Browse communities
Presenting a webinar?
Browse communities
Share this content
The Impact of Cloud on the Future of Web Application Security
Ron Condon; TechTarget; Dennis Groves, Founder, OWASP; Sukanta Chakravorty, Cloud Researcher, RHUL; Justin Clarke, OWASP
As a live attendee, you will take part in 4 compelling votes, giving you the ability to shape the direction of this expert discussion. Does the cloud change web application security? Does the CSA, Jericho, ENISA provide sufficient guidelines? Does the cloud make compliance more difficult? View live to take part and hear the results of the audeince vote.
Ron Condon
Ron Condon has been writing about developments in the IT industry for more than 30 years. In that time, he has charted the evolution from big mainframes, to minicomputers and PCs in the 1980s, and the rise of the Internet over the last decade or so. He has edited daily, weekly and monthly publications, and has written for national and regional newspapers, in Europe and the US. In recent years he has taken a strong interest in information security and is a former Editor-in-chief of SC Magazine
Dennis Groves is the co-founder of OWASP and a member of WASC. His contributions to OWASP include the "OWASP Guide" downloaded over 2 million times; now a reference document in the PCI DSS standard, and the de-facto standard for securing web applications.
Justin Clarke is an information security consultant years of experience in assessing the security of networks, web applications, and wireless infrastructures for large financial, retail, technology and government clients in the United Kingdom, the United States and New Zealand.
Sukanta Chakravorty is currently a Cloud Researcher at ISG & RHUL and has previously held senior executive roles in Incident Response Management and IT at Wipro.
Ron Condon
Ron Condon has been writing about developments in the IT industry for more than 30 years. In that time, he has charted the evolution from big mainframes, to minicomputers and PCs in the 1980s, and the rise of the Internet over the last decade or so. He has edited daily, weekly and monthly publications, and has written for national and regional newspapers, in Europe and the US. In recent years he has taken a strong interest in information security and is a former Editor-in-chief of SC Magazine
Dennis Groves is the co-founder of OWASP and a member of WASC. His contributions to OWASP include the "OWASP Guide" downloaded over 2 million times; now a reference document in the PCI DSS standard, and the de-facto standard for securing web applications.
Justin Clarke is an information security consultant years of experience in assessing the security of networks, web applications, and wireless infrastructures for large financial, retail, technology and government clients in the United Kingdom, the United States and New Zealand.
Sukanta Chakravorty is currently a Cloud Researcher at ISG & RHUL and has previously held senior executive roles in Incident Response Management and IT at Wipro.
Sep 9 2010
48 mins
More from this community:
IT Security
Webinars and videos
- Live and recorded (4559)
- Upcoming (139)
- Date
- Rating
- Views
-
Tools of Engagement – Zero Dark 243 Days
Dave Merkel, Chief Technology Officer, FireEye and Mike Scutt, Sr. Threat Analyst, FireEye
Recorded:
Apr 24 2014
62 mins
Join us for this live webinar where we will walk through a real-world example in which FireEye Managed Defense analysts utilized the FireEye Platform’s MVX virtual machine technology and endpoint response capabilities to identify, alert, and remediate an active Advanced Persistent Threat (APT) attack.
In this case study we will cover:
• How the attacker executed a “smash-and-grab” attack aimed at stealing intellectual property.
• How FireEye detected the attack as it was beginning and re-secured the network and prevented sensitive data from leaving the client’s networks.
• Best practices for investigating and responding to similar attacks. -
5 Ways to Measure the Quality of Your Crypto
John Grimm, Senior DIrector of Product Marketing at Thales e-Security
Recorded:
Apr 24 2014
32 mins
Encryption, and cryptography in general, has been thrust into the spotlight as a critical technology for combating surveillance, data breaches, insider threats, and more. But encryption is no silver bullet, and the quality of its implementation is the major determining factor in the protection it actually provides. Join us on Thursday April 24 to learn about:
•Five ways you can measure the quality, or trust level, your crypto systems provide
•Effective strategies for dealing with the key management pain many organizations are starting to feel as they increase their deployment of cryptography
•Use cases for strong cryptography and trusted key management with hardware security modules (HSMs) -
HP TippingPoint enhances perimeter protection to defend against advanced threats
Stephen Newman, Vice President of Product Management, Damballa and Russell Meyers, Global Product Line Manager HP TippingPoin
Recorded:
Apr 24 2014
27 mins
Every time you add new software or devices to your network, you create new opportunity for hackers. To keep your business safe, you need a collaborative security strategy that defends against advanced threats like malware and botnet attacks. Staying ahead of persistent adversaries is critical—simple detect-and-block tactics will no longer keep you protected.
Attend this webinar to learn:
· How HP TippingPoint Security Management System works with Damballa to provide an advanced layer of protection
· How Damballa uses the HP TippingPoint Advanced Threat application programming interface (API) to alert HP TippingPoint to infected devices in your network
· How HP TippingPoint block identified threats at wire speed -
Countering Adversaries Part 2: Organized Crime and Brute Force
Roxana Bradescu, Director of Product Management, Database Security, Oracle & Brandon Dunlap, Brightfly
Recorded:
Apr 24 2014
60 mins
Hailing from Eastern Europe and North America, organized criminals have a penchant for using brute-force hacking and multiple strands of malware to target financial and retail organizations for monetary gain, according to the Verizon DBIR. It is common for these cybercriminals to directly access databases and extract payment cards, credentials, and bank account information. Join (ISC)2 and Oracle as we discuss tactics employed by these cybercriminals and how organizations should implement a defense in depth database security strategy to help mitigate the threat. -
2014 IT Priorities Survey Results
Kurt Underwood, Cal Slemp, Jonathan Wyatt, Jeff Weber, Protiviti Managing Directors
Recorded:
Apr 24 2014
60 mins
Protiviti's IT Priorities Survey results reveal 2/3 companies are going through a major IT transformation in 2014. Join Protiviti's IT Consulting managing directors to discuss why. -
Using Online Threat Intelligence to Assess and Predict Threats to Executives
Mike Mullen, Vice President, Security Services
Recorded:
Apr 24 2014
51 mins
Security professionals are increasingly realizing that protecting executives and corporate assets requires more than just “guns and guards.” It requires a proactive strategy to identify and prevent a threat, rather than reacting to one. So how can security professionals be proactive and minimize the threats that originate from the Internet?
In this webcast we’ll look at how you can use an individual’s online “footprint” to identify potential threats and develop a more effective security plan. We’ll also present a case study of one of our own executives and show why online threat intelligence is not the same as news alerts or monitoring social media for brand buzz. -
Enabling and Securing Multi-Channel Customer Interactions
David Gormley, Director, Security Solutions for CA Technologies
Recorded:
Apr 24 2014
59 mins
Today's organizations are moving more interactions online through web, mobile and API-enabled web services to empower their customers and increase revenue. Managing the high volume of customer identities and enabling secure interactions across a set of web, mobile and hybrid apps, from a variety of different devices can be challenging.
On April 24th at 1pm ET, please join David Gormley, Director, Security Solutions for CA Technologies, to learn how you can securely accelerate the delivery of new applications and services, while improving the customer experience across multiple channels of interaction. -
How Codenomicon Discovered Heartbleed Solutions For Protecting Your Organization
Ari Takanen, Co-Founder, Chief Research Officer, Mikko, Varpiola, Co-Founder, Developer, Sami Petajasoja, Vice President APAC
Recorded:
Apr 24 2014
64 mins
Presented by the experts with the facts.
The Inside Story of the Discovery, the Timeline and Solutions to Protect Your Organization. Finally, All of Your Questions Answered.
Join the conversation and get the latest Heartbleed updates by following @CodenomiconLTD -
How Codenomicon Discovered Heartbleed Solutions For Protecting Your Organization
Ari Takanen, Co-Founder, Chief Research Officer, Mikko, Varpiola, Co-Founder, Developer, Sami Petajasoja, Vice President APAC
Recorded:
Apr 24 2014
64 mins
Presented by the experts with the facts.
The Inside Story of the Discovery, the Timeline and Solutions to Protect Your Organization. Finally, All of Your Questions Answered.
Join the conversation and get the latest Heartbleed updates by following @CodenomiconLTD -
BYOD Challenges, Recommendations & Best Practices from Box
Karishma Kothari, Box; Vish Mittapalli, Box
Recorded:
Apr 24 2014
40 mins
85% of enterprises permit BYOD, but only 25-30% of them actually have policies and technology to manage these devices. What is your business doing to ensure that the content on that device stays secure, regardless of what device your employees are using? If you are considering moving to a BYOD strategy or are in the midst of doing so, join this webinar to learn how to develop and execute a BYOD plan in your company. We'll talk about major challenges from creating a BYOD strategy and best practices from ensuring that the content on your device stays secure with Box.
- Channel
- Channel profile
Up
Down
-
Threat Intelligence is Hot, but is it Fueling Prevention?
Apr 30 2014
4:00 pm
UTC
45 mins
Patrick Peterson, Founder & CEO of AgariJoin Patrick Peterson, Founder & CEO of Agari - a 2014 Gartner "Cool Vendor", as he peels back how criminals are penetrating current security controls and describes intelligence that can detect attacks in real-time and provide the ammunition you need to take action. Whether it’s looking for unusual changes in average URL lengths in hyperlinks or statistically anomalous use of certain names in email FROM fields, specific types of intelligence provides high fidelity signal indicating that malicious activity is at work inside your organization, or attempting to penetrate it. Register to learn more about real-time intelligence that drives attack prevention. -
Managing Cyber Risks in Financial Services
Apr 30 2014
6:00 am
UTC
45 mins
Bryce Boland, Vice President/CTO, Asia Pacific, FireEyeBusinesses in the Financial Services sector are some of the most obvious targets for cyber-attacks. After all, “that’s where the money is.”
And recent technological advances have brought about the dark side of innovation – the ability of criminals to stealthily attack users and businesses in new ways. Hence, financial institutions around the world are even more at risk to breaches and cyber-attacks than ever before. Are financial institutions in Asia Pacific ready for these threats? What are the areas that financial services should look into for continuous threat protection?
Bryce Boland will touch on these issues in this webcast; bringing insights from his experience as a former Security CTO in the financial sector.
Topics that will be covered are:
1.The Dark Side of Innovation
2.Recent FSI breaches
3.Enterprise Threat Report on FSI
4.FSI Supply Chain Risks
5.Managing Advanced Threats
6.Questions & Answers
This webinar is for both business and IT professionals, interested to have a better understanding of the current state of cyber risks in the financial sector, and how to manage these risks. -
More than One Target: Point of Sale Malware Campaigns Continue
Apr 29 2014
3:00 pm
UTC
60 mins
Curt Wilson, Senior Research Analyst, Arbor's Security Engineering and Response Team and Jennifer Glenn, Product MarketingAs additional details on the Target breach - and other retail attacks - leak out, we see that Point of Sale (POS) malware continues to be a significant threat. There are several attack methodologies at play and many forms of new malware, including Dexter, Project Hook, Alina, BlackPoS/Kartoxa, JackPoS, VSkimmer and others. All continue to compromise organizations large and small. In this webinar, Curt Wilson, Senior Research Analyst for Arbor's Security Engineering and Response Team (ASERT) will explore a newly discovered POS attacker’s toolkit, as well as the structure and behavior of typical POS malware and key indicators of compromise.
Additionally, this talk will review a survey of observed POS infrastructure vulnerabilities that include well-known and lesser- known POS threats that continue to evolve. Attendees should leave with an expanded sense of the threat surface that retailers – including ecommerce organizations – must face. The session will wrap up with an overview of best practices for protecting, detecting, and addressing these evolving threats.
Attend this webinar to learn about:
• The various types of POS malware threats and the implications of experiencing an attack
• The tools and processes that retail IT infrastructure teams need to have in place to protect their organizations from attacks
• Best practices for dealing with a POS attack; actionable “now what” steps for organizations who have been compromised by POS malware -
How Codenomicon Discovered Heartbleed Solutions For Protecting Your Organization
Recorded:
Apr 24 2014
64 mins
Ari Takanen, Co-Founder, Chief Research Officer, Mikko, Varpiola, Co-Founder, Developer, Sami Petajasoja, Vice President APACPresented by the experts with the facts.
The Inside Story of the Discovery, the Timeline and Solutions to Protect Your Organization. Finally, All of Your Questions Answered.
Join the conversation and get the latest Heartbleed updates by following @CodenomiconLTD -
BYOD Challenges, Recommendations & Best Practices from Box
Recorded:
Apr 24 2014
40 mins
Karishma Kothari, Box; Vish Mittapalli, Box85% of enterprises permit BYOD, but only 25-30% of them actually have policies and technology to manage these devices. What is your business doing to ensure that the content on that device stays secure, regardless of what device your employees are using? If you are considering moving to a BYOD strategy or are in the midst of doing so, join this webinar to learn how to develop and execute a BYOD plan in your company. We'll talk about major challenges from creating a BYOD strategy and best practices from ensuring that the content on your device stays secure with Box. -
Security Metrics to Manage Change: Which Matter, Which Can Be Measured?
Recorded:
Apr 23 2014
49 mins
Dr. Larry Ponemon, Chairman & Founder of the Ponemon Institute and Jody Brazil, Founder, President and CTO of FireMonSuccessful organizations run on key metrics and IT security should be no different. But which security metrics should operations, management and the boardroom be focused on? Factories focus on “days without an accident” Is the cyber parallel “days without a breach?”
What to measure, how to measure, and how to communicate performance is key to improving the security team’s effectiveness and standing within the organization. Information like:
- Which departments have access to which servers?
- Who are the privileged users and when are they most active?
- Where are the assets with vulnerabilities that can be reached from outside?
- When are security defenses like firewalls likely to maxout?
Join Dr. Larry Ponemon, Chairman & Founder of the Ponemon Institute, for key results of a new research study on security metrics and change management, and Jody Brazil, Founder, President and CTO of FireMon, for a pragmatic perspective on generating actionable metrics from your network security infrastructure and reducing the risks of relentless change. -
The New IT - How the World of Work is Changing and What IT Needs to Do to Adapt
Recorded:
Apr 23 2014
60 mins
Jacob Morgan, Co-Founder Chess Media Group; Ben Haines, VP/CIO, Box; David Baker, CSO, OktaThe future of work sees changes to how employees work, how managers lead, and how organizations are structured. However, technology still remains the central nervous system of organizations and things like enables flexible work, collaboration, communication, and BYOD. In short, IT helps organizations be competitive. But how is IT changing in the context of new work behaviors and expectations, a multi-generational workforce, the cloud, globalization, and many of the other trends that are shaping the world of work? Join us in this session as a panel of experts debates and explores how IT is changing and what the future of IT looks like. -
Modern Malware and the need for Remediation Innovation
Recorded:
Apr 23 2014
34 mins
Tyler Moffitt Threat Research Analyst, WebrootMalware today is very different from just a few years ago. Traditional AV technology is no longer able to consistently and fully remediate or defend against today’s most advanced threats. New and emerging threats such as ransomware, social engineering driven attacks and micro variant financial threats are just some examples of difficult to remediate infections. This presentation will take a look at the malware landscape and explain why these tactics are so effective against traditional AV technology. We will examine three specific families of infections and highlight their tactics to evade detection and what issues occur with remediation. Lastly, we will talk about Webroot’s innovation and how our SecureAnywhere AV solution is capable of defending against, and remediating today’s most advanced threats. -
Work Together Even When You're Not Together! Collaborate in the Cloud
Recorded:
Apr 23 2014
48 mins
Tracy Strauss, Cornerstone OnDemand; Neda Navab, Box; Rick Siegfried, MarketoCollaboration is crucial when it comes to your marketing team. No matter if you're based locally or globally, the concept of work and the way we interact is completely changing. With smartphones and tablets taking over our lives, efficient collaboration, coordination, and consistency around marketing campaigns and messaging can be challenging when running a marketing organization.
Join this webinar to discover:
- The latest and greatest in marketing automation and file sharing platforms
- Content collaboration tools that save time and keep branding consistent between teams
- How centralizing assets can ease global content translation and localization
- Real-time content and campaign sharing that can spark new ideas and educate your organization -
Data Protection and Compliance: Where Encryption Applies
Recorded:
Apr 23 2014
53 mins
Dave Shackleford, IT security consultant and founder of Voodoo SecurityOrganizations of all sizes face a number of industry and regulatory compliance mandates. Whether its PCI DSS, SOX, HIPPA or FISMA, these regulations are changing to accommodate the ever-growing threat to sensitive data.
Join Dave Shackleford, IT security consultant and founder of Voodoo Security, as he breaks down these updated requirements and how to remain current while securing your business.
Attend this webcast and learn:
- Best practices for protecting data in today’s complex security landscape
- Latest updates to compliance mandates pertaining to data encryption
- What these updates mean to your security teams. -
Panel: Securing Documents and Data In A Mobile World
Recorded:
Apr 22 2014
59 mins
Avni Rambhia, Industry Manager, Frost & Sullivan; Todd Brunsvold, 4Point; Dan Plastina, Microsoft; Benjamin Robbins, PaladorOnce upon a time, a knowledge worker accessed proprietary
documents on a company-owned desktop computer within the corporate
firewall. Today's work environment is dramatically different - sensitive
data and proprietary documents are increasingly produced and accessed
outside the firewall, on employee-owned devices. Virtual collaboration is
growing, and the cloud is redefining security paradigms even further. Yet,
some things remain the same. Intellectual property must be protected,
regulations must be complied with, and individual identities,
authentication and privileges must be dynamically managed. This panel will
look at how changing use cases and scenarios are changing the threat
landscape for corporate IP, and how leading vendors are rising to the
occasion to help enterprises meet these challenges. It will also discuss
best practices in developing and executing a forward-looking IP protection
strategy. -
Big Data Security: Challenges, Strategies and Tools
Recorded:
Apr 17 2014
33 mins
Dominic Listermann, CorTechs IncThe webinar will explore the challenges facing security professionals concerning the prevalent and ever-increasing risks to Big Data Security, recommended strategies for closing the gaps, and tools and techniques for keeping Big Data secure. -
Security Ratings: A Big Data Approach to Measuring and Mitigating Security Risk
Recorded:
Apr 17 2014
46 mins
Stephen Boyer of BitSight Technologies and Oliver Brew of Liberty International UnderwritersThe increasing volume of breaches we hear about in the news highlights the challenge risk managers face in working to address cyber risk. Current assessment methods, while insightful, are inadequate due to the pace at which security postures change, leaving organizations vulnerable and exposed in the blink of an eye. In order to truly reduce security risk, managers need more insight and better tools that allow for continuous visibility into the ever-changing network environments they are administering.
Join Stephen Boyer, CTO and co-founder of BitSight Technologies, and Oliver Brew, Vice President of Professional Liability at Liberty International Underwriters (LIU) for this webinar to discover:
- Why measuring security risk is difficult and how some assessment methods leave organizations vulnerable to threats and financial loss
- How forward-looking organizations are using Big Data to reduce risk, increase transparency and address new regulatory requirements
- Case Study: How LIU is using Security Ratings to mitigate risk -
The Security of Big Data: An Enterprise Perspective
Recorded:
Apr 17 2014
30 mins
Ian Lamont, BMW GroupEveryone knows that there are risks associated with moving enterprise data to a Cloud and everyone knows the huge potential that the analytics of Big Data can bring especially when using the Cloud, but what happens when these two converge.
The presentation will discuss some of the security and privacy challenges associated with Big Data in the Cloud and will present a number of key initiatives that the ODCA have done to support enterprises that wish to take this step. -
Building Your Backup and Recovery Checklist
Recorded:
Apr 16 2014
63 mins
Greg Shields, Concentrated Technology and Ward Wolfram, DellJoin backup and recovery experts to find out how to build your backup and recovery requirements checklist. By the end of this session, you’ll learn how you can:
-Cut storage requirements by up to 80%
-Save on storage costs and performance hits to your network.
-Leverage near-instant recovery technology for protected virtual machines or servers.
-Automate application-aware backups and testing for data corruption. -
The Cybersecurity Framework is here, now what?
Recorded:
Apr 16 2014
54 mins
Cameron Camp, Security Researcher, ESETNow that NIST has published Version 1.0 of the Framework for Improving Critical Infrastructure Cybersecurity, the long awaited CSF, what are the implications for companies? How can the CSF help your business improve its defenses? Cameron camp investigates. -
Beyond attack signatures: Leveraging realtime analytics to pinpoint threats
Recorded:
Apr 16 2014
36 mins
Neal Hartsell, Vice President of Marketing & Product Management, Click Security, Inc.Today’s security event monitoring and correlation tools are under enormous pressure. Security Analysts are inundated with data, but rather than being given insight, it is more difficult than ever to sort through and locate the real events that need attention. The next generation of security tools purports to process much larger and a greater variety of data sets, run deep-dive analytics in real-time, and rely more on intelligence than attack signatures. But what does this actually mean?
How do I collect the right data?
What kinds of new detections can I do?
How do I get enough context to overcome false positives?
How do I automate more of my security intelligence, or the intelligence of others?
What should I look for in a solution?
How is this different from my SIEM, IDS/IDS, and Advance Malware Detection products?
These, and other questions, will be addressed to shed light on what has quickly become a market space of tremendous promise, but currently shrouded in confusion. -
Re-defining Network Security Performance: Beyond Just Firewalls
Recorded:
Apr 16 2014
62 mins
Jeff Wilson, Principal Analyst, Infonetics; Steve Huberty, Principal Architect & Director, WatchGuardToday’s IT professionals need security firewalls that do more than just packet filtering and stateful inspection. It’s critical that network pros redefine which metrics will actually ensure their security solutions will not be a performance bottleneck. This webinar digs into today’s firewall solutions, exploring their capabilities and providing pointers for selecting the solution that best meets IT security and performance requirements.
What You Will Learn
Why packet filtering and IPS aren’t the only performance metrics that matter
The performance impact of running multiple security services
How to select in-line security products that meet today’s multi-function security needs -
Protection, Detection and Response: Security across the threat lifecycle
Recorded:
Apr 15 2014
4 mins
Patrick Morley, CEO, Bit9; Mike Viscuso, CEO, Carbon BlackPatrick and Mike discuss the importance of focusing on the complete security life-cycle: prevention, detection and response. They will also discuss the four essential pillars of incident response and how you can strengthen your security strategy across all endpoints, without getting buried in data. -
How do you find a needle in a haystack? Uncover Big Data Security Analytics
Recorded:
Apr 15 2014
38 mins
Neil MacDonald, Distinguished Gartner Analyst and Eric Schou, Director of Product Marketing - HPAdvanced targeted cyber attacks have hit some of the world’s largest businesses. The attacks weren't blocked because they don’t match any known attack signature. Each one is unique, custom created to penetrate the target network and steal data.
A new video featuring Gartner Distinguished Analyst, Neil MacDonald, and HP’s Eric Schou, explains how Big Data Security Analytics can help find and block targeted cyber attacks. View it to learn:
How advanced targeted cyber attacks are different from traditional threats
How Big Data techniques can spot attacks when traditional defenses fall short
What you should be doing now to take advantage of Big Data Security Analytics
The latest trends and best practice advice from the leading experts
This channel features presentations by leading experts in the field of information security. From application, computer, network and Internet security to access control management, data privacy and other hot topics, you will walk away with practical advice for your strategic and tactical information security initiatives.
- User agreement
- Privacy policy
- Patents pending
- Feedback
- © 2014 BrightTALK