Name: Developing the requirements of a security analytics solution
Start: 2023-07-26T21:00:00Z
End: 2023-07-26T21:00:50.000Z
Location: BrightTALK
Rating: 5

This channel features presentations by leading experts in the field of information security. From application, computer, network and Internet security to access control management, data privacy and other hot topics, you will walk away with practical advice for your strategic and tactical information security initiatives.

The National Institutes of Science and Technology recently launched a new version of their cyber security framework, NIST CSF v2.0 to provide both government organizations and private industry a comprehensive set of cyber security guidelines. Better yet, this version can easily be integrated into existing frameworks and tools. 

In this session, Hilton analyst Ralph Villanueva will point out how the newly added governance aspect of this framework can boost the detection, respond and recover capabilities of any organization in the event of a cyber-security incident.

Improve Incident Detection and Response Governance with NIST CSF v2.0

Tune into this session from industry thought leader Vincent Amanyi as he highlights a robust strategy to develop core requirements and step-by-step approach to build a resilient foundation of your insider threat program.

Key takeaways:
- How to perform environment assessment. 
- How to establish a clean foundation that is central to your enterprise.
- Learn how to benchmark and manage your maturity journey.
- Develop the right mix of tool for monitoring.

Identifying and Building the Foundation of a Threat Program

APIs have become essential in today's digital ecosystem, enabling seamless data exchange, connecting applications, and driving innovation. However, as they contain valuable data, APIs can also serve as enticing targets for cyber attacks such as DDoS attacks, SQL injections, and cross-site scripting (XSS). A single API breach can jeopardize sensitive information and affect an organization's reputation, financial stability, and compliance. Therefore, it's crucial to have a robust API security program in place. 

In this webinar, we will explore the multifaceted landscape of API security and emphasize its pivotal role in modern enterprises' overall cybersecurity posture. We will delve into the foundational components of API security, explain how each relates to the evolving threat landscape, and discuss practical, actionable ways they can prevent cyber criminals from exploiting vulnerabilities in APIs. We will also provide insight into the capabilities of a mature, end-to-end API security program and define practical milestones to empower you to elevate your API security to the next level.

Key takeaways from this webinar include understanding how attackers' tools, techniques, and procedures are evolving, learning the components of API security and their respective roles, and taking actionable steps to assess and enhance your organization's API security posture. In addition, we will highlight forward-thinking strategies and how web application firewalls (WAFs) can help detect and block malicious traffic, and how API security solutions can provide comprehensive protection for your APIs and work with WAFs to ultimately protect applications and their data.

Elevating API Security

As we improve our defenses, the threat actors step up their game to cause more harm. We will take a practical approach and examine emerging threats from the Dark Web that aim to breach our defenses. 

Using practical examples, we will study these threats and discuss steps that you should be taking to prevent these cyber-attacks.

What to expect:
1. Introduction – Emerging Threats 2024
2. Ransomware Evolution
      - Less encryption, more exfiltration
      - Detection of data leaks
      - Testing for Ransomware attacks
3. Breaches in Cloud and Supply Chain
      - Know your data
      - Extend your perimeter
4. Addressing a Threat
5. Show ROI on Threat Detection and Prevention

Threat Intelligence: The Dark Side of Threat Detection

In the rapidly evolving landscape of cybersecurity, the ability to effectively detect and respond to threats is paramount for organizations across the globe. Traditional threat intelligence mechanisms have often been reactive, focused on addressing vulnerabilities after they have been exploited. However, with the increasing sophistication of cyber threats and the expanding digital footprint of modern enterprises, there is a critical need to pivot towards more proactive and dynamic strategies.

This presentation delves into the latest methodologies and technologies driving the future of threat intelligence. We will explore cutting-edge approaches to data collection and analysis, including artificial intelligence (AI) and machine learning (ML) algorithms, which enable predictive threat modeling and real-time anomaly detection.

We will discuss the importance of expanding threat intelligence sources beyond traditional feeds, incorporating open source intelligence (OSINT), social media analysis, and dark web monitoring to gain a more comprehensive view of potential threats. The role of collaborative intelligence-sharing platforms will also be highlighted, emphasizing how they enhance collective defense mechanisms by fostering an ecosystem of shared knowledge and resources.

Beyond the Horizon: Use AI to Expand Threat Intelligence for Proactive Security

Tune into this talk to learn about the integration of Artificial Intelligence (AI) into endpoint detection and response (EDR) systems, focusing on the application of AI-driven behavioral profiling to identify malicious activities. Industry thought leader John Bambenek will delve into the mechanisms by which AI models discern typical from atypical user behaviors, thus enhancing threat detection capabilities. The discussion also will cover the benefits of this holistic approach, including improved detection accuracy and faster response times. Practical case studies will demonstrate the effectiveness of AI behavioral profiling in real-world scenarios, underscoring its significance in the development of robust cybersecurity frameworks.

Enhancing EDR: A Holistic AI-Based Behavioral Profiling Approach

Endpoint protection has been around for decades and is not disappearing anytime soon. While the key requirement of any solution is efficacy (effectiveness in detecting threats), there are many other aspects that should be part of your endpoint solution evaluation and selection process. 

Tune into this presentation from industry thought leader Kevin Tolly who will introduce the audience to three important aspects to consider: 
- Resource utilization.
- Online vs. offline efficacy.
- Hybrid detect/respond solutions. 

Some solutions can consume much or all of the endpoint’s CPU during scans leading to potential degradation of the endpoint’s overall performance. Some solutions are not as effective when they are offline and can’t access their cloud-based threat databases. This can be important for operations-oriented computers that are deliberately disconnected from the Internet. We are also seeing a split between detection and remediation with some solutions consisting of two vendors specializing in each area. These vendors claim that improved detection justifies the split solution. 

Tune in to dive more into these points and see Kevin Tolly present vendor-neutral test data from actual test to demonstrate the differences across some current generation solutions. 

About The Tolly Group
The Tolly Group is an authoritative international testing organization based in Boca Raton, Florida. The Tolly Group has been providing third-party validation of IT products and solutions since 1989.

Next-Gen Endpoint Security: Efficiency, Efficacy, and Hybrid Protection

Tune into this talk presented by the University of Washington's Deveeshree Nayak as she discusses the importance of advancing application security practices into our technology use. As technology continues to integrate more into our lives, it becomes increasingly important to secure educational applications and platforms. 

During the session, we will explore various topics such as the current threat landscape, the significance of secure development, case studies, best practices, the role of education in advancing security practices, future trends, and how to form a team to address security vulnerabilities, manage risks and fortify against cyber attacks. Please join to gain insights into advancing application security practices tailored to various sectors' unique challenges and opportunities. Whether you are an educator, IT professional, or administrator, this talk aims to equip all types of attendees with the knowledge and tools needed to strengthen your institution's security posture.

An Educational Perspective and Mitigation Strategy for Application Security

In an age where artificial intelligence (AI) not only powers innovations but also underpins cybersecurity threats, this session aims to inform and help you prepare against the next wave of digital assaults. This talk will delve into the burgeoning domain where lax API security meets sophisticated AI-driven exploit bots, marking a paradigm shift in how cyber threats are generated and how they must be mitigated.

As smaller entities become increasingly attractive targets due to the reduced cost and effort required for attacks, the session underscores the imperative of adopting secure development practices. It posits that the foundation of robust AppSec in this new era lies not in the procurement of cutting-edge tools, but in the diligent application of well-established security principles. Attendees will leave with the following takeaways:
- Cost-effective strategies that can fortify applications against the onslaught of AI-powered threats.
- Proactive cybersecurity frameworks, with a particular focus on how threat modeling can evolve to address AI-specific vulnerabilities. 
- Actionable insights into applying frameworks like the NIST AI RMF to AI app development. 

The session seeks to equip participants with the knowledge and tools necessary to anticipate and defend against not just the threats of today but those of a rapidly approaching future. Designed for security professionals, application developers, and business leaders alike, this talk will offer a blend of humor, real-world scenarios, and practical solutions to navigate the complexities of securing applications in an AI-driven world. Join us to explore how we can turn "advanced threat guesswork" into a strategic advantage, ensuring our digital defenses are not just reactive but predictively aligned with the cybersecurity landscape's evolution.

Predictive Shenanigans: The New Wave of Application Threats

In the digital age, APIs are the backbone of digital transformation, powering everything from mobile apps to microservices. However, as the complexity and connectivity of systems increase, so does the attack surface and their vulnerability to cyber attacks. The key to securing these systems lies not just in the application of security measures post-development but in embedding security considerations throughout the Software Development LifeCycle (SDLC). This session, sheds light on the process of threat modeling and showcases its critical role in designing secure and resilient APIs.

During this session, we will be covering
- The fundamentals of threat modeling.
- Integrating threat modeling to API lifecycle. 
- Case studies and real-world applications. 
- Tools and techniques for effective threat modeling. 
- Overcoming common challenges. 

This session is designed for developers, security professionals, and IT leaders seeking to enrich their API security strategy through the power of threat modeling. By the end of this session, attendees will be equipped with the knowledge and tools needed to implement a robust threat modeling process, transforming their API design process.

About the speaker:
Elango is CISSP certified and accomplished technology leader with 20+ years of experience building high-performance engineering organizations for high-tech and financial services businesses across multiple geographies. He oversaw several cloud implementations that meet the highest standards of security and compliance for top-tier banks across Singapore, Thailand and the United States.

The Blueprint to Secure API Design Through Effective Threat Modeling

Do you have all the parts of zero trust in place to control risk to your crown jewels? 

If you don't know where to start, you probably need to assess your situation.

Using a zero trust readiness assessment you can see what parts of the people, process, and technology triad you already have in place and what you don't. With a readiness assessment you can figure out what to focus on first in order to tackle the remaining parts of the zero trust jigsaw.

Zero trust is a model or philosophy of how users and devices access applications and data. Zero trust is not a SKU or a single product, rather it is a more secure way to provide access to data by checking the identity of the user, or application, on a continual basis before allowing the user or application to access sensitive or confidential data, limiting access by network segmentation and dynamic access mechanisms. 

Remember, the goal is to protect the data and make sure that it remains confidential, maintains integrity and availability.

CBTS used the NIST Special Publication 800-207 as the foundation for an assessment to help customers know where they stand with their zero trust journey. The assessment is standards based and does not reference or promote vendor solutions, rather the people, processes, and technologies in place are assessed against 800-207. In this presentation we will review the general components of a zero trust readiness assessment so that you know where you are and how to complete your journey.

How Do You Know Where to Start Your Zero Trust Journey?

Zero Trust Architecture (ZTA) incorporates many aspects of effective cyber security…but not all of them.  There are many elements of information security that are implied in ZTA but are not explicitly stated.  These include role-based access control (RBAC), identity management, key management and threat intelligence.  Together, constitute the zero trust environment, which must be in place for the architecture to be implemented.  ZTA plus these environmental elements are the basis for secure use of information resources, today and as a foundation for future growth.  This session presents each of these elements as products to be evaluated, acquired and implemented in order to achieve full zero trust.

Learning objectives:
- The various security methods that support ZTA but are not included in it. 
- The value proposition for a fully supported zero trust environment.
- The vendor landscape of these supportive methods.
- Determining the need for supplemental products and tools.

What's NOT Included in Zero Trust Architecture

In the ever-evolving landscape of DevSecOps, the paradigm is shifting towards a proactive approach known as Zero Trust, redefining how security is integrated into the CICD pipeline. This transformation doesn't simply entail developers assuming more security responsibilities but rather involves a holistic restructuring, where security teams engage in early-stage development.

Our presentation delves into the evolution from traditional DevSecOps to the advanced realm of Zero Trust. We explore the principles of "Simple DevSecOps" and "Trust but verify," leading up to the pinnacle of security sophistication: "Zero Trust." In a zero trust environment, every element of the DevOps pipeline undergoes rigorous authentication and authorization, ensuring heightened security at every step.

In this session, join Jyotirmayee Pradeep Kumar (Vice President of Cloud DevOps at a well-known global bank) as she unravels the concepts of "Security as Code" and "Policy as Code" as instrumental tools in implementing zero trust. 

Topics for discussion include:
- The foundational principles of DevOps and its evolving landscape.
- The pivotal role of security within the DevOps framework.
- The benefits and challenges of zero trust in DevOps environments.
- Practical strategies for implementing zero trust in the CICD pipeline.
- Diverse approaches to integrating zero trust seamlessly into your DevOps practices.

Elevating DevSecOps Security: The Journey to Zero Trust

The rapid adoption of cloud technology by organizations has led to a shift towards both single and multi-cloud environments. Unfortunately, this shift has also resulted in cloud misconfigurations, which are one of the top risks associated in the cloud. Cloud misconfiguration refers to any errors or gaps in the security measures of a cloud environment. 

We will begin by discussing the root causes of cloud misconfigurations. We will then review case studies of organizations that have suffered data breaches due to cloud misconfigurations, such as Capital One in 2019, eBay in 2014, and World Wrestling Entertainment (WWE) in 2017. Finally, we will then walk through built-in tools provided by AWS, Microsoft Azure, and Google Cloud, that cyber professionals can leverage to mitigate security risks in the cloud. These tools are also known as Cloud Security Posture Management (CSPM) tools.

Cloud Security Posture Management tools are automated solutions designed to identify misconfiguration issues and compliance risks in the cloud so that they can be remediated, reducing the risk of successful breaches. We will explore AWS Security Hub, Microsoft Defender for Cloud, and Google Security Command Center, and review how each tool can be used to gain visibility into the current security posture of each respective cloud.  Furthermore, we will emphasize how these tools can be applied to determine alignment with relevant regulatory compliance standards and industry-standard benchmarks, as well as identify threats and potential security weaknesses. 

The key takeaways from this session are:
- Most cloud breaches are due to misconfigurations or human errors.
- Do not rely on your cloud service provider to secure your data (understand the shared responsibility model).
- You cannot protect what you do not have visibility into (CSPM solutions can help).
- Cloud security should begin with implementation of cloud governance.

Using Cloud Security Posture Management Solutions to Mitigate Misconfigurations

Organizations are striving for IT sustainability, but having the right foundation in place is imperative to be able to work towards the sustainability goal. Tune into this session presented by industry thought leader Vincent Amanyi as he highlights the fundamentals to establish and  jump start the IT sustainability program in your organization. 

Attendees will learn:
- Strategies to design a comprehensive program.
- How to identify core factors that drives decision points.
- How to develop a benchmarking to manage the program.

Enabling the Foundation of IT Sustainability

Several cyber insurers have turned the noncompliance tables on their clients with the covenants of their cyber insurance policies. Ironically, these covenants are nothing more than IT security requirements which, with some board and C-suite support and focus, can be fulfilled by the CIO and his team. 

In this presentation, industry thought leader Ralph Villanueva will draw on his IT security, compliance and cyber security insurance experiences (he is a licensed P & C insurance agent and broker, which includes cyber security insurance) to help the audience avoid these five cyber insurance pitfalls and ensure that if an insurable event occurs, their employers will receive the full benefits of their cyber insurance policy.

Secure your Company by Avoiding These Five Cyber Insurance Pitfalls

How to Break into the International Cybersecurity Market

Decoding PowerDrop Vulnerability: AI and ML in Adlumin's Threat Hunting

Hunting for the unknowns...Where to start?

The Rise of BEC - 5 Tips for Adapting to Today’s Email Threat Landscape

Defend Against Today’s Cyber Threats: Harnessing the Latest Developments in AI

Creating and implementing incident response plans

Practical application of AI/ML in security monitoring and analytics

Evaluating Threat Detection and Response Solutions

Automation & Orchestration for Rapid Threat Response

Use IT security frameworks to map the threat landscape and reduce attack vectors

3 New Ways Cybercriminals are Targeting Your Email

Holistic ransomware planning: Is your organization one click away from chaos?

The Evolution of Data Security and the Threats That Are Wreaking Havoc on it

How to detect, prevent & respond to threats with threat intelligence [EMEA]

How to Super-Power Your Microsoft 365 Data Protection

SASE and Zero Trust: A Winning Combination for Securing Your Network Everywhere

Enabling Threat Detection and Response

Tune into this webinar from industry thought leader Vincent Amanyi as he establishes assumptions and iterates a clear pathway to develop your security analytic requirements. 

Attendees will come away from this session with knowledge to:
- Establish enterprise criteria for your requirements.
- Define a measurement benchmarking system.
- Manage and control your environment.

Developing the requirements of a security analytics solution

Security

Security Analytics

Security Analysis

Security Breach

Enterprise Security

IT Security

IT Governance

Security as a Service

SaaS

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Developing the requirements of a security analytics solution

Presented by

About this talk

More from this channel