Name: HexCon23
Start: 2023-09-20T10:00:00-0400
End: 2023-09-22T01:00:00-0400

Register to access all videos

We have sent you a confirmation code

Apu Pavithran

Apu is the Founder and CEO of Mitsogo Inc., which is popular for Hexnode, the Unified Endpoint Management solution leveraged globally to manage and secure endpoints. Apu is the driving force behind visualizing, formulating and implementing Hexnode’s vision to be at the forefront of technology. With an eye for talent and a genuinely curious mind, Apu embraces the idea of thinking outside the box and encourages ingenuity and innovation in the community. An entrepreneur to the core, Apu is a thought-leader and a strong advocate of governance and information security. Helming an organization that makes device management easier for businesses, Apu strongly addresses the necessity for enterprises to ensure cyber safety. He takes time out of his busy schedule to contribute in popular publications on topics that feels strongly about.

Rachana Vijayan

Rachana is the Chief Marketing Officer, Director of Sales, Marketing and Channel Partnerships at Hexnode. As the CMO, Rachana is responsible for leading the company’s global marketing operations. She believes in pushing the horizons of creativity and engaging in fruitful collaborations that lead to exciting work.Before joining Hexnode, she has held technical and leadership roles in Zoho and FCA. With an engineering background and a master’s in business administration, Rachana’s analytical skills and decisiveness translate well into her role in Marketing. She is also deeply passionate about cutting-edge technology, gender equity and inclusion, and often encourages young girls to break the glass ceiling.

Bijo Paulose John

Bijo Paulose John is the co-founder and Chief Operating Officer at Hexnode. As COO, he is responsible for driving business operations and maintaining operational results within the company. With his strategic and leadership vision, Bijo works in tandem with Apu to bring managerial, administrative and procedural reforms to Hexnode. His ability to take calm control of turbulent situations and ensure his calmness resonates within his team is uncanny.

Sahad M

Sahad is the Co-founder and Chief Technology Officer at Hexnode. He is an innovator, technologist and strategist all-in-one. He is responsible for establishing technology-centered strategies, across Hexnode and oversees a global team that is responsible to align dynamically changing business goals with optimal technical solutions. When he’s not cracking the toughest codes; you can find him on the field perfecting his dribbling.

General

Sept 20

Unveil the fourth edition of HexCon with our board of directors as they outline Hexnode’s roadmap for the future. Catch up on our latest product updates and important announcements.

&nbsp;

Keynote

Keynote: Championing Growth

Christopher Sherman

For the last two years, Chris Sherman has been a Principal Analyst with Coherent Strategies where he helps clients navigate endpoint security, healthcare security, and quantum computing risks. He has spoken at international industry events such as RSA, HDI, and AMTSO. Prior to Coherent Strategies, Chris was a Senior Analyst at Forrester Research where he led the research into these same topics for 11 years. Chris' background in neurotechnology research at Harvard Medical School prepared him to lead broad, technical research projects which thousands of IT professionals have used to make more informed technology decisions since 2010.

Your employee's endpoints serve as an attractive entry-point for opportunistic attackers looking to gain a foothold into your organization. Remote employees are increasingly targeted through email phishing, software exploitation, and direct fraud. While the need for enabling endpoint access to sensitive corporate resources has never been more critical for business, security professionals must ensure these especially vulnerable assets are protected through a combined endpoint security and management strategy. In this presentation, Coherent Strategies analyst Chris Sherman will present several practices your security and management organizations can follow today to reduce internal friction and mitigate the risk of an enterprise breach. We will discuss why an integrated security and management will put you in the best position for success across both teams, while also improving the endpoint user experience.

Featured

Align Your Endpoint Security And  Device Management To Reduce Internal IT Friction

Taimur Ijlal

Taimur Ijlal is a multi-award winning, information security leader with over 20+ years of international experience in cyber-security and IT risk management in the fin-tech industry. He is also the winner of major industry awards such as CISO of the year, CISO top 30, CISO top 50 and Most Outstanding Security Team. Taimur's courses on Cybersecurity and AI have thousands of students from all over the world. He has also been published in leading publications like ISACA journal, CIO Magazine Middle East and published three books on AI Security, Zero Trust, and Cloud Security (two of which were ranked #1 new release on Amazon). Taimur also writes on Medium and has a Youtube channel "Cloud Security Guy" where he spreads knowledge on AI, Cloud Security and gives Cybersecurity career advice.

Scott M. Giordano

Scott M. Giordano is an attorney with more than 25 years of legal, technology, and risk management consulting experience. An IAPP Fellow of Information Privacy, a Certified Information Security Systems Professional (CISSP), and a Certified Cloud Security Professional (CCSP), Scott was most recently the General Counsel of Spirion LLC, a privacy technology firm. There Scott also served as the company’s subject matter expert on multinational data protection and its intersection with technology, export compliance, internal investigations, information governance, and risk management. Prior to joining Spirion, he served as Director, Data Protection for Robert Half Legal and established the global privacy program for Esterline Technologies Corporation in Bellevue, WA. Scott is a member of the bar in Washington state, California, and the District of Columbia. During his career, Scott has held senior positions at several legal technology firms and is listed as co-inventor on Intelligent Searching of Electronically Stored Information, patent no. 13/842,910. In addition, he taught the first law school course anywhere on electronic evidence and e-discovery.

Megha Kalsi

Megha is a seasoned Cybersecurity Executive with experience in Cybersecurity Strategy, Emerging Technologies, and Security Organizational Development. She is known to transform the security operations of organizations and facilitate security strategies, with a special focus on Zero Trust, 5G, Edge Computing Security, and Cloud Security. Clients benefit from Megha’s extensive expertise in large-scale cybersecurity initiatives for Fortune 100 clients, which include combating AI powered threats and utilizing AI to secure organizations. Megha has held multiple interim cybersecurity leadership positions in which she has turned around security operations to propel efficiencies. Further, she has worked hand in hand with hundreds of companies across a wide variety of industries. She is a Certified Chief Information Security Officer (CCISO), a Certified Information Systems Security Professional (CISSP), and holds many other specialized certifications. She is also a frequent speaker at industry conferences, such as RSA, DEFCON, CSA, and many more.

Mark Szewczul

Mark is a Security Architect and Manager with over 20 years of experience mastering numerous aspects of hardware design, DevSecOps and S-SDLC. His passion entails implementing best practices of security, privacy and safety principles at all 7-layers and beyond. He has achieved his MSEE degree in Information Science and Systems from Texas A&amp;M University and the CISSP certification. Mark also has 3 patents and has published and presented several times.

Explore how AI fortifies cybersecurity with a group of experts. Uncover the latest advancements in AI-driven threat detection, privacy preservation, and data protection. Learn strategies to combat cyber threats and maintain data integrity, essential for organizations navigating the ever-evolving digital landscape.

Industry speakers

Securing the Future: The Intersection of Security and AI

Richard Stiennon

Richard Stiennon is Chief Research Analyst for IT-Harvest, the firm he founded in 2005 to cover the 3,500+ vendors that make up the IT security industry. He has presented on the topic of cybersecurity in 31 countries on six continents. He was a lecturer at Charles Sturt University in Australia. He is the author of Surviving Cyberwar and Washington Post Best Seller, There Will Be Cyberwar. His research appears on Substack. Stiennon was the Chief Marketing Officer for Fortinet and VP Threat Research at Webroot Software. Prior to that he was VP Research at Gartner. He has a B.S. in Aerospace Engineering and his MA in War in the Modern World from King’s College, London. His latest book, Security Yearbook 2023, was released in July, 2023.

Stiennon pulls from the data he curates on 3,500+ cybersecurity vendors to winnow out the many approaches to endpoint security that exist today. Even after dramatic consolidation in recent years there are 257 companies in 35 countries that have endpoint security products. Stiennon provides a market analysis but goes further to investigate the drivers for growth. New threats, new vectors, new threat actors, and the explosion of devices, means that there will be continuous demand for endpoint security solutions.

The Endpoint Security Market: A Complete Picture

Mike Nelson

Mike Nelson is the VP of Digital Trust at DigiCert. In this role, he oversees strategic market development and champions digital trust across organizations to protect servers, users, devices, documents, software and more. Mike frequently consults with organizations, contributes to media reports, and speaks at industry conferences about the risks of connected technology, and what can be done to improve the security of these systems. Before DigiCert, Mike spent his career in healthcare IT including time at the US Department of Health and Human Services, GE Healthcare and Leavitt Partners. Mike’s passion for the industry stems from his personal experience as a type 1 diabetic and his use of connected technology in his treatment.

As the digital world continues to expand, cybersecurity has become more of a focus and priority for businesses.  Tried and true security practices, like Public Key Infrastructure (PKI), are becoming common place, securing enterprises, IoT devices, digital content and software.  In this presentation, Mike will highlight how PKI and the use of digital certificates and signatures are being used to secure the connected world and will share best practices for implementing and managing PKI within and enterprise.  Mike will also discuss the growing reality of quantum computing and will share insights into what can be done to stay ahead of security threats.

The Foundation of Digital Trust: Public Key Infrastructure

Bradley Chambers

Bradley Chambers is a freelance writer at 9to5Mac covering Apple in the enterprise and education.

Why Apple will be the number 1 enterprise endpoint by 2030 and how your team can prepare!

George Kamide

George Kamide is a technology strategist and the co-host of Bare Knuckles and Brass Tacks, a podcast dedicated to repairing the vendor-customer trust divide in cybersecurity. A multidisciplinary thinker, he has appeared as a subject matter expert on podcasts such as, Hacker Valley Media, Room for Growth and Security Confidential. With experience in large language models and security detections, George gives talks, leads webinars, and moderates panel discussions around the intersection of information security and AI tooling. He also consults independently with companies on AI business strategies. As a disinformation researcher, he contributed to research that was widely reported in The Washington Post, The Guardian, and BBC News. Moreover, was called upon to brief US Cyber Command and the Congressional Cyber Caucus on the mechanics of influence operations. He also sits on the advisory board for Vision &amp; Voice, a community dedicated to lifting women into cyber leadership positions.

As AI becomes integral to business operations and cybersecurity tooling, the technology will dramatically reshape infosec teams’ processes and impact its people. What is the best way forward? Greater specialization or broader generalization? The aim of this talk is to empower security teams with a blueprint of today’s AI security landscape, and show you how to develop strategies to lead and influence the future of your organization as we step toward the era of AI-driven cybersecurity risks and defense.

Evolving with AI: Adapting Today&#8217;s Cybersecurity Teams for the Future

James Potter

During Potter's big four consulting years, he successfully collaborated with diverse teams, identifying vulnerabilities, implementing robust security measures, and designing comprehensive strategies to mitigate risks associated with Active Directory environments. James's expertise lies in understanding the intricacies of Active Directory architecture, access controls, privilege management, authentication protocols, and group policy management. More important than any of that though is striking the balance between cost/usability and security. Each client has different needs here and that is where he come into play, making sure you have the not just the best solution but the right solution. In addition to his previous consultancy work, he is proud to be the CEO and Founder at DSE. In this role, James lead a talented team of professionals which provide cutting-edge security solutions to some of the world’s largest companies. Our mission is to empower businesses with the knowledge, tools, and support necessary to protect their invaluable digital assets. As an industry thought leader, James actively engage in the security community by speaking at conferences, sharing his insights through publications, and participating in collaborative forums. He strongly believe in fostering a culture of continuous learning and innovation, staying abreast of the latest developments in the security world and developing security solutions to counter nation state threat actors.

The majority of fortune 1000 companies operating in China are currently at risk of CCP compromise due to insecure active direction designs.  We'll be talking about how the CCP can exploit the existing architecture models, how to create a new secure architecture and how it functions from a security and operability standpoint.  From there we'll talk about ancillary benefits of the designs from a security and operations standpoint through administrative centralization and bastion forest implementations.

Secure Active Directory Operations in Untrusted Regions

Mark A. Houpt

As Chief Information Security Officer of DataBank, Mark brings over 30 years of extensive information security and information technology experience in a wide range of industries and institutions. Mark joined DataBank in September of 2017 with the acquisition of Edge Hosting (CISO since 2015). In his leadership position, Mark’s responsibilities include strategic planning, oversight of security, and compliance, as well as providing subject matter expertise for developing and maintaining a comprehensive, integrated information security and compliance program. Mark is a successful and sought-after security speaker, blogger, podcaster, and entrepreneur. He has been responsible for security and compliance solutions at Fortune 50 financial and banking institutions, health care entities, the CTO in a higher education institution, a technical operations manager in a startup as well as the role he credits for starting it all, a Cryptologist with the U.S. Navy.

Artificial Intelligence (AI) is all the rage these days. People of all backgrounds, ages, technical abilities, and intentions are using and trying AI.
 
 
AI is being harnessed for both constructive and destructive purposes within the context of ransomware. AI-driven cybersecurity tools are aiding organizations in detecting, defending against, and mitigating ransomware attacks more effectively by identifying unusual patterns and anomalies in network traffic, thus bolstering defense mechanisms. On the darker side, malicious actors are increasingly leveraging AI to craft more sophisticated and targeted ransomware attacks, enhancing their ability to breach systems, encrypt data, and demand ransoms with greater precision and impact. This Seminar will seek to inform you about how to use AI products to defend against the threats that exist today and in the future.

Is Artificial Intelligence the Next Threat or Savior (or both) for Ransomware Victims?

Rinki Sethi

Rinki is currently the Vice President and Chief Information Security Officer at BILL, where she will be leading the global information technology functions and is also responsible for leading efforts to protect BILL’s information and technology assets and advice the company’s continued innovations in the security space. Rinki Sethi brings decades of security and technology leadership expertise and was recently VP &amp; CISO at Twitter and Rubrik Inc. Rinki has been at the forefront of developing cutting edge online security infrastructure at several Fortune 500 companies such as IBM, Palo Alto Networks, Intuit, eBay, Walmart.com, and PG&amp;E. Rinki also serves on the board of ForgeRock, a public company in the identity and access management space and Vaultree, a data encryption company. Rinki holds several recognized security certifications and has a B.S. in Computer Science Engineering from UC Davis and a M.S. in Information Security from Capella University. Rinki has served on the development team for the ISACA book, “Creating a Culture of Security” by Stephen Ross and was the recipient of the “One to Watch” Award with CSO Magazine &amp; Executive Women’s Forum in 2014 and more recently the Senior Information Security Practitioner Award with ISC2 in 2018. Most recently, in 2023, she was recognized in Lacework’s top 50 CISOs list. She led an initiative to develop the first set of national cybersecurity badges and curriculum for the Girl Scouts of USA. Rinki serves as a mentor for many students and professionals.

Join Rinki Sethi, as she unveils her journey through cybersecurity as a CISO and her unwavering commitment to fostering diversity and inclusion in the tech and cybersecurity fields. 

Cybersecurity Unplugged: A Fireside Chat with Rinki Sethi on Cybersecurity&#8217;s Evolution and Future

Michael Gregg

Michael Gregg has more than 20 years of experience in information security and risk management. He holds two multiple degrees. In addition to his experience performing security management, audits and assessments, Gregg has authored or coauthored more than 25 books, including Certified Ethical Hacker Exam Prep (Que), CISSP Exam Cram 2 (Que), and Security Administrator Street Smarts (Sybex). He has testified before U.S. Congress, his articles have been published on IT websites, and he has been sourced as an industry expert for CBS, ABC, CNN, Fox News, and the New York Times. Although leading, building, and managing security programs is where he spends the bulk of his time, contributing to the written body of IT security knowledge is how Michael believes he can give something back to the community that has given him so much.

In a time of decreasing budgets, CISOs are increasingly faced with the challenge of doing more with less. In this informative keynote, Michael Gregg discusses how he grew his state’s cyber coverage from 25,000 to 250,000 endpoints. Learn how he optimized SOC operations and embraced AI to increase efficiencies and improve response times while reducing costs.

How to Optimize Security Operations by using Automation

Korede Ola

Meet Korede Ola, a visionary Cybersecurity leader, innovative Speaker and Mentor extraordinaire. With over a decade of experience leading cutting-edge projects, he empowers individuals to become Subject Matter Experts in the field. As a current VP and Principal Cybersecurity Engineer, Korede holds a Master's Degree in Information Technology Management and a host of industry certification certifications within the Cybersecurity and Project Management space. Passionate about giving back, Korede actively participates and serves as a mentor, volunteer, and board member for esteemed organizations such as NSBE, OC3, ISAC, and ISSA. Notably, he contributes to initiatives like TraceLabs, B-sides, and Hacker Summits, making a difference beyond his professional realm. Driven by his mission to raise cybersecurity awareness and foster the next generation of experts, Korede owns various technology sharing and networking platforms including vlaid.com and itblogr.com. His outstanding achievements include the FutureCon Award of Excellence in Cybersecurity and induction into the PTK honor society. For Korede, Cybersecurity is more than a profession — it's a calling to build a resilient future. He eagerly looks forward to nurturing a new generation of cybersecurity professionals, laying a solid foundation for their success in this dynamic technology-driven landscape.

Unlock the Secrets of Remote Workforce Security: Embrace the Future with Confidence!
 
Join Korede Ola at HexCon 2023 as he dives into the thrilling world of safeguarding endpoints as we thrive together in this new normal. Discover cutting-edge strategies, innovative technologies, and actionable insights to fortify your organization against cyber threats in the age of remote work. Don't miss this electrifying session packed with security revelations for a safer, more resilient digital landscape!</div>

Securing the Remote Workforce: Safeguarding Endpoints in the New Normal

Kara Larson

Kara Larson is a seasoned privacy and compliance expert, currently serving as the Assistant General Counsel for Privacy &amp; Compliance at 6sense since January 2021. Holding both CIPP-E and CIPM certifications, Kara is well-versed in privacy regulations, including GDPR, CCPA, COPPA, HIPAA, CAN-SPAM, and FERPA. She graduated magna cum laude from Loyola University New Orleans School of Law and has extensive legal experience, including work in contracts, depositions, trials, and federal appeals. Licensed to practice law in Louisiana, Kara's influence extends to federal courts, such as the Eastern District of Louisiana, and the Fifth Circuit Court of Appeals for the United States, as well as the Supreme Court of the United States. Beyond her legal career, Kara enjoys ceramics and comic books and shares her life with her dog in New Orleans. Her expertise in privacy and compliance, coupled with her diverse interests, makes her a valuable addition to any discussion on Privacy and AI.

Mae-Beth Magno

Mae-Beth Magno is an accomplished expert in the domains of data privacy and information management, presently holding the position of Senior Manager and Deputy Chief Privacy Officer at Northrop Grumman. With an extensive list of certifications, including FIP, CIPP-US, CIPP-E, CDPSE, and CIPM, she is a recognized authority in the field. Mae-Beth has dedicated three years to Northrop Grumman, where she shapes global privacy and information management strategies, fostering data privacy and responsible technology leadership. Beginning her journey in privacy and security in 2015, Mae-Beth's academic background includes a Master of Science in Information Technology. Residing in Atlanta, she balances her career with her role as a parent to three children and caregiver to two dogs. Beyond her professional role, Mae-Beth actively participates in Women in Cybersecurity and has presented her insights to the Atlanta Bar Association, focusing on the intersection of technology and privacy. Her expertise encompasses critical areas such as data-driven initiatives, GDPR compliance, and privacy technology.

Join our session to explore the intersection of privacy and generative AI in a 30-minute discussion. We'll cover:
 
 
Privacy Risks: Understand the privacy risks tied to LLMs and generative AI, with real-world examples.
 
Risk Mitigation: Discover strategies to mitigate privacy threats in AI training and deployment.
 
Future Vision: Envision the future of privacy in generative AI, including regulation and ethical considerations.

Privacy and Generative AI:  Navigating Risks, Building the Future

Sergey Chubarov

Sergey Chubarov is a Security and Cloud Expert, Instructor with 15+ years experience on Microsoft technologies. His day-to-day job is to help companies securely embrace cloud technologies. He has certifications and recognitions such as Microsoft MVP: Microsoft Azure, Offensive Security Certified Professional (OSCP), Offensive Security Experienced Penetration Tester (OSEP), Microsoft Certified Trainer, MCT Regional Lead, EC Council CEH Master, CPENT, LPT Master, CEI, CREST CPSA, CRT and more.

Today's cybercriminals have a hard time: antiviruses, whitelisting, intrusion detection systems, etc. are used by many companies around the world. However, the number of security incidents is on the rise. While defenders implement security features, attackers learn to bypass them. Defenders should also learn evasion technics to keep up with attackers.
 
 
Get insights on Windows 11 security bypass in advanced scenario-based session.

Sneaky Defense Evasion &#8211; Windows 11 security bypassed

Dr. Samuel Mbonu

Dr. Samuel has vast experience and in-depth knowledge in Cybersecurity, Mainstream IT, IT Auditing, Governance, &amp; Risk management spanning many years. With over 17 years’ work experience cutting across the Financial and the Telecommunications industries, he has steadily and diligently moved up the ranks at the different organizations. An astute expert in Cybersecurity, IT Architecture &amp; Governance, Predictive Analytics/Big Data, Cloud, Digitization, IT Auditing, IT Risk &amp; Opportunities and an advisor to Boards of Directors, IT &amp; Business Leaders on business utilization of Cyber Enabled Business Models. He is an Official member of the Forbes technology Council. An alumnus of the prestigious Harvard university as well as MIT in the USA. To his credit are an Honorary Doctorate Degree from the Prestigious Maverick Business Academy London, two Masters’ degrees and several recognized Cybersecurity, IT architecture and project management related certifications. These include CISSP, TOGAF9, CISM, ISO27001LA, CEH, Prince2 Practitioner, ISO27032, ITILv3 etc.

Will be discussing some of the recent challenges in Cybersecurity space and the relevance of AI and ML in addressing those the challenges.

AI / ML use cases in Cybersecurity

Joel M Leo

Starting at Digital Island in 1998 with a fresh MCSE in Windows NT 4, Joel has earned experience across a number of platforms and technologies with many jumbles of letters after his name to go along with them. Most recently, Joel was the Senior Staff Architect for Gap, Inc.’s Defensive Engineering, End User Engineering, and IAM teams, and he is currently a consultant for several other organizations, focusing primarily on Active Directory. When he's not discovering new and interesting ways to break AD, you can usually find him hitting the waves at home in Hawaii, dodging chads in Escape from Tarkov, or hotdropping targets in Eve Online.

*Attacker pops a workstation on your domain*
 
 
*Attacker establishes her foothold and local persistence*
 
 
*Attacker begins recon of AD, starting with Domain Admins*
 
 
ERROR: The group name could not be found.
 
 
Attacker, with a disconcerted look on her face: "Dude, where's my Domain Admins?"
 
 
Killchains that involve AD usually involve enumeration of highly-privileged accounts: members of Domain/Enterprise/Builtin Admins, Server Operators, etc. Those groups and their members can be enumerated in AD by default, exposing members as targets of exploitation to obtain those privileges. However, there's a way to use in-the-box AD capabilities to thwart these attempts. Using List Object mode, implicit deny, and AdminSDHolder/SDProp, AD defenders can hide these principals from unprivileged users. In this talk, I'll walk you through the principles, process, and pitfalls, so you can raise the bar on your AD defenses without blowing things up.

Dude, Where&#8217;s My Domain Admins? 

Nikhil Agarwal

Nikhil is a trailblazer in the field of information security, known for his innovative approach and unrivaled expertise as a Senior Solution Architect with Fortanix Inc. He leads large-scale projects that focus on Confidential Computing technology, helping clients solve their most pressing data security challenges. In recognition of his outstanding contributions to the field, Nikhil was ranked 18th globally in Cyber Security, 10th in Emerging Technologies, and 3rd in Cloud Security Leaders by Onalytica in 2021. His accomplishments were further celebrated in 2022 when he was named a Cloud Security Champion by the Cloud Security Alliance. Nikhil's reputation as a noted technology expert is well-deserved, as he is passionate about sharing his knowledge with the community. He has a proven ability to work across cultures and serve clients globally, having previously held senior management roles with Deloitte Singapore, PwC Thailand, Quick Heal, and Atos in EMEA and JAPAC countries within various client industries. He is a true leader, who is shaping the future of information security and making a real difference in the world.

Artificial intelligence (AI) is a game-changer in today's data-driven world, influencing every sector of the economy and society. However, there are legitimate privacy risks associated with AI's extraordinary power. With AI algorithms processing and analysing ever more sensitive personal data, safeguarding such data is of crucial importance.
 
 
In this 30-minute talk, I'll discuss how Privacy-Enhancing Technology (PET) fits within today's artificial intelligence (AI)-driven cybersecurity scenario. In this article, we'll look into how PET protects not only sensitive data but also the rights to privacy of the individuals involved. We will talk about the fundamentals of PET, how it fits into existing AI frameworks, and some practical applications.

Building a Secure Future with AI: The Role of Privacy-Enhancing Technology

Danni Brooke

Danni Brooke is one of the most experienced female undercover officers. She began her career with the elite New Scotland Yard covert unit and is said to be the most deployed female asset to date. Danni now co-owns a global leading Cyber Security company and is a world class investigator and intelligence expert. Most recently Danni has become a best-selling Author, The Girl for The Job where she shares her real double life.

Human errors are responsible for almost 90% of cyber-attacks. 1 slip of the key can cost an organisation millions of pounds and even bring down that entire organisation! 

You are the weakest link!

David Pereira

David Pereira is a Published Author, Trainer, Digital Researcher and Consultant with over 24 years of experience in the field of Cybersecurity and Computer Forensics, which has developed consultant activities in Ethical Hacking, Malware Analysis, Penetration Testing and Forensic Analysis for various national and international.

Cybersecurity after artificial intelligence is a reality, we will dive deep in to the versatility offered by AI tools when it comes to OSINT. With AI you can automate procedures like internet scraping, repetitive tasks, information extractions, tool recommendations, image restoration and much more.

Unleashing the power of Artificial Intelligence for OSINT

Partha Alwar

Partha Alwar is a Director at Aon, delivering Stroz Friedberg Incident Response services. In this role, Mr. Alwar serves as a technical lead in investigations related to Digital Forensics and Incident Response. Mr. Alwar’s expertise primarily lies in host-based forensics, log analysis and malware reverse engineering. He also holds the GCFE and GREM certifications. Mr. Alwar has led incident response teams in several significant matters including the investigation of data breaches within large financial networks, ransomware attacks, theft of crypto-currency, theft of intellectual property, and state-sponsored intrusions. He regularly conducts digital forensic preservations, examinations, and analyses in support of a variety of contexts including civil litigations, criminal matters, internal investigations, data breach investigations, and incident response efforts.

Ann Romer

Ann Romer is a Director at Aon, delivering Stroz Friedberg Incident Response services. In this role, Mrs. Romer manages the TMAC (threat monitoring and containment) team, an international team of EDR analysts/threat hunters supporting the Digital Forensics and Incident Response team in numerous engagements. Mrs. Romer holds a CASP+ certification and is testing for the CCISO certification at the end of this year. Mrs. Romer’s TMAC team has conducted numerous threat hunting and containment engagements on the proactive and reactive (Incident Response) basis where they detected, identified, and contained numerous threats for clients as well as assisted with threat remediation post detection. The TMAC team has supported clients in a variety of industries such as transportation, retail, business services, legal, software, manufacturing, government, and healthcare. Prior to coming to work for Stroz Friedberg, Ann worked 20 years in law enforcement, the last seven as a criminal investigator assigned to the Information Systems Division (ISD) at the Office of Inspector General of Texas Department of Criminal Justice.

In the ever-evolving landscape of cybersecurity, Endpoint Detection and Response (EDR) systems have emerged as essential tools for safeguarding organizations against advanced threats. However, the effectiveness of EDRs hinges not only on their deployment but also on their accurate configuration and vigilant management. In this talk, we delve into prevalent missteps that security teams often encounter during implementation of EDR software. From overlooking crucial settings to underestimating the importance of continuous monitoring, these missteps can undermine the very purpose of these powerful defense mechanisms. Join us as we dissect real-world case studies, illustrating the ramifications of these mistakes, and provide practical insights to navigate the challenges of EDR configuration. By the end of this session, attendees will be equipped with a comprehensive understanding of the critical factors that contribute to EDR efficacy, enabling them to fortify their organization's security posture and stay one step ahead of adversaries.

Navigating EDRs: Unveiling  Common Pitfalls in Configuration and Management

Bryan Seely

Bryan Seely is a world-famous hacker, cybersecurity expert, author, international keynote speaker and former U.S. Marine. Seely became one of the most famous hackers in 2014 when he became the only person to ever wiretap the United States Secret Service and FBI. Shockingly he told the 2 agencies before he was caught, and instead of being sent to maximum security prison, the Secret Service called him a hero and praised his courage and integrity. He has appeared in the New York Times, Wall Street Journal, Washington as well as television appearances on Closing bell on CNBC, CNN, FOX News, ABC, NBC and TMZ with Harvey Levin. Bryan is passionate about fighting for consumers rights, privacy and educating the public about how to stay safe in a constantly changing technology landscape. Bryan also co-founded the Blackhat MEA Hacking conference in Riyadh in 2021, and currently lives in Seattle where he is a full-time single parent of 2.

Sept 21

Hackers are proving to be increasingly effective at breaking into companies all over the globe. In 2022, we have already seen an incredible number of breaches / public hacks that are not just the typical ransomware attacks. Hear all about one of the top hacking organizations, their methods and what you can do to prevent them, or a group like them, from successfully hacking your organization.

Inside an Elite Hacking Organization: LAPSUS$

Will Thomas

Will Thomas is currently working as a Cyber Threat Intelligence (CTI) Researcher for the Equinix Threat Analysis Center (ETAC) team. In addition to his work at Equinix, he is a SANS instructor and co-author of the SANS FOR589 course: Cybercrime Intelligence and the co-founder of the Curated Intelligence trust group. He was also interviewed for the on Darknet Diaries (Episode 126: REvil), has contributed TTPs to the MITRE ATT&amp;CK framework, and holds a BSc (Hons) in Cybersecurity.

As a cyber threat intelligence (CTI) researcher, it has been my job to track cybercriminals on a day-to-day basis for over four years now. It is not often that something comes along that surprises me. However, the latest trend of an English-speaking cybercriminal group joining forces with a Russian-speaking ransomware gang is certainly remarkable. The first group, tracked by CTI researchers under the codename Scattered Spider (also known as 0ktapus, UNC3944, or Storm-0875), is known for their unique style of attacks, which involve social engineering, SMS phishing text messages, SIM swapping, and evading all sorts of enterprise security tools and the group Scattered Spider has joined is an infamous Russian-speaking ransomware gang known as BlackCat (or ALPHV), whose associated with the DarkSide/BlackMatter gang that was responsible for the worst attack on US critical infrastructure.

The Dynamic Duo: When Russian and Western Cybercriminals Combine

Charlie McMurdie

Charlie McMurdie served for 32 years in the Metropolitan Police where she established and led a world class national cyber crime capability and enforcement body for the United Kingdom. She is an acknowledged cyber crime and security expert and internationally acclaimed authority and advisor on issues within government and industry in relation to the Internet, computing fraud and security sectors. Post law enforcement as the Senior Cyber Crime Advisor to PwC Charlie led on a range of global strategic and operational cyber security programs as well as leading on cyber crime within Breach Aid, PwC’s critical incident multidiscipline response team. Charlie now provides cyber security presentations and policing advice across a range of industry and government sectors.

Charlie gives an overview of cyber-crime, real world operational cases investigated and prosecuted, including organised crime groups attacking financial institutions, dark markets that facilitate cyber trade, internet frauds, phishing and hacktivist attacks. Charlie will also discuss physical security threats of the 3 P’s – People / Premises / Products.

<ul style="padding-left: 20px; list-style-type: disc;">
 	<li>Discusses the threats and need for appropriate security measures, both physical, human and digital</li>
 	<li>Examines the strategic nature of the precautions required now and in the future and gives operational examples of investigations dealt with in the past</li>
 	<li>Highlights current cyber risks and how and why every organisation is potentially vulnerable to Ransomware, Ddos and Data breach</li>
 	<li>People|Premises|Products – the security threats that are not always online.</li>
</ul>

Security Threats – Cyber Crime and Protecting Your Business.

Gerald. J Caron

Gerald Caron is the Chief Information Officer for the International Trade Administration. In this role, he implements information technology services, solutions, and strategies for an agency of 2,200 employees across 100 U.S. cities and 80 international markets. Caron has two decades of experience leading global teams in IT operations and cybersecurity. Prior to joining ITA, he was the Chief Information Officer and Assistant Inspector General of Information Technology at the Department of Health and Human Services during the height of the COVID-19 pandemic. He also served at the State Department in various technical roles, including as Director of Enterprise Network Management oversaw the Department’s infrastructure and operations (network, perimeter security, active directory and much more), and was extensively involved in mitigating cybersecurity attacks. He began public service in the U.S. Army for seven years.

This presentation will cover Zero Trust 101, explaining what it is. It will also explain high level approach towards pursuing Zero Trust. Also, in this session it will help in explaining and introducing it to the user and stakeholder population to include benefits and how they can contribute to the effort.

Zero Trust – The Art of Trusting No One

Alex Sharpe

Mr. Sharpe is a long-time Governance, Digital Transformation, and Privacy expert with real-world operational experience. He has run business units and has influenced national policy. He has served on Boards and has advised them. This provides him a pragmatic understanding of the delicate balance between Business realities, Cybersecurity, and Operational Effectiveness. He began his career at NSA moving into the Management Consulting ranks building practices at Booz Allen and KPMG. He subsequently co-founded two firms. He participated in over 20 M&amp;A transactions. He has delivered to clients in over 20 countries on 6 continents. Appearances have included the Wall Street Journal (WSJ), Harvard Law School's Forum on Corporate Governance, Johns Hopkins University, ISACA, OneTrust, and Cloud Security Alliance. Mr. Sharpe regularly writes, teaches, and speaks. Appearances have included the Wall Street Journal (WSJ), Harvard Law School's Forum on Corporate Governance, Johns Hopkins University (JHU), ISACA, IIA, InfraGard, ASIS, Cloud Security Alliance (CSA), and RIMS.

Every day it feels like we get hit with a new standard, a new revision, a new law, or a new regulation. It often feels like we are not yet finished with one, only needing to replan for another. In reality, they are more alike than different, and at their core, they have consistent themes running horizontally across them all. In this session, we will walk through how the principles of Zero Trust can form a foundation freeing you up to focus on the deltas.

Zero Trust as the foundation of Cybersecurity and Privacy

Dr. Thomas Matheus

Thomas Matheus has worked in different industries for over 25 years, i.e., defense, retail, technology consulting and higher education. Thomas earned a Ph.D. in innovation processes in the aerospace industry. Throughout his career, Thomas has always been intrigued by new technological developments to improve organization. This naturally led to an interest in aspects that could hinder organizational improvements, i.e., cyber-attacks. Due to this development, Thomas became a co-founder of the cybersecurity company Cystel, in which he acts as Chief Operating Officer. Cystel provides cybersecurity as a service in relation to penetration testing, governance, risk and compliance, quantum cybersecurity risk assessment, quantum penetration testing and a quantum malware protection service.

The talk will cover aspects associated with the emergence of digitalization in healthcare, such as wearables, artificial intelligence (AI) and the use of big data. Subsequently, different technological environments of the healthcare sector are introduced, and the threats associated with these environments are highlighted. Examples of cyber-attacks in the healthcare sector are also introduced. We will also contrast cybersecurity investments with how well these investments prevent cyber-attacks from happening. This then leads us to an overview of the cost of healthcare cyber-breaches and the cost of data breaches as well as cyber-attack response times. Following this, we will cover aspects associated with hacker innovation versus company innovation in cybersecurity as well as a comparison of cybersecurity versus digital innovation cycles in healthcare organisations. The above will lead to several problem statements for the healthcare sector. The final parts of the presentation will introduce different facets of a new threat vector in the healthcare sector, which is quantum computing and we will close the presentation by suggesting ways to address the quantum threat in the healthcare sector.

Cybersecurity in Digital Healthcare Sector

Patrick Garrity

Patrick Garrity is a globally recognized cybersecurity researcher known for his pioneering work in translating vulnerability data into actionable visualizations that empower vulnerability management teams and security professionals. With over 15 years of experience in the field, Patrick has played pivotal roles in the growth of several high-impact SaaS cybersecurity startups, including Duo Security, Censys, Blumira, and his current position as Cybersecurity Researcher and VP at Nucleus Security. At Nucleus Security, he spearheads GTM strategy while conducting cutting-edge security research on vulnerability disclosure, prioritization, exploitation, and scoring.

A pragmatic look into the rise of software vulnerabilities, vulnerability exploitation and vulnerability intelligence. Patrick will share his vulnerability research and data visualizations to help provide insight into vulnerability trends that is useful for enterprise organizations in exploring how to tackle the overwhelming nature of vulnerability management.

The Rise of Vulnerabilities, Exploitation and Intelligence

G M Faruk Ahmed

G. M. Faruk Ahmed is a distinguished expert in the realm of Information Systems Security and Cybersecurity Audit. With an impressive array of credentials including CISSP, CISA, CDCP, CC, CEH, and numerous other professional certificates, he stands as a paragon of knowledge and expertise. As the Director of Membership at the ISACA Dhaka Chapter, Faruk plays a pivotal role in fostering a community of like-minded professionals. Beyond his leadership, he shines as a Cybersecurity Trainer and a compelling Security Awareness Motivational Speaker. His insights are sought-after, making him a key influencer in the industry.

In today's interconnected digital landscape, the financial industry stands as one of the prime targets for cyber threats and attacks. As technology continues to shape the way we conduct financial transactions and manage investments, the need to safeguard sensitive data, financial assets, and client information has never been more critical. The "Fortifying Financial Futures: Cybersecurity in the Financial Industry" session aims to shed light on the evolving challenges, best practices, and innovative solutions that are shaping the cybersecurity landscape within the financial sector.

Fortifying Financial Futures : Cybersecurity in the financial industry

Andrew Chanthaphone

Meet Andrew, a seasoned expert in the exciting world of Identity and Access Management (IAM). Andrew has more than 9 years of real-world experience. He started out as a bright business analyst and is now doing great work as a director. His knowledge is limitless! Andrew has a long history of successfully implementing cutting-edge IAM systems for both public and private customers. He is known as an expert in his area because he can tackle hard problems head-on and get great results. Andrew is passionate about more than just his day job. He is also a creative force who has moved into the exciting world of YouTube. Andrew had a strong desire to share what he knew about IAM and help aspiring workers break into the field, so he took a leap of faith and started making interesting videos on his channel. Get ready to go on an exciting trip as he unravels the mysteries of IAM and gives his eager audience valuable insights and advice. Andrew is a big fan of helping people get started in the tech business, even if it's not related to his digital adventures. Whether it's helping people make great resumes or practicing interviews, he loves giving people the tools they need to grow in their careers. The way he works hard to make a change in people's lives is very impressive. Andrew is a devoted father, a loving husband, and the proud owner of a cute dog when he's not taking over the IAM world or helping aspiring tech fans. When he needs a break, you can often find him engaged in the exciting world of sports or watching a good anime show. And don't forget that he works hard to stay fit and healthy. Working out is his trick to keeping his life in balance. So, join Andrew on his amazing journey as he changes the IAM landscape, spreads knowledge like wildfire, and loves the joys of family, fun, and personal well-being. Get ready for a fun trip because there's never a dull moment with Andrew.

Traditional approaches to cybersecurity are becoming obsolete in the swiftly evolving digital landscape, necessitating a paradigm shift towards a more dynamic and robust security framework. This presentation titled "Identity is the New Perimeter" explores the emergent notion that identity, rather than the traditional network perimeter, is now the primary line of defense against cyber threats.

&nbsp; 
 
 

With the proliferation of cloud services, mobile devices, and Internet of Things (IoT) devices, the traditional security perimeter has become increasingly permeable, rendering the once well-defined boundaries insufficient for safeguarding sensitive data and vital assets. Instead, modern cyber adversaries exploit vulnerabilities in identity and access management systems to acquire unauthorized access.

Identity is the new perimeter

David Wallace

Served the US Army as a Multifunctional Logistician for over two decades. During my tenure, I was honored to oversee supply chain functions such as purchasing, maintaining inventory, selecting vendors, and distributing products. I developed the necessary skills to create strategies to help businesses meet their objectives and KPIs. Strong negotiation skills enabling the most favorable deals from vendors. Great at making sense of data, recognizing problems and finding solutions, preparing reports for management and other teams, interpreting legal papers, networking with external entities, and building relationships with stakeholders.

<ul style="padding-left: 20px; list-style-type: disc;">
 	<li>Supply Chain Disruptions: Cybersecurity incidents can disrupt the supply chain, causing delays, disruptions in operations, and financial losses. Attacks on critical infrastructure, such as transportation networks or inventory management systems, can have far-reaching consequences.</li>
 	<li>Third-Party Risks: Supply chains often involve multiple third-party vendors and partners. Each additional connection introduces a potential vulnerability, as cyber attackers may target weaker links to gain unauthorized access or compromise sensitive data.</li>
 	<li>IoT and Connected Devices: The Internet of Things (IoT) is crucial in logistics and supply chain management, enabling real-time tracking, monitoring, and optimization. However, the increased use of connected devices also raises cybersecurity concerns, as these devices can be compromised and used as entry points into the network.</li>
 	<li>Lack of Security Awareness and Training: Insufficient cybersecurity awareness and training among employees can leave organizations vulnerable to cyber threats. Human error, such as clicking on malicious links or falling for social engineering tactics, can lead to security breaches.</li>
</ul>

Trending Cybersecurity Challenges in Logistics and Supply Chain Management

Marcus Wells

Marcus Wells is the CEO of WellSecured IT. He leads the identity security training and advisory services. He also provides advisory to global organisations through cloud migration. As a CEO, he engages key business owners as well.

In this enlightening 45-minute exploration, Marcus will dive into the multifaceted world of Privileged Access Management (PAM) and uncover the intricate relationship between privileged and non-privileged access. The presentation reveals why PAM is more than a mere technological term; it's an essential part of modern cybersecurity architecture.
 
 
Whether you're a cybersecurity expert, IT professional, or someone interested in understanding the complexities of modern digital access, this presentation offers a comprehensive and engaging look at PAM. It's a must-watch for anyone looking to delve beyond the surface and explore the nuanced relationships that govern secure access in today's interconnected world.
 
 
By the end of this video, viewers will walk away with a deeper appreciation for PAM's complexities and how understanding privilege and non-privilege can lead to a more robust and responsive security posture.

PAM &#8211; More than Meets the Eye! &#8211; The relationship between Privilege and Non Privilege

Hanim Eken

Hanim is a cybersecurity evangelist and is helping companies in, "building a secure environment for business and governance targets". Hanim has more than 18 years of experience in cybersecurity, application security, penetration test and security regulation and standardization. Hanim is interested in software supply chain security, penetration testing, blockchain security data security, application security, security regulation and standardization. She has authored more than 10 eBooks, including TOP 101 Application Security Job Interview Questions &amp; Answers, Learn the fundamentals of software supply chain security with questions and answers, Introduction to Web 3.0 and security implications of Web 3.0, Understanding API Security, and Implications, etc. She has courses about application security and penetration test.

Software supply chain includes source code, all binaries, libraries, third-party components, plugins, configurations, proprietary, and all dependencies at every stage of the software development life cycle (SDLC). It contains open-source scripts and packaged software, repository engines, testing suites, CI/CD tools, compilers and editors, and drivers. Thus, software supply chain security is important for software projects. Software supply chain security touches on many areas of software projects. If software supply chain isn’t secure, it may cause data loss, data breaches, and damage or disrupt operations.


In this session, Hanim will talk about software supply chain security. The session covers these topics:

1. What is software supply chain and software supply chain security?</li>

2. Why software supply chain security is important?

3. Software Supply Chain Attacks

4. What is SBOMs?

5. Why SBOMs security is important for software projects?

6. How can you secure Software Supply Chain?

Software Supply Chain Security

Jian Gong

Jian is a technology, cybersecurity and data privacy leader with over 19 years of experience working in various industries, ranging from Defense, Pharmaceuticals, Media and Healthcare. He has architected and implemented the cybersecurity and privacy programs for small businesses and global enterprises to help them sustainably and securely scale their technology infrastructure and processes. Jian is currently the Head of Cybersecurity and Technology Infrastructure for Better Therapeutics, an early growth phase company focused on delivering prescription digital therapeutics to help patients treat the underlying causes of cardiometabolic diseases. Prior to joining Better Therapeutics, Jian led the cybersecurity program at Dow Jones, a global media company, and worked closely with various teams to safeguard journalists and other staff from online threats. He also volunteers as a mentor for several non-profit organizations, such as Bottom Line, serves on the Board of Directors of IHRAF, and is an active member of various professional organizations.

The security of medical devices used in healthcare to treat diseases, collect health information or alert on adverse events, if compromised, can often mean the difference between life and death. With the proliferation of cyber threats against healthcare, it is increasingly important that companies implement and maintain strong security protections across these devices. In this talk, we will explore the key steps that companies should take to secure the medical devices used by countless patients across the United States.

Where security meets patient  safety &#8211; Securing medical devices in healthcare

Umar Carter

Umar Carter is an experienced Cyber Risk Advisor and Certified Chief Information Security Officer (CISO) with a proven track record in partnering with clients to identify information security risks and implement strategic solutions. As the Board Chair for IMAN (Inner-City Muslim Action Network), he brings his leadership skills to drive positive change and empower communities. In his previous role as Global Security AVP and Global Head of Cyber Analytics, Umar led the development, coordination, and execution of complex information security programs. He has a deep understanding of risk management processes and has successfully led enterprise-wide risk-based implementation programs. Umar’s passion for talent development is evident in his mentorship and coaching of professionals in the Cyber Security space across various industries. Through his professional and philanthropic endeavors, he has built strong networks and engaged with thought leaders globally. With Bachelor’s degrees in Finance and Economics, a Master’s degree in Information Systems, and security certifications from reputable organizations, Umar is well-versed in the latest security technologies and methodologies. He also holds a Cyber Security Policy certification from Harvard Kennedy School. Umar’s global perspective is enriched by his work and living experiences in diverse regions. As Board Chair for IMAN, Umar demonstrates his commitment to community empowerment and social justice. His expertise in cyber risk advisory and CISO leadership, coupled with his role as a catalyst for positive change, make him a valuable asset in addressing information security challenges and driving impactful solutions.

In an era of evolving cyber threats, traditional security models are no longer sufficient to protect your organization's digital assets. Enter Zero Trust - a security framework that challenges conventional paradigms by assuming that trust must be earned, not granted. But, here's the challenge: Convincing business stakeholders of its value. Join Umar for an engaging presentation that delves into the crucial art of communicating the importance of Zero Trust to the heart of your organization - the business. In this session, we will explore:

The Zero Trust Foundation: Understand the core principles of Zero Trust and why they are essential for modern cybersecurity.

Speaking the Business Language: Learn how to bridge the gap between technical jargon and business goals. Discover how to articulate the value of Zero Trust in terms that matter to executives and decision-makers.

**Measuring Success:** Explore key performance indicators and metrics that demonstrate the tangible benefits of implementing Zero Trust, from cost reduction to enhanced agility and resilience.

Demystifying Zero Trust &#8211; Why it is a business imperative?

Sean Goodwin

Sean is a Senior Manager in Wolf &amp; Company P.C.’s DenSecure group where he is responsible for coordinating and executing cybersecurity assessment services at client locations for financial, healthcare, educational, and investment planning clients. Sean also leads Wolf’s PCI DSS team.

As the daily barrage of headlines continues to roll in, it is easy to feel deflated as a cybersecurity defender. Most first-time penetration tests follow a standard attack path based on these common weaknesses and misconfigurations. Not surprisingly, these are the same techniques used in real-world attacks. What if you could flip the script on those attackers (authorized or not)? We’ve all heard that attackers only need to be right once, while defenders need to be right every time. Frustrated attackers tilt the scale in favor of the defender – either they make mistakes, giving us a chance to respond, or they move on to an easier target. Either case is a win for the defender.


This session presents a case for 7 things defenders can do today for free that frustrates attackers into a self-defeating spiral. Attendees will learn:
1. The most common attacker techniques
2. Defensive techniques to disrupt the attack
3. How to build a process to keep up with changes in attack techniques

7 ways to frustrate attackers

Ruchira Pokhriyal

Meet Ruchira Pokhriyal, a dynamic and accomplished Cybersecurity expert with a passion for safeguarding the digital landscape. Specializing in cutting-edge domains such as Web-App PenTesting, Cloud Security, Incident Response &amp; Digital Forensics, she has become a true authority in her field. Currently, Ruchira serves as a Cloud Security Specialist &amp; Security Incident Responder at the prestigious Amazon Web Services, where she plays a crucial role in fortifying online security. Ruchira is a fervent advocate for DE&amp;I, supporting visibility for LGBTQ+ &amp; Neurodivergence communities, and advancing equality for women of color in Tech. Her impactful presence extends to social media, where she generously shares valuable Tech tips. You can find her on Instagram, TikTok, YouTube and LinkedIn, where she goes by the handle @silverbansheeee. Note: Please bear in mind that this session is solely for educational purposes. Throughout the conversation, Ruchira will be sharing her personal opinions, which should not be construed as representing the views of her employer or the communities she is affiliated with. The information provided is intended to foster learning and understanding, and any interpretations should be taken in the context of individual perspectives rather than official stances.

Cloud computing has become increasingly popular in recent years, as organizations of all sizes move their data and applications to the cloud. However, this shift to the cloud has also introduced new security challenges. Cloud security is often overlooked, which can lead to serious data breaches and other security incidents. In fact, a recent study by the Cloud Security Alliance found that 70% of cloud security incidents are caused by misconfigurations.
 
 
In this session, Ruchira will explore the less talked about aspects of cloud security. She will discuss the risks of data breaches, insider threats, and cloud misconfigurations. She will also discuss how to mitigate these risks and protect your organization's data in the cloud.
 
 
By the end of this session, you will have a better understanding of the dark side of cloud security and how to protect your organization's data.

Don&#8217;t Let the Cloud Blindside You: How to Mitigate the Risks of Cloud Security in your organization

Ben Kereopa-Yorke

Ben is a trailblazing cyber security guru and product maestro, consistently riding the crest of innovation and making waves in the digital realm. Armed with a thirst for knowledge, he's on the brink of conquering his Master of Systems Engineering with a specialisation in Electronic Warfare, having already clinched postgraduate degrees in both Cyber Security and the expansive world of Cloud Computing. But why stop there? Ben is also delving deep into a Graduate Certificate in AI. With an arsenal of certifications spanning from Cyber Security to Machine Learning, Ben's resume reads like the cheat sheet to future-tech. His insatiable drive not only amplifies his professional journey but also resonates in his contributions to enterprises, societal advancements, and cherished personal ties.

As cyber threats evolve at an unprecedented rate, so too must our defenses. Enter the realm of Artificial Intelligence – our modern-day guardian against a vast digital wilderness. In this talk, we'll delve into how AI is revolutionizing cyber security, offering both unparalleled opportunities and new challenges. For both the tech-savvy and the curious novice, this journey will reveal the intricacies of AI-driven protections and offer a glimpse into the future of a safer, smarter digital world.

The Future of Cyber Security and the Rise of Intelligent Defense

Harvey Nusz

Harvey is a Privacy, Security, Compliance, Encryption, Process, Governance/Risk, Business Continuity/DR &amp; Audit Professional who has helped companies get compliant securely with FCPA, Sox, HIPAA, FISMA Moderate, NYDFS CRR500 Cybersecurity Regulation First Phase, PCI-DSS, Privacy Shield, GDPR, US State Regs. Harvey speaks frequently, both nationally and locally.

Edward Ted Murphree

Edward ‘Ted’ Murphree is currently a Senior Risk and Compliance Engineer with Wilson Sonsini Goodrich &amp; Rosati. Ted is also a seasoned attorney with over 22 years of experience as an attorney with a legal specialization in privacy and cybersecurity. In his professional experience, Ted has been the person giving privacy and cybersecurity legal advice as well as operationalizing these requirements. Ted prides himself on his evolution as a privacy/cybersecurity professional as opposed to ‘merely’ a privacy/cybersecurity attorney. One of his favorite sayings is that you never stop learning, so embrace it. To that end, Ted has enhanced his understanding of privacy/cybersecurity with attainment of a PhD in Engineering Management with emphasis in privacy, security and risk and a doctoral dissertation involving privacy and human behavior/decision-making. Finally, 5 information privacy certifications complements Ted’s formal education.

We all know or should know, that the genesis of GDPR and Article 95/46/EC was a strong concern about maintaining privacy rights as human rights and that it began shortly after WWII, and the genocide during that war.
 
Fast forward to today, and virtually every company in the EU, and on that side of the world, has a company policy on human rights. You’ve seen it, and you’ve done the training, as I have.
 
 
However, very few US companies see the need to have a human rights policy. We will discuss this, and make the point that this can be the source of private companies thinking they have the right to decide to take the risk of getting a fine for not complying with GDPR.
 
 
We will then counter and say that this thinking usually forgets that the judgment in addition to the fine can stop the processing of GDPR data and cross-border transfers. Additionally, and more to the point, this non-compliance actually violates the privacy and human rights of their employees, customers, and vendors that are affected by their non-compliance.
 
Lastly, we will discuss how compliance with GDPR and other relevant legislation can set your company apart from your competitors.

Do Not Forget that Privacy is Fundamentally a Human Right and What that means for Compliance

John Erik Setsaas

With over 25 years’ experience in digital identity, John Erik Setsaas is a pioneer in this space. He is a prolific speaker at fintech industry events around the world including Money20/20 Europe, idNext, MyData, Digital Finance World. Mobile World Congress, Trustech, KuppingerCole EiC and FinTech Connect. John Erik has become known for his quirky examples and pop culture references in explaining topics at the intersection of identity and fintech. An authority on digital identity, John Erik will be able to speak to how digital identity is core to some of the hottest topics in the industry. He is currently director of innovation in Tietoevry’s financial crime prevention unit. He has previously worked for Signicat as VP of Identity of Innovation, Chief Development Architect for SAP Identity Management and taught ecommerce, identity services and security at Buskerud University College in Norway. He was a board member of the EEMA, Europe’s leading digital identity think tank, and has received the EEMA Lifetime Achievement Award.

The promise of the DIW (Digital Identity Wallet), which is inspired by SSI (Self-Sovereign Identity), is to give the user more control of which data they are sharing with whom. But do the users really want this? User control was also the intention behind "The cookie law", which brings up annoying dialogs, where only the most dedicated will do anything but accept the default option. This is very similar to the GDPR consents, where you in most cases have no option but to accept, to be able to continue.
 
 
We need to ensure that the DIW helps me to do what I want to do, instead of annoying me. In this perspective, I will have a look at the DIW from the user perspective, how the user can benefit from the wallet, and what the user will expect from a DIW to make it useful and user friendly.

The Digital Identity Wallet &#8211; A user perspective

Hieu Minh Ngo

Hieu Minh Ngo is a Vietnamese cyber security specialist and a former hacker and identity thief. Hieu was recruited by the National Cyber Security Centre (NCSC) under the Ministry of Information and Communications as a technical expert.

Phishing attack failed on Passwordless

Kristine Sihto

Kristine Sihto is an artist extroadinaire, avid gamer, and editor/documentation specialist for TinkerInk, working primarily with cybersecurity consultancies. Kristine has more than 15 years experience working in document creation and quality control systems, with a specialisation in information security since 2016. They are active in the conference space as a speaker, a volunteer organiser at CrikeyCon and TuskCon, and they work to promote accessibility and inclusion wherever they can.

Documentation is inherent to every organisation, and a lot of that documentation is bound for external clients. Unfortunately, there are a lot of places, both in the architecture of your documents, as well as in the content itself, which give away key pieces of information about your organisation.


My presentation will address common places in documentation that may leak information about staff, internal processes, and other clients, and discuss methods to reduce the incidence of information leakage.

Papercuts -Stop the Bleed. Reducing information leakage from client-bound documentation

Ted Harrington

Ted Harrington runs Independent Security Evaluators (ISE), the elite security researchers who pioneered car hacking, were first to exploit the iPhone, first to exploit Android OS, pioneered medical device hacking, and run hacking event IoT Village. Since inception in 2005 out of the PhD program at The Johns Hopkins University, ISE has served technology pioneers such as Amazon, Google, Microsoft, Netflix, Disney, Qualcomm and many more as their trusted security advisor. If your problems include difficulty understanding how attackers think, how they operate, and how they break systems; if you want to actually achieve security excellence (as opposed to just meeting a minimum, or being "compliant"); if you aren't yet sure whether your approach is effective or if your security investments are good ones; if you're concerned about how expensive, difficult, and uncertain security is; if you need to demonstrate to your customers, shareholders, board, and industry that you take security seriously and are worthy of their trust &amp; business … Ted is the security expert for you.

Sept 22

Did you know that hackers tend to follow a systematic process to find exploitable security vulnerabilities? But did you know that many steps are often overlooked when trying to defend against them? In this talk, you'll learn:
<ul>
 	<li>the process by which hackers find exploitable vulnerabilities</li>
 	<li>common misconceptions people have about securing these systems</li>
 	<li>what you should do about it</li>
</ul>
Led by Ted Harrington, #1 bestselling author and leader of ethical hackers, you'll hear stories from the front lines of ethical hacking, simplified into stories, and translated into actionable advice. As a result, you'll leave with a new understanding about how hackers operate, and some ideas of what you can go implement accordingly -- whether or not security is part of your job description.

The Hackable Method

Ilias Mavropoulos

Ilias Mavropoulos's journey in the digital world began at the age of 12, when he built his first PC using an Intel Pentium III processor clocked at just 550Mhz! Since then, technology has remained Ilias's passion and has formed the cornerstone of his professional journey. In a nutshell, Ilias Mavropoulos is the guy that invested 1.400€ on just an SSD drive upgrade (Ocz Vertex Turbo 120GB - SLC Nand) back in 2009, skyrocketing the performance of his Windows Machine.

In this insightful talk, we will delve into the multifaceted world of Bring Your Own Device (BYOD) in the workplace. Emphasizing the importance of adopting BYOD, the discussion will navigate the delicate balance between security, privacy, productivity, and convenience. As businesses strive to enhance flexibility and innovation, understanding the opportunities and challenges of BYOD becomes paramount. Join us to explore strategies, best practices, and the transformative potential that BYOD can offer to modern organizations.

BYOD and the Agile Workforce: Enhancing flexibility without compromising Security

Pratyusha Vemuri

Pratyusha Vemuri is an accomplished cybersecurity professional renowned for her pioneering contributions in the tech industry. With a remarkable career spanning influential companies like Microsoft, Zscaler, Akamai, and Balbix, she has consistently pushed the boundaries of cybersecurity solutions. She recently embarked on an entrepreneurial journey (Panoplia.io) to protect consumers and businesses from growing cyber frauds. dedication goes beyond technical innovation – Pratyusha actively advocates for diversity and inclusion in the field, mentoring aspiring cybersecurity professionals, and sparking positive change within the industry. Her achievements have rightfully earned her multiple individual awards, solidifying her status as a trailblazer who is shaping the future of cybersecurity.

In this session, Pratyusha Vemuri will dive deep into the
<ol>
 	<li>Introduction to IAM</li>
 	<li>Core Concepts of IAM</li>
 	<li>Importance of IAM</li>
 	<li>Components of IAM Systems</li>
 	<li>Challenges in IAM</li>
 	<li>IAM Best Practices</li>
 	<li>Emerging Trends and Technologies</li>
</ol>

Agenda

Filter By