Dyn DDoS Attack - What We Know & Why It Matters

Zero Trust security represents a transformation of security principles, technology, and processes which can effectively address today’s IT and threat landscape, and help organizations securely embrace the cloud. Zero Trust not only overcomes the shortcomings of traditional security tools and technologies, it provides a unified policy model and set of enforcement points across a heterogeneous technology landscape.



This is important, because cloud environments, for all their power and promise, do utilize a different set of security technologies, tools, and models compared with the traditional on-premises infrastructure. While there are often very compelling business and technology drivers to adopt the cloud, from a security perspective these changes bring with them a new set of challenges.



The good news is that a Zero Trust approach – utilizing the open, modern Software-Defined Perimeter (SDP) security architecture – is entirely achievable, and brings enormous security and operational benefits. As such, not only can embracing Zero Trust improve enterprise security, it can act as a secure bridge to the cloud.



In this session, we’ll define Zero Trust as a set of principles, and explain how the Software-Defined Perimeter - which verifies and secures all access to all resources, and strictly limits network access – avoids the limitations of traditional security



We’ll explain how an SDP implementation delivers fine-grained network access control, in a way that’s tied to each user’s context, and is dynamically responsive to changes in Cloud environments. We’ll make this concrete with a customer case study, showing how one enterprise obtained technical, business, and compliance benefits from deploying this solution as part of their Cloud migration.

So you've deployed your cloud-native application in production. And you've put in place network policies and security & compliance solutions to ensure that your applications are protected and compliant.

What if I told you that your data might still be leaking out? What if your applications are still talking to unsanctioned domains and CnC sites? What if your use of cloud services are getting compromised? What if rogue insiders with access to credentials are misusing your environment or stealing info? What if I told you that you still have a number of risky security holes and blind-spots in your environment that you are not aware of?

This session talks about the effective strategies -- of how to detect and mitigate against intrusions and risks from lateral breaches, egress breaches, cloud services breaches, in your environment and how to mitigate them -- so you can focus on productivity and business continuity.

Misconfigurations are the leading cause of cloud breaches. As the Security Leader of your organization does your strategy properly address these challenges? Do you know what to discuss with the Senior leaders of you business? This presentation covers the considerations and some tips on how to relate these risks to the Leadership.

Take aways:
1. Considerations when selecting cloud solutions
2. Tips on how to communicate with Leadership
3. How to evaluate the shared security responsibilities that come with cloud solutions

We have seen explosive growth in organizations moving applications, services and systems to the Cloud but unfortunately many do not understand how to secure these environments. Numerous IT and Security departments approach security in the cloud as they were securing individual servers in a data center and do not understand how to prevent data breaches or accidental data disclosers. Organizations are also struggling with how to effectively get full visibility into the cloud environment to monitor for malicious activity or configuration errors.

This presentation will focus on how to prevent and detect cloud security incidents including:

- Cloud Security Threats
- Review of Cloud Data Breaches
- How to Prevent Cloud Security Incidents
- How to Detect Cloud Security Incidents

Attendees to this discussion will come away with an understanding of the threats to cloud platforms and how an organization can develop solutions to effectively prevent and detect cloud data breaches. We will also provide best practices and native cloud solution recommendations to harden and monitor their applications, services and systems.

This episode of the Election Hacking Original series will explore the impact of social media platforms on democratic elections, with a special focus on the 2020 U.S. presidential election.

Join this panel to ask your questions and learn more about:
- Has anything changed since 2016 and how
- What can we learn from examples of other elections around the globe when it comes to the spread of disinformation
- How has disinformation been used to suppress voting
- What's new on the threat landscape for November
- What is the likelihood of a cyber attack against elections

Moderator: David Morris, Executive Director at Digital Risk Management Institute

This episode is part of the Election Hacking Original series examining the threats to democratic elections, the technologies used to power and hijack elections, and what's needed to educate and empower voters before Election Day.

Securing the access to cloud data assets has never been more important. According to the latest Verizon DBIR, 73% of cloud breaches involved an email or web application server, while 77% of these cloud breaches also involved breached credentials. What does this mean for enterprise cloud security, especially in the time of COVID19 and remote working?

Join this keynote panel to learn more about:
- How the landscape has changed in 2020
- Why attackers are focused on identities
- Understanding privileged user behavior and securing identities
- Discover how organizations are doing IAM, and what's needed for a more secure enterprise
- Best practices and recommendations by the experts

CISO Strategies for the Cloud: Key Factors to Consider when Building a Successful Cloud Strategy addresses the critical information security elements that every organization needs to consider as part of their Cloud Strategy. This presentation brings together experts in Information Security, Cloud Architecture, and Big Data Analytics to provide the attendee with the information they need to put a secure cloud strategy in place today.

Cloud adoption is becoming and essential part of an organization’s competitive survival. This talk will provide guidance for the CISO organization is what to expect and how to stay in step with an IT organization tasked with rapid cloud migration. It is a new landscape and new challenges to governance, risk and compliance. Be part of the cloud journey and not left behind.

Join this episode of The (Security) Balancing Act for an insider's view of life on the front lines of cybersecurity.

This panel will look into what it's like to work in and manage a Security Operations Center (SOC), as well as share best practices for keeping your team of front-line defenders sane, empowered and happy, and your organization secure.

The topics up for discussion during this episode include:
- What kind of people are best suited for work in a SOC?
- What kind of training / certifications / skills are needed to be successful?
- How to handle alert fatigue and analyst overload?
- Is automation (ML & AI) the answer?
- What do you do when IOCs aren't enough?
- Hunters vs. responders, what's the difference?
- How the pandemic is impacting security operations?
- Building a healthy team culture and managing self-care in the age of breaches
- What's needed to make life easier for these front-line cyber defenders

This episode is part of The (Security) Balancing Act original series with Diana Kelley. We welcome viewer participation and questions during this interactive panel session.

CISO Strategies for the Cloud: Key Factors to Consider when Building a Successful Cloud Strategy addresses the critical information security elements that every organization needs to consider as part of their Cloud Strategy. This presentation brings together experts in Information Security, Cloud Architecture, and Big Data Analytics to provide the attendee with the information they need to put a secure cloud strategy in place today.

The last 10 years have not just changed our applications and systems, but our entire businesses. Digital Transformation has been a key part of most large enterprise’s strategy, fueled by cloud services, mobile devices and ubiquitous connectivity, this is transformation continues to evolve. In the scramble to transform, cloud applications and cloud platforms became commonplace and with security struggling to cope, this led to an explosion of new tools, systems and procedures.

Where Digital Transformation leads, Digital Risk follows, raising concerns about exposure from the existing cyber-security controls and their assumed risked models. Even these relatively modern approaches are starting to show their age, again struggling to stay ahead of the transforming cloud and network models.

In a continually transforming environment, where agile is king, cloud comes first, apps are server-less, networks borderless, buildings don’t matter and employees are working everywhere, cyber-security must also transform.

Our cyber-security thinking and approach must adapt to cater for this new risk reality and cut across both the business and technology silos. This is fundamentally changing the paradigm that cyber-security instrumentation, controls and people are working under.

In this talk, we will explore how cyber-security organizations can navigate this change to deliver the security and risk out comes their leaders, users and customers expect.