, will be the other uses of Metadata beyond 'traditional' Security, to ultimately lower the costs of implementation and better understand our environments. Join Ollie Sheridan as he raises these questions and gain a better understanding of Metadata in the context of Security.

Metadata Formats and their uses in a Security Context

Why organisations need to quickly change the way they think about IT monitoring.

The technology environments used by organizations to deliver business services has seen one of the most dramatic shifts in the past five years. Most organizations now operate a heterogeneous estate, that comprises on-premises legacy, on-premises hybrid cloud, to multiple public clouds. This increase in infrastructure complexity is further complicated by the mixture of software environments being used as IT departments deploy VMs and cloud-native on the same infrastructure. One of the fundamental requirements is to have visibility into all these different technologies, so that management can make critical decisions. In this webinar you will:
• Discover why observability is so important when managing complex heterogeneous environments.
• Learn that monitoring and automation must operate seamlessly together to meet user expectations of service delivery.
• Understand that not all monitoring and observability solutions provide the visibility needed to ensure real-time decisions can be made.

Presenting is OMDIA’s Roy Illsley Chief Analyst, IT Ecosystem & Operations reviewing his latest multi-cloud research findings along with Bassam Khan, Gigamon’s Vice President of Product and Technical Marketing Engineering.

OMDIA Hybrid Cloud Survey Results and the Value of Visibility

Most organisations plan cloud migrations, but few achieve a full migration to the cloud, ending up with a hybrid deployment.  This works for many, but for others it can be a “worst of both worlds” situation, with differing toolsets, increased costs, inconsistent visibility for security, operations and compliance leading to risk and issues.  Some organisations are even repatriating workloads back from the cloud: not a good outcome.  How can you benefit from a hybrid deployment, and avoid the downsides? 

Join Gigamon and (ISC)2 on October 14, 2021 at 1 p.m., BST when we will discuss how hybrid networks can be architected to deliver operational capabilities, security outcomes and compliance requirements.

Hybrid Cloud – Avoiding a Worst of Both Worlds Outcome

With Network Traffic increasing as Bandwidth costs decrease and the delivery of Applications changing in favour of Cloud environments, monitoring Networks at scale is becoming an increasing challenge. One of the approaches which is gaining popularity is the use of Metadata - but what is Metadata exactly? If you elect to employ Metadata as your method for monitoring your Network what format should you choose? On July 15, 2021 at 1:00 p.m. BST, join Gigamon and (ISC)2 as we discuss the rise in popularity of Metadata, what problem it's trying to solve along with the pros and cons of its use. We'll also investigate how it can be implemented, examining the various formats that can be used to generate this Metadata. Lastly, will be the other uses of Metadata beyond 'traditional' Security, to ultimately lower the costs of implementation and better understand our environments. Join Ollie Sheridan as he raises these questions and gain a better understanding of Metadata in the context of Security.

Hear Jamison Utter (Sr Director, Product and Solutions Evangelism, Ordr) reveal a glimpse inside the illicit industry of ransomware. See how Jamison infiltrated the Darkweb as an undercover bad actor, building his own ransomware campaign with relative ease.
See why so many security and networking tools fall short, and what InfoSec and NetOps professionals should do to properly detect and respond to ransomware threats.
Watch now to learn about:
- Who is—and who ISN’T—behind ransomware attacks
- Why ransomware attacks are more pervasive than you think
- Best practices to improve your security posture against ransomware
Presenters:
Jamison Utter, Sr Director, Product and Solutions Evangelism, Ordr
Martyn Crew, Sr Director of Product Marketing and Partner Technologies, Gigamon
--
Lunch & Learn Replay

Lunch & Learn: Exposing Ransomware-as-a-Service

Ransomware

darkweb

bad actor

Cyber Defence

Security

Information Security

Cyber Attacks

Threat Detection

Threat Defence

Welcome to the virtualization community on BrightTALK! Whether it affects servers, storage, networks, desktops or other parts of the data center, virtualization provides real benefits by reducing the resources needed for your
infrastructure and creating software-defined data center components. However, it can also complicate your infrastructure. Join this active community to learn best
practices for avoiding virtual machine sprawl and other common virtualization pitfalls as well as how you can make the most of your virtualization environment.

Virtualization

Are you an IT service management professional interested in developing your knowledge and improving your job performance? Join the IT service management community to access the latest updates from industry experts. Learn and share insights related to IT service management (ITSM) including topics such as the service desk, service catalog, problem and incident management, ITIL v4 and more. Engage with industry experts on current best practices and participate in active discussions that address the needs and challenges of the ITSM community.

IT Service Management

Cloud computing has exploded over the past few years, delivering a previously unimagined level of workplace mobility and flexibility. The cloud computing community on BrightTALK is made up of thousands of engaged professionals learning from the latest cloud computing research and resources. Join the community to expand your cloud computing knowledge and have your questions answered in live sessions with industry experts and vendor representatives.

Cloud Computing

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

The data center management community focuses on the holistic management and optimization of the data center. From technologies such as virtualization and cloud computing to data center design, colocation, energy efficiency and monitoring, the BrightTALK data center management community provides the most up-to-date and engaging content from industry experts to better your infrastructure and operations. Engage with a community of your peers and industry experts by asking questions, rating presentations and participating in polls during webinars, all while you gain insight that will help you transform your infrastructure into a next generation data center.

Data Center Management

Enterprise applications have become a crucial piece of infrastructure for many businesses. The enterprise applications community on BrightTALK features the latest insights in enterprise application integration, enterprise application architecture and EAS software. Join the community to gain access to thousands of videos and webinars presented by recognized enterprise information systems experts and arm yourself with the knowledge you need to succeed.

Enterprise Applications

Join thousands of engaged IT professionals in the application management community on BrightTALK. Interact with your peers in relevant webinars and videos on the latest trends and best practices for application lifecycle management, application performance management and application development.

Application Management

Network infrastructure professionals understand that a reliable and secure infrastructure is crucial to enabling business execution. Join the network infrastructure community to interact with thousands of IT professionals. Browse hundreds of on-demand and live webinars and videos to learn about the latest trends in network computing, SDN, WAN optimization and more.

Network Infrastructure

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Lunch & Learn: Exposing Ransomware-as-a-Service

Presented by

About this talk

More from this channel