From Virtualization to Private Cloud - Expert Panel Session
Virtualization in some ways has become a stepping stone for organizations to move into the cloud.This panel would discuss how companies take their business to the next level from virtualization to the cloud. What are the challenges to be expected and what factors need to be taken into consideration? What about security? Is cloud computing the next logical step? How can the two technologies work together to reap the benefits of each?
Recorded
Jan 11 2012
55 mins
Your place is confirmed,
we'll send you email reminders
we'll send you email reminders
Presented by
Jeff James, Penton Media (moderator); Jeanne Morain, Flexera Software; Kong Yang, Dell
Jeff James, Penton Media (moderator); Jeanne Morain, Flexera Software; Kong Yang, Dell
Presentation preview:
Network with like-minded attendees
-
![[[ session.user.profile.displayName ]]](data:image/gif;base64,R0lGODlhAQABAIAAAP7//wAAACH5BAAAAAAALAAAAAABAAEAAAICRAEAOw==)
- [[ session.user.profile.displayName ]]
- [[ session.user.profile.jobTitle ]]
- [[ session.user.profile.companyName ]]
- [[ userProfileTemplateHelper.getLocation(session.user.profile) ]]
-
- [[ card.displayName ]]
- [[ card.jobTitle ]]
- [[ card.companyName ]]
- [[ userProfileTemplateHelper.getLocation(card) ]]
- Channel
- Channel profile
-
Ransomware in the Remote Work Era May 12 2021 4:00 pm UTC 60 mins
Diana Kelley, SecurityCurve | Nicole Hoffman, GroupSense | Courtney Radke, Fortinet | Patrick Lee, Rapid7Phishing and ransomware attacks continue to rise, according to Proofpoint’s State of the Phish report for 2020. Organizations in the U.S. are at risk, the increase in remote work due to the pandemic has fueled a spike in attacks, and phishing attempts are up by 14 percent compared to the previous year.
Email continues to be the number 1 delivery vehicle, but other social engineering schemes that rely on social media, voicemail (“vishing"), SMS phishing (“smishing”), and malicious USB drops are also of concern for organizations. Ransom demands are also on the rise, but according to the report, paying the ransom is not guaranteed to work as many companies that paid the ransom failed to receive a decryption key.
Join this month's episode of The (Security) Balancing Act as Diana Kelley and guests discuss why ransomware is surging again, which sectors are most at risk, the threat to enterprises and how it is being used for more than just ransom (ex: distractionware, destructionware, etc).
- The rise in ransomware under the cloak of the pandemic
- Why email continues to be the channel of choice
- The difference between fully automated and human-operated campaigns
- How to decide whether or not to pay or not to pay the ransom
- Why your backups may not be immune to ransomware
- Addressing the threat with best practices
Speakers
- Nicole Hoffman, Intelligence Analyst, GroupSense
- Courtney Radke, CISO for National Retail, Fortinet
- Patrick Lee, Senior Incident Response Consultant, Rapid7
This episode is part of The (Security) Balancing Act original series with Diana Kelley. We welcome viewer participation and questions during this interactive panel session. -
Breach detection – Lessons learnt from mountaineers Recorded: May 12 2021 35 mins
Renaud Bidou, Technical Director, Southern Europe, Trend MicroBreach detection efficiency is all about consistent monitoring, organization and communication, experience (and expertise), training and proper tooling.
So is mountain rescue.
If you fall in a crevasse, get caught in an avalanche or come off a ridge, your survival depends only on time.
And in a mountaineer's career you know this will happen, as you should know, working in IT Security, that you will be breached.
So let’s be prepared, and learn from 200 years of mountain exploration how to quickly and efficiently get out of a worst case scenarios. -
Lessons Learned: Zero Trust for Segmentation in IOT Based Smart Buildings Recorded: May 11 2021 48 mins
Patrick Lloyd, Solutions Architect, Cisco Security ServicesSmart buildings are the hottest topic of 2021. But the thought of system integrations to make this a reality is enough to give most network security teams heartburn. The planning, design, and implementation of IOT based “smart” buildings can be eased in its complexity, to realize ROI quicker, while ensuring that devices on the network are prevented from endangering the network or each other.
Through exploring lessons learned from successful projects, this session demonstrates how to start in your approach to a practical implementation of Securing a Smart Building, applying an interpretation of Zero Trust. It will cover methods used when security is of the utmost importance, and universal segmentation of threats is a requirement. -
Pull your SOC up with continuous validation and optimization Recorded: May 11 2021 45 mins
Mike DeNapoli, Lead Solution Architect at CymulateProtecting your organization requires vigilance and skills combined with effective controls and detections, just having a SOC is not enough.
SOCs vary in size, scope and staffing across various industries, outsourced and in-house, they exist to monitor, detect, and respond to evolving threats.
Guarding against failures in the security architecture is not just about selecting the right tools and suppliers, it requires constant validation of your people processes and technology.
Attend this session to learn:
· Why SOC validation is crucial in confronting threat evolutions.
· The elements of a continuous SOC validation and improvement program.
· How continuous and automated red teaming and BAS make SOC validation achievable with existing resources. -
Preventing the Big One: Staying Ahead of the Breach Recorded: May 11 2021 54 mins
Michelle Drolet, Towerwall| Andy Thompson, CyberArk| Nico Fischbach, Forcepoint| Satya Gupta, Virsec| Micheal Meyer, MRSBPOOver 37 billion records were exposed in breach events in 2020 - by far the most records exposed in a single year, according to a recent report by Risk Based Security. How has remote working impacted your organization's security posture? What lessons can security professionals learn from the recent wave of breaches and what steps can enterprises take to strengthen security in 2021?
This keynote panel of security experts and industry leaders will explore the best practices for breach prevention, as well as share real-life lessons from the frontlines on what works and doesn't work.
Viewers will learn more about:
- The reality of data breaches
- Why data breach severity is rising
- Ransomware attacks on the rise (doubling from 2019 to 2020) and the threat to businesses
- Technologies that help with breach prevention, detection and response
- Why security awareness matters and best practices for educating employees to be cyber secure
Moderated by:
Michelle Drolet, CEO, Towerwall
Nico Fischbach, Global CTO, Forcepoint
Micheal Meyer, Chief Risk and Innovation Officer, MRSBPO
Andy Thompson, Research Evangelist, CyberArk
Satya Gupta, CTO & Founder, Virsec -
VID: Lessons Learned: Zero Trust for Segmentation in IOT Based Smart Buildings Recorded: May 11 2021 48 mins
Patrick Lloyd, Solutions Architect, Cisco Security ServicesSmart buildings are the hottest topic of 2021. But the thought of system integrations to make this a reality is enough to give most network security teams heartburn. The planning, design, and implementation of IOT based “smart” buildings can be eased in its complexity, to realize ROI quicker, while ensuring that devices on the network are prevented from endangering the network or each other.
Through exploring lessons learned from successful projects, this session demonstrates how to start in your approach to a practical implementation of Securing a Smart Building, applying an interpretation of Zero Trust. It will cover methods used when security is of the utmost importance, and universal segmentation of threats is a requirement. -
What's next? OWASP top 10 2021 Recorded: May 11 2021 54 mins
Gábor Pék, CTO and Co-Founder, AvataoThis talk introduces the main security pitfalls that every developer needs to know about before writing and shipping code.
A recent non-official proposal of OWASP top 10 helps us better understand what weaknesses our contemporary systems face and how we can manage our daily job to avoid them. The new candidate, SSRF (Server-side Request Forgery), will also be highlighted in more detail.
What you will learn:
- What are the biggest mistakes we make while writing and shipping code?
- Why is OWASP top 10 relevant for our daily jobs?
- How can we avoid the most critical vulnerabilities? -
Safeguarding your Data: Need & How To Recorded: May 11 2021 38 mins
Shriram Munde, Team Lead | Himanshu Dubey, Director, Security Labs, Quick Heal Technologies Ltd.We are living in Data Age. Most organizations these days, in one form or other, rely on data to drive decisions & run their business. Thus, any data loss would mean considerable business impact to such organizations. Additionally, organizations’ collect certain data from users of their products, which is used for variety of purposes. If this data is lost / stolen, it may pose serious risks for the affected individuals and likely, tarnish the organization’s reputation.
In recent past, we have seen many data breaches across the globe, which have affected organizations of all shapes & sizes. So, it is imperative that organizations take steps to safeguard themselves against data breaches.
In this presentation, we will discuss:
- Recent data breaches & their impact
- Attack approaches used by Cyber Attackers
- Prevention steps to safeguard data -
WiCyS Veterans' Apprenticeship Program Recorded: Apr 20 2021 60 mins
Smoothstack TeamWiCyS brings together women and supporters from around the world to develop cybersecurity skills with the aim of advancing women in, building equity in and developing minority talent in the field. One of WiCyS’s focuses is bridging the cybersecurity skills gap for female veterans, which is what helped launch the Veterans’ Program. Military career experience aligns well with a job in cybersecurity.
The WiCyS Veterans’ Apprenticeship Program includes paid training and apprenticeship, secure long-term employment, and a litany of possible resources including access to technology and mentoring. This innovative apprenticeship model is DOL-certified and a top-notch gateway to get the support needed to enter into thriving cybersecurity careers. Join this webinar to learn more about the WiCyS Veterans' Apprenticeship Program and see if it's the right fit for YOU! And, as always... we thank you for your service. -
Cybersecurity of AI: Essential Pillars to building AI systems securely Recorded: Apr 15 2021 38 mins
Pamela Gupta, Trusted AI Leader, AI Ethics WorldAs AI adoption increases and becomes a competitive and operational efficiency advantage, managing AI-related risks poses the top challenge for AI initiatives. Cybersecurity along with AI failures, misuse of personal data, and regulatory uncertainty are also top areas of concern. -
Network Security in the Age of Remote Working Recorded: Apr 15 2021 64 mins
Kalani Enos, Kenos Technologies | Mike Ichiriu, Zentera | Mike Grimshaw, Moovweb | Robinson Delaugerre, Orange CyberdefenseThe pandemic and the shift to remote working has strained networks and pushed organizations to speed up their digital transformation journeys. With more users on the network than ever before, security has become a key priority.
Discover how organizations are addressing the security challenges of remote working and the latest trends in network security.
Join this panel of security experts and industry leaders to learn more about:
- The impact of COVID on networks and security
- The emergence of secure access service edge (SASE)
- The need for smart network monitoring technology
- New and old threats, and common vulnerabilities
- Lessons from the SolarWinds hack
- Best practices and recommendations for strengthening security in 2021
Kalani Enos, Kenos Technologies
Mike Ichiriu, VP, Zentera
Mike Grimshaw, Sre & Security Manager, Moovweb
Robinson Delaugerre, Investigations Manager (Computer Security Incident Response Team), Orange Cyberdefense -
Building a Threat Detection Framework for the future Recorded: Apr 15 2021 43 mins
Grant Paling, Product Manager, Orange CyberdefenseWhen it comes to building or updating your strategy for detecting threats to your business, it is important to know the direction you are headed in.
Many Managed Detection and Response providers align themselves to a very short term strategy that would appear to solve all of your problems, when in fact what is needed is a more pragmatic approach that helps model out the different options you have for gaining visibility and also allowing for an understanding of the impact of limitations specific to your environment (for example a missing data or security event types).
Join our Global Service Area Owner for Managed Detection and Response, Grant Paling, for an insight into how to build a strategic plan for improvements in security monitoring.
Key takeaways:
• Understand the different options for getting started with detection and response (including endpoint, log and network-based approaches).
• Learn how they differ and the pros and cons of different approaches.
• Find out how to model the impacts on visibility when choosing different approaches, and balancing that out against the time to value
• See examples of where we’ve used our Threat Detection Framework to build business cases for expansion and to illustrate the impact caused by challenges from non-security parts of the business. -
Cyber Threats of Today: Attack Approaches, Motivations & Protection Mechanisms Recorded: Apr 15 2021 38 mins
Himanshu Dubey, Director, Security Labs | Sandeep Pimpale, Technical Architect, Quick Heal Technologies Ltd.Cyber threats are constantly and rapidly changing. With time, as security products have evolved, threat actors have also evolved and have found newer ways of infiltrating networks and hijacking devices. Also, as more and more organizations go through digital transformation, the opportunity for Cyber Attackers is only increasing. In addition, many Critical Infrastructure organizations, across the globe, are going digital; which substantially increases the stakes around successful Cyber Attacks, and has given rise to Nation State backed Cyber Attacks.
In this talk we will discuss some major cyber-attacks of recent times, their motivation, & techniques used. We will also talk about best practices that organizations should adopt to protect against such threats.
Key takeaways from this session:
- Cyber Attack trends & motivations.
- Insights into recent noteworthy Cyber Attacks.
- Protection mechanisms. -
We’d all like to forget 2020, but the phishing landscape provided great insights Recorded: Apr 14 2021 32 mins
Tonia Dudley, CISSP, CISA Strategic Advisor CofenseThe rapid removal of threats has never mattered more. In our Annual State of Phishing report, we discuss how 2020 saw the emergency of new threat actors, the appearance of some old ones and changes in malware and phishing attacks.
What you will learn:
- How over 50% of phishing reported by Cofense customers are credential phish
- An effective phishing defense program enables organizations to quickly reduce risk
- Tactics used by threat actors to make it to the inbox -
Taking Down Nation State Botnets Recorded: Apr 14 2021 59 mins
Diana Kelley, SecurityCurve | Johna Till Johnson, Nemertes Research | Craig Harber, Fidelis | Derek Manky, FortinetThis month's episode of The (Security) Balancing Act will focus on botnets as a growing threat to the enterprise, examples from the real world, and what enterprises can do to better protect against botnet-fueled state sponsored attacks.
Join this interactive roundtable discussion with security experts and industry leaders to learn more about:
- How botnets have become a tool for cyber criminals and nation state actors
- Real-world examples & known botnet attacks
- Nation state ransomware attacks
- DDoS attacks
- Cyber espionage
- ATPs
- The trouble with attribution
- What enterprises and governments can do to address the threat
Panelists:
- Johna Till Johnson, CEO and Founder of Nemertes Research
- Derek Manky, Chief, Security Insights & Global Threat Alliances, Fortinet
- Craig Harber, Chief Customer Success Officer, Fidelis
This episode is part of The (Security) Balancing Act original series with Diana Kelley. We welcome viewer participation and questions during this interactive panel session. -
Mitigating Email Threats and Securing the Enterprise in 2021 Recorded: Apr 14 2021 35 mins
Michelle Drolet, Towerwall | Rodrigo Araujo, Bell | JP Bourget, BlueCyclePhishing attacks related to working from home and the pandemic are on the rise, and email continues to be the primary vehicle. With so much on the line, how are enterprises addressing the risk of email-based attacks? What are the latest trends in email security and how to keep up with the old and new threats?
Join this panel of security experts and industry leaders to learn more about the email security challenges enterprises are facing and the best practices for a stronger, more resilient enterprise:- Amplification of old attacks and email security challenges we will continue to see in 2021:
- How are organizations dealing with phishing and spear-phishing
- COVID-related phishing and social engineering attacks
- Common red flags - how to spot a phishing email from a mile away- Protecting against business email compromise (BEC) attacks
- Preventing credential theft
- Lessons from the SolarWinds attack- Best practices for improving email security and protecting the enterprise
Moderated by:
Michelle Drolet, CEO, Towerwall
Panelists:
Rodrigo Araujo, Security Advisor, Bell
JP Bourget President, BlueCycle -
The future of email security: AI vs human Recorded: Apr 14 2021 45 mins
Paul Tolmer, Chief Product Officer, MailinblackWith 90% of cyberattacks starting with a human error and phishing attacks having more than tripled since the start of the Covid-19 pandemic, involving and training 100% of staff is becoming a major leverage for companies. In this new deal of cybersecurity, the human brain is often the best (or only) tool to detect these social engineering attacks.
The availability of tools and data are making the hackers' job easier: AI-driven software and social network data are starting to make large scale, individually personalized phishing attacks possible, including through phone or even video calls. Cyberattacks are increasing in sophistication and targeting staff in order to steal information and money or cause mayhem.
In this webinar, we will share our views on:
• Current and future technological trends around email protection
• How AI is impacting the potential of massive social engineering attacks
• How companies and software vendors are reacting to this trend with innovative training strategies -
How to Take a Threat-Centric Approach to Security with Managed Security Services Recorded: Apr 13 2021 40 mins
Eric Dowsland, VP, Customer Success, Herjavec GroupOften times, even with the best technology and software, cybersecurity detection and response strategies don’t meet their maximum potential or, worse yet, fail without a team that has the right capacity and expertise behind them.
Join Herjavec Group’s VP of Customer Success, Eric Dowsland as he discusses best practices and strategies for enterprise detection and response programs including layering your security approach, and properly leveraging the MITRE ATT&CK Framework.
Discover how leveraging Managed Security Services (MSS) to support your cybersecurity plan is key to identifying, disrupting, containing, and remediating the onslaught of malware and emerging threats that will occur this year. -
Breach Detection and Response in the era of Supply Chain Attacks Recorded: Apr 13 2021 61 mins
Sunil Sharma Director of Cyber Defense, Help AGSolarWinds Cyberattack came as a wake-up call to many. An attack that most cyber-aware /savvy organizations could not detect for many months. It is a reminder of how an interconnected world can impact us all in a short time.
Join Sunil Sharma, Director of Cyber Defense for Middle East’s leading provider of strategic consultancy and tailored information security solutions and services company, Help AG, the cybersecurity arm of Etisalat, to discuss supply chain attacks, techniques, and tactics used by advisories to execute such attacks and strategies to detect and respond to supply chain attacks. -
The Endpoint: Redefined Recorded: Apr 12 2021 61 mins
Jo Peterson, Clarify360 | Stan Lowe | Doug Saunders, Sweeping Corporation | Christopher Camalang, Alert LogicCloud computing, remote work and the increasing use of mobile devices has redefined the network edge. The concept of endpoint security and the strategies used to protect this new perimeter from sophisticated adversaries and advanced persistent threats has evolved as well
We’ll discuss:
• The changing organizational view of the redefined endpoint
• Increased attack vectors
• Maturing threat detection and response tools
• The blurring line between End point security and data security
• The move to Zero Trust Network Access
Moderated by:
Jo Peterson, Vice President, Cloud and Security Services, Clarify360
Panelists:
Stan Lowe, former CISO of Zscaler and former Global CIO of PerkinElmer
Doug Saunders.CIO, Sweeping Corporation
Christopher Camaclang, Technical Partner Manager - US MSP, Alert Logic
The latest trends and best practice advice from the leading experts
This channel features presentations by leading experts in the field of information security. From application, computer, network and Internet security to access control management, data privacy and other hot topics, you will walk away with practical advice for your strategic and tactical information security initiatives.
Successfully added emails: 0
Remove all
- Title: From Virtualization to Private Cloud - Expert Panel Session
- Live at: Jan 11 2012 7:00 pm
- Presented by: Jeff James, Penton Media (moderator); Jeanne Morain, Flexera Software; Kong Yang, Dell
- From:
