RSA Conference 2023
2023-04-24..2023-04-27
San Francisco, United States
[RSA Conference 2011, RSA Conference 2013, RSA Conference 2014, RSA Conference 2015 Asia Pacific & Japan, RSA Conference 2016, RSA Conference 2016 Abu Dhabi, RSA Conference 2017, RSA Conference 2018, RSA Conference 2019 DevOps Connect: DevSecOps Day, RSA Conference 2020 DevSecOps & Application Security, RSA Conference 2020: Mobile & IoT Security, RSA Conference 2023, RSA Conference 2024, RSA Conference 2026]
who it's for
network engineers, security engineers, cloud engineers, application security engineers, cisos and security leaders, incident responders, compliance and audit managers
topics
cloud-native network functions; Big-IP control plane API; CVE corpus analysis; vulnerability management pipelines; API security focus; zero trust application security; automating audit change history; captcha and skimmer defeat; LLM-enabled phishing attacks; DDoS and firewall CNFs
| title | author | length |
|---|---|---|
| F5 DevCentral at RSA Conference 2023 | Buu Lam, Aubrey King | 01m |
Recap of on-site activity at RSA Conference 2023 covering F5 DevCentral booth demos, live community interviews and hands-on sessions that highlight recent… | ||
| F5 DevCentral Team at RSAC 2023 | Peter Scheffler, Brian McHenry, Gail Curry | 01m |
April 24–27 coverage from RSA focuses on on‑site activity at booth 54-35: scheduled interviews with alliance partners and industry personalities, live… | ||
| A 'Duh' Security Tip | Jason Rahm, Buu Lam, Aubrey King, Chase Abbott | 01m |
A walker finds name and address visible in a public trash can and uses that example to argue that loose paper equals easy identity theft. The specific advice… | ||
| A 'Aha' Security Tip | Jason Rahm, Buu Lam, Aubrey King, Chase Abbott | 01m |
Always inspect the card slot on a gas pump for a thin plastic sleeve over the slot or a fake faceplate that snaps on and can be popped off, because criminals… | ||
| Find the Booth | Jason Rahm, Buu Lam, Aubrey King, Chase Abbott | 02m |
Booth sits just off the north Expo escalators — hang a left into the north Expo and the F5 booth appears at North 54/35. Inside a working prize vending machine… | ||
| CISO Legal Risks And Liabilities | Alyssa Miller | 01m |
Panel covers concrete legal exposures for CISOs, citing the Uber former CSO case as a precedent for scrutiny of executive conduct, and breaks down how upcoming… | ||
| Evolution of CVEs and Vulnerability Management | Ben Edwards, Sander Vinberg | 01m |
Analysis of a 20 year CVE corpus of roughly 100 000 entries identifies seven surprising facts about duplication prevalence and scoring drift and shows median… | ||
| Stronger Together, Globally | Gail Coury | 07m |
Recap of concrete actions: representation at the World Economic Forum summit in Geneva convenes public sector, law enforcement and private cyber leaders to… | ||
| BTS with the F5 Prize Picker Machine | Jason Rahm, Buu Lam, Aubrey King, Chase Abbott | 01m |
A custom vending machine called the F5 Prize Picker dispenses randomized swag at RSA 2023, stocked with gem-cut Bluetooth speakers, insulated tumblers… | ||
| Learn about the latest Service Provider Cloud-native Network Functions | Jason Rahm, Buu Lam, Aubrey King, Chase Abbott | 01m |
F5 demonstrates production-ready cloud-native network functions for firewall, DDoS, DNS caching, CGNAT and a policy manager, packaged as a fuller VE (virtual… | ||
| Automating your audit | Peter Scheffler | 07m |
Claims a working solution that exports security change history for audits by calling the Big‑IP control plane API and shipping records to a reporting engine… | ||
| Combatting scalable AI attacks | Giuseppe Damiano | 01m |
Argues that generative models turn manual reconnaissance and message crafting into automated pipelines that scale to thousands, enabling LLMs generate tailored… | ||
| Establishing Digital Trust | Chris Hickman | 07m |
Keyfactor focuses on managing machine identities at scale — x.509 certificates, SSH keys and code‑signing — and gives inventory and visibility so teams can… | ||
| helps deploy modern apps at speed while maintaining security | Buu Lam | 05m |
Claims that Sumo Logic ingests out‑of‑the‑box telemetry from Distributed Cloud and hyperscalers to give developers immediate observability and security… | ||
| shares his observations | Chris Hickman | 01m |
Notes from the floor report rapid movement on post-quantum algorithm suites with several vendors demoing hybrid TLS and certificate tooling, while only a… | ||
| Wednesday Keynotes | Chris McCurdy, Kevin Mandia, Eric Idle | 07m |
Summary of concrete takeaways: CISOs should know your attack surface and deploy AI to save time; global median ransomware dwell time rises while 38% victim… | ||
| Over 20 years of partnership! | Rich Echevarria | 04m |
F5 and Intel describe a 20+ year engineering partnership that actually delivers measurable performance and security gains: Quick Assist Technology accelerates… | ||
| interesting experience with ChatGPT | Joel Violette | 01m |
Compares ChatGPT to a 3D printer that can rapidly produce working drafts of code or creative text while requiring domain expertise to validate results. Reports… | ||
| That's a Wrap! | Jason Rahm, Buu Lam, Aubrey King, Chase Abbott | 07m |
Expo hall shows packed aisles and a constantly full F5 booth with a prize-picker station drawing steady lines and half-hour demos running non-stop. Announced… | ||
| partnership with F5 adds value to Distributed Cloud | Jason Rahm, Buu Lam, Aubrey King, Chase Abbott | 01m |
Integration of Sumo Logic with F5 Distributed Cloud brings built connectors for Big-IP and NGINX so logs and metrics flow into a single observability pipeline… | ||
| is excited about advancing security with strong partnerships | Jason Rahm, Buu Lam, Aubrey King, Chase Abbott | 03m |
Intel positions a system-level push across three outcome spaces: endpoint security, zero trust access, and confidential computing, backed by an accelerated by… | ||
| integration with F5 Distributed Cloud brings valuable insights to customers | Joel Violet | 05m |
IBM QRadar integrates with F5 Distributed Cloud to ingest events from F5 Distributed Cloud and feed them into QRadar dashboards and searches, including six or… | ||
| CAPTCHA defeat | Kyle Roberts | 01m |
The demo shows a working captcha defeat demo that turns common CAPTCHAs into trivial tasks by chaining API integrations with paid human captcha solvers so… | ||
| Securing and connecting both traditional and modern applications | Peter Beardmore | 01m |
Claims a working approach that applies one policy across domains to secure legacy and cloud-native apps, showing concrete integration steps with legacy systems… | ||
| On The Value Of API Security Focus | Alyssa Miller | 01m |
Conference framing says AI dominates coverage but asserts API security stays critical and unresolved: most organizations still discover unauthenticated… | ||
| On Diversity And Inclusion In The Security Community | Alyssa Miller | 01m |
Progress shows but gaps remain: conference diversity improves compared with five to six years ago and that change is visible at events, yet workforce numbers… | ||
| Catching up with | Tanya Janca | 23m |
Claims that interns find secrets in an hour, and demonstrates free tools and a public case where exposed credentials were found in late 2021. Describes API… | ||
| This Month In Security Episode 10: April, 2023 - Edition | Aubrey King, Aaron Brailsford | 55m |
Panel summarizes RSA takeaways: researchers find 54,000 SLP instances exposed to the Internet enabling 2,000x amplification DDoS; a demo applies neural nets to… | ||
| Security as Part of Responsible AI: At Home or At Odds? | Ram Shankar Siva Kumar, Vijay Bolina, Dr. Rumman Chowdhury, Daniel Rohrer | 50m |
Large language models produce convincing hallucinations and repeat human biases, so teams build AI red team exercises and a public bias bounty that finds… | ||
| Cybersecurity Thinking to Reinvent Democracy | Bruce Schneier | 54m |
Argues 18th‑century representative systems misalign incentives, leading to three concrete failures: local optimization that wastes resources ($14.5B spent on… | ||
| The Role of Partnerships in Advancing Cyber Diplomacy | Niloofar Razi Howe, Nathaniel Fick, H.E. Nathalie Jaarsma, Kevin Mandia | 52m |
Panel describes concrete wins and gaps: private teams work with Lithuanian SIRT and Europol/Interpol to take four servers offline and recover data for 30 other… | ||
| Face the Music: Cybersecurity and the Music Industry | Herb Stapleton, Hany Farid, Katherine Forrest, Chris Stapleton | 50m |
Generative AI is already ubiquitous: text, image, audio and video tools and downloadable voice‑cloners are live and cheap, and the music industry sees real… | ||
| Hacking Exposed: Next-Generation Tactics, Techniques, and Procedures | George Kurtz, Michael Sentonas | 48m |
Demonstrates a live case where attackers use Tails on a USB, DigitalOcean droplets and VPNs, then run evilginx session cookie replay to steal Office 365… | ||
| Ransomware: From the Boardroom to the Situation Room | Glenn Gerstell, Preston Golson, Robert Huber, Dr. Phyllis Schneck, Suzanne Spaulding | 48m |
Simulated Situation Room walks through concrete facts: simultaneous disruptions to a Northeast power grid, a Cincinnati water plant, and a California chemical… | ||
| Cybersecurity and Military Defense in an Increasingly Digital World | Vivian Schiller, John Chambers | 51m |
Discussion claims AI will outscale the internet and cloud combined and warns that speed, not imagination, is the main shortfall in defense adoption. Ukraine… | ||
| Real World Stories of Incident Response and Threat Intelligence | Lily Hay Newman, Lesley Carhart, Katie Nickels, Wendi Whitmore | 51m |
Panelists walk through concrete incident-response lessons from 3CX: CrowdStrike flags a supply‑chain compromise via malicious DLLs, GitHub removals interrupt… | ||
| Survive the Breach-Protecting People & the Company When the Worst Happens | John Carlin, Siobhan Gorman, Brad Maiorino, Chandra McMahon | 51m |
Panel lays out concrete steps: run war games to force timed decisions, keep a short FAQ checklist instead of rigid flowcharts, pre‑contract negotiators and… | ||
| DevSecOps Worst Practices | Tanya Janca | 45m |
Claims 15 recurring DevSecOps failures uncovered from work with over 300 large enterprises: vendors promise zero false positives yet scans take hours and break… | ||
| Regulation and Risk When Your Customer’s Browser Leaks Data | John Elliott | 48m |
Claim: the browser-centric web breaks the old security model because any loaded JavaScript can read or exfiltrate page data. Measured findings: modern… | ||
| Perspectives on the Developing Cyber Workforce Strategy | Camille Stewart Gloster, Michael Alicea, Dr. Diana Burley, Tara Wisniewski | 50m |
The session lays out a developing National Cyber Workforce and Education Strategy that targets federal and national workforces, education and awareness, and… | ||
| Standards on the Horizon: What Matters Most? | Laura Koetzle, Juhan Lepassaar, Dr. Laurie Locascio, Patricia Titus | 52m |
Panel summarizes concrete outputs to watch: a draft Cybersecurity Framework 2.0 (thousands engaged, ~7,000 signed up), the voluntary AI Risk Management… | ||
| Cryptographic Implementations | Nicky Mouha, Lea Nürnberger | 46m |
Finds a buffer overflow in XKCP SHA-3 implementations that triggers when an init update update final sequence uses a first chunk of size x and a second of 4GB… | ||
| Do Better: Board-Level Accountability in Cybersecurity | Chris Hallenbeck, Greg Silberman, Brian Stafford, Maggie Wilderotter | 51m |
Boards must move from checkbox conversation to measurable oversight: require an audit‑committee cadence, materiality assessments and a documented incident… | ||
| Hype and Reality: How to Evaluate AI/ML in Cybersecurity | Diana Kelley | 49m |
Practical checklist for vendor claims: distinguishes generative models (ChatGPT, DALL‑E) from supervised, unsupervised and reinforcement methods; names… | ||
| Implementing and Managing Electronic Data Disposal and Destruction | Ben Rothke | 50m |
Urgent, practical guidance: companies face real fines (Morgan Stanley cited for ~$35M) and must document processes, inventory media, enforce legal holds, and… | ||
| Making Standards Safe for Democracies – Rebuilding the US Standards Team | Mike Boyle, Jessica Fitzgerald-McKay | 50m |
Democratic participation in standards declines while PRC-backed firms surge — roughly 34,000 declared 5G standards‑essential patents from China versus ~26,000… | ||
| Misinformation Is the New Malware | Ted Schlein, Catherine Gellis, Lisa Kaplan, Yoel Roth | 51m |
Claims that misinformation behaves like malware get backed by specifics: malware causes ~$6T damage and analysis is a $20B market, while social platforms… | ||
| Modern Bank Heists | Steve Wilson, Ron Green, Matt O'Neill | 51m |
Financial institutions face coordinated, transnational cyber cartels that monetize BEC and global cash‑outs; law enforcement runs 43 cyber fraud task forces… | ||
| Perilous Posts: The Risks of Biometric Patterns Exposed in Social Media | Craig Gibson, Vladimir Kropotov | 53m |
Shows that millions of social posts supply reusable biometrics: faces, irises, fingerprints, voice and gait, and that a photograph of a fingerprint or a short… | ||
| Playing With Fire? The Latest Cyber Law Hot Topics | Michael Aisenberg, Ruth Bro, Cynthia Cwik, Lucy Thomson | 49m |
A rapid roundup of concrete developments: a 17‑page national cyber strategy sparks about 1,700 news reports; two Supreme Court Section 230 cases (including… | ||
| Slack Hackers Slackers | Ofer Maor | 43m |
Slack breaches recur because attackers harvest chat history, abuse apps and sessions, and exploit culture not bugs: attackers buy a Slack session cookie for… | ||
| The Life of an Image: Evolution of Vulnerabilities in Popular Containers | Ayse Kaya | 52m |
Slim.AI analyzes hundreds of thousands of public images using X‑Ray from Slim Toolkit plus SIFT and GRIPE and finds concrete trends: 900,000 images scanned, an… | ||
| The State of Venture Capital in Cybersecurity | Dave DeWalt, Mark Hatfield, Yoav Leitersdorf, Dr. Chenxi Wang, Nadav Zafrir | 51m |
Panel presents concrete data and bets: 2022 shows 64% drop in Israeli funding to $3B, 13 deals over $1B and $119.8B total M&A with $18.5B financing and 1,037… | ||
| The ’Future of Work’(in Cybersecurity) Is Probably Not What Folks Think | David Foote | 53m |
Claims that most future-of-work advice is wrong and based on vendor hype, backed by surveys of 4,100 employers and broader research across 6,300 companies… | ||
| Zero Trust Privacy: Rethinking a Data Strategy | Dr. Lisa McKee | 50m |
Argues that zero trust must be built data-first zero trust with data discovery, element-level inventories, RoPAs and protect-surface mapping before identity or… | ||
| Investing in Cyber: How to Raise Money for a Cyber Startup | Katie Gray, Rashmi Gopinath, Andrew McClure, Sid Trivedi | 48m |
Early-stage cyber investing prioritizes team, market, product, metrics: seed checks tolerate pre-revenue if founders show domain expertise and a plausible path… | ||
| CISOs and Legal Uniting in a Post Uber and Twitter World | Ronald Raether, Andrea Hoy, Jon Olson, Aurobindo Sundaram | 52m |
Panelists argue that legal and security must coordinate on concrete processes not platitudes: codify incident authority between CISO and CTO, run tabletop… | ||
| Comprehensive Cyber Capabilities Framework: A Tech Tree for Cybersecurity | Chris Hodson, Merike Kaeo, Aaron Stanley, Sounil Yu | 54m |
A working group produces a first cybersecurity Tech Tree focused on data, deriving a Data Security Maturity Model (DSMM) from the Cyber Defense Matrix and… | ||
| Hardening AI/ML Systems - The Next Frontier of Cybersecurity | Bryan Vorndran, Bob Lawton, Dr. Christina Liaghati, Neil Serebryany | 45m |
Panel documents concrete risks and mitigations: adversarial ML includes data poisoning and input tampering, researchers describe a sponge DDoS variant, and… | ||
| How Corporate Governance Transformed Cyber Resilience of a Ukrainian Bank | Dimitri Chichlo | 50m |
Board-driven reforms force a battered state bank to modernize IT and survive war: an external IT/cyber audit yields a 24‑month remediation plan, legacy… | ||
| How to Create a Breach-Deterrent Culture of Cybersecurity, from Board Down | Dana Linnet, Andrzej Cetnarski, Marcus Sachs | 49m |
Organizers argue cybercrime grows faster than defenses: global cybercrime hits $10.5 trillion by 2025 while security spending lags, US average breach now $9.9M… | ||
| Hybrid Active Directory Attacks: Anatomy and Defenses | Derek Melber | 50m |
Slides show concrete AD attack paths: privileged users with SPNs exploitable in hours, unconstrained Kerberos delegation, PrimaryGroupID misuse, SIDHistory… | ||
| Negotiating with Terrorists: The High Stakes Game of Ransomware Response | Brandon Clark | 46m |
Argues that paying can be an analytically defensible business decision by weighing legal constraints, attacker profile, recovery odds and costs; cites a UCSF… | ||
| Nonconsensual Tracking and Victim Safety: A Case Study in Abusability | Adam Dodge, Eva Galperin | 48m |
Detailed case study of how Bluetooth trackers (AirTag, Tile, Chipolo, Samsung SmartTag) get repurposed for stalking: AirTag leverages the Find My network for… | ||
| Quantum Cryptanalysis | Ren Taguchi, Jiayu Xu | 49m |
Presents two concrete results: a quantum FLT-based inversion framework that lets inversion follow arbitrary addition chains and yields a Basic algorithm and… | ||
| Scaling Software Supply Chain Source Security in Large Enterprises | Rao Lakkakula | 49m |
Large enterprises juggle open‑source, vendor, SaaS, hardware and internal chains and must catalog ingestion points, secure CI/CD and build systems, and monitor… | ||
| Signing Out and Session Management in 2023 | Vittorio Bertocci | 48m |
Common sign‑out methods relying on iframes and third‑party cookies stop working as browsers block third‑party cookies, breaking front-channel logout and iframe… | ||
| Technical Metamorphosis: The 3 Stages of DSAR Automation | Alon Levy | 25m |
Uber builds an in-house DSAR pipeline that converts agent selections into queued exports, then executes them as parallelized, recoverable units called cuboids… | ||
| The Industrial Cyberthreat Landscape: Year in Review Report with Updates | Robert Lee | 52m |
Yearly analysis claims about 22 tracked OT threat groups and a new cross‑industry framework (Pipedream / CHERNOVITE) that leverages CODESYS in 500+ vendors… | ||
| We (Could Have) Cracked Open the Network for Under $100 | Tony Anscombe, Cameron Camp | 44m |
Researchers buy used enterprise routers for under $100 each and find configurations that reveal full network topology, app versions and credentials without any… | ||
| Crypto FinTech Systems: Can the Ultimate Trust Machine Be Trusted? | Miroslav Kiš, Bobby Singh | 49m |
Claims that blockchain is an “ultimate trust machine” meet practical limits: prototypes show value in tokenize transactions from origin and post-trade… | ||
| Destroying Long-Lived Cloud Credentials with Workload Identity Federation | Eric Johnson | 50m |
Demonstrates a working cross-cloud demo: a GitHub Actions workflow runs Terraform to deploy an Azure VM that calls AWS S3 and Google GCS, first using… | ||
| How to Benefit from Internal Audit | Steve Williamson | 51m |
Internal audit describes a threat-led approach: map likely loss event scenarios, pick controls from CIS Controls that directly stop those sequences, and test… | ||
| Hunting Stealth Adversaries with Graphs & AI | Jess Garcia | 48m |
Claims a practical pipeline that turns plain logon rows into graph-modeled lateral movement and then into anomaly scores using Sabonis extractor to produce… | ||
| Mapping the Ransomware Payment Ecosystem & Opportunities for Friction | Zoë Brammer, Justin Herring, Jacqueline Koven, Matthew McCabe | 49m |
A detailed transaction map from the Institute for Security and Technology traces ransom flow from fiat on‑ramping through VASPs (wire ACH credit card) to… | ||
| Pwning the CI (GitHub Actions Edition) | Stephen Giguere | 35m |
A malicious workflow file (pwn.yml) is submitted as a PR and — if auto‑approved or run by a first‑time contributor — executes shell commands that echo… | ||
| Reconsidering Ragnarok: The Cyber Threat Terrain After the Ukraine Invasion | Christopher Ott, Elvis Chan, Michael Sikorski | 51m |
Prediction of a cyber “Armageddon” proves wrong because Russia loses key footholds and defenders disrupt infrastructure: there is a lost SolarWinds foothold… | ||
| Running in the Shadow: Perspectives on Securing the Software Supply Chain | Jessica Hardcastle, James Higgins, Dan Lorenc, Camille Stewart Gloster | 50m |
Panelists compare concrete fixes: federal policy uses NIST-based self‑attestation deadline for vendors, FedRAMP updates, and guidance aiming to shift liability… | ||
| The Application Security State of the Union | Christopher Romeo | 50m |
Vendors and orgs still treat AppSec as tools first but the data is concrete: vulnerability volumes climb multiple‑times year over year (many report 2–5x… | ||
| Tools for Privacy-Enhancing Technologies | Ismail Afia, Joakim Brorsson | 40m |
Two linked tools: PAPR builds publicly auditable privacy revocation for anonymous credentials by having users create local hidden committees via a… | ||
| Unveiling The Truth – A Case Study on Zero Trust for Consumers | Shinesa Cambric | 36m |
Microsoft defends a billion+ consumer accounts by combining heuristics, ML models and policy engines across five pillars — prevention, containment, detection… | ||
| When Everything Is Critical, Nothing Is: ISA and Mitigation Prioritization | Mark Bristow, Sarah Freeman | 50m |
MITRE’s Infrastructure Susceptibility Analysis (ISA) prioritizes fixes by combining threat intelligence (ATT&CK v13, known TTPs and exploited CVEs) with… | ||
| Architecting Security for Regulated Workloads in Hybrid Cloud | Mark Buckwell | 49m |
Presents a repeatable architectural method that forces threat modeling before coding, traces data flows from system context down to cloud deployment, and turns… | ||
| Bon Appetit: Establishing an Effective Cyber Risk Appetite | Matt Tolbert | 52m |
Argues that practical cyber risk appetite needs explicit thresholds, KPIs/KRIs/KCIs and consistent risk analysis rather than vague statements, and points to… | ||
| Defender Perspectives: Getting ROI from Cyber Threat Intelligence Vendors | Lisa Ackerman, Levi Gundert, Tom Hofmann, Junay Hom | 55m |
Panel lays out concrete CTI ROI: run vendor proofs of value and bake-offs, deploy combined feeds for use cases (brand protection on Telegram monitoring… | ||
| Droned Out: Surveilling the Noise in the Russian War in Ukraine | Alexander Leslie | 50m |
Recorded Future monitors roughly 250 threat groups (about 100 active per day) and counts ~700,000 references to claimed cyber activity in the first 100 days… | ||
| Hardware Security Following CHIPS Act Enactment - New Era for Supply Chain | Courtney Lang, Jon Boyens, Dr. Amit Elazari, Steven Kelly | 50m |
CHIPS Act channels billions into secure semiconductor manufacturing and ties funding to explicit cybersecurity criteria; agencies plan IoT security labeling in… | ||
| Heuristic Approaches | David Gerault, Qun Liu | 41m |
A deep‑learning ensemble called NNBits trains networks to predict missing bits in long avalanche sequences and flags bits whose prediction exceeds chance… | ||
| How to Design and Execute Superior Employee Privacy Practices | Enza Iannopollo | 46m |
CPRA enforcement expands consumer-style rights to employees (access, correction, deletion, opt-out, portability, limits on sensitive data) and kicks in for… | ||
| I Shot a Deceptive Arrow into the Air—A Mock Hearing | Stanley Barr, Hon. Laurel Beeler, Hoyt L. Kesterson II, Kristin Madigan, Steven Teppler | 50m |
A toy maker builds a segmented deception environment filled with fake product and financial files, embeds a beacon tracker that logs opens, and intentionally… | ||
| Integrating Cyber Operations: CISA & CyberCom-CNMF Partnership | Eric Goldstein, Major General William Hartman | 48m |
Describes concrete, operational integration: a 2,000‑person Cyber National Mission Force running hunt forward operations using images of compromised SolarWinds… | ||
| Making oRAT Go...Further | Patrick Wardle | 54m |
Reconfigures a UPX packed 10 MB Go binary by extracting and reappending an AES GCM encrypted overlay to point at a lab C2, builds a custom Go C2 using smux to… | ||
| REvil: Riches to Rags – The Rise and Takedown of a Cybercrime Empire | John Fokker | 42m |
REvil operates as a commission-based ransomware-as-a-service using Jabber and Tor backend comms, a public leak site, stable decryptors and automated payment… | ||
| Telling Fairy Tales to the Board: Turn Attack Graphs into Business Stories | Andy Ellis, Oren Sade | 50m |
Attack graphs get reduced to one-line business cases: map an attack path to an unacceptable loss, a concrete hazard, and a matching initiative. Examples: an… | ||
| The Devil's in the Data: Role of Data Governance in Cyber Risk Mitigation | Raymond Umerley | 38m |
Claims that 90% of ransomware attacks exfiltrate data, attackers run reconnaissance scripts days before encryption and copy files from open network shares to… | ||
| Web3 – Paving a Path to Identity First | David Lee | 52m |
Argues that Web3 must bake identity into protocols and shows Audius as a concrete example: artists upload to content nodes, metadata lands on a… | ||
| Construction Time Again: A Lesson in Paving Paths for Security | Anna Westelius | 40m |
Netflix describes a “paved road” approach that builds concrete tools: managed delivery for automated, asynchronous patching (used to remediate Log4Shell… | ||
| Geopolitical Resilience: Why Operational Resilience Is No Longer Enough | Ann Johnson, Nadav Zafrir | 48m |
Argues that operational recovery is insufficient and organizations must plan for deglobalization, sanctions and forced market exits, backed by examples: the… | ||
| Improve Likelihood Calculation by Mapping MITRE ATT&CK to Existing Controls | Sonal Agrawal, Gerald Beuchelt | 44m |
Describes an evidence-based method that maps NIST SP 800-53 mapping to MITRE ATT&CK via the published MITRE Engenuity matrix, using existing SOC/ISO/PCI… | ||
| M365 Adversary ROI: Microsoft Cloud Attack Insights | David Etue, Aaron Turner | 45m |
Ten years of adversary ROI work plus 18 months of telemetry from tens of thousands of M365 incidents show attackers shift to high scale cloud pivots: initial… | ||
| Preparing for the New Era of Cybersecurity Disclosure | Jamil Farshchi, Scott Giordano, Lesley Ritter, Derek Vadala | 42m |
Regulators push mandatory disclosure changes including a proposed four-day reporting requirement (even if law enforcement objects) and a new demand to disclose… | ||
| Symmetric Cryptanalysis I | Junjie Cheng, Juan Grados | 32m |
Graph-based automation recovers Trivium superpoly structure using a localized MILP with 12 pruning patterns and a nested solve framework that pushes solvable… | ||
| The Elephant in the Security Room: Climate Change | Chloe Messdaghi | 50m |
Argues that climate change materially raises cyber risk by damaging infrastructure and expanding attack surfaces: extreme weather knocks out data centers (200… | ||
| The Lunacy of Web3 | Dr. Tracy Celaya Brown, Ira Winkler | 40m |
Web3 is shown as a security minefield: billions disappear in theft and fraud with concrete examples—FTX fraud, Binance and Ronin breaches (~$500M and ~$600M)… | ||
| The Secret Life of Enterprise Botnets | Dr. Craig Labovitz | 47m |
Researchers track about 500,000+ compromised enterprise devices over a year and find enterprise IoT (DVRs, thermal cameras, CPE, some cloud servers) now… | ||
| The World in Crisis: Prepare for Extreme Events via Supply Chain Resilience | Edna Conway, Erin Joe, Andrea Little Limbago | 50m |
Panelists report concrete trends and countermeasures: Mandiant tracks 3,500 threat groups with 900 new last year and discovers 50+ zero‑days used in attacks… | ||
| After a Data Breach: How Will the Compliance Program Measure Up? | Brian Warshawsky | 45m |
Focuses on regulatory enforcement as the real post‑breach threat: DOJ uses the Yates Memo and later guidance (119 questions across 11 topics, 2019… | ||
| Whoa, You’ve Been the CISO for 3 Years at Your Firm—Now What? | Yael Nagler, Lenny Zeltser | 40m |
Defines a clear three-year flex inflection where a CISO assesses program impact, partnerships and influence, then chooses to keep at it / slow down /… | ||
| Winning the Battle Against Scam Calls – How We Mitigated Caller ID Spoofing | Lauri Isotalo, Karri Jäkkö, Jussi Larvanto, Jukka Pietarinen | 50m |
A Finnish operator implements an SS7‑layer mitigation that checks caller number ranges, uses Any Time Interrogation queries and visitor location to drop or… | ||
| You Too Can Secure OT | Diane Golden, Ahmik Hindman | 48m |
Step-by-step blueprint for securing OT: inventory devices with a combo of OT IDS with passive+active discovery (spanning, external sensors, edge protocol… | ||
| 2023: Cyber Professionals Challenges and Insights. Let's Talk. | Candy Alexander, Jon Oltsik | 50m |
Survey of ~300 ISSA respondents reports 71% impacted by a skills shortage and 54% say it worsened, with top gaps in application and cloud security plus… | ||
| Building International Coalitions to Scale Defense | Rob Joyce, Rita Erfurt, Sami Khoury, Felicity Oswald | 45m |
Panel claims ransomware is the top national threat and describes concrete coalition work: a US-led counter‑ransomware task force with 37 countries, joint… | ||
| Engagement through Entertainment: How to Make Security Behaviors Stick | Jenny Brinkley, Lisa Plaggemier | 43m |
Claims that emotion beats fear drive a research-backed approach: an Osterman survey of 1,000 finds users who rate training very interesting are 13× more likely… | ||
| Forensics Skillset: Techniques for Extraction and Analysis of the Evidence | Paula Januszkiewicz | 53m |
Shows step-by-step extraction from live memory and disk: locate injected code in rundll32 and msiexec, dump RAM with Volatility, find MZ headers and extract… | ||
| Hack the Institution – A Map To a Strong Partner-Based Security Program | Molly Mae Potter, Bobbie Stempfley | 50m |
Argues that a federated, partner-based security model—centered on a transformation PMO embedded in business units and a business management system for regular… | ||
| How to Distribute Keys Securely for 20% of the Web | Derek Chamorro | 38m |
Cloudflare builds a horizontally replicated KMS: a central core that creates managed keys and hundreds of edge KMS replicas which synchronize key rings and… | ||
| Implement ZeroTrust with Dedicated DevSecOps Pipeline | Kayra Otaner | 48m |
Argues that a single CI/CD pipeline with SAST/DAST/SCA becomes an anti-pattern at scale and recommends a separate shadow DevSecOps pipeline plus a dedicated… | ||
| IR: Optimizing Communications and Action Between Legal and Tech Leaders | Jennifer DeTrani, Wynter Deagle, Kristopher Kleiner, Evan Wolff | 49m |
Panel outlines concrete incident-response rules: privilege requires attorney-client communications and legal purpose, so outside counsel retains forensic firm… | ||
| Pentesting AI: How to Hunt a Robot | Davi Ottenheimer | 59m |
Six tangible tests target AI leaks, losses and modifications: try negative guidance and membership inference to pull private records from models, place… | ||
| Phishing With a Net: The NIST Phish Scale and Cybersecurity Awareness | Dr. Shanée Dawkins, Jody Jacobs | 42m |
NIST researchers present a measurable system that explains why click rates vary: after 4.5 years and 15 simulated exercises they build the NIST Phish Scale… | ||
| Security Challenges of Cloud Native Companies with Remote Workers | hardeep singh | 46m |
Argues that remote work raises concrete risks and prescribes concrete controls: classify connections as Max/Partial/Minimal/No Trust and enforce device trust… | ||
| Surfing as a Team Sport: Riding the Regulatory Wave as a Top Competitor | Christopher Hale, Matti Neustadt, James Sfekas, Fran Faircloth | 51m |
Regulation gushes in with concrete deadlines—6‑hour incident reporting in India, 72‑hour and 4 business day windows elsewhere, and 24‑hour NIS2 triggers—so… | ||
| Symmetric Cryptanalysis II | Kazuma Taka, Mingming Zhu | 41m |
Uses a SAT solver to evaluate differential clustering in multiple-branch designs and applies it to Orthros, raising the evaluated security bound by one round… | ||
| The Dark Underbelly of 3rd-Party Application Access to Corporate Data | Jenko Hwong | 52m |
Analyzes millions of production OAuth approvals and finds 400+ unique apps on average, one enterprise with 12,330 apps in one org, and about 44% of apps… | ||
| The Evolution of CVEs, Vulnerability Management, and Hybrid Architectures | Dr. Benjamin Edwards, Sander Vinberg | 52m |
Research shows CVE volumes grow from about ~500 CVEs per week today and project toward ~1,000/week within a couple years; the 2016 CNA expansion in 2016 causes… | ||
| The Rise of Confidential Computing, What It Is and What it Means to You | Stephanie Domas | 47m |
Confidential computing asserts hardware TEEs protect data in use and shrink the trusted computing base to the immutable root of trust, with attestation proving… | ||
| You Are Not an Island - Threat Model as a Team | Meghan Jacquot | 44m |
Covers a five-stage threat model with practical steps: choose and scope a model, identify threats, prioritize mitigations, document communications, and… | ||
| You Have a Firewall, But Do You Have a Cyber Bodyguard? | Chris Novak | 44m |
Claims that 82% of breaches involve a human factor and that attackers increasingly target individuals for money or influence, not just networks. Shows tools… | ||
| A Taste of Privacy Threat Modeling | Kim Wuyts | 44m |
Privacy integrates into development via threat modeling: use a system model, apply LINDDUN’s seven categories (linking, identifying, non‑repudiation… | ||
| An Army of… Zeros and Ones? How the Military Services Compete in Cyberspace | Christopher Cleary, Dr. Wanda Jones-Heath, Dr. Michael Sulmeyer, Holly Baroody | 48m |
Cyber Command sets common training and certification standards and gains enhanced budget control starting FY2024, while each military service reports roughly a… | ||
| Anatomy of the Attack: The Rise and Fall of MFA | Dave Taku | 38m |
Three case studies show how MFA survives technical scrutiny but loses to process: a Russian state actor brute forces an orphaned AD account, enrolls it via… | ||
| Bug Bounty: Keeping Hacks Ethical in 2022 | David Cass, Daniel Garrie | 51m |
Covers concrete legal guardrails for bug bounties: verify researcher identity, refuse payments to anyone on the OFAC list, and treat unauthorized access as an… | ||
| Colorful Vulnerabilities - From RGB Colors to Privilege Escalation | Tal Lossos, Eran Shimony | 38m |
Analysis of OpenRazer kernel modules reveals multiple exploitable buffer overflows tied to per-key RGB data — one memcpy allows a 685-byte stack overflow… | ||
| Emotet Exposed: Insider the Cybercriminal's Supply Chain | Christopher Kruegel, Giovanni Vigna | 50m |
VMware researchers build a sock puppet Emotet client and study ~20,000 samples over six months, extracting 328 unique C2 IPs and 139 distinct execution trees… | ||
| Intel on a Shoestring: Building a Great Program, Even on a 3-figure Budget | Eric Olson | 50m |
Shows how to run a usable threat‑intel program on a three‑figure budget by focusing on requirements, 12 starter PIRs and an end‑to‑end cycle tracked with… | ||
| It’s Getting Real & Hitting the Fan 2023 Edition (Real World SaaS Attacks) | Ofer Maor | 42m |
Yearly overview that focuses on concrete incidents: a DocuSign phishing campaign uses Adversary-in-the-Middle to bypass MFA and creates persistent… | ||
| Joining Forces with the White Hat Researchers: Aviation Industry Lessons | Brian Connolly, Deneen DeFiore, Ken Munro, Jean-Francois Simons | 49m |
Boeing launches an enterprise vulnerability disclosure program in 2019, publishes safe harbor and a Hall of Fame with three researchers, and coordinates fixes… | ||
| Multiparty Protocols | Navid Alamati, Benjamin Schlosser | 44m |
Shows a multiparty non‑interactive key exchange from a new Ring Key‑Homomorphic weak PRF primitive, with concrete N‑party construction using public matrices… | ||
| Passkeys: The Good, the Bad and the Ugly | Christiaan Brand | 52m |
Claim: passkeys are ready for mass rollout because Apple Google and Microsoft platforms now implement FIDO public/private‑key credentials that are… | ||
| Siloed to Unified: The Evolution of Security Analyst Experience | Andie Schroeder, Oren Shevach | 36m |
IBM announces QRadar suite and argues that SOCs using 80% use ≥10 tools waste analyst time; the proposed solution unifies alerts into one correlated incident… | ||
| The Hacker's Guide to Cloud Governance | Rich Mogull | 52m |
Claim: most cloud breaches trace to failed governance and identity, not broken tech. Shows a working approach: build a Cloud Center of Excellence, maintain an… | ||
| The Psychology of DevSecOps | Jennifer Czaplewski, Kathryn Pimblett | 53m |
Two large orgs apply behavioral science to AppSec: one implements a Theory of Planned Behavior–based outreach and a gamified training platform that gets ~33%… | ||
| The World on SBOMs | Chris Blask, Kate Stewart | 52m |
SBOMs become actionable: the NTIA minimum elements are the baseline, a working group defines six SBOM types (design, source, build, product, deployed, runtime)… | ||
| When Worlds Converge and Consolidate: Blueprint for IT and Security Leaders | John Maddison | 34m |
Claims that secure networking will be larger than networking by 2030 and that networking must become Zero Trust are backed by concrete numbers and examples… | ||
| Where Are All of the Container Breaches? | Omer Azaria | 28m |
Sysdig’s honeypots show few noisy in-cluster exploits but active scans find thousands of images with crypto miners and other malware hidden in public and… | ||
| Who Says Cybersecurity Can’t Be Creative? | Chris Cochran, Mari Reisberg, Caitlin Sarian, Daniel Trauner, Sam Sabin | 52m |
Claim: tailored, job-specific phishing training beats generic sims — one company reuses real phishing examples per role and sees better engagement; building a… | ||
| Catch Me If You Can. LOLBins and the Adversaries Who Abuse Them | Alfred Alvarado, Timothy Hux | 38m |
Maps specific Windows binaries and admin tools to real campaigns, with measurable use rates: PowerShell 40%, WMIC 21%, scheduled tasks ~20% and MSHTA 8%… | ||
| CatPhish Automation - The Emerging Use of Artificial Intelligence in Social Engineering | Justin Hutchens | 50m |
Demonstrates a reproducible pipeline that turns open LLM APIs into autonomous phishing bots: code an API loop, prepopulate the conversational context to give… | ||
| Cloud Security Made for the EU: Securing Data & Applications | Ulla Coester, Nils Karn, Andreas Walbrodt, Dr. Norbert Pohlmann | 49m |
Panel argues confidential computing plus a middleware layer (enclaive) lets companies run encrypted code and data on public clouds with 3–5% overhead, removing… | ||
| Container Escape: All You Need Is Cap (Capabilities) | Eran Ayalon, Ilan Sokol | 31m |
Demos show two concrete escape chains that work: compiling and insmod’ing a kernel module that calls call_usermodehelper to spawn a root reverse shell when… | ||
| Crucial Cyber Hygiene Defenses for 2023 | James Tarala | 48m |
Aggregated incident data shows the top four mitigations from Australia’s Essential Eight would have blocked about 93% of past breaches, and attackers move from… | ||
| Digital Signatures | Alexandre Bouez, Dr. Burt Kaliski Jr | 49m |
A one-round threshold ECDSA protocol claims to remove the hidden roll call by making all pre-signing operations Shamir-threshold (not additive), introducing a… | ||
| How AI is Transforming Network Security and User Experience | Neil Boland, Kumar Ramachandran | 50m |
Palo Alto Networks and Major League Baseball describe a SASE build that fuses network and security telemetry into one data lake meeting the three Cs: complete… | ||
| How to Operationalize Access Policies for Multiple Clouds | Gerry Gebel | 40m |
Describes a concrete standard and working software: IDQL five-tuple represents subject action resource scope conditions, and the Hexa orchestrator discovers… | ||
| It’s Not All Fun and Games: Cyber Threats to Professional Sports | Steve Grossman, Tomás Maldonado, Dave Munroe, Joseph Szczerba | 49m |
Leagues describe concrete defenses and failures: rapid “pop up” metro networks for events carrying live video for 700–800 staff, penetration tests that find… | ||
| Nation-State at Fault: The Future of Automotive Accidents? | Ayako Hagiwara, Robin Wright | 38m |
Claim: connected cars already run 150 million lines of code across 2.5 miles of wiring and face an estimated $24 billion loss to cyberattacks by 2030… | ||
| Preparing for Quantum: A Pragmatic Approach towards Readiness | Jaya Baloo, Donna Dodson | 48m |
Warns that current asymmetric crypto faces capture now decrypt later risk and that NIST narrows PQC candidates to four for standardization, with protocol… | ||
| Ransom Demand? 10 Reasons to Think Before Paying | Alan Brill, Ronald Raether | 57m |
Ten concrete reasons to hesitate include legal bans on government payments in North Carolina and Florida, OFAC refusal to license payments to sanctioned… | ||
| Reinforcement Learning for Autonomous Cyber Defense | Krystal Jackson, Andrew Lohn | 52m |
Describes how recent open-source “cyber gyms” (CybORG, CyberBattleSim, Yawning Titan, FARLAND) let teams train reinforcement-learning defenders against… | ||
| Scaling Product Security with a Product Security Lead Program | Brenna Leath | 51m |
After losing a central team, SAS builds a Product Security Lead program in ~90 days to place a trained security expert into each business vertical across 200+… | ||
| Stop Drowning in Lake Assurance: Supply Chain Security and a New Frontier | Fiona Long | 48m |
Platform InfoSecAssure exists to stop the questionnaire tidal wave after its team answers 30,000 unique security questions and samples ~7,000 more to find… | ||
| Spotlight On Latest Web Application and API Attack Data | Rupesh Chokshi | 33m |
Akamai reports enterprises average 1,061 web applications and observes record attack volumes — 161 million attempts in a single 24‑hour surge and 14 million… | ||
| Stories from the SOC Front Lines | Ann Barron-DiCamillo, Jenny Menna, Kimberly Sanders | 49m |
Three SOC leaders describe concrete fixes: a 24/7 SOC and IR organization spanning 165 countries with teams in 26 countries and 40,000 developers; an… | ||
| The US National Cyber Label Program for Consumer Connected Devices | Michael Bergman, Amit Elazari, Katerina Megas, Eric Tamarkin | 51m |
Creates a voluntary US cybersecurity mark anchored to NISTIR 8425 and licensed to existing schemes (UL, Intertek, IoXT, CSA) that must meet 17 technical… | ||
| A NIST 800-207 Playbook: Zero Trust from the Whiteboard to the Boardroom | Bryan Green | 55m |
NIST 800-207 becomes a concrete playbook: move from a network perimeter to an identity‑centric model using a brokered policy enforcement point that decrypts… | ||
| Dealing with Data Pack Rats: Reduce Data Footprints to Control Risks | Tobin Zimmerer | 48m |
Argues that hoarding raises legal, operational and cyber risk and offers concrete tactics: classify data elements (examples up to 400 elements), build a… | ||
| Driving Smart Innovation - Connected Car Identity at Scale | Eve Maler, Tim Vogt | 59m |
Claims that identity belongs at the center of connected vehicles get shown with concrete numbers and standards: 237 million connected cars on the road (2021)… | ||
| Fault Attacks & Side Channels | Guillaume Barbu, Luke Beckwith | 41m |
Demonstrates two concrete breaks: lattice-based fault attacks convert additive random faults into hidden number problem instances and recover deterministic… | ||
| Field Guide to Building an Operational Technology Cybersecurity Capability | John McSorley, Charles Salas | 47m |
Provides a practical, four‑stage method—discovery, risk prioritization, policy and equipping, testing—with concrete actions: do site visits, build OT‑specific… | ||
| Hacking the Cloud: Play-by-Play Attack on GitHub, Okta, and Salesforce | Brian Vecci | 43m |
Scan finds an exposed GitHub token that authenticates to Okta and resolves to an Okta SUPER_ADMIN account, so an attacker creates a backdoor user, assigns apps… | ||
| How Do You Trust Open Source Software? | Brian Russell, Naveen Srinivasan | 50m |
OpenSSF Scorecard is an automated scanner that assigns 0–10 scores per heuristic (starts at 10 then deducts) and exposes a public API plus a GitHub Action and… | ||
| Living off the Cloud: A Server-Free Approach to Malware Ops | Etay Maor, Avishay Zawoznik | 46m |
Demonstrates a working Python malware that uses Trello-based C2 and Google Drive API exfiltration to issue commands, send telemetry and upload stolen files… | ||
| Machine Learning over Encrypted Data with Fully Homomorphic Encryption | Benoit Chevallier-Mames, Jordan Frery | 52m |
Claims that Fully Homomorphic Encryption lets models run on encrypted inputs and shows a usable toolchain: an open source library Concrete-ML that compiles… | ||
| Navigating Top Cyber Risks And Regulatory Requirements | Milad Aslaner, Mani Keerthi Nagothu | 55m |
Claims: attackers encrypt 53 GB in 5 minutes 50 seconds and average enterprise ransomware dwell time drops to 3.85 days, so prioritize containment and… | ||
| Ransomware 101: Get Smart Understanding Real Attacks | Jibran Ilyas | 52m |
Walkthrough of a real incident shows a phishing HTML that mounts an ISO with an on-screen password and delivers Qakbot infection via HTML->ISO with password… | ||
| Stronger Together: The US-Ukrainian Cyber Partnership | Laura Galante, Alex Kobzanets, Illia Vitiuk | 50m |
Ukraine treats 2014–22 as a testing ground and reports 4,500 attacks in 2022 after ~800 in 2020 and ~1,400 in 2021, including NotPetya, Viasat outages, DDoS… | ||
| Take a Walk on the Wild Side: Cyber Insurance Claims Trends | Monique Ferraro, Peter Hedberg, Violet Sullivan | 49m |
Panel summarizes what policies actually pay: forensics, legal defense, negotiated ransom payments (demands usually come down), notification and… | ||
| The Next-Gen Elephant in the Room | Krystle Portocarrero, Mike Spanbauer | 30m |
Claims that a single control plane and a Hybrid Mesh Security model let teams cut firewall sprawl and ops time by replacing heroic, console-jumping work with… | ||
| Under Pressure: What Cyber Can Learn from First Responders | Troy Bettencourt, Erick Pound, Gustavo Rodriguez | 51m |
Panel reports that 77% reporting service as core motivator, that daily micro‑drills plus periodic multi‑unit exercises and follow‑the‑sun playbooks and daily… | ||
| Using Influence to Stop the Unfluence: The Secret Sauce of Cybersecurity | Ronald Woerner | 50m |
Claims that targeted persuasion reduces malicious “unfluence” by combining persuasion, psychology and business framing; tools recommended include RACI charts… | ||
| Walking on Broken Clouds | Chris Farris | 43m |
Cloud security programs start by answering what accounts exist, who technically owns them and who has budget authority, then trim CSPM noise by adopting… | ||
| Advanced Public-Key Encryption | Marc Joye, Marloes Venema | 41m |
Two linked contributions: a DCR/Paillier-style additively homomorphic scheme that moves most work offline using an apps function so online encryption costs one… | ||
| Applying Logic in an Illogical World: Third-Party Risk Management at TikTok | Joe Serbaniewicz | 51m |
Uses if then decision trees to turn onboarding inputs into specific due diligence steps, integrates those playbooks into a GRC tool so questionnaires and… | ||
| Assume Compromise: Think Like a Hacker to Build Resilience | Paul Dant | 48m |
Claims that a single foothold turns into a disaster: a bank data center is owned in eight minutes using LoftCrack, eight admin passwords crack in three… | ||
| Building a DevOps Supply Chain on Zero Trust Principles | TJ Gonen, Chris Federico | 25m |
Argues that DevOps must apply Zero Trust from code to cloud, with concrete controls: static analysis, infrastructure-as-code scanning (Terraform/Ansible… | ||
| Common Myths about PQ Migration and Standards Busted! | Michael Jenkins | 50m |
Claims urgent migration for national security systems with NSM-10 2035 deadline, shows concrete interoperability and performance blockers: Kyber512 public key… | ||
| DevOps is Now DevSecOps | Mike Rothman | 51m |
Survey data shows 58% of respondents are decision-makers and 31% still ask what is DevSecOps, while 62.5% call it a cultural shift not merely tools. Top… | ||
| Diversity, Equity, & Inclusion: The Paradoxical Effect & Impact on Security | Hise Gibson, Nicole Gilmore, Larry Whiteside Jr | 50m |
Argument that common DEI programs fail and five practical fixes plus one framework: replace checkbox training with a strategy that ties targets to business… | ||
| Finding Vulnerabilities through Static Analysis and Scripting | Stephen Sims | 45m |
Walks through a reverse‑engineering build environment and live demos that actually find and analyze real bugs: uses IDA Pro/Hex‑Rays and Ghidra for disassembly… | ||
| Integrating Privacy Protections into National Security Systems | Karen Dunkley, Andraleigh Rodini | 50m |
The committee updates CNSSI 1253 to fold NIST 800-53 Rev 5 privacy into national security systems by creating a baseline plus layered overlays: an… | ||
| Introducing the Secure Supply Chain Consumption Framework (S2C2F) | Adrian Diglio | 52m |
Framework named S2C2F is published as a guidebook (version 1.1) and contributed to OpenSSF with a maturity model of four levels and eight practices; Microsoft… | ||
| Is Increasing Security Maturity And Decreasing Operational Load Possible? | Rohit Dhamankar | 47m |
Argues that higher security maturity and lower operational load are achievable by consolidating controls into a platform that combines signals with environment… | ||
| Reset Assumptions: Rate of Security Control Degradation "RoCD" and How to Reset | Tim Rohrbaugh | 52m |
Defines Rate of Control Degradation as how fast specific controls (firewall rules, VLANs, log feeds, EDR fields) stop doing their job and ties that to… | ||
| Saving Lives… and Money: Fighting Human Crimes and Financial Fraud | Ian Mitchell | 48m |
A fraud‑industry network called The Knoble mobilizes almost 3,000 financial crime fighters across about 250 institutions and logs 560 volunteer project hours… | ||
| The Buck Stops….Where? Data Breach Accountability and the C-Suite | Jamil Jaffer, Kathy Wang, Anne Marie Zettlemoyer | 52m |
Panel traces fallout from the Joe Sullivan conviction as the first federal criminal case against a CISO and shows concrete shifts: 25% have D&O now, companies… | ||
| The Megatrends Driving Cloud Adoption – and Improving Security – for All | Phil Venables | 47m |
Argues that cloud becomes measurably more secure through eight concrete megatrends: hyperscale economics (millions of servers, $10B security commitments)… | ||
| The Opposite of Transparency | Joshua Corman | 51m |
Argues that machine-readable SBOM data is the practical fix for opaque software supply chains, showing concrete results: teams with SBOMs plus automated CI/CD… | ||
| Threats Inside the Darkverse: The Shadowy Underbelly of the Metaverse | Numaan Huq | 48m |
Research shows three urgent Darkverse risks: common game/cloud flaws (Minecraft/Log4Shell) carry forward; biometric and device experiments reveal a HoloLens… | ||
| Want to Play a Game? Get Your Game On with Hacking Gamification | Joseph Carson | 54m |
Argues gamified, hands‑on practice speeds up security skills and incident readiness, showing a live path: uploaded fake firmware to trigger NTLM leak, captured… | ||
| AI: Law, Policy and Common Sense Suggestions on How to Stay Out of Trouble | Behnam Dayanim | 53m |
Federal and state regulators treat AI as existing law applied to new tools, citing FTC settlements that force companies to delete models trained on unlawful… | ||
| Betting the Farm on Digital Disruption | Matthew Sharp | 52m |
Framework for upskilling with actionable methods: applies NIST 800-160 resilience (anticipate, withstand, adapt, recover), uses asset inventory tool Axonius… | ||
| Creating the Standard for Supply Chain Risk - MITRE's System of Trust™ | Cassie Crossley, Robert Martin | 43m |
MITRE presents System of Trust as a knowledge model plus a prototype cloud native tool to standardize which supply chain risks to manage not how to manage… | ||
| Data Privacy Concerns - A Risk Based Approach to De-Identification | Noopur Davis, Doina Iepuras | 50m |
Comcast builds a de-identification center of excellence, implements a 10-step process and a dashboarded risk engine that scores public and acquaintance… | ||
| Intelligence and AI at the Convergence Zone of Data and Threats | John Lambert | 51m |
Forecasts tie three concrete trends: cheap hyperscale data, labeled threat intel, and foundation-model AI. Microsoft reports dwell time falling from ~200 to… | ||
| Intelligently Managing the Geopolitics and Security Interplay | John Miller, Shanyn Ronis | 53m |
Creates a crisis intelligence program that turns ad hoc alerts into a repeatable workflow, using a steering committee, stakeholder mapping, buckets and a… | ||
| MacOS Behavioral Detections using Apple Endpoint Security API | Matt Benyo, Jaron Bradley | 41m |
Covers building behavior-based detections from Apple’s Endpoint Security API with concrete patterns, example rules, and field names. Shows detections that… | ||
| Making Sense of a Confusing Detection and Response Solutions Landscape | David Gruber, Jon Oltsik | 43m |
Research shows XDR means different things to different organizations: 55% say XDR is an EDR extension, 28% expect a single-vendor detection-and-response suite… | ||
| Managing Cyber Risk to Systemically Important Critical Infrastructure | Bob Kolasky, Norma Krayem, Henry Willis | 50m |
Panel argues cybersecurity is the nation’s top systemic risk and pushes a critical‑functions framing: prioritize failures of function not just assets, run… | ||
| Nine Cloud Security Reasons for Resting Breach Face | Maya Levine | 48m |
Nine concrete cloud breaches and what actually failed: Log4j → ONUS, attackers find AWS keys, delete S3 data and expose ~2 million users after a $5M ransom… | ||
| Tackling the Recent Rise of Cross-Tenant Vulnerabilities | Shir Tamari, Sagi Tzadik | 48m |
Researchers demonstrate more than 10 recent critical cross-tenant flaws and reproduce three real chains: a PostgreSQL compromise that leads to arbitrary code… | ||
| The Critical Importance of Identity for Instant Payments | Chris Craver, Mary Ann Miller | 52m |
Instant payments are irreversible real-time settlement rails (RTP since 2017, FedNow launching July) that demand stronger identity proofing and pre-send… | ||
| Threat Informed Planning with Macro-level ATT&CK Trending | Ryan Fetterman | 40m |
Research aggregates Mandiant M-Trends, Red Canary, CISA alerts and CTID over 2020–2022 to rank nearly 600 ATT&CK techniques and finds four techniques appear in… | ||
| Wanna Get Malware Out of Emails? CISA’s Latest Research | Thomas Ruoff | 51m |
CISA measures malware in email attachments by harvesting and deduplicating real inboxes (33k and 70k unique files in a university pilot), sending flagged files… | ||
| What the Authn? Passkeys Offer a Fresh Take to Authentication Dilemmas | Derek Hanson | 29m |
Passkeys are a discoverable FIDO credential that merge WebAuthn with browser/platform password managers to speed password replacement; two classes matter —… | ||
| Why Extended Detection and Response (XDR) Must Unite the Industry | Nick Biasini, AJ Shipley | 50m |
On May 24th a compromise begins when a Google account exposes browser‑synced corporate credentials, adversaries exploit MFA fatigue, enroll devices, add admin… | ||
| Bridging the Cybersecurity Skill Gap: Re-Thinking Job Profiles | Peter Dornheim, Thorsten Weber | 37m |
Randomly selected 12 security job ads go to 10 junior candidates (120 pairings) and prompt a controlled experiment: real candidates who say they would not… | ||
| Expanding Opportunities in Cyber for the Neurodivergent - Award Ceremony | Cyndi Gula, Ron Gula | 26m |
An awards ceremony announces distribution of $1,000,000 in competitive grants to nonprofits placing neurodivergent people into cyber and IT jobs, with… | ||
| "I Am Not Worthy" - Battling Imposter Syndrome in Information Security | Reet Kaur | 41m |
A CISO from Portland Community College recounts moving from nontechnical roles to CISO, hiring a remote team, and raising organizational security maturity from… | ||
| 4 Ways IoT Devices Are Creating Privacy Implications For Organizations | Mohammad Waqas | 49m |
Four concrete failure modes: devices sending unencrypted PHI or video across flat networks (a hospital device leaks patient names, MRNs and images; an IP… | ||
| Attacking and Detecting Attacks on Kubernetes Clusters | Jay Beale, Alana Trimble | 49m |
Demonstrates a complete exploit chain on a DEF CON Kubernetes CTF cluster from Internet-facing web API to host compromise: nmap and curl find ports, dirb and… | ||
| Avoiding the Four Biggest Mistakes That Will Blow Up an M&A | Arvin Bansal, James Christiansen | 43m |
Covers four concrete M&A traps: being unprepared, taking blind risks, insufficient protection, and disastrous integration. Gives a real case where one missed… | ||
| ChatGPT: A New Generation of Dynamic Machine Based Attacks? | Greg Day, Paul Vann | 49m |
Claims that large language models change attack economics get illustrated with specifics: GPT‑3 has 175 billion parameters and ~400 billion tokens; attackers… | ||
| CISO Legal Risks and Liabilities | Stewart Baker, Kirsten Davies, Alyssa Miller | 52m |
Case study: an extortion demand for $100,000 was handled as a stretched bug bounty with NDAs and false claims of destroyed data, ending in an obstruction… | ||
| Collaboration Without Data Loss: Keep IP From Leaking to Competitors | Joe Payne | 41m |
Insider-risk incidents grow ~32% year‑over‑year and 60% of U.S. workers admit reusing prior‑job data; recent cases include a $2B judgment in the… | ||
| Cyber Informed Engineering: Getting Engineers to Live Security-by-Design | Cheri Caddy, Frank Cilluffo | 52m |
National strategy elevates cyber‑informed engineering as a concrete path to security-by-design, backed by DOE work now named in the March 2023 National Cyber… | ||
| Cybersecurity in the Boardroom - The Impact of the Latest SEC Proposal | Alan Berry, Matthew Modica, Erica Wilson | 49m |
The SEC proposal forces public companies to report incidents within four business days and to have a cybersecurity expert on the board yet leaves materiality… | ||
| Cyberwar and the Law of Armed Conflict | Lawrence Dietz | 49m |
Argument: traditional Law of Armed Conflict dates from the 19th century and is ill‑suited to cyberspace because attribution and the conflict threshold matter… | ||
| Exposure Management: The Rise of Proactive Cybersecurity Platforms | Nico Popp | 37m |
Argues for an exposure graph that links software, identity and devices to unify VM, CSPM, SAST/APISec, OT and identity scanners into one data platform; claims… | ||
| Hacking Exposed - Hacking the Sec into DevOps | Chetan Conikee, Stuart McClure | 50m |
Session performs live hacks on an OpenRefine instance discovered in the wild, using indexed public code via Grep.app and host search via Shodan, then loads the… | ||
| How a Secure Enterprise Starts with the Web | Toni Gidwani, Sara Mascall, Andrew Whalley | 41m |
Claim: treating the browser like an operating system reduces enterprise exposure by enforcing controls and signals at the edge. Chrome ships managed policies… | ||
| Insights into New Supply Chain and Cloud-Identity Attacks | Maulik Limbachiya, Joshua Shapiro | 50m |
Adversaries cut breakout time to about 84 minutes (top 30% under 30), access broker listings jump ~112%, and cloud exploitation rises ~95% year over year… | ||
| Key Trends in the Shifting Threats to Payments as Blended Commerce Returns | Michael Jabbara | 47m |
Visa shows concrete shifts: LLMs like ChatGPT boost phishing quality and scale, brute‑force bots validate 6,000 credentials in hours leading to ~$1M fraud, and… | ||
| Panel: Migrating to Post-Quantum Schemes | William Newhouse, Sophie Schmieg, Adi Shamir | 53m |
NIST narrows candidates and names CRYSTALS-Kyber selected for key encapsulation and three signature finalists, with draft standards due next year; timeline… | ||
| Securing the World’s Open Source Software, Together | Michael Hanley | 41m |
Open source underpins 97% of projects and GitHub reports 413 million contributions in 2022, so the platform focuses on concrete steps: a staffed GitHub… | ||
| Strengthening Cyber Through Inclusion | Rob Duhart Jr., Camille Stewart Gloster | 51m |
Argues that diversity materially changes outcomes: a 2008 USB breach takes 14 months to remediate because people act on urgent needs; product fixes like… | ||
| Ten Legal Issues for CISOs | Steve Black | 51m |
Covers ten concrete legal risks CISOs face: whether paying ransomware is Treasury warns paying ransoms may be illegal and risky for sanctions/attribution… | ||
| Better Risk Assessment for Cyber Insurance: How Will We Get There? | Theresa Le, Eric Skinner | 50m |
Cyber insurance shifts from annual questionnaires to telemetry-driven underwriting: insurers ingest API connectors, outside‑in scanners and benchmarked… | ||
| Building the Always-On Purple Team | Stephen Sims, Erik Van Buggenhout | 52m |
Claims that purple teaming moves from periodic assessments to continuous, always-on testing by automating execution of MITRE ATT&CK TTPs using BAS tools… | ||
| Cutting Through the Noise of XDR – Are Service Providers an Answer? | Rakesh Shah | 41m |
XDR promises centralized visibility, better detections and automated response but real deployments stumble on integrations and people/process gaps; a cited IDC… | ||
| Cyber Safety Review Board – Looking Back to Move Forward | Heather Adkins, Dave DeWalt, Robert Silvers | 42m |
The Cyber Safety Review Board, created by the 2021 executive order, issues fact‑finding reports with concrete fixes: the Log4j review labels it an endemic… | ||
| Designing Product Security for a Brighter Smile and a Healthier Tomorrow | Apoorva Phadke, Lokesh Pidawekar | 41m |
Three years of queue-driven work converts into a hub-and-spoke integration-and-services model that assigns product security engineers as SMEs to pods, hands… | ||
| eBPF Warfare - Detecting Kernel & eBPF Rootkits with Tracee | Asaf Eitani, Idan Revivo | 51m |
eBPF-based detection demonstrates concrete, reproducible methods: install a kprobe on do_init_module to catch fileless finit_module/init_module loads and… | ||
| Gapped Out: Unconventional Strategies for Addressing Cyber Talent Shortage | Benjamin Brophy, Bobby Ford | 53m |
Argues the problem is an experience shortage not a talent gap and shows concrete fixes: a six month Career Reboot Program that hires people with zero cyber… | ||
| macOS: Tracking High Profile Targeted Attacks, Threat Actors & TTPs | Dmitry Bestuzhev, Ismael Valenzuela Espejo | 54m |
Shows that nation-state Lazarus (AppleJeus) targets crypto investors on macOS with social‑engineered installers, C2 over .gif files, RC4/XOR encryption, and a… | ||
| Navigating Faulty Assumptions and Magical Thinking in Cybersecurity | Josiah Dykstra, Leigh Metcalf, Eugene Spafford | 51m |
Panel argues many security fixes rest on false certainties and gives concrete examples and alternatives: domain generation algorithms resist generic detection… | ||
| On Our Worst Day: Whole-of-Nation Industrial Incident Response in the USA | Chuck Weissenborn | 27m |
PIPEDREAM is a newly observed, general‑purpose industrial attack framework that targets Modbus TCP, OPC UA and CODESYS and can deny, degrade and destroy… | ||
| Rise of the Machines: Achieving Data Security and Analytics with AI | Angus Chen, Glenn Schmitz | 42m |
CISO-led program removes production records from dev/test by generating production-like synthetic datasets using tools like Memesis, Gretel synthetics and… | ||
| Semi-Advanced Threats vs the Semi-Critical Infrastructure | Jeff Costlow | 22m |
Claims that state-tolerated hacking groups will monetize skills by hitting underprotected suppliers — logistics, food, transit, small banks, schools — with… | ||
| State of the Hack 2023 | Rob Joyce | 51m |
NSA threat intelligence shows 2,000+ Russian attacks in 2022 with >300 against defense, ~400 against commerce and >500 against other government targets, and… | ||
| Symmetric-Key Primitives | Kazuhiko Minematsu, Yosuke Todo | 56m |
Proposes Manx, two AE modes tuned for very short inputs that need at most two block‑cipher calls, with Manx2 doing the calls in parallel and falling back to… | ||
| Ten Key Privacy Challenges of the Hybrid Workforce | Valerie Lyons | 49m |
Outlines ten concrete privacy gaps from the rapid shift to hybrid work and gives tools and tests to fix them: cites a 72% ransomware increase and remote… | ||
| The Emperor Has No Clothes: the Current State of the CISO | Rick Howard, Todd Inskeep | 51m |
Claim: most CISOs carry a high-sounding title with no authority and frequently report under CIOs or sit outside executive teams; evidence includes company… | ||
| The Future of Cyber Workforce - An Ecosystem View and Global Perspectives | Aviram Atzaba, Peter Brown, Ann Cleaveland, Seeyew Mo | 49m |
The session lays out concrete moves: the US is drafting a National Cyber Workforce and Education Strategy with three imperatives — an ecosystem approach… | ||
| The Risks of Blind Trust in Code from Strangers | Tal Folkman, Jossef Harush Kadouri | 38m |
Team analyzes close to two million unique open source packages per month with an automated pipeline of over 30 engines plus a package sandbox and human review… | ||
| Top 10 Ways to Evolve Cloud Native Incident Response Maturity | Sarah Currey, Anna McAbee | 45m |
Ten concrete changes to implement: enable CloudTrail, Route53 DNS logs and VPC flow logs v5 across all regions, deploy GuardDuty and a log lake (Security Lake)… | ||
| A CISO's Best Friend: The Pentester | Sean Atkinson, Chris Elgee | 50m |
Argues that pen tests become a long‑term capability, not a checkbox: use twice‑daily checkpoints, forward EDR alerts immediately, run BloodHound collectors and… | ||
| A Journey in Building an Open Source Security-as-Code Framework | Aakash Shah | 49m |
An open source security-as-code framework called Tython lets teams write reusable reference architectures as a Python SDK, run local tests against… | ||
| Advanced Symmetric-Key Encryption | Laura Shea, Scott Yilek | 48m |
Proposes Flexible PBE (FPBE) and a concrete scheme called DtE that extends PKCS#5 to deterministic, nonce/AD-supporting, authenticated password encryption… | ||
| Cloud Threat Gamification: Lessons Learned and How to Set One Up | Jon-Michael Brook, Randall Brooks | 49m |
A playable tabletop that turns CSA’s pandemic 11 into a budgeted threat model uses dice (or cards), role cards and a $5M budget to buy mitigations across… | ||
| From Public-Private Partnerships to Operational Collaboration | Todd Conklin, Cynthia Kaiser, Kyle Pfeiffer, Clayton Romans | 51m |
Federal agencies describe concrete operational collaboration: CISA runs the JCDC linking 227 industry partners and 100 plus international orgs for real time… | ||
| Look Far Afield: Metaverse Security Secrets from the Gaming Industry | Kevin Gosschalk | 46m |
Argues that online games already expose the exact threats metaverse platforms will face and gives concrete examples: real money trading where compromised… | ||
| Open Source OS Approach Self-Detects Attacks & Self-Restores in Seconds | Michael Coden, Michael Stonebraker | 51m |
An open‑source OS prototype puts every OS and app state into a DBMS layer that replaces Linux/Kubernetes, uses change‑capture provenance and spools history to… | ||
| Responding to Supply Chain Vulnerabilities – A Maritime Perspective | Bill Malik | 35m |
Claims five systemic weaknesses in ports: spoofable AIS/GPS (example: tanker faked position; GPS meaconing moved ships 20 miles), a three‑year Port of Antwerp… | ||
| The Death of Conventional MFA: How AiTM Attacks Are Changing the Game | Deepen Desai, Sudeep Singh | 49m |
Researchers report a sharp rise in Adversary‑in‑the‑Middle (AiTM) phishing that reliably bypasses many MFA methods by proxying logins and capturing session… | ||
| The Rise of Malware Within the Software Supply Chain | Charlie Jones | 46m |
Malicious injections into open source and third‑party components are increasing: an ESA study finds 66% of supply‑chain attacks start with supplier software… | ||
| What Workforce Shortage? Create Your OWN Talent Pipeline | Sushila Nair, Ginger Spitzer | 49m |
Shows a practical pipeline: companies fund and partner with nonprofits and universities to run scholarships, internships and apprenticeships, recruit mentors… | ||
| While You Were Shielding: The Impact of Schrems II on EU Data Protection | Wasif Gilani | 41m |
Schrems II Privacy Shield invalidated and the EDPB push require strong encryption that resists state cryptoanalysis and cryptographic keys localized in the EU… | ||
| Zero Effort Zero Trust K8s Security for Blocking Zero Day Attacks | Tracy Walker | 46m |
Claims a working, free open-source runtime guard derived from NeuVector (incoming CNCF Open Zero Trust) that you can deploy with Helm in ~5 minutes, auto-learn… | ||
| Aikido: Turning EDRs to Malicious Wipers Using 0-day Exploits | Or Yair | 36m |
Claim: an unprivileged process can force trusted EDR agents to delete arbitrary system files by combining junctions and handle catching with 0-day flaws, then… | ||
| Connecting the Dots - An Effective Cybersecurity Strategy | Dimitry Shvartsman, Dimitrios Tzimas | 50m |
Defines a repeating strategy loop that assigns one protected owner to map target states, uses threat modeling to validate gaps, and hands deltas to product for… | ||
| Employees Are the New Perimeter- How the Pandemic Shaped Workforce Risk | Benjamin Edwards, Masha Sedova | 54m |
Analysis of 6M real user actions from Cyentia Institute and Elevate Security shows risk concentrates: about 12% high-risk users account for roughly 30% of real… | ||
| Hiring & Retaining Security Talent: Guidance for Your Staffing Strategy | George Gerchow | 49m |
This session gives concrete hiring and retention tactics: recruit from engineering and finance, run company-wide open calls, and carve budget for offsites and… | ||
| How to Map Networked Devices Using Graph-Based AI to Preempt Cyber Threats | Divyansh Jain | 40m |
Graph neural networks convert passive NetFlow, sFlow and event logs into a network graph, train a graph autoencoder on ~70 node features to produce… | ||
| Investigation & Incident Response Challenges for the Hybrid Enterprise | David Damato, Stacey Halota, Andy Ozment, Ronald Plesco | 50m |
Panel summarizes a 250+ interview study: 75% worry they don’t collect all investigation data and only one-third confident tracking incidents cloud-to-legacy… | ||
| It’s a Journey…Where is NIST Headed with the Cybersecurity Framework | Amy Mahn, Cherilyn Pascoe | 50m |
NIST releases a draft core for CSF 2.0 that adds a sixth function and reshuffles elements to better cover governance, supply chain, vulnerabilities, incident… | ||
| Key Agreement | Doreen Riepel, Marjan Skrobot | 46m |
Proves tight concrete security for HMQV and NAXOS under new multi‑user assumptions and the generic group model, replacing previous S^2 forking losses with… | ||
| Metaspace Race, Securing Minors in the Metaverse - from the Start | Angel Grant, Denise Tayloe | 49m |
Metaverse usage already draws real money—54 billion in virtual goods annually—and many platforms host minors: 80% under 18 with an average age ~12, so age… | ||
| Problems in the Mirror Are Larger Than They Appear - True Horrors of BEC | Ronnie Tokazowski | 51m |
Claims that BEC already accounts for $50B in FBI losses and ties into a broader $500B–$1T of fraud, with victims in 177 countries and money laundered to 140… | ||
| Protecting the Attack Surface and Data Silos of an EV Charging Network | Thomas Caldwell | 31m |
EV chargers expose concrete, tested failures: default creds and open services (Telnet, FTP, SMTP), Bluetooth/Wi‑Fi and mobile app entry points, and… | ||
| Russia’s RT Leads Global Disinformation to Bypass Censorship on Ukraine | Patricia Bailey | 35m |
Researchers trace an RT-sponsored Telegram channel that seeds videos into a coordinated inauthentic behavior network and find the pipeline: Telegram launchpad… | ||
| Security Implications of Artificial Intelligence Synthesizers | Liam Mayron | 32m |
Generative models like GPT-4 use much larger context windows (about 32,000-token context) than GPT-3 (2048 tokens), enabling longer coherent output but still… | ||
| The Digital Trust Gap: How Cyber Pros Break Silos to Advance Digital Trust | Rob Clyde, Pamela Nigro | 52m |
ISACA reports that 76% say digital trust matters but only 76% important 12% act, and surveys show 10% reported privacy breach 20% unknown, with lack of staff… | ||
| What 40 CEOs Told Us About Building Cyber Resilience | Rashmy Chatterjee, Manuel Hepfer | 50m |
Research interviews with 37 CEOs interviewed (average revenue ~$12B) reveal nine had suffered major attacks and many CEOs rate preparedness high yet feel… | ||
| What You Need to Know about the Global Cybersecurity Regulatory Landscape | Tara Wisniewski | 48m |
ISC2 releases a research report with RUSI mapping cyber laws across the US, UK, EU, Canada, Japan and Singapore and finds regulatory growth focused on three… | ||
| Your Third-Party Risk Management Program Is Bad and You Should Feel Bad | Chris Castaldo, Brian Markham | 51m |
Argues that current TPRM eats security resources without improving security and urges publish SOC 2s and pentests for transparency. Recommends preferring… | ||
| RSAC Security Scholar Poster Pitch-Off | Cecilia Marinier, Jamil Jaffer, Ann Johnson, Ben Jun | 46m |
Four brief research pitches cover concrete results: a Carnegie Mellon survey (24 valid responses) finds 70% start CTFs to learn while 71% cited lack of… | ||
| 5 Open Source Security Tools All Developers Should Know About | David Melamed, Luke O'Malley | 46m |
Five open source starters: Semgrep, OSV Scanner, KICS, Trivy and ZAP, each chosen for measurable strengths — Semgrep scans 30+ languages with a median… | ||
| Abuse of Repository Webhooks to Access Hundreds of Internal CI Systems | Omer Gil, Asaf Greenholts | 34m |
Shows a concrete attack chain that turns SaaS SCM webhooks into a remote access vector against internal CI: creating webhooks to Jenkins login endpoints that… | ||
| Adversary Emulation: How I Stopped Being Polite and Got Real Results | Brian Donohue, Adam Mashinchi | 50m |
Red Canary shows defenders and testers behave differently from real intruders: the platform ingests 658–685 PB/day and records about 40,000 confirmed threats… | ||
| Applying Forensic Engineering in Cybersecurity Incidents | Jason Jordaan | 42m |
Argues that layering forensic engineering onto incident response proves legal liability and root cause rather than just blaming attackers, using the Treehouse… | ||
| Curiosity Killed the Hack | TJ Preyear | 26m |
Curiosity fuels concrete exploits: a Flipper Zero (under $200) replicates a car remote and enables a replay attack that starts a Jeep, ATMs get robbed by… | ||
| Cybersecurity Strategic Activity, Recent Trends & Predictions | Dino Boukouris | 33m |
Year-over-year strategic activity stays healthy with specifics: 13 deals above $1B, about 1,000 financing rounds, and 95 raises north of $50M, while M&A totals… | ||
| Disasters’ First Responders - Nonprofits, the Other Critical Infrastructure | Kelley Misata | 51m |
Finds that nonprofits aren’t uninterested but under-resourced: a 2016 survey sent to 500 orgs yields 222 responses showing awareness but gaps; US counts 1.56M… | ||
| Do Attackers Use Algorithms to Evade ML? An In-the-Wild Phishing Case Study | Hyrum Anderson, Kevin Roundy | 49m |
Five years of red‑team competitions and an 11‑tactic in‑the‑wild phishing study show manual tricks dominate: 2021 winners achieve perfect evasion with… | ||
| Future Proofing SMBs for the Evolving Global Compliance Landscape | Tarah Wheeler | 47m |
Claims that SMBs can meet current and future rules with practical steps and MSPless workflows and that NIST Cybersecurity Framework Small Business Edition is… | ||
| Ghosts in the Machine… Is There a Security Patch for People? | Greg Concepcion, Paul Malcomb | 42m |
Claims a practical, three‑pronged program: know your people, know your data, know your threats, backed by FBI/industry experience and MITRE mapping of 40 cases… | ||
| How to Adapt to Security Changes in Cloud SaaS Transformation | David Cross | 46m |
Claim: major SaaS clouds deliver faster patching, global DevSecOps and 24/7 threat monitoring at scale — one provider builds from source ~200 times a day and… | ||
| How to Kick Off Privacy Engineering Within a Security Team | Nishant Bhajaria, Katharina Koerner | 49m |
Explains how to repurpose security tools (example: Metatron key-swapping at Netflix) to enforce access controls, reduce needless data privileges, and cut risk… | ||
| The Promise and Peril of a UN Cybercrime Treaty | John Hering, Jane J. Lee, Charley Snyder | 49m |
Negotiations produce a zero draft June 20 that kicks off text bargaining where outcomes matter: scope (narrowly cyber‑dependent crimes versus sweeping online… | ||
| Trust Unearned? Evaluating CA Trustworthiness Across 5 Billion Certificates | Ryan Kovar | 35m |
Analysis downloads and indexes 5 billion TLS certificates from CT logs into Splunk, matches them against 185 million IOCs, and groups results by 78,000 issuing… | ||
| Verifiable Credential in Actions During ID-Verification Process | Dmitry Kulko, Pinki Patel | 52m |
Proof‑of‑concept issues VerifiedEmployee verifiable credentials using Microsoft Entra Verified ID, delivered to Microsoft Authenticator wallets and fed from… | ||
| Corporate Reputation Attacks: Dissecting the Latest Job Offer Scams | James Nitterauer | 40m |
Criminals impersonate Graylog and real employees using typosquatted domains like grayllog.co and hosted documents with an Office 365 GUID that lets Microsoft… | ||
| DFIR Evidence Collection and Preservation for the Cloud | Josh Lemon, Megan Roddie | 01h 07m |
M365 Unified Audit Log is often off for tenants created before October 2021 and needs the get-admin-auditlog-config checks; Azure AD auth logs are retained 30… | ||
| Digital Life and Physical Death | Dan Demeter, Marco Preuss | 43m |
Research shows digital estates outlive companies and media: expect 50 years of decay while hard drives last ~10 years and DVDs ~30, so recommended practical… | ||
| Exploiting Vulnerabilities and Flaws to Attack Supply Chain | Ilay Goldman, Yakir Kadkoda | 36m |
Demonstrates concrete exploits and fixes across IDE, SCM, registry, CI/CD and artifact stages: an impersonating VSCode extension (Prettier typo) nets >1,000… | ||
| It’s All Geek to Me: Communicating The Business Value of Zero Trust | Jerry Chapman, Megha Kalsi, Chris Steffen | 51m |
Panel outlines concrete steps: treat Zero Trust as a multi-year program not a one‑off project, prioritize identity, security, risk as the core controls, form a… | ||
| Lateral Movements in Kubernetes | Yossi Weizman | 46m |
Compromised pods can escalate to full cluster or cloud access by abusing Kubernetes service account tokens, node identities, or misconfigured controllers that… | ||
| National Security to Nation State Target: Cybersecurity Effects on a Warfighter | Vishal Amin | 51m |
Military sensor flights use an ATARs imaging sensor to stream high-resolution imagery and metadata back to ground stations for targeting; linked administrative… | ||
| NIST Cybersecurity Framework v2.0: What’s changing? | Kelly Hood, Greg Witte | 49m |
NIST posts a CSF core draft now and targets final 2.0 for winter 2024; the core adds six functions (moving governance out of Identify), shifts 23 categories to… | ||
| The Art of Metawar: Hacking & Weaponizing the Metaverse to Redefine Reality | Winn Schwartau | 47m |
Argues the Metaverse becomes a new battlefield where a few companies can literally terraform reality, build kilometer‑scale virtual cities costing $500–$700… | ||
| The Fearless Cybersecurity Leader and Future CISO | Jessica Robinson | 52m |
Covers the seven concrete skills for first‑time CISOs and contrasts virtual vs fractional CISO roles with practical definitions and when each fits; uses real… | ||
| The Hidden Risk in Undocumented API Behavior | Bahaa Naamneh | 36m |
Finds an undocumented Win32/registry behavior where common delete APIs follow registry symbolic links and delete the target not the link, forcing use of the… | ||
| The Old is New Again: An Intro to SMS Security and Why It’s Vital | Fabio Bottan | 42m |
SMS phishing is rising and A2P SMS remains widely used for authentication and notifications, so attackers use cheap, scalable methods like €750 for 50,000 SMS… | ||
| Verifiable Credentials and the Future of Enterprise Security | Chase Cunningham, Heather Dahl, Mike Vesey | 41m |
Claims that verifiable credentials replace passwords and tie data to owners, using DIDComm channels, blockchain-ledger proofs and digital wallets for… | ||
| Cloud Agnostic or Devout? How Cloud Native Security Varies in EKS/AKS/GKE | Brandon Evans | 42m |
Claim: Kubernetes does not make security cloud-agnostic. Using CIS benchmarks and a hands-on demo the presenter spins a GKE cluster, deploys DVWA, exploits a… | ||
| Conducting a Pre-Mortem on the Next Zero Trust Breach | J. Wolfgang Goerlich | 51m |
Pre-mortem imagines 2028 breach after a Zero Trust rollout: momentum dies via the cottage to goblin cycle, projects lock only top ~250 apps while thousands… | ||
| Credential Sharing as a Service: The Dark Side of No Code | Michael Bargury | 54m |
Demonstrates how low‑code platforms collect OAuth refresh tokens into reusable connections that users can share, effectively becoming a credential sharing as a… | ||
| Detecting Influence Campaigns Across Social Media Platforms | Zhouhan Chen | 36m |
A multi-year system called Information Tracer collects posts from five platforms (Facebook, Instagram, Twitter, Reddit, YouTube), builds bipartite… | ||
| Diving into the Tenacious Threats of Cloud Data Lakes | Oliver Forbes, Diane Murphy, John Yeoh | 45m |
Industry academia and non‑profit collaborators produce a downloadable threat model and a data doctrine framework that emphasizes traceability, ELT pipelines… | ||
| EXPOSURE: The 4th Annual RSAC SOC Report | Jessica Bair Oppenheimer, Steve Fink, Dave Glover | 48m |
NetWitness XDR plus Cisco Umbrella/SecureX and Firepower IDS capture live conference wifi into a SOC with about 100 TB packet capture (roughly 18.5 billion… | ||
| Managing the Mobile Endpoint Attack Surface | Gema Howell | 34m |
Covers applying risk management to BYOD and COPE deployments with a lab-built example architecture that uses enterprise mobility management, mobile application… | ||
| Rethinking Recruiting: Effective Hiring Practices to Close the Skills Gap | Audra Streetman, Lillian Teng | 45m |
A hiring manager rewrites an entry‑level posting, uses Grammarly and Textio plus a Gender Decoder, posts beyond LinkedIn and the result goes viral: ~20,000… | ||
| Stay Ahead of Adversarial AI in OT/ICS Environments – Mitigating CWE-1039 | Jason Kramer, Ulrich Lang | 48m |
Claims that CWE-1039 (malicious ML training) can be detected by automated model source-code analysis and stopped with both detection and hardening measures… | ||
| Taking Advantage of a Recession to Push a Program to World Class | James Christiansen, Robert Schuetter | 51m |
Argues recession is an opportunity to force vendor consolidation and rebuild security as business-aligned services, not a tech shopping list, using a… | ||
| Turning the Backpage: Combating Human Trafficking with Threat Intelligence | Kirill Boychenko, Hande Guven | 41m |
Proof-of-concept collects data from eight Backpage-like classified sites and extracts 66,000 posts, yielding over 17,000 phone numbers and ~3,000 unique… | ||
| Why Having a Security Reference Architecture Matters! | Jerry Lin | 49m |
A Cisco team spends about a year and a half building a security reference architecture that maps capabilities (not products) to use cases, aligns to NIST… | ||
| Strategic Approaches to Growing Talent (Lightning Talks) | Abhilasha Bhargav-Spantzel, Emy Dunfee, Kevin Garvey, Brandon Pugh | 39m |
Moderator:
Kacy Zurkus, Senior Content Manager, RSA Conference
Panelists:
Abhilasha Bhargav-Spantzel, Partner Security Architect, Microsoft
Emy Dunfee… | ||
| Welcome Remarks | Hugh Thompson | 07m |
Opens by saying a seven‑person informal sample led to uncertainty so the organizer asks ChatGPT-4 to rank disruptive dual‑use advances and it spits out the… | ||
| The Looming Identity Crisis | Rohit Ghai | 25m |
Claim: identity platforms must become open data architecture systems that integrate at the data layer, adopt a security-first posture, and embed identity… | ||
| Threat Response Needs New Thinking. Don't Ignore This Key Resource. | Tom Gillis, Jeetu Patel | 24m |
Argues for native cross‑domain telemetry (email, web, endpoint, network) and XDR that links an email link → PowerShell → lateral network movement chain so… | ||
| The New Ground Truth for Security | Sumit Dhawan, Alicia Lynch | 21m |
Claim: assume attackers have insider knowledge and move in two to three stealthy lateral hops using tools like Samba RDP and Pass‑the‑Hash rather than the old… | ||
| Combatting Evolving Cyber Threats: Leading with Disruption | Chris Krebs, Lisa Monaco | 18m |
Justice Department shifts from courtroom wins to bias toward disruption and prevention, using legal process to act in networks: a forfeiture warrant traces and… | ||
| SIEM There, Done That: Rising Up in the SecOps Revolution | Bryan Palma | 20m |
A survey of over 500 CISOs finds 51% plan to maintain or grow legacy SIEM spend while 96% say they need better solutions and only 34% feel resilient, and SOC… | ||
| Why I’m Optimistic (And You Should Be, Too) | Lee Klarich | 20m |
Claims that cloud-scale telemetry plus AI can prevent the last billion attacks and reduce SOC queues of ~100,000 alerts to machine-handled work. Cites Unit 42… | ||
| Defending at Machine Speed: Technology’s New Frontier | Vasu Jakkal | 21m |
Claims that combining generative AI, hyperscale cloud data and threat intelligence lets defenders work at machine speed, cutting investigations from days or… | ||
| No More Time: Closing the Gap with Attackers | Chris McCurdy, Ahmed Al Hammadi | 24m |
Cyber defenses must close a time gap quantified by specific metrics and concrete changes: breaches still take 277 days to detect while ransomware deployment… | ||
| The State of Cybersecurity – Year in Review | Kevin Mandia | 21m |
Presenter: Kevin Mandia, Mandiant CEO, Google Cloud
2022 was a year of both conflict and macro-economic pressures that fostered innovation and evolution of… | ||
| Security in 2023 and Beyond: Automation, Analytics and Architecture | Boaz Gelbord | 24m |
Claims that internet attacks accelerate: 137% year‑on‑year growth in web app attacks, 22% rise in DDoS against finance (70% in Europe), and API attacks… | ||
| The Next 50 Years | Michio Kaku | 03m |
Dr. Michio Kaku, Renowned Theoretical Physicist and Futurist,
Buckle up! We’ve reached warp speed with advances in science shaping revolutionary developments… | ||
| nothing matches | ||