Name: Fortify Your APIs to Make Sure They're Battle Ready
Start: 2024-05-16T13:00:00Z
End: 2024-05-16T13:00:59.000Z
Location: BrightTALK
Rating: 5

CyberRes is now OpenText™ Cybersecurity – Reduce risks, preserve trust, contain disruption, and make your business resilient to today's and tomorrow's cyber threats.
OpenText™ Cybersecurity helps organizations of all sizes protect their most valuable and sensitive information. Our portfolio of end-to-end security solutions offers businesses a resilient security foundation with 360-degree visibility across their organization, enabling them to enhance security and trust every step of the way. To find out more, visit: https://www.cyberres.com 

OpenText commissioned Dark Reading to conduct a survey about the use of ITDR-related technologies. This survey of 117 IT and security professionals reveals the state of identity threat detection and response at large. The results cover:

•  How security teams work together to implement ITDR 
•  Where they are in their journey 
•  What to expect in the next two years

The State of Identity Threat Detection & Response (ITDR)

This survey of 300 industry participants and decision makers reveals what secure information management looks like in 2024 and beyond.

State of Secure Information Management

IDC and OpenText Fortify will explore the peril and promise of generative AI in application security such as: GenAI’s ability to improve cybersecurity but introduce new security risks, Securing GenAI Applications, Distinct Security Vulnerabilities in AI, Open Source and Third-Party Models, Enhancing Application Security with GenAI, and Considering OpenText Fortify Application Security.

The Peril and Promise of Generative AI in Application Security

Addressing security vulnerabilities is a crucial yet burdensome task for developers. It typically requires considerable time, extensive research, and frequent context-switching. Understanding the unique context of each vulnerability is essential before devising and implementing an effective solution. Discover Fortify Aviator, your new AI-powered ally in the realm of Static Application Security Testing (SAST).

Unburden your Developer with AI-powered AppSec

Great AI requires great data. To realize its potential, you must curate high-quality data in a responsible way. View this session to explore strategies for maintaining data safety, tackling complex challenges, and ensuring ethical practices.

Establish trusted AI with DSPM best practices

We all know that identity maturity is an ongoing journey, not a one-time destination. Discover the best approach to building a robust identity strategy that empowers your users, protects your data, and fuels your business success.

Don’t fall behind on your IAM maturity journey

Join us for an insightful session together with open source security and compliance expert Ibrahim Haddad from the Linux Foundation. In this webinar, we will dive into the new world of open source security where GenAI is taking center stage. Interviewed by Tim Svensson, Ibrahim gives a preview of what’s ahead, and how to meet what’s coming. How can enterprises navigate this new world, where hundreds of lines code can be generated in seconds? What measures should be taken to avoid introducing risk?

Key takeaways:

• An overview of the compliance and security landscape
• Challenges ahead
• GenAI and its impact on compliance and security
• The importance of the right kind of tooling

Open Source License Compliance and Security: Challenges, Opportunities & Trends

The software industry continues to evolve, and organizations are recognizing the need to balance security risks with the speed of development. OpenText Cybersecurity has partnered with DarkReading for the second year in a row to interview hundreds of AppSec professionals and developers to discover the key challenges this ever-changing landscape has created. Join us in this webinar as we explore key findings, challenges, and solutions from the 2024 State of Application Security Report.
 
Key Takeaways
 
• AppSec risks and pain points prioritization
• Open Source and API security testing vulnerabilities
• Accuracy and depth of application security tests
• Most adequate developer enablement tools

Key Findings from the State of AppSec Report 2024

33% of companies like yours plan to invest in Generative AI (GenAI) to support application and software development this year, according to TechTarget and Enterprise Strategy Group’s latest GenAI Pulse Study, with another 28% focused on GenAI in cybersecurity.

Beyond mere code generation, GenAI has the potential to streamline security alert prioritization and attack mitigation. But GenAI is not without its complications, as its own training data is also subject to attacks.

In this session at BrightTALK’s “Advancing Application Security Practices” Summit, Frans van Buul, Senior Product Manager at OpenText, will shed further light on GenAI’s impact on software development and app security, with particular attention to:

• Usage of GenAI within app security tooling
• Tactics to secure decentralized apps (DApps) in the web 3.0 landscape
• Next-generation threats that static app security testing (SAST) can secure
 
Join the discussion to fortify your app security and prepare for threats on the rise.

The Latest in Application Security: Next-Gen Threats & GenAI’s Impact

One of the biggest software challenges companies face today is open-source compliance. This means finding good open source that lives up to internal policies, both when it comes to licenses but also the security of a component. How can one make better decisions when bringing in components, so there’s no need to fix non-compliant or abandoned dependencies down the line?

We would like to welcome you to our webinar, “Benefits of Automated Open-Source Intake Management - Featuring Forrester”, where we will go through the most common challenges organizations face when using open-source components. All of this is backed up by data from a 2024 commissioned Forrester Consulting study conducted on behalf of OpenText.

Key Topics Covered:

1. Tackling the challenges of open-source compliance at intake.
2. What is something most companies struggle with and how you can get ahead of the curve.
3. Q&A Session: Get your questions answered by our expert panel during the live Q&A session.

By viewing this on-demand webinar, you will gain the knowledge and insights needed to initiate and strengthen your open-source compliance. Sign up today to secure your spot and stay ahead of the competition.

Benefits of Automating Open Source Intake Management - Featuring Forrester

What happens when sensitive data collides with the power of artificial intelligence (AI)? How can your business protect itself against potential data breaches and ensure the security of sensitive information? In this webinar we explore the critical intersection of AI and sensitive data, exploring how to identify and measure the financial risk.

In today’s dynamic business landscape, risk is an ever-present companion. Organizations grapple with the stringent demands of regulatory compliance, including CPRA and GDPR. But what happens when sensitive data collides with the power of artificial intelligence (AI)? How can your business protect itself against potential data breaches and ensure the security of sensitive information? Voltage by OpenText helps you address these challenges by improving compliance and ensuring sensitive data remains protected throughout its lifecycle – all from a single data security platform. 

Join us for an enlightening session where we’ll demonstrate how Voltage can help you: 
• Quantify Monetary Risk: Understand the financial implications of managing personal information. 
• Drive Data and Customer Trust: Strengthen relationships with stakeholders by safeguarding data throughout its lifecycle and ensuring data is secure before entering AI. 
• Facilitate Secure Data Sharing: Promote ethical data exchange within your organization and with third parties.   

Secure your data for AI, build trust, and ensure compliance to propel your business forward—all from a single, comprehensive platform.

AI + Unsecured Data = Financial Risk

Weak passwords are notoriously vulnerable to phishing, brute force attacks, and social engineering. Increasingly, enterprises are removing them altogether, to eliminate these attack vectors and make it significantly harder for unauthorized users to gain access.

This webinar (March 12, 2024) explore a new survey from Dark Reading and OpenText on the use of traditional credentials among industry professionals and their urgency to move beyond them. 

We’ll also cover the benefits IT and Security teams can expect by adopting a passwordless paradigm.

About OpenText IAM:
NetIQ Identity and Access Management Platform provides comprehensive workforce and customer identity solutions to enterprise scale organizations – leveraging Identity to provide secure access, effective governance, scalable automation, actionable analysis and insight across their Cloud, Mobile, & Data platforms. 

NetIQ is part of OpenText Cybersecurity. OpenText has completed the purchase of Micro Focus, including CyberRes. Our combined expertise expands our security offerings to help customers protect, detect, and evolve their security posture. They can confidently be their best—and more secure—across their entire organization.

LEARN MORE at the NetIQ homepage: https://www.microfocus.com/en-us/cyberres/identity-access-management

State of Passwordless: Latest insights from OpenText

In this demo video, discover how you can cull data at the point of collection—for efficient investigation, legal, compliance, regulatory, or other business needs.

Demo: Reducing cost and complexity with streamlined data collection

This session discusses the impact big data is having on the collection of ESI and how to address the associated time, resource and financial challenges eDiscovery professionals face.

The Importance of Information Assurance in Today’s Big Data World

This session discusses the steps you can take to reduce your collection costs by as much as 90% while also eliminating the risks associated with over-collection.

Streamline and Save: Smart ESI Collection Strategies for eDiscovery

In today's digital landscape, the need for robust application security has never been more critical. With cyber threats constantly evolving, organizations must ensure that their software is resilient against potential vulnerabilities. But where do you start when it comes to establishing an effective application security program?
Join us for an insightful webinar, "Jumpstarting your AppSec Program with Fortify on Demand," as we explore how you can fortify your applications and defend against security breaches with confidence. Hosted by industry experts, this session will provide a comprehensive overview of leveraging Fortify on Demand, a cutting-edge managed application security solution, to kickstart your AppSec journey.
 
Key Topics Covered:
1. The Evolving Threat Landscape: Understand the current cybersecurity landscape and the pressing need for application security.
2. The Basics of Application Security: Gain a foundational understanding of application security principles and best practices.
3. Introduction to Fortify on Demand: Learn about Fortify on Demand, its features, and how it can empower your organization's security efforts.
4. Getting Started with Fortify: Practical steps for implementing Fortify on Demand and integrating it into your software development lifecycle.

Jumpstart Your AppSec Program With Fortify on Demand

In this session, we will discuss the security and business limitations of static authentication implementations. Discover the value of dynamic access control and find out how your organization can achieve it.

Raising access security without driving users crazy

Tune into this talk presented by the University of Washington's Deveeshree Nayak as she discusses the importance of advancing application security practices into our technology use. As technology continues to integrate more into our lives, it becomes increasingly important to secure educational applications and platforms. 

During the session, we will explore various topics such as the current threat landscape, the significance of secure development, case studies, best practices, the role of education in advancing security practices, future trends, and how to form a team to address security vulnerabilities, manage risks and fortify against cyber attacks. Please join to gain insights into advancing application security practices tailored to various sectors' unique challenges and opportunities. Whether you are an educator, IT professional, or administrator, this talk aims to equip all types of attendees with the knowledge and tools needed to strengthen your institution's security posture.

An Educational Perspective and Mitigation Strategy for Application Security

In an age where artificial intelligence (AI) not only powers innovations but also underpins cybersecurity threats, this session aims to inform and help you prepare against the next wave of digital assaults. This talk will delve into the burgeoning domain where lax API security meets sophisticated AI-driven exploit bots, marking a paradigm shift in how cyber threats are generated and how they must be mitigated.

As smaller entities become increasingly attractive targets due to the reduced cost and effort required for attacks, the session underscores the imperative of adopting secure development practices. It posits that the foundation of robust AppSec in this new era lies not in the procurement of cutting-edge tools, but in the diligent application of well-established security principles. Attendees will leave with the following takeaways:
- Cost-effective strategies that can fortify applications against the onslaught of AI-powered threats.
- Proactive cybersecurity frameworks, with a particular focus on how threat modeling can evolve to address AI-specific vulnerabilities. 
- Actionable insights into applying frameworks like the NIST AI RMF to AI app development. 

The session seeks to equip participants with the knowledge and tools necessary to anticipate and defend against not just the threats of today but those of a rapidly approaching future. Designed for security professionals, application developers, and business leaders alike, this talk will offer a blend of humor, real-world scenarios, and practical solutions to navigate the complexities of securing applications in an AI-driven world. Join us to explore how we can turn "advanced threat guesswork" into a strategic advantage, ensuring our digital defenses are not just reactive but predictively aligned with the cybersecurity landscape's evolution.

Predictive Shenanigans: The New Wave of Application Threats

APIs have become essential in today's digital ecosystem, enabling seamless data exchange, connecting applications, and driving innovation. However, as they contain valuable data, APIs can also serve as enticing targets for cyber attacks such as DDoS attacks, SQL injections, and cross-site scripting (XSS). A single API breach can jeopardize sensitive information and affect an organization's reputation, financial stability, and compliance. Therefore, it's crucial to have a robust API security program in place. 

In this webinar, we will explore the multifaceted landscape of API security and emphasize its pivotal role in modern enterprises' overall cybersecurity posture. We will delve into the foundational components of API security, explain how each relates to the evolving threat landscape, and discuss practical, actionable ways they can prevent cyber criminals from exploiting vulnerabilities in APIs. We will also provide insight into the capabilities of a mature, end-to-end API security program and define practical milestones to empower you to elevate your API security to the next level.

Key takeaways from this webinar include understanding how attackers' tools, techniques, and procedures are evolving, learning the components of API security and their respective roles, and taking actionable steps to assess and enhance your organization's API security posture. In addition, we will highlight forward-thinking strategies and how web application firewalls (WAFs) can help detect and block malicious traffic, and how API security solutions can provide comprehensive protection for your APIs and work with WAFs to ultimately protect applications and their data.

Elevating API Security

In the digital age, APIs are the backbone of digital transformation, powering everything from mobile apps to microservices. However, as the complexity and connectivity of systems increase, so does the attack surface and their vulnerability to cyber attacks. The key to securing these systems lies not just in the application of security measures post-development but in embedding security considerations throughout the Software Development LifeCycle (SDLC). This session, sheds light on the process of threat modeling and showcases its critical role in designing secure and resilient APIs.

During this session, we will be covering
- The fundamentals of threat modeling.
- Integrating threat modeling to API lifecycle. 
- Case studies and real-world applications. 
- Tools and techniques for effective threat modeling. 
- Overcoming common challenges. 

This session is designed for developers, security professionals, and IT leaders seeking to enrich their API security strategy through the power of threat modeling. By the end of this session, attendees will be equipped with the knowledge and tools needed to implement a robust threat modeling process, transforming their API design process.

About the speaker:
Elango is CISSP certified and accomplished technology leader with 20+ years of experience building high-performance engineering organizations for high-tech and financial services businesses across multiple geographies. He oversaw several cloud implementations that meet the highest standards of security and compliance for top-tier banks across Singapore, Thailand and the United States.

The Blueprint to Secure API Design Through Effective Threat Modeling

Organizations modernizing applications in the cloud find themselves drowning in vulnerabilities and security alerts. With too much noise and not enough time, teams need a better way to prioritize and address real risks to stay ahead of threats.

Join Sysdig for a discussion of how to boost your software supply chain security and address risk from development through production.

In this session we’ll cover:

-The latest cloud-native security risks and challenges

-How to better prioritize vulnerabilities and misconfigurations

-Using runtime signals to reduce AppSec noise up to 95%

-Detecting active cloud risk to protect against cyberattacks

-Improving outcomes with AppSec tools like Snyk, Checkmarx, and Docker

Fix What Matters First: Bridging Code and Cloud Security

Advancing Application Security Practices

Join this webinar to learn how to secure your APIs against today's threat actors. Stan Wisseman, Head of North America Security GTM, will discuss how modern applications are different, the basics of APIs, and how to control API risks.

Fortify Your APIs to Make Sure They're Battle Ready

APIs

API Management

Fortify

Cybersecurity

Code Security

Risk Management

Security

API Security

Threat Defence

Application Monitoring

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Fortify Your APIs to Make Sure They're Battle Ready

Presented by

About this talk

OpenText Cybersecurity Enterprise