Name: Protecting the Expanding Attack Surface of Line of Business Web Applications
Start: 2021-07-27T16:00:00Z
End: 2021-07-27T16:45:12.000Z
Location: BrightTALK
Rating: 0

Fortinet Solutions for AWS Security
Many enterprises are turning to AWS to build new applications, extend internal data centers, and ultimately take advantage of the elasticity of the public cloud. While AWS security covers its infrastructure, customers are responsible for protecting everything they build and store within it.

Fortinet accelerates the journey to AWS with purpose-built cloud security. Fortinet dynamic cloud security solutions protect workloads and business applications across on-premises data centers and cloud environments—with multilayer security for cloud-based applications. Organizations can achieve: a consolidated view of their security posture, a single console for policy management and governance reporting, and event monitoring regardless of physical, virtual, or cloud infrastructure, and across private, public, and hybrid clouds.

Fortinet offers Software-as-a-Service (SaaS), virtual machine (VM), container, and API-based protection that delivers natively integrated security functionality that complements AWS services such as GuardDuty, Security Hub, and AWS Outposts. Supporting the broadest set of use cases, Fortinet products offer comprehensive security for AWS workloads including firewall, security gateway, intrusion prevention, and web application security.

Azure Virtual WAN is a managed, globally distributed network as a service which brings together networking, connectivity, security, monitoring and routing. It includes branch connectivity solutions like ExpressRoute, VPN for Site to Site and Point to Site connection, as well as the integration of SD-WAN, VPN CPE, and most recently, firewall solutions. This expert panel will discuss how Azure Virtual WAN helps organizations improve networking as well how to secure traffic as it transverses the virtual hub. 

Speakers
Nick Cavalancia, Founder at Techvangelism
Daniel Schrader, Director of Product Marketing, Cloud Security at Fortinet
Bruce Cosden, Azure Networking Global Black Belt at Microsoft
Piotr Nowotarski, Consulting System Engineer - Public Cloud at Fortinet

Securing Microsoft Azure Virtual WAN: A Microsoft & Fortinet Panel Discussion

Organizations have recognized that digital acceleration is about securing applications no matter where they live.  As a result, securing the application journey starts from on-premises at the data center, into the cloud, and toward edge compute.  Between migrating to new cloud architectures and incorporating new applications or infrastructures, it is easy to find yourself with an overwhelming number of moving parts. In fact, recent ESG data shows that over half of organizations believe their IT infrastructures are more complex than two years ago. Without the right digital strategy and end-to-end visibility, teams may find themselves vulnerable to cyber attacks and wasting critical resources.

It should be no surprise then that many companies are turning towards integrated platforms and dedicated cloud-native strategies wherever possible, in order to streamline their operations. To develop a truly resilient cybersecurity protocol, it is important that organizations consider adopting a platform approach that accommodates broad cloud and hybrid cloud use cases and encompasses a cloud-native approach across their public cloud deployments.  Moreover, security solutions need to be well-integrated with cloud-native services to reduce friction in the cloud. And while DevSecOps adoption is beginning to emerge on the scene, this is currently an underutilized area rife for exploration.

In this webinar from Fortinet and ESG, industry experts will shed light on the most important cloud-native trends and best practices to adopt to simplify security application journeys from the data center and edge compute into and across clouds.

Tune in to hear more about:
● Turning security tool sprawl and complexity into a consolidated system
● How cloud-native security strategies are developing in 2023
● Using DevSecOps across the application lifecycle
● And much more

Cloud-Native Security: Trends and Best Practices

Cyber adversaries are embracing defense evasion, triple extortion, wiper malware and the accelerated exploit chain, and that is significantly reshaping the threat landscape that CISOs have to deal with, according to Derek Manky, head of Fortinet's FortiGuard Labs.

In a video interview with Information Security Media Group at RSA Conference 2022, Manky discusses:
-Why adversaries have embraced new techniques;
-What makes these techniques so tough to defend against;
-What organizations can do to improve their odds.

Manky calls on his over 16 years of cybersecurity experience when formulating security strategy. His ultimate goal is to have a positive effect in the global war on cybercrime. Manky provides thought leadership to the industry and has presented research and strategy worldwide at premier security conferences. As a cybersecurity expert, his work includes meeting with leading political figures and key policy stakeholders, including law enforcement authorities. He is actively involved with several global threat intelligence initiatives, including NATO NICP, Interpol Expert Working Group, the Cyber Threat Alliance working committee and FIRST - all in effort to shape the future of actionable threat intelligence and proactive security strategy.

4 Emerging Attack Techniques Cyber Adversaries Are Using

As digital transformation and cloud adoption continue to accelerate, cybercriminals are getting smarter about the ways they are able to gain access to your network. Cloud-native protection platforms that natively integrate with Cloud Service Providers’ security services can provide a comprehensive, full-stack cloud security solution for securing cloud workloads.
 
However, many organizations are still struggling with data overload and security teams are not able to separate through the noise to get to the core concerns that matter most. By simplifying cloud security and proactively managing cloud risk, organizations can contextualize security findings and prioritize the most critical resources with actionable insights.
 
Join this discussion to learn more about:
 
• Insights on simplifying cloud security across cloud platforms
• Ways to Increase productivity with context-rich, actionable insights
• Actionable ways to maximize the value of your security investments

Securing Cloud Workloads With Context-Rich Insights

As cloud adoption continues to soar, IT and cybersecurity leaders must work together to keep up with the evolving market. Cloud and cybersecurity strategies should align in order for organizations to reap the most benefit from their IT investments, minimize threats and help prevent disruptions within the business. 

This discussion with Enterprise Strategy Group (ESG) analyst, Melinda Marks and Fortinet will cover how organizations can modernize cybersecurity practices for the cloud. Discover: 

•        Keys to operationalizing data 
•        Uses of workflow automation 
•        How organizations can incorporate DevOps into their security practice

Modernizing the Security Practice for Cloud

According to The Life and Times of Cybersecurity Professionals 2021 report by the Information Security Systems Association, the ongoing cybersecurity skills crisis has steadily continued for over five years. Organizations are consistently on the prowl for talented cybersecurity professionals to combat increasingly prevalent and sophisticated cyber attacks. However, is hiring the “best fit” the only option organizations have to address the ongoing cybersecurity skills shortage? 

After working alongside the constant cybersecurity skills shortage, CISOs understand that only looking to hire talent won’t cure the longstanding problem. So how are security executives addressing the growing need for cybersecurity skills? Join Hosts Dan and Earl with guests as they take a deeper look into the cybersecurity skills shortage and:

- Innovative new strategies organizations are utilizing to tackle the cybersecurity skill shortage from integrated security architectures to partnerships with third party services or vendors
- Investing in IT and security staff through cybersecurity training
- Embracing automation and analytics to streamline security processes

The Cybersecurity Skills Shortage: Why, How, and What To Do About It

With businesses across industries leveraging cloud technologies to optimise their operations and processes, cloud services have never been in such high demand. As more of the organisation leverages the cloud, IT spends are skyrocketing and organisations are quickly realising the enormous burden that managing and maintaining the infrastructure places on internal developers. 

In response, cloud providers are adapting their service offerings, moving away from the conventional subscription-based model to offer more custom services, tailored to organisations’ individual needs. 

In Episode 34 of Digital Transformation in Action, we're exploring how the cloud industry is adapting its offerings to empower IT teams to accelerate innovation in the multi-cloud world.

Topics for discussion include:

- The cost of digitisation: how IT needs are shifting as company-wide digital transformation initiatives take force
- From subscription to service model: how cloud providers are adapting their offerings to help IT teams accelerate innovation
- Adapting to IT evolution: what does the uptick of as-a-service offerings tell us about the future of business?
- And more…

Adapting Cloud Services to Keep Up with Business Innovation

How Risk Management Can Simplify Your Cloud-native Protection

Securing Cloud Workloads with Cloud-native Security

This is an in-depth conversation between American Digital's Director of SAP Solutions, Michael “MJ” Johnson, and Aiden Walden, Director, Public Cloud Architecture & Engineering at Fortinet.

It dives into the challenges that SAP users have today. Aidan and MJ discuss the reality of the threat landscape, including vulnerabilities, attack factors, and what SAP customers can do to protect themselves from ongoing threats.  

Both Aidan and Michael close out the podcast by offering their expertise to those interested in learning more about Fortinet’s solutions and how they can help protect SAP users.

Please reach out to them via LinkedIn to learn more.

Cloud and SAP Security in the Modern World

According to Statista, ‘the total installed base of Internet of Things (IoT) connected devices worldwide is projected to amount to 30.9 billion units by 2025, a sharp jump from the 13.8 billion units that are expected in 2021.’ The amount of data that these devices produce that needs to be processed is almost hard to fathom, and cloud alone cannot cope with the sheer number of data sets. Which is where Edge computing comes in.

Edge computing sees the deployment of computing and storage at the location where data is produced, be that a supermarket, a factory or a university. With Edge vs Cloud being a hotly debated topic in recent years, it’s time to address their definitions and how they can strengthen each other - and the businesses that utilize them.

Join Alex Hilton, CEO of Cloud Industry Forum, and guests in this live panel where they do just this and more - including:

- Use cases for cloud and Edge computing in 2022 and beyond
- How cloud and Edge computing can not just peacefully co-exist, but work in synergy 
- Why Edge is no longer just for devices anymore, and what this means for cloud
- How Edge and cloud can work together to help businesses thrive in the AI and 5G era
- And more

Better Together: Exploring Cloud and Edge Computing Synergies

C-Level executives are increasingly being targeted by cyber criminals: according to an IBM survey, “64% of CFOs, CHROs and CMOs feel the least engaged in cybersecurity threat management activities, yet are the stewards of data most coveted by cybercriminals.” With cybersecurity no longer limited to the concerns of the IT department and the broader workforce, in 2021 the risk of breaches and attacks touch every part of the organisation.

Integrating security controls at all business levels, sharing incident data and making cybersecurity an essential pillar of business considerations and training goes a long way to help CISOs and security leaders navigate the increasing threats and vulnerabilities. 

In this month’s episode of The (Security) Balancing Act we’ll be sharing how IT security leaders can ensure everyone - and every part - of the business is safe. Join as we evaluate:

-  To what extent cybersecurity should be a priority in the C-Suite
-  How C-Level execs should consider their role in relation to cybersecurity
-  How training and education can help CISOs navigate increased risk at all business levels
-  And more

This episode is part of The (Security) Balancing Act original series with Diana Kelley. We welcome viewer participation and questions during this interactive panel session.

Cybersecurity in the C-Suite

Working remotely has become the new normal. This, and many other changes organizations adopted last year in response to the pandemic are likely to stay for the long term. According to Gallup, about two-thirds of U.S. remote workers want to continue to work remotely. So, how can organizations continue to support their growing distributed workforce at a time where reports of security threats have increased by 400% compared to pre-pandemic levels? 

Here is where the zero-trust approach to security comes into play. 

Join this month's episode of The (Security) Balancing Act with Diana Kelley and guests as they discuss the emergence of zero trust (“Trust Nothing, Verify Everything”) and what it helps achieve for enterprises in the age of cloud and remote work.

Viewers will learn about:
- The evolution of the security perimeter and the shift to zero trust
- Why zero trust is an approach and not a product
- Zero Trust Network Access (ZTA) vs. corporate VPN
- Real-world stories and practical hands-on guidance from people who have deployed a ZTA

Speakers:
- Mari Galloway, CEO, Women's Society of Cyberjutsu
- Jonathan Nguyen Duy, Vice President, Global Field CISO Team, Fortinet
- Bob Rudis, Chief Data Scientist, Rapid7

This episode is part of The (Security) Balancing Act original series with Diana Kelley. We welcome viewer participation and questions during this interactive panel session.

Zero Trust for the New Normal

Fewer than half of organizations are very or extremely confident in their application security, reports Fortinet, and it’s not hard to see why. Businesses have embraced digitization, with an average of 25 software updates published each month — yet only 21% of teams confirm they are testing each code change, leaving their operations vulnerable. As cyberthreats grow more advanced, the risk of security breach is high and companies need to find a solution. One compelling answer: artificial intelligence.

AI-based threat hunting levels up existing cyber security protocols by adding an additional layer of screening — automatically. The technology is able to identify attack patterns and aggregate them into security incidents, to better sort threat detection. By separating real threats from informational alerts and false positives, machine learning reduces the human burden of manual corrections. Organizations that have been looking for a way to increase security while lessening friction may have their answer.

Tune into this latest webinar from the security experts at Fortinet, to uncover how AI can upgrade your cybersecurity. 
Our panel will dive into:
— Why traditional WAF applications are insufficient in today’s environment 
— What “artificial intelligence” and “machine learning” actually do in practice
— How an AI-based system can reduce risk without adding friction points

AI-Based Threat Hunting & the True Impact of Machine Learning on Cybersecurity

Digital transformation has been a critical enabler for the rapid acceleration in cloud adoption.  Despite the benefits, rapid adoption has also outpaced many organizations’ cloud security expertise, preventing them from properly securing their cloud environments and leaving them exposed to potential threats.  With over 80% of organizations adopting the cloud, security risk often accumulates faster than it is resolved and mitigated.  Understanding the risks in the cloud and how to best work as a team is essential for effectively mitigating risk and choosing the right tools.  This session will highlight some of the most common cloud risks and explore the ways to mitigate them.

Managing cloud security risks…IYKYK

Enterprise cybersecurity historically focused on securing the fixed perimeter. Gateways and firewalls blocked bad actors and traffic from entering the organization. The rise of public cloud services and connectivity has dissolved the traditional perimeter.

The gateway devices are more commonly deployed in public cloud infrastructure and the instruction set on those systems has become more granular and intelligent to keep pace with advancing threats.

In this discussion, leading cybersecurity experts John Jacobs, Field CISO, Fortinet Technology Vertical, and Holger Schulze, Founder and CEO of Cybersecurity Insiders will cover the importance of three elements in practical application:

• Effective design, and guidelines to consider for the new landscape
• Cloud-native security tools available
• Continuous application, measurement and adjustment of applied policies

Best Practices for Securing a Boundaryless Cloud Perimeter

Cloud innovations help keep organizations to be more agile, innovative, and responsive to deliver better business outcomes and user experiences.  Securing all clouds, cloud networks, applications, and platforms is the security architecture approach that can benefit all organizations, regardless of industry.
 
In this session, we’ll review best practices coming out of the pandemic to secure network resources in any cloud environment — private, public, multi-cloud, and hybrid models. This platform approach provides organizations with a consolidated view of their security posture, leveraging a single console for policy management regardless of which cloud infrastructure they have.

A platform approach for cloud security

Customers, channel partners and technology partners are dealing with a broad range of security concerns spanning the gamut from the sophistication of the threat landscape to the skills shortage. John Maddison, Fortinet's CMO and EVP, products breaks down the most urgent priorities.

In a video interview with Information Security Media Group at RSA Conference 2022, Maddison also discusses:
-How customers handle a growing attack surface;
-How CISOs prioritize their cyber strategies;
-What's required to secure hybrid networks.

Maddison has more than 30 years of executive management experience in the cybersecurity and telecommunications industries. He joined Fortinet in 2012 to lead Cloud/SaaS security development teams and is now the chief marketing officer and EVP, products. Maddison previously held executive leadership positions at Trend Micro, focused on advanced threat research and cloud-delivered security services. He started his career with Lucent Technologies Mobile Division, Hewlett Packard Software and Cable & Wireless Global Networking.

How CISOs Are Dealing With a Growing Digital Attack Surface

As Web applications, and the APIs that support them, increasingly become the front door to your most critical line of business applications, your security posture must evolve to cover the full attack surface. Basic NGFW and WAF controls aren’t enough - a comprehensive solution must extend to include advanced detection, bot mitigation, and API security controls.  As we add these additional controls, however, you don’t always have the luxury of expanding your security team so you also need solutions that are easy to manage and deploy.

Join us to learn how Fortinet delivers security solutions that follow your applications and data and deliver consistent, seamless security and streamlined operations across all clouds.

What You Will Learn:
* How a consistent Web Application and API security solution can enable line of business web applications
* How increasing use of APIs changes the attack surface of your most critical Web applications
* How to maintain a consistent security posture across all of the cloud providers you rely on

Protecting the Expanding Attack Surface of Line of Business Web Applications

Applicaiton security

Attack Vectors

Cyber Security

API Management

Threat Detection

Security

Security Analytics

Web Application Security

Application Management

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Protecting the Expanding Attack Surface of Line of Business Web Applications

Presented by

About this talk

More from this channel