OWASP Panel: New Web Application Threats and Ways to Secure Them

While cyber attacks come from all directions, the majority of them originate on endpoints. In this webinar UJ Desai, Director of Product Management at Bitdefender will discuss why organizations are still struggling with endpoint security, and will explore the five critical elements of endpoint security that will allow organizations to effectively defend endpoints from both common and advanced cyber attacks.

Join security experts and practitioners for an interactive discussion on how to better secure the enterprise in 2019:
- Top threats on the horizon and what's at risk
- Cyber defenses and your employees
- Basic cyber safety recommendations to protect against social engineering, phishing and email cyber attacks
- Use cases and examples
- Actions to take today to protect your employees and enterprise from cyber criminals
- What to expect in 2019

Speakers:
- John Bambenek, VP Security Research & Intelligence, ThreatSTOP
- JP Bourget, Founder & Chief Security Officer, Syncurity
- Jan Liband, CMO, SlashNext

The largest threat of organisational breach occurs at the Endpoint level. Hacks, phishing, malware and untrained end users are a constant risk that need safeguards and monitoring to protect individuals and businesses with strong IT security. Small changes to your endpoints can drastically improve your protection. However, when you manage one or more businesses and need to implement and maintain these changes across multiple machines or environments, different complications will arise.

Join Webroot’s Threat expert as he discusses topics such as:

· Malware
Miners
Information Stealers
Ransomware
· End user education
· Best policies and settings for your Endpoints
· Endpoint monitoring

Globalization and division of labor has allowed multi-national corporations and businesses to focus on their core capabilities while outsourcing all various ranges activities form legal services, IT services, marketing, etc... these trends will continue to gain speed as global markets become much more efficient.

Proliferation of suppliers has also rapidly increased emerging threats such as privacy, data sharing and cyber risks. The key takeaway for audience in this presentation will be over all discussion of dimensions of supplier risks and how to holistically develop a proper comprehensive supplier report card that includes financial and cyber data.

Measuring the effectiveness of a security program can be a challenge for most organizations. After all, when you do everything right, nothing happens. No email outages, no denial of services impacts and no data breaches. Measuring nothing doesn’t really tell you much, and it certainly doesn’t give you insight into where you’re still vulnerable and could be attacked by a malicious actor. Vulnerability Management (VM) tools have been a mainstay tool for any security program, and they generate a wealth of information about what assets are most at risk from outside threats, but the information isn’t always put to best use by most organizations.

In this session, we’ll look at the common metrics mistakes most organizations make with their VM efforts, as well as more relevant and actionable metrics that will help you get a better understanding of your security posture against today’s threat landscape.

· Learn how vulnerability information is critical to boosting good threat intelligence against common attack chains
· Identify metrics that are commonly used by nearly every organization, but don’t deliver any real value to your organization
· Discover ways to frame vulnerability data into meaningful, actionable metrics that give a more true sense of the risks to your assets
· Understand ways to improve your VM program to build more relevance into your threat intelligence efforts

User and Entity Behavioral Analytics (UEBA), when properly implemented, can be incredibly valuable: it can provide security teams with a new lens through which to detect, investigate, and respond to evolving security threats. However, there is a lot of hype in the world of AI, and not enough real use cases or concrete recommendations. This webinar aims to help correct this, with real world use cases and learnings from the past five years of deployments at Interset.

In this presentation, attendees will:

- View real-world case studies showcasing objectives and results from deploying UEBA
- Understand the role of human expertise and use cases to drive and quantify model development
- Review the most effective data sets for UEBA
- Learn about the analytical approach that helps effectively produce results and reduce noise in your UEBA system

Global cybersecurity analyst Liviu Arsene will discuss how advanced threat detection and visibility into the overall cybersecurity posture of an organization can help prevent data breaches, by placing under the scope some of the most recent and notorious data breaches and cyberattacks.

As cyber attacks become increasingly common, it is vital for organisations to be armed with the most effective tools and knowledge to prevent, detect and respond to cyber threats.

Join this interactive Q&A panel with top security experts across the ecosystem to learn more about:

- Trends in Advanced Threat Detection & Vulnerability Management
- How to use analytics to fight against cyber attacks – patching, detection and response
- What are the common mistakes made when it comes to Advanced Threat Detection implementation
- Best practices and recommendations for improving your security posture

Panel moderated by:
Michele Drolet, CEO, Towerwall

Panelists:
Wade Woolwine, Director of Managed Services, Rapid7
Ajay Uggirala, Sr. Manager, Product Marketing, Juniper Networks
O'Shea Bowens, CEO & Founder, Null Hat Security
Paul Crichard, Security CTO, BT Global Services

This webinar will introduce the latest and larger security breaches around the world, and will show the attendees several ways and tips to stay safe and keep the most piece of information secure, their private information.

Also they will find what to do in case of been victim from a security or data breach.

Often the building blocks for a CTI program can be laid without the need for teams to spend a lot of money. In this session, we'll look at how Free and Open Source Software (FOSS) technologies and OSINT (Open Source Intelligence) can be leveraged to bootstrap a CTI program.

The primary benefits of leveraging FOSS tools are (a) Agility - rapidly test tools to identify what works best for the organisation, (b) Identification of potential process gaps, (c) Implementation of "interactions" between key teams and (d) Being part of the broader FOSS/CTI community.

What is cyber threat intelligence, and how can organizations leverage it to identify threats and potential malicious activity in advance? Discover the best ways organizations can arm themselves with actionable threat intelligence to block cyber attacks or mitigate their impact.

Join this panel of experts to learn more about:
- Cyber threat intelligence: What it is and how you can use it
- What's new in phishing, banking trojans, Mirai, ransomware
- Emerging threats and what to do about them
- Best practices for a more secure enterprise

Panel moderated by:
Griff James, Director, Damrod Analysis Ltd.
Panelists:
Michelle Drolet, CEO, Towerwall
Nathan Wenzler, Snr. Director, Moss Adams
Chris Morales, Head of Security Analytics, Vectra Networks

Cloud application development is accelerating and diversifying where many organizations have virtual machines, containers, and now serverless applications running in the cloud, transforming code into infrastructure. Microservices make a lot of sense for scale and development agility, but if everything is talking to everything else via APIs, it’s likely that there are many (and I mean many) application vulnerabilities. Additionally, API security is new, so processes are likely immature, and API security sits somewhere between application developers, DevOps, and cybersecurity, leading to organizational and skills challenges. We will organize this chaos from RSAC 2019 and discuss Security in the new API Ecosystem.

Join this interactive webinar to learn more about:
- What security people should talk about instead
- The Human Factor
- Advancements in Machine Learning and AI
- Security in app development and the API economy
- News in quantum computing and multiparty computing
- Trends in innovation and cloud security
- New standards and regulations

We will also discuss:
- How IT Audit can be automated to meet new requirements from for Agile Development and cloud
- How IT Audit can learn more about new controls and technologies
- How IT Audit can be involved early in the DevOps planning phase
- How Artificial Intelligence can be used in IT audits to expand beyond sampling