Name: How to protect your data using Application Layer Encryption
Start: 2022-09-14T12:00:00Z
End: 2022-09-14T12:00:30.000Z
Location: BrightTALK

We help companies develop secure products. 

At CYBERCRYPT, we combine decades of experience in cryptography, secure architecture, and security analysis to keep your products protected.

Data breaches are more prolific than ever, with 2021 seeing 5250 confirmed instances involving large companies such as Facebook, LinkedIn, and Ubiquiti. Such breaches are not only a privacy concern, but are also very costly to the involved organization, incurring a loss of $4.24 million on average. The good news, however, is that in breaches where strong Zero Trust principles were employed this cost decreased by $1.76 million.

In this talk we show how Application-Layer Encryption (ALE) can be applied at the database level to provide strong protections against breaches. While traditional at rest database encryption helps protect your data in case of a direct breach, database ALE can ensure cryptographically that even authorized applications have minimal access. This means, that even if your data producing application contains a vulnerability, compromising this application won't give the attacker access to your data. Through the use of modern cryptographic techniques, database ALE can even be implemented without fully sacrificing useful capabilities of the database, such as search.

About our presenter: 
Philip has a background in mathematical engineering but has always had a strong interest in computer science, a combination which eventually resulted in a PhD in symmetric cryptography. Today he has the technical responsibility for the development of CYBERCRYPT's Encryptonize product.

Preventing Database Breaches with Application-Layer Encryption

The ongoing drift towards micro-services and containerized deployments in the cloud introduces new security challenges that require continuous adaption in order to comply with the latest security practices.
Join us, as we provide examples of the most common security pitfalls for cloud-based deployments, while we demonstrate some of the security controls which can be used to decrease the attack surface and secure your deployment.

Pragmatic DevSecOps Security Controls for cloud-native workloads

Designing zero-trust architectures requires that you build security controls for each component of the architecture i.e. data storage, IAM, networking and application / API, just to mention a few. 

As we shift our focus to applications, security controls need to move closer to the application level. The traditional security controls implemented at the management plane like least-privilege and access patterns, coupled with IDS an other peripheral controls at the network plane, do not ensure any protection of the application data.

Here’s where application-layer encryption adds an extra layer of security to the whole architecture: implemented at the key plane/data plane, encrypting data within the application protects the data and metadata even in the case that malicious actors have procured the encryption keys for the data in transit or at rest. Based on this, we introduce Encryptonize®, our cloud-native encryption service that offers zero-trust cryptography controls for your cloud-native applications.

Introduce Application-Layer Encryption in your Zero-Trust Environments

Tune into this webinar to learn winning strategies to understand the complex, multi-cloud environment. The University of Washington's Deveeshree Nayak will also introduce approaches to address the common threats present in the multi-cloud as well as the roles the multi-cloud serves in different industries. 

Viewers will come away from this presentation with a better understanding of:
- The overall view of a multi-cloud environment;
- The benefits of the multi-cloud;
- Approaches to address the threats associated with the multi-cloud across various industries.

The Benefits and Threats of the Multi-Cloud

Bocada’s recently published Backup Monitoring Trends Report highlighted the challenges impacting backup and data protection professionals today, and the key issues they anticipate managing in the future. The report’s themes illuminate the core hurdles backup operators transitioning to cloud or multi-cloud environments must plan for to not just meet, but exceed, data protection guidelines.  

In this session, we’ll review the report’s findings, and what they mean for building resilient backup environments for years to come. You will learn:

- The top issues impacting backup professionals as they migrate to cloud environments 
- Best practices for mitigating day-to-day cloud backup operations challenges 
- Trends impacting backup operations in 3-5 years 
- How to build backup protections to mitigate cloud security threats 

Speakers: 

James McDonnell has over ten years' experience working with complex backup environments. As Bocada’s Sr. Systems Engineer, James supports enterprise-scale organizations across the globe to implement automated backup operations and help them meet stringent regulatory guidelines.  

Laura Troyani is the Principal of PlanBeyond, a market research firm. Laura has spent years leading original research on behalf of IT clients and was the lead on building and fielding the survey for Bocada’s Backup Monitoring Trends Report.

Building Best-In-Class Multi-Cloud Backup Operations

According to Statista, a global market and consumer data provider, between 2021 and 2023, the percentage of organizations adopting a multi-cloud strategy will grow for midsize companies from 76% to 84%, and for large enterprises from 90% to 94%.

Cloud providers offer many security monitoring and threat detection options, but what if you subscribe to more than one? Adopting security monitoring tools from each provider can increase complexity and bring significant overhead to security operations teams. 

For years, security information and Event Management (SIEM) solutions have been collecting and consolidating data from multiple sources for centralized threat detection. Still, multi-cloud brings a new scenario with different data sources, higher volumes, and unknown threats. How does SIEM have to evolve to adapt to this new reality?

Join Augusto Barros, VP of Solutions and Cybersecurity evangelist, and Brian Robertson, Senior Product Marketing Manager at Securonix, to learn about:

· Why is it hard to perform security monitoring in a multi-cloud scenario?
· What are the limitations of traditional SIEMs to support multi-cloud needs?
· What do you need to look for in a new approach and architecture that enables the SIEM to be the right solution to detect threats in a multi-cloud world?
 
Speakers:
Augusto Barros was most recently the Research VP in the Gartner for Technical Professionals (GTP) Security and Risk Management group. He has over 20 years of experience in the IT security industry as an analyst and a security architect and officer for large enterprises.

Brian Robertson has over 20 years of experience helping organizations solve critical application delivery, network, cloud, and security challenges working with industry leaders who not only are looking at the challenges of today but are looking at the horizon for the challenges of tomorrow.

SIEM: Threat Detection and Response for your Multi-cloud World

With so much noise about threats and the tool soup of solutions being marketed, where are security teams supposed to focus?

There are a bevy of solutions that enable visibility into endpoint and network centric metrics, but what about visibility into your applications, their connections, user interactions, and the network?

Applications are often overlooked. In reality, this accidental oversight makes your organization vulnerable. Visibility and understanding of your applications should be at the top of the list for security teams. So how do you get there?

Join TrueFort to understand how an application-centric visibility reduces your attack surface through: 

·    Live application behavioral mapping 
·    Proactive attack prevention 
·    Deep forensic timeline & playback 
·    Real-time detection and automated response

How Can You Protect What You Can't See?

Emerging cloud leaders are seeking industry collaboration, best practices, and insights on how to tame the thorny stems of multi-cloud security. Contending with technology, talent and governance challenges,  join NetApp's Jyoti Wadhwa, as she shares how leaders can deploy a proven approach to realize the promises of greater efficiency, lower cost, and real-time security of the cloud. 

For fellow security practitioners and leaders, she will address both strategic and operational aspects of multi-cloud security ranging on mission critical topics of migrating an organization’s on-premise data center capabilities to developing standardized architectures and leading enterprise-wide adoption. In her discussion, Jyoti will cover 5 leadership strategies to achieve multi-cloud security:
 
1. Disentangle the Tech.
2. Unify the Cloud Team.
3. Build your Experts.
4. Update Security Governance.
5. Effectively Communicate.

Top 5 Leadership Strategies for Multi-Cloud Security

Based on hands-on experiences from a large number of cloud application development projects, Karl has compiled a list of top 5 key security pitfalls that are common across all application types and team sizes. In this session, he will share what these security pitfalls are, why they matter, and how to mitigate them.

About the speaker:
Karl Ots is a cloud and cybersecurity expert, as well as international speaker and trainer, with a broad range of deep Azure expertise. He believes that secure cloud technologies are the key to successful digital transformation. He applies his passion as Head of Cloud Security at EPAM Systems. Karl has been working with Microsoft Azure since 2011 in a variety of forums ranging from large projects to speaking at largest tech conferences, such as Microsoft Ignite. Karl is a Microsoft Certified Trainer (MCT) and a Certified Information Systems Security Professional (CISSP). He is the author of Azure Security Handbook.

Top Public Cloud Security Fails and How to Avoid Them

In this session, the University of Washington's Deveeshree Nayak will cover why cloud security education is so vital. Additionally, this need for awareness spans all facets of educational and working life from K12 schools, universities and businesses across all different industries. 

Viewers will walk away from this presentation with a greater understanding of:
1. What is cloud security?
2. Why it is so important to understand how cloud security works?
3. How implementation and use of the cloud varies in different industries?
4. Why leaders should take the necessary time and energy to educate everyone on cloud and cloud security whether they are in schools, universities or companies.

The Importance of Cloud Security Education and Awareness

In this session, the University of Washington's Deveeshree Nayak will cover the best practices for conducting application security in the cloud as well as the common vulnerabilities cloud-based applications face.

Attendees will come away with knowledge of:
1. What is application security in the cloud?
2. The best practices for application security in the cloud?
3. How to identify the potential vulnerabilities facing application in the cloud and preventative measure to take.

Cloud Application Security: Best Practices and Vulnerabilities

Since the birth of the Internet, it has been missing a layer of identity protocols that define identifiers for people, organizations and things separate from an application, making identity and access management more and more complicated as enterprises are moving to a multi-cloud strategy and face advancing threats from attackers. 

In the presentation, Kaliya Young, widely known as the Identity Woman, is going to introduce some new and emerging Internet identity standards and technologies, e.g. W3C Verifiable Credentials, W3C Decentralized Identifiers, which can help enterprises improve application security significantly at multiple fronts:
• Identity and access management across multiple cloud environments; 
• Workforce and customer identity and access management; 
• Information/data security management.

Implementing Emerging Identity Standards for Better Application Security

One of the most transformative recent shifts within application development in a cloud context is the rise of IaC -- infrastructure as code technologies like Terraform and CloudFormation. As organizations make more use of IaC, it's important for security organizations to pay attention. Why? Because IaC changes the risk equation -- it introduces some new potential risks, and can help close some existing ones.  

This discussion aims to answer these questions:
• Why/how IaC requires thinking about security of assets a new way.
• Artifacts produced by IaC and how they can help us.
• Security “gotchas” and things to watch out for when changing to IaC.
• How you can tailor your security program in light of IaC.

Ed Moyle is currently Director of Software and Systems Security for Drake Software.  In his 20 years in information security, Ed has held numerous positions including: Director of Thought Leadership and Research for ISACA, Application Security Principal for Adaptive Biotechnologies, Senior Security Strategist with Savvis, Senior Manager with CTG, and Vice President and Information Security Officer for Merrill Lynch Investment Managers.  Ed is co-author of Cryptographic Libraries for Developers and Practical Cybersecurity Architecture, and a frequent contributor to the Information Security industry as author, public speaker, and analyst.

Better Security with IaC

Advanced Techniques and Common Pitfalls in Scaling Cloud Security

The specific challenges of securing an expansive multi-cloud or hybrid environment go far beyond the cloud-provider baselines and compliance best practices. Decision makers are moving beyond the legacy tool portfolio standards to address the need for a new approach to people, process, and technology strategy.

In this fireside chat, we’ll outline and then dive into the most salient and unique challenges for mature cloud sec teams, including a lack of visibility, the ephemeral nature of the cloud, and inflexible processes. Then we’ll discuss a few new approaches to address these challenges in your strategy immediately. Key elements of securing cloud environments (IaaS/PaaS and SaaS) across the major public cloud providers (AWS, GCP, Azure) and share critical insights on how modern defenders should be approaching the most salient challenges of cloud security, including:

 - Why cloud threats look different and how to model them
 - Addressing and eliminating the dreaded data silo
 - Operationalizing a “visibility first” strategy for security decision making

The ephemeral nature of misconfigurations and vulnerabilities in the cloud and how to manage them
Join Uptycs’ Director of Cloud Security and former AWS Head of ATO, Andre Rall with Director of Product Management and former Former RSA Product Executive and Security Expert Sudarsan Kannan for an in-depth chat. This will be a useful session for anyone building a cloud-native security program to support and enhance their organization’s growth and innovation.

Oops! Your Developer’s Laptop Is Connected to Your Cloud… What Now?

Web apps and APIs present a major risk for organizations of all sizes, according to the Verizon DBIR about two of every five breaches originate in a web app – and the problem is only growing. In most organizations, innovation pressures still outweigh security priorities. 
So what can AppSec professionals do in order to reduce their web attack surface? In this presentation, Invicti Security Chief Product Officer Sonali Shah dives into the top five AppSec risks that every organization should be aware of and provides best practices for securing cloud-based web apps and APIs.

Application Security Trends and Best Practices

As more organizations adopt multi-cloud strategies, security managers are increasingly challenged by how to protect web applications spread across multiple environments, while preserving consistency, quality of security and centralized visibility. 

The traditional approach to web application security no longer works in a multi-cloud world, and a new approach is needed.

Join us to discuss the new challenges of multi-cloud security and how to overcome them.

In this discussion you will learn:
• What are the security challenges of the multi-cloud
• Why traditional approaches and tools no longer work
• What are the requirements for multi-cloud security solutions
• How Radware helps organizations protect their web application in a multi-cloud world

Protecting Web Applications in a Multi-Cloud World

There was a time when applications were hosted on a traditional computing model. All hardware and software resided in-house. Companies maintained physical servers on-premises in a secure climate-controlled room with a secure level of access. Only Network Engineers were allowed access to application security as it mainly revolved around the network (port, FW) and OS level protection with security-level access to server rooms. But times have changed. Companies now have more to gain with a more layered approach to application security. 

Tune into this presentation to hear TD Bank's Application Release Engineer Pankul Chitrav discuss the challenges faced by businesses still using the traditional model and how we can overcome these challenges by implementing a layered security model.

Define Application Security Accurately To Generate Business Success

Within many enterprises that are expanding their network and accelerating adoption of the cloud, building a Cloud Security Governance model can be tricky. Finding and establishing a path of support and collaboration between development and application teams, risk and compliance groups, and Cloud Security practitioners should be a key objective to an effective Cloud Governance program.

In this live talk, you’ll learn how to drive operational processes and procedures by adopting a governance framework to take control of your cloud environment and its data.

A few topics we’ll cover:

• Factors to consider when designing a governance model for security in the cloud
• Strategy and methods for aligning people, processes and workflows among disparate teams to
        achieve a unified governance framework
• The impact of cloud governance across multi-cloud environments

The Art of Cloud Governance: Essential for Modern Businesses

Using multiple cloud providers allows organizations to reduce cost, increase resiliency and optimize services. However, multi-cloud strategies significantly increase complexity for security teams tasked with applying consistent controls and policies across all cloud environments.  

As cloud usage increases and becomes more ephemeral, agent-based security across multiple clouds becomes unmanageable. In addition, increased security tool sprawl, with often multiple cloud provider tools for each platform, as well as separate point solutions for specific cloud security areas, further increases complexity. This leads to hundreds of (often duplicate) alerts every day, causing security teams to become desensitized and ultimately, miss critical alerts.  

In this webinar, Deborah Galea discusses how an agentless Cloud-Native Application Protection Platform (CNAPP) can significantly alleviate many security challenges in multi-cloud environments. 

In this session you will learn: 

- What are the security challenges in multi-cloud environments? 
- What is a CNAPP? 
- How does a CNAPP reduce cloud security tool sprawl? 
- How do you get full multi-cloud visibility with agentless cloud security? 
- How does an agentless CNAPP increase an organization’s agility? 
- How can a CNAPP prevent application security issues in pre-production?

Agentless CNAPP: A New Approach to Multi-Cloud Security

Tune into this session to hear cloud expert Dwayne Natwick provide guidance for configuring and managing hybrid and multi-cloud resources within cloud native tools for complete security posture management of your infrastructure. After configuring resources for security posture management, you will learn how to configure vulnerability scans on these resources for next level security posture management.

Key takeaways attendees will learn include:
--The evolving types of infrastructure with multiple cloud providers and on-premises architectures.
--Options that tools provide for multi-cloud and hybrid infrastructure security posture management.
--How to manage security posture through cloud-native tools for the full infrastructure.

About the speaker:
Dwayne is a Global Principal Cloud Security Technical Lead/CTO for Atos across Microsoft, AWS, and GCP.  He is the thought leader determining trends, developing, advocating, and building business plans for the overall cybersecurity services for this global systems integrator. Dwayne also leads the cloud education portfolio for Microsoft and AWS. In addition to creating curriculum, training, and blog writing, he is a Microsoft MVP and a Microsoft Certified Trainer Regional Lead. Dwayne has spoken at conferences and user groups globally on cloud security, identity security, and data/AI trends. Dwayne has authored books and is a Security Professional Community Manager for Packt Publishing.

Security Posture Management for Multi-Cloud and Hybrid Infrastructures

The cloud is the optimal environment for most workloads, with many organizations using multiple cloud providers to reduce risk, maximize agility, and control costs. With these benefits, comes security risks. Join this keynote session to explore the latest threats to multicloud environments and effective strategies to improve your security posture.

During this session, you will learn: 
- How to secure endpoints, dev/test environments, tools/monitoring, and more
- Strategies for de-coupling security from compute
- Best practices to minimize sprawl and improve security posture

Multicloud Cybersecurity Trend:Supercharged Strategies for Supercharged Threats

Spreading operations across more than one cloud enables organizations to choose from a variety of cloud services to cut costs, improve operations and improve scalability. However, operating complex environments across multiple platforms requires a comprehensive strategy to handle connectivity, applications, data and security.

In this panel, experts will discuss how organizations can evaluate risks in their own and their cloud service provider environments, as well as technologies and tools that can assist in achieving a comprehensive strategy.

Join us to learn about:
--Understanding cloud scope across the organization
--Cloud governance frameworks
--Pros and cons of centralizing security access and monitoring controls
--Multi-cloud management and network security analytics platforms
--Cloud security posture management (CSPM) tools that can identify misconfigurations and risks
--Tools for cloud compliance monitoring

Moderated by: Evgeniy Kharam, Cybersecurity Architect and Advisor, Podcaster 
Steve Cobb, Chief Information Security Officer, One Source
Eyal Arazi, Senior Product Marketing Manager, Radware

Build a Multi-cloud Strategy that Supports Governance and Compliance

As cloud adoption across industry verticals increases, hybrid, public, and private cloud infrastructure deployment models grow in use. In order to improve architecture and service resiliency, and to avoid vendor lock-in, one of the common cloud architecture deployment models also includes multi-cloud platforms. Whereas multi-cloud deployment does have its benefits, relying on multiple vendors and clouds increases the attack surface and overall associated risks. Additionally, multiple platforms increases complexity making security even more challenging to design, deploy and monitor. 

In this webinar, we aim to highlight following key takeaways for the audience: 
• Managing multi-cloud security challenges; 
• Important security controls; 
• Strategy to manage compliance requirements;
• Role of automation; 
• Logging, auditing and monitoring.

Security Challenges and Mitigation Techniques for the Multi-Cloud

Accelerating your cloud transformation whilst reducing risk:
Shared responsibility, with less operational overhead. Find out how to set, secure and forget your cloud environment from core workloads to cloud-native development pipelines. Security teams and development teams have always been running in opposite directions, as quickly as possible. Security professionals have always felt like the bearer of bad news, slowing down their colleagues, and being a source of frustration. Boards overlay multi-cloud complexity through acquisition and merger. A complete 3rd party cloud security solution bridges the gap and allows cohesion and when done well, is almost completely invisible.

Invisible Cloud Security: Accelerating your cloud transformation

Organizations are adopting multi-cloud strategies to leverage capabilities of different cloud security providers (CSPs) and to provide flexibility to software development teams. But this brings up challenges for security teams who are responsible for managing security risk and meeting compliance regulations for workloads and applications running in different environments. In this session, ESG Senior Analyst Melinda Marks explores how to supercharge your security to gain the visibility and control you need to scale security programs for multi-cloud environments.

Supercharge Your Security for Multi-Cloud

Superpowered Security for the Multi-Cloud in 2022

Service downtime is more expensive than ever and ensuring consistent access to mission-critical applications and good end-user experience is essential for customer loyalty and employee productivity. Protecting your revenue-generating services and data from security threats and attacks that may stall the business is not a choice.  A lot of newer types of attacks emerge from within the network. Businesses must implement a strategy to ensure network-centric security and observability for threat detection and mitigation. 

Join Andy Idsinga, Sr. Strategic Cloud Architect at cPacket, in this informative talk to learn how to de-risk your IT infrastructure and operations.

Learn more about:
•  Your options to provision a network-centric security and observability practice –i.e., network detection and response (NDR) solution across all three major clouds (Azure, AWS, GCP)
•  What to expect in your deployment journey and gaining real-time network visibility for vs forensic data for incident response 
•  The key questions and considerations for you and your IT teams in terms of technology and objectives

Rethinking Network-Centric Observability for Cloud Security

95 percent of data breaches are cause by human errors, and with an average cost of a data breach globally being $3.92 million, it is not only a privacy concern but also very costly of an organization. More 50 percent of companies say that their IT departments are not sophisticated enough to handled advanced cyberattacks, but it doesn't have to be hard to probably secure your data.
In this talk we will show how Application-Layer encryption (ALE) can be applied easily to your data with a minimal amount of code changes, and ensure even authorized applications only have minimal access to the data using cryptographic principles and a role-based access control model. This means, that if you data is leaked, the attacked won't have access to your data.
All this can be implemented without fully sacrificing the advantages of a database, such as filtering.

Bio of the presenter: 
Kim has been working with computer science for 12 years, and has worked in the cyber security, telecommunications and finance industry. Today he is a cloud tech lead in CYBERCRYPT.

How to protect your data using Application Layer Encryption

Data Breach

Cyber Attacks

Cryptography

Cyber Security

Encryption

Data Security

Privacy

Security

Cyber Defence

Breach Prevention

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

How to protect your data using Application Layer Encryption

Presented by

About this talk

CYBERCRYPT