Addressing Obstacles to Cloud Computing

Attacks like the Google Docs phishing scam that swept across the internet in early May showed a level of sophistication above regular phishing scams. More importantly, it will likely happen to other online services, thanks to a common login mechanism that is used by hundreds of websites.

Join this panel of security experts as they discuss:
- The nuts and bolts of the Google Docs worm
- How it was resolved
- What to expect in the future
- How to avoid becoming a victim to phishing scam: What to look out for and what NOT to do

Speakers:
- Travis Smith, Principal Security Researcher at Tripwire
- Cameron Naghdi, Sr. Security Engineer at Malwarebytes
- Filippo Valsorda of the Crypto Team at Cloudflare

Join us for this rare opportunity to hear Mark Kelton, a former senior CIA official, who concluded his career as Deputy Director of the National Clandestine Service for Counterintelligence, discuss the insider threat.

Mr. Kelton led the unit that protected the Nation’s most closely guarded secrets – and by virtue of his experience overseeing the Intelligence Community’s “Gold Standard” Insider Threat Detection program, Mr. Kelton has comprehensive expertise in the detection, investigation and mitigation of Insider Threats.

Cyber attacks have increased in frequency and severity, and financial institutions are particularly interesting targets to cyber criminals. Join this presentation to learn the latest cybersecurity threats and challenges plaguing the financial industry, and the policies and solutions your organization needs to have in place to protect against them.

Viewers will learn:
• Current trends in Cyber attacks
• FFIEC Cyber Assessment Toolkit
• NIST Cybersecurity Framework principles
• Security Metrics
• Oversight of third parties
• How to measure cybersecurity preparedness
• Automated approaches to integrate Security into DevOps

About the Presenter:
Ulf Mattsson is the Chief Technology Officer of Security Solutions at Atlantic BT, and earlier at Compliance Engineering. Ulf was the Chief Technology Officer and a founder of Protegrity, He invented the Protegrity Vaultless Tokenization, Data Type Preservation (DTP2) and created the initial architecture of Protegrity's database security technology. Prior to Protegrity, Ulf worked 20 years at IBM in software development and in IBM's Research organization, in the areas of IT Architecture and Security, and received a US Green Card of class ‘EB 11 – Individual of Extraordinary Ability’ after endorsement by IBM. Ulf is the inventor of more than 45 patents in the areas of Encryption, Policy Driven Data Encryption, Internal Threat Protection, Data Usage Control and Intrusion Prevention.

By understanding the inner workings of exploit kits, you’ll be better equipped to protect your organization from them. Join Scott Simkin from Unit 42 as he breaks down how today’s attackers are automatically exploiting vulnerabilities in common systems.

You’ll learn about:

- Why exploit kits are increasing in popularity
- The process for launching exploit kit campaigns
- How to defend your organization from exploits

This past week we saw the emergence of a worm-based ransomware attack in wannacry that showed us how damaging these attacks can be to critical services society relies on.

This presentation will cover the recent wannacry attacks and what we have learned from them. In addition, we'll discuss the evolution of ransomware in recent years, focusing on attacks targeted against enterprises and so-called "high-interaction" ransomware attacks. Attendees will also be given a path forward of protecting their institution. A discussion of the renewal of Business Continuity and Disaster Recovery as a result and what this means for fintech going forward.

About the Presenter:
John Bambenek is Manager of Threat Intelligence Systems at Fidelis Cybersecurity and an incident handler with the Internet Storm Center. He is also a faculty member of the Department of Computer Science at the University of Illinois where he teaches courses in cybersecurity. He has been researching security threats and criminal organizations for 17 years and coordinating with US and foreign law enforcement entities to help bring criminal actors to justice.

Every day, organizations are impacted by cyber-attacks. Misleading indicators, complex security incidents, and evolving intruder patterns require new threat intelligence and analytics. With millions of data to analyze, every second counts - augment your security tools with real-time threat hunting capabilities and new research insights.

Join experts Jason Stamper, Analyst for 451 Research, and Eric Tran-le, CMO for Logtrust, as they affirm how essential real-time threat hunting is for cybersecurity teams, and share new insights and tools for combatting attacks.

• Learn new trends in machine data analytics from 451 Research
• Pinpoint cybersecurity attacks and unusual behavior
• Visualize an attack graph
• Detect intruder paths and potential vulnerabilities
• Leverage a single source of truth

Fintech may still be in its early stages, but it's seen tremendous growth and is expected to see global investments exceed $150 billion in 2017. With the proliferation of mobile apps, cybersecurity is extremely important. Trust is a key difference maker for customers, so fintech companies need to ensure that their sensitive client information stays secure.

Join this panel roundtable of cyber security experts as they discuss:
- The top cyber threats financial institutions are facing
- Ransomware, data loss & BCDR
- Mobile banking apps and security vulnerabilities
- Recommendations on improving security and establishing consumer trust

Speakers:
- JP Bourget, CSO of Syncurity
- Ted Eull, VP Privacy and Risk at NowSecure
- RJ Gazarek, Product Manager at Thycotic
- Jason Kent, CTO of AsTech Consulting

On Friday the news broke: a massive ransomware attack which started in the UK NHS immediately spread to global proportions. By Sunday, the attack had impacted over 200,000 organizations in 150 countries. Listen to Phil Richards, CSO of Ivanti and a panel of security experts discuss how to recover from the WanaCrypt Ransomware attack and safeguard your environment against the evolving threats that are likely to come.

Presenters:
• Phil Richards, CISO
• Chris Goettl, Manager of Product Management, Security

About Phil Richards:
Phil Richards is the Chief Information Security Officer (CISO) for Ivanti. He has held other senior security positions including the head of operational security for Varian Medical Systems, Chief Security Officer for Fundtech Corporation and Business Security Director for Fidelity Investments.

Ransomware was one of the biggest threats facing businesses in 2016 and that trend is expected to continue as we press further into 2017.

As more and more cheap malware becomes available to cyber criminals the sheer amount of ransomware attacks is on the rise.

However, cyber defences are beginning to catch up.

This expert video panel will be discussing the ransomware landscape, what you can do to better protect your business from the threat and steps to take should the worst happen.

Panelists:

- Josh Downs, BrightTALK (moderator)

- Adrian Taylor, Field CTO, FireEye

- Ian Whiting, CEO, Titania

- Bart Parys, Threat Intelligence Analyst, PwC

Focus of the talk:

The current global political climate and the increased number of cyber attacks associated with nation states and revelations from whistleblowers such as WikiLeaks. The strategies and potential reasons for such attacks – We are seeing a focus shifting from financial gain
to political power, control and mass surveillance.

Audience learning:

A view of the technologies utilised and targeted to perform the attacks such as malware targets such as iPhones, Android devices and smart TVs and malware on Windows, Osx, Linux etc

Audience takeaways:

The talk is aimed at those with a general interest in Cyber Security and how political gain is firmly intertwined and a tool utilised in state sponsored cyber attacks indiscriminately against corporations, criminals and citizens alike.

------------------

Indy possesses over 14 years’ experience, having worked in both
operational and consulting positions at FTSE100 and Fortune 500
organisations including AXA, Deutsche Bank, PwC, Accenture,
Mercedes-Benz, Jaguar Land Rover and many other world leading
organisations.

His experience includes leadership positions in information/
cybersecurity transformation, risk assurance, crisis management
(pre and post incident), assurance, audit, governance, risk and
compliance programmes.

- BrightTALK at CRESTCON & IISP Congress -

BrightTALK caught up with Titania's Ian Whiting for an in-depth conversation on the current state of information security, today's threatscape and a discussion on the cyber industry.

Topics up for discussion:

- How to run a comprehensive pentest to protect your business

- How to get the most from your cyber security budget

- AI & Machine learning and the influence it'll have on the security industry

- The explosion of connected devices on the IoT and where networks are especially vulnerable

This presentation goes into details of BlackEnergy3+ and SocialBots attacks and how we use forensics and CyberNSight to reduce Risks based on Data Breach exposure and analysis. This presentation discusses the differences in Threat and Risk Intelligence and how Hakdefnet has changed security by creating a unique Actionable Risk Intelligence platform / solution.

---------------

Hakdefnet is a cyber-security Start-up company that gives customers the opportunity to protect themselves more comprehensively, cheaper and easier than ever before. We analyze security gaps, find stolen data - including the Darknet, and can individually protect Critical Infrastructure, VIPs and Enterprises globally. Based on CyberNSight, VCISO and our RIP (Risk Intelligence Platform) Subscriptions, our customers not only know if but also how they were attacked, and what happened with their data. This (we believe) is the only way to really minimize the damage caused by cyber attacks and avoid them in the future.

Michael Goedeker is an author and researcher at the front end of cyber warfare, espionage and crime, and he researches for academia, press and security professionals globally.

Michael A. Goedeker is a German American researcher, born in 1971 in New York City. He has worked in the IT Security field for over 16 years, training and consulting for fortune 500 companies. He has worked on worldwide security projects for Accenture, Avande, Microsoft, IBM, Symantec and Sophos.

Ransomware is becoming a more prevalent problem and attackers are becoming more straightforward; not even bothering to masquerade as legitimate agencies anymore. You may be wondering what you can do. First we would encourage you not to pay and then put protection in place so you won’t be victimized again.

Learn how Symantec Endpoint Protection 14 can help protect you from future ransomware attacks:

• What are your options if you’re a victim of ransomware
• Why Symantec Endpoint Protection 14 can address ransomware better than other solutions
• How Symantec technologies work together for maximum protection

Join the smartest minds working with PCI DSS compliance and find the answer to your toughest and most vexing PCI questions. With hundreds of different requirements, the various Payment Card Industry (PCI) standards can be overwhelming. While the PCI Security Standards Council has provided lots of answers, the devil is often in the details. Our panelists are some of the top PCI QSA’s in the country, with decades of combined PCI and card processing experiences. They’ve seen it all: the good, bad and ugly; and lived to tell the tale.

Join Ben Rothke, David Mundhenk, Arthur Cooper, and Jeff Hall for an interactive session, and get answers to your most vexing PCI questions. No PCI question is out of bounds.

Moderator:
- Ben Rothke, Senior Security Consultant - Nettitude Ltd.

Panelists:
- David Mundhenk, CISSP, PCIP, QSA (P2PE), PA-QSA (P2PE), Senior Security Consultant, Herjavec Group
- Arthur Cooper "Coop", Senior Security Consultant - NuArx Inc.
- Jeff Hall, the "PCI Guru", Principal Security Consultant, Optiv Security

Encrypting sensitive information is a pervasive requirement for today’s organizations, but too often, little attention is given to key management and its implication on how effective encryption is against various threats like hackers or malicious administrators.

Register for this webinar to learn:
• How double encryption ensures the security and integrity of sensitive data
• Key elements of an effective double encryption management strategy
• Using double encryption wisely to overcome common pitfalls

About the Presenter:
Sebastien Boire-Lavigne is an Executive Vice President and CTO at XMedius. For over 15 years Sébastien has been a driving force at XMedius Solutions, and has been instrumental in developing XMedius’ technology strategy. Among his many accomplishments, Sébastien led the development of the ground-breaking XMedius Fax-over- IP technology and cloud platforms. His versatility, wide-ranging technical skills and keen business acumen allow him to seamlessly bridge the technical – business divide. In addition to leading Product Development, Sébastien is also responsible for Customer Services, IT and Information Security.

IDC called SSH keys “the gaping hole in your IAM strategy.” For a reason, when many banks and enterprises have literally millions of unaudited credentials granting access to their production servers and use OpenSSH configurations that allow any system administrator to self-provision permanent access to any server they use - for themselves and others - and there is no termination process for this access.

It is a fundamental question of Who can access what, of separation of duties, and of enforcing internal boundaries (to PCI systems, financial data, health information, development vs. production, or classified compartments). Every cybersecurity regulation requires basic control of identities and access, and that is where real security starts.

Half of the top 10 banks in US and UK have now began addressing the issue. Most other enterprises are only beginning to grasp the problem.

This talk explains the issue and how to start addressing it. By the principal author of NIST IR 7966, the NIST guidelines for managing SSH access.

About the Presenter:
Tatu Ylonen is a cybersecurity pioneer with over 20 years of experience from the field. He invented SSH (Secure Shell), which is the plumbing used to manage most networks, servers, and data centers and implement automation for cost-effective systems management and file transfers. He is has also written several IETF standards, was the principal author of NIST IR 7966, and holds over 30 US patents - including some on the most widely used technologies in reliable telecommunications networks.