Name: OWASP Panel: New Web Application Threats and Ways to Secure Them
Uploaded: 2011-03-16T17:45:12.000Z
Duration: 45 min 12 s
Description: Join an expert panel of OWASP leaders as they discuss new web application threats and give their insights on ways to secure them for your business.

This channel features presentations by leading experts in the field of information security. From application, computer, network and Internet security to access control management, data privacy and other hot topics, you will walk away with practical advice for your strategic and tactical information security initiatives.

Join WiCyS Strategic Partner, AWS will discuss misconfiguration in the cloud, its patterns, threats, and risk to an organization/business. Understanding the shared responsibility model and how we can protect our organizations. We will be going through a use-case exercise and attendees will learn how we can implement the shared model.

Mis-Configuration in the Cloud

With the huge expansion on the attack surface of an organization and the dynamic growth in the realm of Cybersecurity, employees are tempted to choose the latest and greatest product in the market to make life easier for them. While busy individuals think they are finding a solution to their problem, not assessing the associated security risks can cause more problems than it solves! What vulnerabilities are associated with this new tool? Who should have access to the data? Who should own the application? It is quite common for products from vendors to become compromised.

In this presentation, WiCyS strategic partner, Workday, will talk about how Enterprise Security establishes the relationship and collaborates with various security teams before a technology is approved.

Enterprise Security: The Batman Effect

Tune into this session to learn about the importance of identifying and protecting various types of assets within organizations and how using a multi-layered approach of implementing security solutions can reduce the risk of a potential cyber attacks and threats. Attendees will discover how threat actors locate sensitive information about their targets that can lead to compromising a company and stealing data. Furthermore, viewers will gain hands-on experience in getting started with using popular tools within the cybersecurity industry to identify security vulnerabilities on their systems and network while learning how to secure them. Lastly, viewers will explore the need for developing an incident response plan and creating a team that's well-prepared to catch any security event and handle any incidents.

Key Takeaways:
- Understand the need for data protection and defense-in-depth.
- Discover how organizations leak sensitive data without knowing.
- Get started with identifying potential security vulnerabilities.
- Explore the need for incident response planning and procedures
- Build an incident response team.

Protecting organization data against cyber attacks, threats and data breaches

Businesses are now spending $170.4 billion on information security annually, according to research from Gartner. Despite this huge investment, IBM's annual security report found that the average cost due to a data breach rose from $3.86 million in 2020 to $4.24 million in 2021, the highest in 17 years. Headlines call out the latest victims, including some of the world's biggest corporations. But how can businesses protect themselves when employees are scattered, data is exploding, and devices are proliferating?

In this expert panel, cybersecurity experts will discuss best practices for proactively protecting your organization from the most common threats, and what to do when a breach does occur. 

Join us to explore:

-- Preventing breaches from external and internal threats
-- Tools and techniques for detection and response
-- How the speed of response to a breach can minimize its effects
-- Adapting breach protection to hybrid work models
-- How modern architectures such as IoT and edge affect a breach prevention strategy


Panelists include:
Jeroen Hekelaar,  Manager, Solutions Engineering EMEA, SonicWall

Don't Become the Next Cautionary Tale: Top Breach Prevention Strategies

This talk will detail how to plan your application ecosystem landscape to withstand multi-layered attack.

Key Takeaways:
• Understand which tools are better aligned with your stack.
• Apply best practice to develop active simulation exercise.
• Review of disaster recovery as monthly initiatives.
• Align your business continuity to critical assets.

Planning Your Application Ecosystem Landscape to Withstand Multi-Layered Attack

Hackers will never stop their attack attempts, and organizations must be aware they could be breached any second! So tune into this presentation to discover:
• How to best prepare against those attacks? 
• What tools to leverage?
• How can your security team detect even the latest, more sophisticated foes and, most importantly, how can you respond to their attacks?

Join Dr. Erdal, corporate CISO and president of the Global CISO Forum, to learn how you can master your breach detection learning from real-life examples.

The Art of Breach Detection

Today's security operations centers (SOCs) are inundated with an endless stream of alerts, vulnerabilities, and threat intelligence. But the reality is that no matter how large or well-resourced a security operations team, there will always be more work to do. So the next-gen SOC must be calibrated to work smarter, not harder. 

In this webinar you will learn:
•  What are the main inefficiencies in SOC operations.
•  How to use technology to address the inefficiencies.
•  How to use people and processes to address the inefficiencies.

The Next-Gen SOC: Optimizing to Make the Most of Limited Resources

Data breaches increased a staggering 68% in 2021, according to Identity Theft Resource Center's annual report, affecting individuals, municipalities and nation states, businesses large and small, and public utilities and resources. Attacks involving ransomware more than doubled, and the most popular business targets were in manufacturing and utilities. Understanding these trends and anticipating how and why attackers might single out your business operations or employees is critical to mitigation.

This panel of security experts will explore the current state of cybersecurity and how to use threat intelligence and threat hunting to identify risk and avert disaster.

Join us to learn about:

-- The new breed of cyber criminals and why they attack
-- The types of breaches your business should fear most
-- The best sources of threat intelligence 
-- How threat hunting and threat modelling can help your business proactively deter attackers
-- How to increase security awareness throughout the organization

How to Keep up with the Cyber Threat Landscape

Breaches happen by clever and well-armed cybercriminals who use many tactics, techniques, and procedures to infiltrate IT infrastructure, implant malware, and execute attacks. There is a lot at stake, so you need to know as much as possible with little or no delay to minimize adverse consequences.

Network monitoring that pipelines packets from the core network to cybersecurity analysts and analytics is the foundation of detecting and responding. Stealth is an often-used weapon, so monitoring with the highest possible fidelity is necessary to detect increasingly subtle Indicators of Attack and Indicators of Compromise.

This webinar will provide a stepwise plan for achieving faster breach detection and maximizing resilience to cyber risks by showing you how to: 
 
• Instrument any network, physical, virtual, hybrid-cloud, for high-fidelity monitoring to losslessly acquire and reliably deliver network packet data to SOC and SecOps security analysts and the analytics and tools they use
• Capture, store, and organize network packet data for use as security evidence 
• Forensically analyze security evidence to facilitate a rapid and effective response

Faster Breach Detection

Cyberattacks against healthcare jumped 42% in 2020 and another 35% in 2021. 

Successful cyberattacks disrupt healthcare operations, delay access to clinical services, and lead to significant economic loss. Stolen patient records can be used to commit fraud and identity theft, disrupting patients’ personal lives. 

Medical information is an attractive target because it has high economic value on the black market. 

If you are interested in protecting patients and the healthcare organizations that serve them from cybercriminals, join WiCyS Strategic Partner, Optum, to learn about the career opportunities in healthcare cybersecurity.

Cybersecurity Careers in Healthcare

As adversaries continue to expand their attack vectors, defenders protecting organizations must evolve their responses. Attackers begin by infecting files. They then grow to infecting systems until they eventually aim to infect the enterprise. 

Defenders must be able to connect these dots to have a comprehensive understanding of the threats.

Evolving Threat Response

Cyber threats continue to increase and are impacting almost all aspects of modern life.  Ransomware, malicious domains, espionage and digital disruption are the most common attacks of recent times.  Understanding how these vulnerabilities and their exploits are changing, provides helpful insights into combatting new threats. Cyber threats change over time, as do the countermeasures that best protect against them like:

• Ransomware
• DDoS (distributed denial-of-service)
• State-sponsored cyber actors
• Social engineering and phishing threats -- increase in sophistication
• Data exportation, breaches and insider threat

Key takeaways:
• Leverage best practices and frameworks such as NIST & ISO 27001 to manage the threat landscape.
• Prompt innovation can help protect against cyber threats.
• Build cyber threats awareness and training culture to test it regularly.
• Consider the source and validity of information when making decisions.

Trends in Cyber Threats and Top Countermeasures

In this talk with WiCyS Strategic Partner, AWS, we will discuss cloud monitoring challenges focusing on observability, threat detection, incident response, and compliance on AWS.

 Attendees will learn about multiple AWS-native logging and monitoring opportunities based on the AWS services.

If It Moves - Log It!

Major cyber-attacks are on the rise, introducing never-ending business risks. This webinar with WiCyS Strategic Partner, PayPal, will discuss how organizations could prepare for the next large-scale security incident and improve their response effectiveness. Three members of PayPal's cybersecurity team will use the response to log4j, the critical vulnerability that plagued many companies this past December, as a case study.


Can't make it to the webinar? Go ahead and register to receive a recording as soon as the webinar is complete.

Responding to Mega Cyber-Incidents

Simulated Phishing programs are hard to build, easy to destroy, and labor intensive. Tune in as Ms. Epps will present lessons learned from two years of enterprise simulated phishing in the Duke Academic Medical Center including:

• Documentation, executive support, staffing, platform selection and pilot testing.
• Phish template tips, entity and user engagement, phish reporting.
• Safe-listing and working efficiently with your mail and security teams.
• Metrics, program maturity and gamification.
• How you know you’re doing it right (or wrong).
• Taking it beyond phishing.

Simulated Phishing -- Two Years of Near Misses

This study explores collegiate eSports student-athletes’ and administrators’ perceptions of student safety/cyberbullying within higher education while also highlighting the correlation to traditional business initiatives and the protection of employees. Specifically it outlines cyber safety, from the lens of minorities, and documents the thoughts of participants who compete, discerning the impact cyber safety has had on their lives. Tactical suggestions for increasing cyber safety and overcoming common cyber threats that may impact individuals and communities of color will also be discussed.

What cyber-bullying initiatives can teach companies about protecting employees

Let’s face it, cyberattacks such as ransomware are becoming more common and more complex. The coming 12 months will bring increasingly aggressive cybercrime activities as malicious actors continue to pivot their ransomware attacks from data encryption to data exfiltration

The question to you is this: are you doing everything you can to protect your organization from a ransomware outbreak?

Join our session to know the trends in Ransomware in 2022 and to know how to ensure you’re prepared and ready to respond to any ransomware scenario

Ransomware Trends in 2022

Cybercrime has evolved rapidly, and we all need up-to-date response techniques to match. Today's adversaries are targeting suppliers, while leveraging zero-day vulnerabilities and malware-free attacks to evade detection. At the same time, remote work capabilities and the shift to the cloud have greatly increased the attack surface. 

How should you respond to modern cybersecurity incidents? More importantly, how can you detect evidence of an intrusion early enough to minimize or prevent damage? In this talk, we will highlight:
* New response trends and the changing threat landscape.
* Supply-chain incidents such SolarWinds.
* Mass zero-day exploits, such as Log4j.
* Malware-free attacks and detection strategies.
* Incident notification trends.

Join us and get practical strategies for adapting your incident response best practices to reflect today’s increasingly interconnected threat landscape.

New Trends in Cyber Incident Response and Forensics

Join an expert panel of OWASP leaders as they discuss new web application threats and give their insights on ways to secure them for your business.

OWASP Panel: New Web Application Threats and Ways to Secure Them

OWASP

InfoSec

Application

Security

AppSec

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

OWASP Panel: New Web Application Threats and Ways to Secure Them

Presented by

About this talk

More from this channel