Name: When to use Agent-Based and Agentless Workload Security
Start: 2023-02-07T20:49:00Z
End: 2023-02-07T21:25:27.000Z
Location: BrightTALK
Rating: 0

Secure cloud, containers, and endpoints with one unified solution. Find and remove critical risks in your modern attack surface—from laptops to containers—all from a single UI and data model.

What’s the advantage of anomaly detections? Join us this month as in-house expert Craig Chamberlain walks through examples of things anomaly detections can catch that rules-based detections are blind to. He’ll share how he engineers detections for scaling cloud environments and ways to hone them so it’s not just another false-positive alert cannon.

There are a variety of use cases where anomaly detections outperform traditional methods of threat detection, with examples in this discussion focusing around supply chain and third-party access security. Walk away knowing why anomaly detections are the vital parallel function for traditional threat modeling and how to build trust within your team around the science behind statistical analysis. 

What you will learn: 
- Uncover alerts found using anomaly detections that were missed by traditional detection methods.
- Use anomaly frameworks to secure supply chain and third party access use cases.
- Understand the advantages, drawbacks, and differences between machine learning, artificial intelligence, and statistical modeling in familiar security use cases.

Anomaly Detection and What You Can’t See

Why aren't there more women working in cybersecurity?

March is Women’s History Month so we’re taking this opportunity to chat about the challenges that women face in the cybersecurity industry, and celebrate the journeys some of us have taken to get here.

With Black History month just in the rear view mirror, it’s crucial to address these issues from an intersectional perspective. When it comes to cybersecurity–an industry desperate for experts and for talent–it’s even more important to empower those who face challenges when entering or rising in the industry. Fostering diversity in cybersecurity allows us to encounter new ideas, reach new markets, and make better decisions.

References:
https://cybersecurityventures.com/women-in-cybersecurity-report-2022/
https://blackcybersecurityassociation.org/

Women in Cybersecurity: Challenges, Successes, & Future Plans

Recently, the White House released a cybersecurity strategy document for the National Cybersecurity Initiative, and it’s making the rounds within the industry. 

Some are welcoming it as a ‘good starting point’ but others point out that few aspects of the document are actionable. 

So, let’s talk about it! 

Who is the target audience for this document? Should CISO’s be taking note? What impact will this have, if any, on software providers? And how, exactly, might the government go about ‘rebalancing the responsibility to defend cyberspace’? 

When we talk about “taking the burden off end users and shifting the responsibility to the “owners and operators of the systems that hold our data and make our society function”... who are we talking about? 

Join us Live on Thursday March 9, 2023, 9:30amPST/12:30pm EST, to dive into this document and what impact it might have. 

Got questions? Let us know your thoughts and concerns in the comments.

What Up White House? 3 Takeaways for Cybersecurity Pros

Advanced Techniques and Common Pitfalls in Scaling Cloud Security

The specific challenges of securing an expansive multi-cloud or hybrid environment go far beyond the cloud-provider baselines and compliance best practices. Decision makers are moving beyond the legacy tool portfolio standards to address the need for a new approach to people, process, and technology strategy.

In this fireside chat, we’ll outline and then dive into the most salient and unique challenges for mature cloud sec teams, including a lack of visibility, the ephemeral nature of the cloud, and inflexible processes. Then we’ll discuss a few new approaches to address these challenges in your strategy immediately. Key elements of securing cloud environments (IaaS/PaaS and SaaS) across the major public cloud providers (AWS, GCP, Azure) and share critical insights on how modern defenders should be approaching the most salient challenges of cloud security, including:

 - Why cloud threats look different and how to model them
 - Addressing and eliminating the dreaded data silo
 - Operationalizing a “visibility first” strategy for security decision making

The ephemeral nature of misconfigurations and vulnerabilities in the cloud and how to manage them
Join Uptycs’ Director of Cloud Security and former AWS Head of ATO, Andre Rall with Director of Product Management and former Former RSA Product Executive and Security Expert Sudarsan Kannan for an in-depth chat. This will be a useful session for anyone building a cloud-native security program to support and enhance their organization’s growth and innovation.

Oops! Your Developer’s Laptop Is Connected to Your Cloud… What Now?

The specific challenges of securing an expansive multi-cloud or hybrid environment go far beyond the cloud-provider baselines and compliance best practices. Decision makers are moving beyond the legacy tool portfolio standards to address the need for a new approach to people, process, and technology strategy.

In this fireside chat, we’ll outline and then dive into the most salient and unique challenges for mature cloud sec teams, including a lack of visibility, the ephemeral nature of the cloud, and inflexible processes. Then we’ll discuss a few new approaches to address these challenges in your strategy immediately. Key elements of securing cloud environments (IaaS/PaaS and SaaS) across the major public cloud providers (AWS, GCP, Azure) and share critical insights on how modern defenders should be approaching the most salient challenges of cloud security, including:

Why cloud threats look different and how to model them
Addressing and eliminating the dreaded data silo
Operationalizing a “visibility first” strategy for security decision making
The ephemeral nature of misconfigurations and vulnerabilities in the cloud and how to manage them
Join Uptycs’ Director of Cloud Security and former AWS Head of ATO, Andre Rall with Director of Product Management and former Former RSA Product Executive and Security Expert Sudarsan Kannan for an in-depth chat. This will be a useful session for anyone building a cloud-native security program to support and enhance their organization’s growth and innovation.

Scaling Up Your Cloud Security Program: Advanced Techniques and Common Pitfalls

How to Make Linux More Secure (with less work)

Let's have a candid conversation about getting back to basics.

Linux’s power is its versatility. It can host hundreds of containers across a complex network or run a single desktop. It can power everything from smart TVs, Android phones and most Internet of Things (IoT) devices.

But when it comes to locking down Linux, its adaptability can also be it’s Achilles’ heel.

Here’s the truth: There are myriad solutions promising to help secure your Linux environment but none of them are worth a damn if you don’t have the basics down.

We have a candid conversation about the importance of laying a firm foundation for an effective security program for your Linux environment and explore what we consider the 4 Golden Rules of Linux Security:

 - Reduce attack surface area with Secure Shell (SSH) best practices
 - Scan for odd user activity
 - Streamline routine Linux security tasks
 - Improve your threat detection

Security professionals of all stripes will come away with actionable recommendations to prioritize and execute on these four foundational tenets and get their most pressing Linux security questions answered by an expert.

4 Golden Rules of Linux Security

Data becomes information only when you know the right questions to ask.

The Uptycs Security Analytics Platform empowers security teams to ask questions across their attack surface and uncover actionable answers to improve enterprise-wide security.

Uptycs offers complete security observability for your cloud workloads, collecting and analyzing real-time workload activity in detail—for hosts, VMs, containers, microVMs, and serverless functions—alongside the cloud infrastructure and orchestrator telemetry that acts as the control plane for these cloud-native applications.

Join us to learn:

How we’re addressing unique cloud-native security challenges with security observability across the attack surface
An “under the hood” walkthrough of the Uptycs Security Analytics Platform
How to reduce noise and quickly visualize the attack chain with an integrated MITRE ATT&CK dashboard, composite threat scores, and process graphs

Defending The Modern Attack Surface: Cloud-Native Security Observability

A panel discussion featuring Matt Matt Bromiley diving into how you can leverage the new MITRE D3FEND Framework geared toward counter attack measures. Using D3FEND and ATT&CK together is a no brainer!

SANS ATT&CK™ and D3FEND™: Incorporating Frameworks into Your Analysis and Intel

One of the most important steps to preventing a cybersecurity breach is understanding your adversary.

The latest Uptycs threat research will help you get a leg up on the bad guys. Amit Malik and Ashwin Vamshi from Uptycs join Threatpost host Becky Bracken to walk through their latest research, explain what it means to organizations and answer specific questions from the audience.

A Few Highlights:
* Commonly abused commands and utilities in Linux, macOS and Windows
* Malware families seen most prevalently seen across platforms
* Active threat actors and recent targeted malware attacks
* Important vulnerabilities to prioritize across platforms
* Steps you can take to detect these actions and improve your security

How To Think Like A Threat Actor

Uptycs's unveiled an agentless workload scanning solution, arming teams with 100% friction-free coverage of their cloud workloads. Agentless workload scanning gives you a fast, point-in-time snapshot of the security posture of all workloads in your environment. You can measure risk (vulnerabilities and misconfigurations), detect malware, and understand the compliance posture of workloads.

This session features Jack Roehrig, a seasoned security veteran and CISO, who joins us to break down the benefits of an agentless model and why the Uptycs unified approach of both agentless and agent-based cloud workload security provides the best of both worlds.

When to use Agent-Based and Agentless Workload Security

agentless

Cloud

Secure Cloud

Endpoint Security

workload scanning

Deployment

CNAPP

CSPM

EDRM

Cloud computing has exploded over the past few years, delivering a previously unimagined level of workplace mobility and flexibility. The cloud computing community on BrightTALK is made up of thousands of engaged professionals learning from the latest cloud computing research and resources. Join the community to expand your cloud computing knowledge and have your questions answered in live sessions with industry experts and vendor representatives.

Cloud Computing

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

When to use Agent-Based and Agentless Workload Security

Presented by

About this talk

More from this channel