RSAC 2022
2022-06-06..2022-06-09
-- online --
[RSAC 2018 Asia Pacific & Japan, RSAC 2019 Asia Pacific & Japan, RSAC 2020 Asia Pacific & Japan, RSAC 2021, RSAC 2022, RSAC 2023, RSAC 2025 Conference]
| title | author | length |
|---|---|---|
| M365 Threat Hunting—How to Understand Attacker's TTPs in Your Tenant | Aaron Turner | 44m |
Presenter: Aaron Turner, VP - SaaS Posture Management, Vectra
Microsoft 365 is ubiquitous now, but very few security teams have the resources necessary to… | ||
| Cyber and Modern Conflict: The Changing Face of Modern Warfare | Niloofar Razi Howe | 55m |
Presenter: Niloofar Razi Howe, Sr. Operating Partner, Energy Impact Partners
This riveting session brings the challenges of war and the impact that cyber is… | ||
| Ransomware: How One Company Fought Back | Raymond Umerley | 52m |
Presenter: Raymond Umerley, Vice President, Chief Information Risk Officer, Pitney Bowes
Within a span of seven months, global e-commerce, shipping and… | ||
| Incorporating Cyber Expertise in Corporate Governance: Gula Tech Foundation | Cyndi Gula, Ron Gula | 41m |
Presenters:
Cyndi Gula, Managing Partner, Gula Tech Adventures
Ron Gula, President, Gula Tech Adventures
Please join our 4th Gula Tech Foundation awards… | ||
| A Data-Driven Topical History of the RSA Conference | Wade Baker, Ben Edwards | 48m |
Presenters:
Wade Baker, Partner and Co-Founder, Cyentia Institute
Ben Edwards, Senior Data Scientist, Cyentia Institute
Imagine being able to distill every… | ||
| The Science of Scams: Deconstructing How Criminals Steal Cash | Erin Englund, Ayelet Levin | 44m |
Presenters:
Erin Englund, Threat Analytics Lead - North America, BioCatch
Ayelet Levin, SVP Market Strategy, BioCatch
Social engineering scams affect… | ||
| The Cloud Gray Zone: Vulnerabilities Found in Azure Built-in VM Agents | Nir Ohfeld, Shir Tamari | 43m |
Presenters:
Nir Ohfeld, Senior Security Researcher, Wiz
Shir Tamari, Head of Research, Wiz
This talk will expose a new risk for cloud users that relates to… | ||
| How to Secure Private 5G Networks | Srinivasan Balasubramanian | 50m |
Presenter: Srinivasan Balasubramanian, Distinguished Member, CTO Office Head of Standards & IP, Celona
This session provides critical guidance on how a… | ||
| Cutting Through: Getting Real Answers on Supply Chain Security Policy | Tatyana Bolton, Stephen Ezell, Mark Montgomery, Lauren Zabierek | 48m |
Moderator:
Tatyana Bolton, Policy Director, Cybersecurity and Emerging Threats, The R Street Institute
Panelists:
Stephen Ezell, Vice President, Global… | ||
| Bingo! 10 Security Standards in 2022 You Can’t Live Without | Bret Jordan, Kirsty Paine | 43m |
Presenters:
Bret Jordan, CTO, Emerging Technologies, Broadcom
Kirsty Paine, Advisor - Technology & Innovation, EMEA, Splunk Inc.
This session will cover the… | ||
| Be Debt Free! Using Cyber-Informed Engineering to Future-Proof Technology | Cheri Caddy, Steven Kunsman | 50m |
Presenters:
Cheri Caddy, Senior Advisor for Cybersecurity, U.S. Department of Energy
Steven Kunsman, Director Product Management and Applications, Hitachi… | ||
| Dangerous: Critical Conversations About CISA’s “Bad Practices” | Donald Benack III, Joshua Corman | 50m |
Presenters:
Donald Benack III, Deputy Associate Director, Cybersecurity and Infrastructure Security Agency
Joshua Corman, Founder, I am The Cavalry (dot… | ||
| Protecting Traditional and Blockchain Virtual Economies | Adrian Bednarek | 40m |
Presenter: Adrian Bednarek, CISO, Overflow Labs, Inc
Blockchain based virtual economies have created a target rich environment with very high value assets… | ||
| What Could Possibly Go Wrong? Plain Language Threat Modeling in DevSecOps | Alyssa Miller | 57m |
Presenter: Alyssa Miller, Business Information Security Officer (BISO), S&P Global Ratings
In this session, a co-author of the Threat Modeling Manifesto will… | ||
| Security Leadership: Influence without Authority | Sarah Currey | 47m |
Presenter: Sarah Currey, Security Consultant, AWS
This session will explore tangible ways that individual contributors can scale and enhance their company’s… | ||
| Transforming Security Champions | Tanya Janca | 49m |
Presenter: Tanya Janca, CEO and Founder, We Hack Purple, Director of DevRel and Community, Bright
With security teams being vastly outnumbered, many… | ||
| Top 10 Privacy Risks in Web Applications | Florian Stahl | 41m |
Presenter: Florian Stahl, Principal Consultant, MSG Security Advisors
In times of CCPA and GDPR, technical privacy and privacy by design becomes increasingly… | ||
| How to Introduce “Enterprise-Grade” Security at a Startup | Daniel Trauner | 50m |
Presenter: Daniel Trauner, Senior Director, Security, Axonius
As the first member of the dedicated security team at a rapidly-growing startup, what should you… | ||
| Attacking and Defending Kubernetes Cluster: Kubesploit vs KubiScan | Eviatar Gerzi | 42m |
Presenter: Eviatar Gerzi, Senior Security Researcher, CyberArk
Attackers are increasingly targeting Kubernetes clusters. Therefore, it is important to… | ||
| Network Based Threat Hunting: Lessons Learned, Techniques to Share | Tal Darsan, Etay Maor | 44m |
Presenters:
Tal Darsan, Manager, Managed Cybersecurity Services, Cato Networks
Etay Maor, Sr. Director Security Strategy, Cato Networks
Using an "on prem"… | ||
| Atomic Red Team: Where Adversary Emulation and EDR Testing Meet | Adam Mashinchi | 53m |
Presenter: Adam Mashinchi, Director, Open Source Programs, Red Canary
This talk will review Atomic Red Team™, a library of simple, focused tests mapped to the… | ||
| CHRYSALIS: Age of the AI-Enhanced Threat Hunters & Forensicators | Jess Garcia | 50m |
Presenter: Jess Garcia, Founder, One eSecurity
What does it take to Transform traditional Threat Hunters/Forensicators into AI-Enhanced ones so they can… | ||
| Open for Business: How to Build a Security Program as the First CISO | Olivia Rose | 53m |
Presenter: Olivia Rose, CISO, VP of IT & Security, Amplitude
The first 90 days of a CISO's tenure are tough. Even tougher for an incoming CISO who also… | ||
| Scalable Confidential Computing on Kubernetes with Marblerun | Moritz Eckert, Felix Schuster | 42m |
Presenters:
Moritz Eckert, Chief Architect, Edgeless Systems GmbH
Felix Schuster, CEO, Edgeless Systems GmbH
Interested in adding an extra layer of data… | ||
| xGitGuard: ML-Based Secret Scanner for GitHub | Bahman Rashidi | 50m |
Presenter: Bahman Rashidi, Director, Cybersecurity & Privacy Research, Comcast
Publicly leaked internal secrets of an organization can be exposed to secret… | ||
| Transformational Security Strategy—Developing a Plan That Works | Karla Clarke | 48m |
Presenter: Dr. Karla Clarke, Director, Tandem Diabetes Care, Inc.
If it’s so simple why doesn’t every organization have it? A cybersecurity strategy that… | ||
| Defeating Covert Foreign Influence While Protecting Free Expression | Mary Brooks, Cmdr. Robin Crabtree, Kurt Sanger | 50m |
Moderator:
Mary Brooks, Fellow, R Street Institute
Panelists:
Cmdr. Robin Crabtree, Judge Advocate, U.S. Navy
Kurt Sanger, Deputy Staff Judge Advocate, U.S… | ||
| Expect More: Realizing the True Impact of Your Intelligence Program | Stu Solomon | 51m |
Presenter: Stu Solomon, President, Recorded Future
In our hyper-distributed world, where the attack surface is infinite, intelligence is the difference… | ||
| Cybersecurity as a Business Conversation | Chris Novak | 52m |
Presenter: Chris Novak, Director, Verizon
Many organizations struggle to figure out how to make data-driven decisions about cybersecurity investments and… | ||
| Opening the Valve on an Untapped Human Pipeline | Ryan Kovar | 44m |
Presenter: Ryan Kovar, Distinguished Security Strategist, Splunk
Sun Tzu once said, "If you want to work in cyber, you must first spend 5 years doing the job… | ||
| Shift-left: Top 10 Most Disruptive Ideas of Modern Cloud Security | Nico Popp | 38m |
Presenter: Nico Popp, Chief Product Officer, Tenable
All the pundits agree: shift-left is the future of cloud security. But what does it mean, why does it… | ||
| Never Waste a Crisis: Identifying and Transforming Digital Risk into Reward | Ben Smith | 46m |
Presenter: Ben Smith, Field CTO, RSA
You’ve heard it before: the pandemic changed nearly every aspect of how we live, work and play, exposing businesses and… | ||
| Ransomware Reality Checklist: 5 Ways to Prevent an Attack | John Fokker | 48m |
Presenter: John Fokker, Head of Cyber Investigations, Trellix
Learn from leading global cybercrime experts the five top practical recommendations to mitigate… | ||
| Is Your Passwordless Really Passwordless? How to Tell and Why It Matters | Tim Callan | 58m |
Presenter: Tim Callan, Chief Compliance Officer, Sectigo
With the rising interest in passwordless authentication, confusion still exists about which… | ||
| Cybersecurity Strategic Activity, Recent Trends & Predictions | Dino Boukouris | 44m |
Presenter: Dino Boukouris, Founding & Managing Director, Momentum Cyber
The past year was a year of incredible challenges, innovation, and growth, especially… | ||
| Why Zero Trust Network Access is Broken, and How to Fix It | Josh Dye, Kumar Ramachandran | 52m |
Presenters:
Josh Dye, SVP, Information Security, Jefferies
Kumar Ramachandran, SVP Products, Palo Alto Networks
People, applications, and data are everywhere… | ||
| Open XDR: A Strategy for Evolving Security Needs | Rakesh Shah | 47m |
Presenter: Rakesh Shah, Director, Product, AT&T Business
Businesses need an integrated approach to address the challenges of siloed defenses and a complex… | ||
| Another Lock? More Barbwire? It’s Time to Reimagine Modern Access Security | Nitika Gupta, Rahul Prakash | 52m |
Presenters:
Nitika Gupta, Principal Program Management Manager, Identity Security, Microsoft
Rahul Prakash, Product Owner, Microsoft
Pervasive digital… | ||
| Multifaceted Extortion: Insider Look at Ransom Payments and Cyber Defense | Nick Bennett, David Wong | 52m |
Presenters:
Nick Bennett, VP, Mandiant Consulting, Mandiant
David Wong, Vice President, Mandiant
This session will share lessons learned, through a… | ||
| A Sanity Check on Technology. Viewpoints from Security Professionals. | Candy Alexander, Jon Oltsik | 43m |
Presenters:
Candy Alexander, CISSP CISM, International President, Information Systems Security Association (ISSA)
Jon Oltsik, Senior Principal Analyst and… | ||
| Importance of Cybersecurity Mesh Platform in Securing Digital Acceleration | John Maddison | 34m |
Presenter: John Maddison, Chief Marketing Officer and Executive Vice President, Products, Fortinet
Digital Acceleration has caused many organizations to move… | ||
| Privacy Standards in the Context of Information Security | Abhishek Agarwal, Katharina Koerner, Dr. Sarah Lewis Cortes | 50m |
Presenters:
Abhishek Agarwal, CISO & Head of IT, Helix
Katharina Koerner, Senior Fellow for Privacy Engineering, IAPP
Dr. Sarah Lewis Cortes, Privacy Assurance… | ||
| Leveraging AI & Deep Learning in the Battle against Zero Day Cyber Attacks | Itai Greenberg | 41m |
Presenter: Itai Greenberg, VP of Product Management, Check Point Software Technologies Ltd.
Cyberattacks are becoming more sophisticated making them more… | ||
| Being Open to a Zero Trust Future | Chris Meenan | 44m |
Presenter: Chris Meenan, Product Management, IBM
Our IT and security landscape is getting more complex, federated and traditional controls are becoming less… | ||
| How Modern Bank Heists Are Escalating to Hostage Situations | Karen Worstell, Rick McElroy, Chad Skipper | 48m |
Presenters:
Karen Worstell, Sr. Cybersecurity Strategist, VMware
Rick McElroy, Principal Cybersecurity Strategist, VMware Carbon Black
Chad Skipper, Global… | ||
| Cybersecurity: What role do you play? | Tom Conkle, Joy Belinda Beland, Brett Miller, Ray Nutting | 50m |
Moderator:
Tom Conkle, Cybersecurity Engineer, Optic Cyber Solutions
Panelists:
Joy Belinda Beland, Senior Cybersecurity Consultant / Instructor, Edwards… | ||
| Taming Identity Sprawl to Close the Cybersecurity Exposure Gap | Larry Chinski | 31m |
Presenter: Larry Chinski, Vice President, Global IAM Strategy, One Identity
Identity sprawl is real. Human, machine, and other identities have recently… | ||
| Confessions of a Sandbox: How AI is Disrupting Automated Threat Analysis | Liviu Arsene, Marian Radu | 49m |
Presenters:
Liviu Arsene, Director of Threat Research and Reporting, CrowdStrike
Marian Radu, Sr. Director, Data Science, CrowdStrike
Detecting today’s… | ||
| Eat Your Vegetables: Using Parenting Skills To Run A Security Program | Helen Patton, Samara Williams | 50m |
Presenters:
Helen Patton, Advisory CISO, Cisco
Samara Williams, Threat Operations Manager, Cardinal Health
Following rules and frameworks is sometimes not… | ||
| Electrons to Clouds—One SDL to Rule the World from Hardware to the Cloud | Mohit Arora, Richard Tonry | 38m |
Presenters:
Mohit Arora, Software Security Architect, Dell
Richard Tonry, Firmware Security Architect, Dell
Organizations that produce hardware and software… | ||
| Are Low-Code and No-Code Tools a Security Risk? | Mark Nunnikhoven | 51m |
Presenter: Mark Nunnikhoven, Distinguished Cloud Strategist, Lacework
Low-code and no-code let anyone drag and drop components to build a completely new… | ||
| Defending Against New Phishing Attacks that Abuse OAuth Authorization Flows | Jenko Hwong | 50m |
Presenter: Jenko Hwong, Cloud Security Researcher, Netskope
Users are prompted to login at the real Microsoft login page, real domain, real cert, and also… | ||
| Business Information Security Officer: A Cybersecurity Secret Weapon | Nicole Dove | 49m |
Presenter: Nicole Dove, Head of Security, Games Division , Riot Games
The Business Information Security Officer is an exciting, emerging role in the… | ||
| The Four Dimensions of Building a Security Program | Andy Ellis | 48m |
Presenter: Andy Ellis, Advisory CISO, Orca Security & Operating Partner, YL Ventures
What's the next investment? Looking to understand whether the time and… | ||
| Cyber Defense Matrix: Revolutions | Sounil Yu | 46m |
Presenter: Sounil Yu, CISO and Head of Research, JupiterOne
The Cyber Defense Matrix (CDM) helps people organize and understand gaps in their overall security… | ||
| CSF Over Time: Shifting from Identify/Protect As You Grow | Allan Alford | 43m |
Presenter: Allan Alford, Host, The Cyber Ranch Podcast
Ironically, a focus on the five NIST CSF domains should change over time away from Identify/Protect and… | ||
| Operationalizing Identity: IAM for Customer Service | Arynn Crow | 50m |
Presenter: Arynn Crow, Manager of Product Management, User Authentication, AWS
Biometrics, account recovery, and fraud: do these words come to mind when… | ||
| Making the Leap: Transform from Techie to CISO/Infosec Leader | Todd Fitzgerald | 50m |
Presenter: Todd Fitzgerald, CISO, Cybersecurity Leadership Author, CISO SPOTLIGHT, LLC
Congratulations, you have been offered a security leadership role in… | ||
| Managing De-Centralized Identities: A Relying Party Perspective | George Fletcher | 51m |
Presenter: George Fletcher, Identity Standards Architect, Capital One
As the groundswell around the Self-Sovereign Identity (SSI) movement grows, it's… | ||
| It’s Not Fair! Detecting Algorithmic Bias with Open Source Tools | Mo Badawy, Mike Kiser | 53m |
Presenters:
Mo Badawy, Principal Data Scientist, SailPoint
Mike Kiser, Director of Strategy and Standards, SailPoint
Algorithms that “predict the future” are… | ||
| Defending Security is Probabilistic, Not Deterministic: Get Over It | Dr. Mark Carney, Winn Schwartau | 58m |
Presenters:
Dr. Mark Carney, Senior Security Researcher, ZDE Ltd.
Winn Schwartau, Chief Visionary Officer, SAC Labs
"Is It Secure?” (No.) For almost 60 years… | ||
| Know Your Environment…Better Than the Enemy | Paul Suarez | 38m |
Presenter: Paul Suarez, CISO, Casey's General Stores
As a US Secretary of Defense once said, “We know there are some things we do not know." However, in… | ||
| Solving the Identity Security Crisis: A Guide to Today’s Top Threats | Kimberly Berry, Bhawna Singh | 46m |
Presenters:
Kimberly Berry, Principal Security Threat Intelligence Researcher, Auth0
Bhawna Singh, Senior Vice President of Engineering, Okta
As the security… | ||
| Measuring the Difference: Metric Development at NCCoE’s Securing AI Testbed | Harold Booth, Paul Rowe | 49m |
Presenters:
Harold Booth, Computer Scientist, National Institute of Standards and Technology (NIST)
Paul Rowe, Principal Cyber Resiliency Researcher, The MITRE… | ||
| Can You Handle The Truth? Lawyers Can Be CyberPro's Best Friend | Ted Claypoole, Todd Inskeep | 49m |
Presenters:
Ted Claypoole, Partner, Womble Bond Dickinson
Todd Inskeep, Founder & Executive Cyber Advisor, Incovate Solutions
Laws define today's "best… | ||
| Searching for the Grail: Zero Trust Cryptographic Keys & Services | Karen Reinhardt | 51m |
Presenter: Karen Reinhardt, Principal Engineer, Cryptographic Services, The Home Depot
In today’s world of remote workers, ever-increasing cyber threats, and… | ||
| Privacy and Compliance for AI – Open Source Tools and Industry Perspective | Beat Buesser | 45m |
Presenter: Beat Buesser, Research Staff Member, IBM Research
This talk will present some state of the art solutions for achieving privacy and compliance for… | ||
| "Connecting the Dots" of NIST 800-207, TIC 3.0, and More Using SAFE | Chad Mitchell | 44m |
Presenter: Chad Mitchell, Security Architect, Cisco
Many companies do not know where to start with Zero Trust (NIST 800-207), TIC 3.0, or other frameworks for… | ||
| Getting The Most Out Of Sysmon | Amanda Berlin | 44m |
Presenter: Amanda Berlin, Lead Incident Detection Engineer, Blumira
The default logging capabilities from Microsoft are only helpful to a certain extent. This… | ||
| The Many Faces of Identity | Charles Kaufman, Radia Perlman | 50m |
Presenters:
Charles Kaufman, Security Architect, Dell EMC
Radia Perlman, Fellow, Dell EMC
There are many challenges to identity. How do things get names? How… | ||
| Protective DNS, DNS Encryption, & Zero-Trust: Tackling NSA Guidance | Steve Staden | 25m |
Presenter: Steve Staden, Senior Director of Product Management, DNSFilter
This session will discuss CISA and the NSA’s PDNS guidance. In 2021, experts made… | ||
| DLP: An Implementation Story | Micah Brown | 49m |
Presenter: Micah Brown, Security Engineer II, Greater Cincinnati ISSA
Data Loss Prevention (DLP) can be very challenging to implement! Its name can impose… | ||
| Linked-Out: Security Principles to Break Software Supply Chain Attacks | Siddhesh Yawalkar | 50m |
Presenter: Siddhesh Yawalkar, Engineering Manager, Intuit
Software supply chain attacks are the current buzzword in security and many in the community only… | ||
| Assessing Vendor AI Claims like a Data Scientist, Even if You Aren't One | Joshua Saxe | 49m |
Presenter: Joshua Saxe, Chief Scientist, Sophos
It can be hard for non-data scientists to assess vendors AI claims. This session will give a straightforward… | ||
| Too Much of Good Thing? The Cost of Overusing Encryption | Karen Reinhardt | 48m |
Presenter: Karen Reinhardt, Principal Engineer, Cryptographic Services, The Home Depot
In response to threats to confidentiality presented by the current… | ||
| A Proven Methodology to Secure the Budget You Need | Jim Mirochnik | 52m |
Presenter: Jim Mirochnik, Senior Partner, CEO, HALOCK Security Labs
Securing the budget you require in a transforming world is more difficult than ever. This… | ||
| New Guidelines for Enhancing Software Supply Chain Security Under EO 14028 | Jon Boyens, Cherilyn Pascoe | 48m |
Presenters:
Jon Boyens, Deputy Chief, National Institute for Standards and Technology (NIST)
Cherilyn Pascoe, Senior Technology Policy Advisor , National… | ||
| Goodbye Credential Leaks: Securing Code Together | Mariam Sulakian | 45m |
Presenter: Mariam Sulakian, Product Manager, Secret Scanning, GitHub
Every day, leaked access credentials expose our products to malicious attacks. Security… | ||
| CHERNOVITE and PIPEDREAM: Understanding the Latest Evolution of ICS Malware | Ben Miller | 33m |
Presenter: Ben Miller, VP of Professional Services and Research & Development, Dragos, Inc.
CHERNOVITE is a threat activity group who built a toolset tailored… | ||
| AI: Legal and Policy Considerations and Landmines to Avoid | Behnam Dayanim | 51m |
Presenter: Behnam Dayanim, Partner, Global Chair of Privacy & Cybersecurity Practice and Chair, Advertising & Gaming Practice, Paul Hastings LLP
Data… | ||
| What the Headlines Don’t Tell You About Exploited Supply Lines | Jon Ehret, David Severski | 42m |
Presenters:
Jon Ehret, Vice President of Strategy and Risk, RiskRecon
David Severski, Senior Risk Data Scientist, Cyentia Institute
Supply chain attacks and… | ||
| Demystifying the Identity Capabilities of AWS for Enterprise Practitioners | Jon Lehtinen | 43m |
Presenter: Jon Lehtinen, Director of Okta on Okta, IDPro Board Member, Okta, IDPro
Solving for identity on AWS is not always inviting for practitioners who… | ||
| Building an Enterprise-scale DevSecOps Infrastructure: Lessons Learned | Gaurav Bhargava, Prateek Mishra | 51m |
Presenters:
Gaurav Bhargava, Director of Product Management, Developer Experience, ADP
Prateek Mishra, Senior Director, Security Architecture (CTO Office)… | ||
| The Non-Social Distanced Reality of the Internet of Things | Rachel Azafrani, Leslie Daigle | 38m |
Presenters:
Rachel Azafrani, Senior Program Manager, Microsoft
Leslie Daigle, CTO and Director of Internet Integrity Program, Global Cyber Alliance
IoT… | ||
| Securing Entry Points and Active Directory to Prevent Ransomware Attacks | Derek Melber | 49m |
Presenter: Derek Melber, Chief Technology and Security Strategist, Tenable
To disrupt Active Directory attacks, security teams must secure the environment… | ||
| The Cyber Physical War – Lessons From the Digital Front Line | Ian Bramson | 59m |
Presenter: Ian Bramson, Global Head of Industrial Cybersecurity, ABS Group
The cyber-physical world is the new battleground for criminals and industrial… | ||
| Thinking Like a 5G Attacker | Shehadi Dayekh, Dr. Abdul Rahman | 47m |
Presenters:
Dr. Shehadi Dayekh, Specialist Leader, Deloitte
Dr. Abdul Rahman, Associate Vice President, Deloitte
5G technology is enabling a vast application… | ||
| Uncovering “BadAlloc” Memory Vulnerabilities in Millions of IoT Devices | Tamir Ariel, Omri Ben-Bassat | 32m |
Presenters:
Tamir Ariel, Security Researcher, Section 52, Microsoft Defender for IoT, Microsoft
Omri Ben-Bassat, Security Researcher, Section 52, Microsoft… | ||
| Protecting Against Evolving Threats to Global Shipping Infrastructure | Alan Dinerman, Suzanne Lemieux, Josie Long | 36m |
Presenters:
Alan Dinerman, Department Manager, Advancing Technologies Department of the National Cybersecurity FFRDC, MITRE
Suzanne Lemieux, Director… | ||
| Where Humane Technology and Secure Technology Meet | Corey Jackson, Lisa LeVasseur | 50m |
Presenters:
Corey Jackson, Founder/Chief Security Strategist, SACRO LLC
Lisa LeVasseur, Executive Director, Internet Safety Labs (was Me2B Alliance)
This… | ||
| How Tamper Resistant Elements (TREs) Can Secure the IoT | Jean-Louis Carrara | 46m |
Presenter: Jean-Louis Carrara, Americas VP, Kigen
Addressing security and privacy vulnerabilities in the IoT is an urgent priority, reflected by growing… | ||
| Drones and Autonomous Vehicles: Privacy & Security vs. Surveillance | Jodi R. Daniels, Justin Daniels | 47m |
Presenters:
Jodi R. Daniels, Founder, CEO & Privacy Consultant, Red Clover Advisors
Justin Daniels, Shareholder, Baker Donelson
In 2007 Facebook and Twitter… | ||
| PCI DSS 4.0: Evolution, Revolution, or an Omen of Extinction? | John Elliott | 48m |
Presenter: John Elliott, Consultant and Author, Withoutfire
PCI DSS is one of the most followed security standards in the world. Is version 4.0 fit for… | ||
| The Missing Supply Chain Link: A Safe Harbor for Risk Information Sharing | Edna Conway, Ari Schwartz | 47m |
Presenters:
Edna Conway, Vice President, Security & Risk Officer, Azure Microsoft
Ari Schwartz, Managing Director for Cybersecurity Services, Venable
Seasoned… | ||
| How to Win with Cyber Insurance and Side-Step the 7 Biggest Pitfalls | Cynthia James | 46m |
Presenter: Cynthia James, Enterprise Security Executive, Microsoft
CISOs are increasingly asked to help obtain cyber insurance. While understanding the risk… | ||
| Cyber Resiliency Through Firmware Protections & Supply Chain Security | Eric Sivertson | 42m |
Presenter: Eric Sivertson, Vice President of Security Business, Lattice Semiconductor
To protect the supply chain, new technologies and capabilities are… | ||
| Risk Management: Hindsight is 2020 | J. Wolfgang Goerlich | 48m |
Presenter: J. Wolfgang Goerlich, Duo Advisory CISO, Cisco Secure
Risk is measured and modeled. Practitioners prioritize security and communicate concerns… | ||
| What (Actually, Specifically) Makes Security Programs EVEN MORE Successful? | Wade Baker, Wendy Nather | 46m |
Presenters:
Wade Baker, Partner and Co-Founder, Cyentia Institute
Wendy Nather, Head of Advisory CISOs, Cisco
In last year’s RSAC keynote, this session… | ||
| Benefit from Cybersecurity Insurance: Taking Advantage of Insurer Panels | Alan Brill | 51m |
Presenter: Alan Brill, Senior Managing Director, Kroll Cyber Risk
Cyber insurance has become an important part of many cybersecurity programs, but many… | ||
| Leveraging Issues Management as a Force Multiplier in Cybersecurity | Ryan Boulais, Jamie Sanderson Reid | 49m |
Presenters:
Ryan Boulais, VP and Chief Information Security Officer , The AES Corporation
Jamie Sanderson Reid, Director, Cyber Governance Risk and Compliance… | ||
| Epic Journey of an Enterprise Cloud Transformation While Building Security | Helen Oakley | 47m |
Presenter: Helen Oakley, Sr. Product Security Architect, SAP
This talk will deliver two different real-life examples of an enterprise cloud transformation… | ||
| The Reason Companies Fall Victim to Ransomware Isn’t What You Think | David Langlands | 44m |
Presenter: David Langlands, VP, Security Offerings, DXC Technology
Leveraging the lessons learned from real world large incident examples, this session will… | ||
| Creating and Managing an Integrated Behavioral Cybersecurity Program | Ira Winkler | 52m |
Presenter: Ira Winkler, Chief Security Architect, Walmart
Behavioral cybersecurity aims to not only improve and measure employee behaviors, but also improve… | ||
| The Zoom Effect: A Framework for Security Program Transformation | Heather Ceylan, Ariel Chavan | 46m |
Presenters:
Heather Ceylan, Head of Security Standards, Compliance, and Customer Assurance, Zoom Video Communications, Inc.
Ariel Chavan, Head of Security… | ||
| Generative Email Attacks and How to Defend Against Them | Prashanth Arun, Ben Murdoch | 42m |
Presenters:
Prashanth Arun, Head of Data Science, Armorblox
Ben Murdoch, ML Engineer, Armorblox
Text generation has advanced so much that our ability to… | ||
| Dissecting The Ransomware Kill Chain: Why Companies Need It | Kurtis Minder, Bryce Webster-Jacobsen | 49m |
Presenters:
Kurtis Minder, CEO, GroupSense
Bryce Webster-Jacobsen, Director of Intelligence Operations, GroupSense
This session will explain the best way to… | ||
| Building a Vulnerability Management Program: How to Eat an Elephant | Megan Benoit | 44m |
Presenter: Megan Benoit, Senior Network Security Engineer, NFM
Building a vulnerability management program often feels like eating an elephant that’s guarded… | ||
| Supplier Risk: Throw Out the Old Playbook! | Heidi Pili, Tim Wainwright | 53m |
Presenters:
Heidi Pili, Director, Information Risk and Compliance, CDW
Tim Wainwright, Chief Executive Officer, Security Risk Advisors
Many organizations… | ||
| Representation Matters | Chloe Messdaghi | 49m |
Presenter: Chloe Messdaghi, Chief Impact Officer , Cybrary
Less than 20% of marginalized persons hold leadership positions in tech and security. It's time we… | ||
| Evaluating Indicators as Composite Objects | Joe Slowik | 49m |
Presenter: Joe Slowik, Senior Manager, Threat Intelligence & Detections, Gigamon
Indicators are increasingly derided within Cyber Threat Intelligence (CTI) as… | ||
| The 2 Sides of Social Media: Organizational Risk and Cyber Intelligence | Lester Godsey | 55m |
Presenter: Lester Godsey, Chief Information Security Officer, Maricopa County
Organizations cannot afford to ignore the impact of social media, both from a… | ||
| Malicious Uses of API Frameworks and Scanning Tools | Jason Kent | 47m |
Presenter: Jason Kent, Hacker In Residence, Cequence Security
API spec frameworks like OpenAPI/Swagger provide organizations with a centralized location from… | ||
| Breaking Prometheus: When Ransomware Crypto Goes Wrong | Aaron Gdanski, Andy klrgrz Piazza | 37m |
Presenters:
Aaron Gdanski, Malware Reverse Engineering Analyst, IBM Security
Andy Piazza, Global Head of Threat Intelligence, IBM
When ransomware hits, IR… | ||
| A Data Faustian Bargain?: An Analysis of Government-Mandated Data Access | Andrea Little Limbago | 54m |
Presenter: Andrea Little Limbago, Ph.D., Senior Vice President, Research & Analysis, Interos
In exchange for market access, organizations are increasingly… | ||
| Security's Holy Grail: Predicting Attacks Before They Happen | Wade Baker, Robert Fly | 51m |
Presenters:
Wade Baker, Partner and Co-Founder, Cyentia Institute
Robert Fly, CEO & Co-Founder, Elevate Security
By leveraging existing data on employees’… | ||
| Defeating Windows Anti-Exploit & Security Features with WHQL Kernel Drivers | Arush Agarampur | 43m |
Presenter: Arush Agarampur, Student, Rutgers-New Brunswick
This session will look at critical design flaws of Microsoft Windows Hardware Quality Signed (WHQL)… | ||
| Token Theft: Hip Kids Are Doing It. Now What Are We Going to Do About It? | Anna Barhudarian, Alexander Weinert | 49m |
Presenters:
Anna Barhudarian, Principal PM Manager , Microsoft
Alexander Weinert, Director of Identity Security, Microsoft Corporation
Token theft doesn’t… | ||
| Hacking and Protecting Distributed Energy Infrastructure | Aaron Bayles, Gib Sorebom | 45m |
Presenters:
Aaron Bayles, Senior Manager, OT Security, Accenture
Gib Sorebom, Security Associate Director, Accenture
Climate crises demand looking to zero… | ||
| It’s Not About Awareness. It’s About Managing Human Risk. | Alex East | 34m |
Presenter: Alex East, Senior Sales Engineer, Elevate Security
Instead of applying more training or reacting to incidents, human risk management seeks to… | ||
| Lessons from Aviation: Building a Just Culture in Cybersecurity | John Elliott | 46m |
Presenter: John Elliott, Consultant and Author, Withoutfire
Airlines don’t “do safety”, they are safe. This wasn’t always the case. By accepting that humans… | ||
| Pain in the Apps — Three Attack Scenarios Attackers Are Using to PWN SaaS | Matt Radolec | 47m |
Presenter: Matt Radolec, Senior Director of Incident Response and Cloud Operations, Varonis
Due to the increase in cloud-based attacks, we picked three… | ||
| All Your Macs Are Belong To Us ... Again! | Patrick Wardle | 51m |
Presenter: Patrick Wardle, Founder, Objective-See
The (sad) reality is most Mac infections occur with inadvertent assistance from the user. Apple, realizing… | ||
| Botnets Don't Die: Resurrecting the Dead to Feed on the Living | Aamir Lakhani, Joseph Muniz | 48m |
Presenters:
Aamir Lakhani, Senior Security Stratagist, Fortinet
Joseph Muniz, Director, Security Solutions, Microsoft
This talk will show that with a bit of… | ||
| Bypassing Windows Hello for Business and Pleasure | Omer Tsarfati | 38m |
Presenter: Omer Tsarfati, Security Researcher, CyberArk
Windows Hello is the most popular passwordless solution that includes authentication by either PIN… | ||
| Zero to Full Domain Administrator: Real-World Ransomware Incident | Joseph Carson | 52m |
Presenter: Joseph Carson, Chief Security Scientist & Advisory CISO, Delinea
Following in the footsteps of an attacker and uncovering their digital footprints… | ||
| ESPecter: Showing the Future of UEFI Threats | Jean-Ian Boutin, Martin Smolar | 45m |
Presenters:
Jean-Ian Boutin, Director of Threat Research, ESET
Martin Smolar, Malware Researcher, ESET
In recent years, it's become clear that UEFI threats… | ||
| Reaching Gen Z: Cybersecurity Outreach with Viral TikTok & YouTube Content | Kody Kinzie | 44m |
Presenter: Kody Kinzie, Field Security Researcher, Varonis
Engaging the brightest minds of Gen Z is not easy, but viral content on social media like YouTube… | ||
| Machine Learning to Ultimately Defeat Advanced Ransomware Threats | Vladimir Strogov, Sergey Ulasen | 53m |
Presenters:
Vladimir Strogov, Director of Development, Kernel Team, Acronis
Sergey Ulasen, Director of AI Development, Acronis
This session will offer deep… | ||
| The Jetsons Are Here – Now What Are the Security Implications | Theresia Gouw, Diana Kelley, Patricia Titus, Lisa Lee | 49m |
Moderator:
Lisa Lee, Chief Security Advisor/Lead for Vertical Industries and Engagement, Microsoft
Panelists:
Theresia Gouw, Co-Founder, Acrew
Diana Kelley… | ||
| Transforming Security Through Design | J. Wolfgang Goerlich | 47m |
Presenter: J. Wolfgang Goerlich, Duo Advisory CISO, Cisco Secure
Security has a design problem. Our security programs are unusable, causing people to opt-out… | ||
| Users Are Not Stupid: Eight Cybersecurity Pitfalls Overturned | Julie M. Haney | 42m |
Presenter: Julie Haney, Computer Scientist, National Institute of Standards and Technology
Whether implementing security policy or developing products, it is… | ||
| Knowing The Robocallers: Illegal Call Centers And Efforts To Stop Them | Josh Bercu, Gary Warner | 51m |
Presenters:
Josh Bercu, Executive Director / Vice President, Policy and Advocacy, Industry Traceback Group / USTelecom – The Broadband Association
Gary Warner… | ||
| Can Innovation and Regulation Coexist? | Julie Brill, Natasha Crampton | 50m |
Presenters:
Julie Brill, Chief Privacy Officer and Corporate Vice President, Global Privacy & Regulatory Affairs, Microsoft
Natasha Crampton, Chief Responsible… | ||
| The State of Application Protection | Sander Vinberg | 50m |
Presenter: Sander Vinberg, Threat Research Evangelist, F5
Join for a presentation of the 5th annual Application Protection report from the F5 Labs team. The… | ||
| Europe Gets its Identity Back | Kim Nguyen, Andreas Rohr, Christian Schlaeger, Norbert Pohlmann | 50m |
Moderator:
Dr. Norbert Pohlmann, Director, IT Security Association Germany (TeleTrusT)
Panelists:
Dr. Kim Nguyen, CEO/Managing Director, D-Trust GmbH
Dr… | ||
| Protect Valuable Data as Employee Turnover Rages | Joe Payne | 48m |
Presenter: Joe Payne, CEO, Code42
Employee turnover is the biggest threat to any organization's IP. Nearly 60% of employees move to a new company within… | ||
| A Whole Lotta BS (Behavioral Science) About Cybersecurity | Oz Alashe, Deanna Caputo, Lisa Plaggemier | 49m |
Presenters:
Oz Alashe, CEO, Cybsafe
Deanna Caputo, Principal Social Psychologist, The MITRE Corporation
Lisa Plaggemier, Executive Director, National… | ||
| Anticipate and Defend Against Advanced Adversaries Targeting SaaS and IaaS | Brian Vecci | 45m |
Presenter: Brian Vecci, Field CTO, Varonis
Misconfigured API’s, over-exposed sensitive data, and shadow admins are just some of the SaaS security challenges… | ||
| Evolving Your Defense: Making Heads or Tails of Threat Actor Trends | Nick Biasini, Pierre Cadieux | 39m |
Presenters:
Nick Biasini, Head of Outreach, Talos
Pierre Cadieux, Senior Manager - Incident Response, Cisco Talos Incident Response
State-sponsored attacks… | ||
| Measuring the ROI of Network Security Automation | John Moran | 34m |
Presenter: John Moran, Technical Director, Tufin
As enterprise networks become more complex and fragmented, the attack surface expands, and network management… | ||
| Practical Learnings for Threat Hunting and Improving Your Security Posture | Simon Dyson, Jessica Payne | 48m |
Presenters:
Simon Dyson, Cyber Security Operations Centre - Lead, NHS Digital
Jessica Payne, Security Person, Microsoft
Understanding the threat landscape is… | ||
| The Rise of API Security: It’s 10pm—Do You Know Where Your APIs are? | Mitch Ashley, Daniel Kirsch | 47m |
Presenters:
Mitch Ashley, Principal and CTO, Techstrong Research
Daniel Kirsch, Managing Director & Principal Analyst, Techstrong Research
APIs are the… | ||
| Targeted, Consolidated & Coordinated Services For Better Risk Reduction | Robert Fink | 33m |
Presenter: Robert Fink, Principal Consultant, vCISO, BlackBerry
Work from home requirements, coupled with the “Great Resignation” of security workers… | ||
| Can A Real Security Platform Please Stand Up? | Petko Stoyanov | 19m |
Presenter: Petko Stoyanov, Global CTO, Forcepoint
The security industry is at a breaking point. The endless conga line of technologies it’s been using is just… | ||
| State of Cybersecurity : From the Great Resignation to Global Threats | Rob Clyde, Jenai Marinkovic | 51m |
Presenters:
Rob Clyde, Board Director, ISACA
Jenai Marinkovic, Executive Director, GRC for Intelligent Ecosystems (GRCIE)
Based on insights from ISACA’s State… | ||
| IOT: Fix the Bugs That Leave Customers Inconvenienced, Stranded, or Dead | Scott Register | 43m |
Presenter: Scott Register, VP, Keysight
IOT is everywhere. When it breaks, there’s trouble, and it’s extremely brittle. The systems-on-chip (SOC) which enable… | ||
| What Will it Take to Stop Ransomware? | Mark Bowling | 52m |
Presenter: Mark Bowling, Vice President of Security Response Services, ExtraHop Networks
Ransomware has become an advanced extortionate threat. While… | ||
| Can the Workforce Shortage Be Fixed? | Clar Rosso | 52m |
Presenter: Clar Rosso, Chief Executive Officer , (ISC)2
The cybersecurity profession must grow by 65% —or 2.72 million people globally—to keep pace with… | ||
| Voice Authentication: Robinhood and Pindrop’s Innovative Methodology | Nicole Culver, Christina Kapadia | 35m |
Presenters:
Nicole Culver, Director, Product Marketing, Pindrop
Christina Kapadia, Behavioral Engineer, Robinhood
Robinhood and Pindrop will demonstrate an… | ||
| Securing the Supply Chain: What Does Compliance Look Like? | Justin Henkel, Adam Topkis | 45m |
Presenters:
Justin Henkel, Head of CISO Center of Excellence, OneTrust
Adam Topkis, Enterprise and Operational Risk Program Leader, PayPal
As companies… | ||
| Digital Trust & Cybersecurity 2025: A Call for Openness & Interoperability | David Mahdi | 52m |
Presenter: David Mahdi, CSO & CISO Advisor, Sectigo
With the volume of digital identities growing exponentially, businesses need a modern approach to secure… | ||
| Extend EDR Visibility by Logging Everything: Demo with Free Integrations | Adam Hogan | 46m |
Presenter: Adam Hogan, SE Director for Humio, CrowdStrike, CrowdStrike
Endpoint Detection and Response technology have changed how security teams investigate… | ||
| Transform and Optimize Your Infosec Team with Managed Security Solutions | Adam Burns | 29m |
Presenter: Adam Burns, Director of Cybersecurity Services, Digital Guardian by HelpSystems
Security stacks have expanded over the years, rare is it that… | ||
| AI, ML and the Gig Economy — the Only Path Forward for the SOC | Gunter Ollmann | 46m |
Presenter: Gunter Ollmann, Chief Security Officer, Devo Technology Inc.
An exploding attack surface, burnout, and a critical talent shortage have pushed the… | ||
| Modernizing Cybersecurity Through a Single Solution Approach | Craig Irwin, Arif Khan | 28m |
Presenters:
Craig Irwin, Vice President, Global Sales, PKWARE
Arif Khan, VP of Solution Engineering, PKWARE
In 2021, ransomware attacks increased in… | ||
| College Day Sponsor Panel | Cecilia Marinier, Rob Duhart Jr., Ingrid Jones, Elena Kvochko, Neal McCarthy, Robin Shostack | 52m |
Moderator:
Cecilia Marinier, Program Director, RSA Conference
Panelists:
Rob Duhart Jr., Deputy CISO, CISO eCommerce, Walmart
Ingrid Jones, VP, GRC… | ||
| Victims & Vectors: Mitigating Legal Risks of Supply Chain Attacks | Susan Cassidy, Christopher Hale, Martha Neustadt Storie, James Sfekas | 50m |
Moderator:
Susan Cassidy, Partner, Covington & Burling LLP
Panelists:
Christopher Hale, Associate General Counsel, Cybersecurity, Raytheon Technologies
Martha… | ||
| Hacking Back – To Be or Not to Be? | Christopher Pierson, James Shreve | 52m |
Presenters:
Dr. Christopher Pierson, Founder and CEO, BlackCloak
James Shreve, Partner and Cybersecurity Chair, Thompson Coburn LLP
Are there options to hack… | ||
| Security Industry Call-to-Action: We Need a Cloud Vulnerability Database | Pete Chronis, Ami Luttwak, John Yeoh | 54m |
Presenters:
Pete Chronis, SVP,CISO, ViacomCBS
Ami Luttwak, Chief Technology Officer & Co-Founder, Wiz
John Yeoh, Global Vice President of Research, Cloud… | ||
| Data Protection and Privacy Development Around the World | Carla Utter, Ann Marie Mortimer, Dominique Shelton Leipzig | 52m |
Moderator:
Carla Utter, VP, Legal-Privacy Counsel, Viant Technology
Panelists:
Ann Marie Mortimer, Managing Partner and Head of Commercial Litigation… | ||
| The State(s) of Cyber Incentives: Creative Laws Driving Better Security | Kirk Herath, Tony Sager | 51m |
Moderator:
Brian Ray, Professor of Law and Director, Center for Cybersecurity and Privacy Protection, Cleveland Marshall School of Law, Cleveland State… | ||
| The Defense Industrial Base, CMMC, the False Claims Act, and Insider Threat | Joy Belinda Beland, Ryan Berry, Shawnee Delaney | 51m |
Presenters:
Joy Belinda Beland, Senior Cybersecurity Consultant / Instructor, Edwards Performance Solutions
Ryan Berry, Partner / Co-Founder, Ward &… | ||
| Stop Being Sitting Cyber Ducks! Adversary Engagement: the New Cyber-Defense | Dan Brett, Patrick Gould, Mary Yang | 50m |
Moderator:
Stanley Barr, Senior Principal Deception Researcher, MITRE
Panelists:
Dan Brett, Founder and CSO, CounterCraft
Patrick Gould, Deputy Directory… | ||
| Importance of Cyber Diligence in Third Party Risk Management | Gerald Beuchelt, Shannon Lietz, Dave Ruedger | 51m |
Moderator:
Landon Winkelvoss, VP of Content and Co-Founder, Nisos
Panelists:
Gerald Beuchelt, CISO, Spinklr
Shannon Lietz, VP of Vulnerability Labs… | ||
| Are You Sure You’re Doing That Right? A Mock Hearing | Laurel Beeler, Robin Crabtree, Hoyt L. Kesterson II, Julie Lewis, Steven Teppler | 50m |
Presenters:
Hon. Laurel Beeler, United States Magistrate Judge, United States District Court for the Northern District of California
Cmdr. Robin Crabtree… | ||
| Caterpillars to Butterflies: Transforming the Privacy Workforce | Katharina Koerner, Rebecca Richards | 50m |
Moderator:
Dylan Gilbert, Privacy Policy Advisor, National Institute of Standards and Technology
Panelists:
Katharina Koerner, Senior Fellow for Privacy… | ||
| Cyber Insurance is Changing Cybersecurity: How We Got Here and What’s Next? | Kirsten Bay, Kyle Bryant, Nick Schneider | 52m |
Moderator:
Theresa Le, Head of Claims and Risk Engineering , Cowbell Cyber
Panelists:
Kirsten Bay, CEO, Cysurance
Kyle Bryant, International Chief… | ||
| Using Critical Threat Intelligence Strategically | Scott Hellman, Natalie Pittore, Erin Shepley | 51m |
Moderator:
Patrick Flynn, Head, Advanced Programs Group (APG), Trellix
Panelists:
Scott Hellman, Supervisory Senior Resident Agent, FBI
Natalie Pittore, Chief… | ||
| Designing a Data Ethics and Privacy Program for AI/ML | Ilana Golbin, Alexandra Ross | 52m |
Moderator:
Bret Cohen, Partner, Privacy and Cybersecurity Practice, Hogan Lovells
Panelists:
Ilana Golbin, Director, Emerging Technolgies & AI, PwC
Alexandra… | ||
| Trust, but Verify: Protecting Your Business from Supply Chain Attacks | Ron Bushar, Elvis Chan, Bryan Vorndran | 49m |
Moderator:
Arve Kjoelen, Vice President and Chief Information Security Officer, McAfee
Panelists:
Ron Bushar, SVP & CTO for Government Solutions… | ||
| Can You Hear Me Now? Security Implications of Voice as the New Keyboard | Rebecca Kleinberger, Lisa Lee | 51m |
Moderator:
Jeremy Grant, Managing Director, Technology Business Strategy, Venable LLP
Panelists:
Dr. Rebecca Kleinberger, Voice Researcher and Innovation… | ||
| Time is Running Out: Post Quantum Cryptography Call to Action | Judith Furlong, Souheil Moghnie, Dr. Dustin Moody | 49m |
Moderator:
Janet Jones, Principal Security Program Manager, Microsoft
Panelists:
Judith Furlong, Distinguished Engineer, Dell EMC
Souheil Moghnie, Technical… | ||
| Shift-left! Scanning for Security Compliance from Day Zero | Rohit Joshi, Joseph McCrea | 46m |
Presenters:
Rohit Joshi, SecDevOps Engineer, SAP
Joseph McCrea, DevSecOps Engineer, SAP
Migrating to public cloud introduces new attack surfaces commonly the… | ||
| The Practicalities of Pen Testing at Scale | Caroline Wong | 50m |
Presenter: Caroline Wong, Chief Strategy Officer, Cobalt
Pentesting is critical for security. It brings awareness to companies testing their people, processes… | ||
| DOJ’s Role in Countering Nation State Cyber Threats | Suzanne Kelly, Matthew Olsen | 44m |
Presenters:
Suzanne Kelly, CEO & Publisher and State Secrets Podcast Host, The Cipher Brief
Matthew Olsen, Assistant Attorney General for National Security… | ||
| It's Getting Real & Hitting the Fan! Real World Cloud Attacks | Ofer Maor | 48m |
Presenter: Ofer Maor, CTO, Mitiga
Cloud attacks are getting real and hitting the fan! In the past year we’ve led forensics investigations for some very… | ||
| Elite Security Champions Build Strong Security Culture in a DevSecOps World | Christopher Romeo | 47m |
Presenter: Christopher Romeo, CEO, Security Journey
Everyone has a Security Champion program, but how effective is it? Explore the qualities of an elite… | ||
| Understanding the Role of Cybersecurity Expert Witnesses | Alan Brill, Ronald Raether | 52m |
Presenters:
Alan Brill, Senior Managing Director, Kroll Cyber Risk
Ronald Raether, Partner, Troutman Pepper
We live in a world where litigation has gone from… | ||
| Tooling up: Getting SBOMs to Scale | Allan Friedman, Kate Stewart | 52m |
Presenters:
Allan Friedman, Senior Advisor and Strategist, CISA
Kate Stewart, VP, Dependable Embedded Systems, Linux Foundation
SBOMs serve a variety of… | ||
| Can AppSec Be Fixed? | Brook S.E. Schoenfield | 55m |
Presenter: Brook S.E. Schoenfield, Principal Software Security Strategist, True Positives, LLC
Against the backdrop of an increasing cadence of compromise… | ||
| CloudTrail Logging Internals: Investigating AWS Security Incidents | Omer Gull | 31m |
Presenter: Omer Gull, Innovation, Hunters
Join this session to learn about an investigation methodology for AWS control plane security incidents and a… | ||
| Hacker Law After the Supreme Court Ruling: Insider Threats, Research & CFAA | Leonard Bailey, Harley Geiger | 50m |
Presenters:
Leonard Bailey, Head of Cybersecurity Unit/Special Counsel for National Security, U.S. Department of Justice
Harley Geiger, Senior Director of… | ||
| Face/Off: The Battle to Authenticate with Biometrics | Mike Serra, Stephen Wu | 47m |
Presenters:
Mike Serra, Corporate Counsel, Cisco Systems Inc.
Stephen Wu, Shareholder, Silicon Valley Law Group
Face/Off is a 1997 movie about cybersecurity… | ||
| Maximizing Our Cyber Non-Profits | Tony Sager, Kiersten Todt | 50m |
Presenters:
Tony Sager, Senior VP and Chief Evangelist, Center for Internet Security
Kiersten Todt, Chief of Staff, Cybersecurity and Infrastructure Security… | ||
| The Road to Cloud Is Paved with On-Prem Integrations | Nestori Syynimaa | 43m |
Presenter: Dr. Nestori Syynimaa, Senior Principal Security Researcher, Secureworks
The modern public cloud service providers’ production environments can be… | ||
| What Have the Courts Done Now? Explaining the Impact of Recent Cyber Cases | Richard Aldrich, Julie Bowen | 49m |
Presenters:
Richard Aldrich, Cybersecurity Policy and Compliance Analyst, Booz, Allen, Hamilton/DOD OSD
Julie Bowen, SVP, Operations & Outreach, Chief Legal… | ||
| Continuous Security - Integrating Pipeline Security | Vandana Verma Sehgal | 34m |
Presenter: Vandana Verma Sehgal, Security Relations Leader, Snyk
In a world of continuous delivery and cloud native, boundaries between what an application… | ||
| State of the Hacks: NSA’s Perspectives | Robert Joyce | 49m |
Presenter: Robert Joyce, Cybersecurity Director, NSA
We're at an inflection point, and as the threats evolve, so must the community. Hardening and defending… | ||
| Sigstore, the Open Source Software Signing Service | Luke Hinds | 37m |
Presenter: Luke Hinds, Security Engineering Lead, Red Hat
Sigstore is a project with the goal of providing a public good, non-profit service to help secure… | ||
| A Practical Framework to Hack the Cyber Workforce Talent Gap | Teresa Thomas, Kiersten Todt | 53m |
Presenters:
Teresa Thomas, Lead, Neurodiverse Talent Enablement, The MITRE Corporation
Kiersten Todt, Chief of Staff, Cybersecurity and Infrastructure Security… | ||
| Catch Me If You Can: Protecting Mobile Subscriber Privacy in 5G | Jean-Louis Carrara | 41m |
Presenter: Jean-Louis Carrara, Americas VP, Kigen
Mobile networks carry a virtual trace of user's lives as they unfold, constantly collecting and sending… | ||
| Code Blue! Medical Devices Under Attack | Philippe Laulheret, Douglas McKee | 51m |
Presenters:
Philippe Laulheret, Senior Security Researcher, Trellix
Douglas McKee, Principal Engineer & Director of Vulnerability, Trellix
Hospitals are under… | ||
| My Fuzzy Driver | Mark Cherp, Eran Shimony | 54m |
Presenters:
Mark Cherp, Security Researcher, CyberArk
Eran Shimony, Senior Security Researcher, CyberArk
Drivers are everywhere: in Linux, Android, Windows… | ||
| Adaptive Assurance: Implementing an Automated Control Testing Program | David Carter, Christie Gross | 50m |
Presenters:
David Carter, Senior Manager, Cyber Risk Assurance, Delta Dental of California
Christie Gross, Expert Cyber Risk Management Engineer, Delta Dental… | ||
| OT Reverse Engineering - What Can Be Automated? | Ulrich Lang | 51m |
Presenter: Dr. Ulrich Lang, CEO, ObjectSecurity LLC
Reverse engineering is generally a manual, expensive, non-scalable process done by reverse engineering… | ||
| Digital Transformation Requires a Security Transformation | James Christiansen, Bobby Singh | 50m |
Presenters:
James Christiansen, VP CSO, Cloud Security Transformation, Netskope
Bobby Singh, CISO / CTO, Toronto Stock Exchange
Many security leaders struggle… | ||
| The SaaS RootKit: A New Attack Vector for Hidden Forwarding Rules in O365 | Maor Bin | 44m |
Presenter: Maor Bin, CEO, Adaptive Shield
Researchers detected a new SaaS vulnerability within Microsoft’s OAuth application registration. Through this… | ||
| Addressing Supply Chain Security Risks: MITRE's System of Trust™ | Robert Martin | 42m |
Presenter: Robert Martin, Sr. Software and Supply Chain Assurance Principal Engineer, MITRE
This session will discuss System of Trust (SoT), a supply chain… | ||
| Deconstructive Take-Over of Mitsubishi Electric Ecosystems | Mars Cheng | 46m |
Presenter: Mars Cheng, Manager, PSIRT and Threat Research Team, TXOne Networks Inc.
This talk will focus on Mitsubishi ICS ecosystem’s communication protocol… | ||
| Automated Threats: The Rise of Bots and What to Do About It | Matthew Gracey-McMinn | 51m |
Presenter: Matthew Gracey-McMinn, Head of Threat Research, Netacea
The average organization lost 3.6% of revenue to bot-based business logic attacks in 2020… | ||
| Service Mess to Service Mesh | Rob Richardson | 44m |
Presenter: Rob Richardson, Developer Advocate, Jetpack
In the quest to secure all the things, do practitioners jump in too quickly? This session will use… | ||
| The Steps to Successfully Baking Privacy into an IAM Implementation | Jamie Danker, Christine Owen | 41m |
Presenters:
Jamie Danker, Senior Director, Cybersecurity Services, Venable LLP
Christine Owen, Director, Guidehouse LLP
With ever-increasing international… | ||
| Best Teacher is Last Mistake: Improving and Applying Incident Response Plan | Mike Jankowski-Lorek | 44m |
Presenter: Mike Jankowski-Lorek, Director of Consulting & Cybersecurity Expert, CQURE Inc.
Attackers need less than 24 hours after first client computer… | ||
| Security Automation for DevOps at the Scale of Dell: A Real-Life Case Study | Sam Sehgal | 45m |
Presenter: Sam Sehgal, Technical Staff, Product Security Engineering, Dell Technologies
The art of implementing DevSecOps at scale in an organization as large… | ||
| Defeat Your 'Curse of Knowledge' & Make Security Messaging More Impactful | Kerry Tomlinson | 49m |
Presenter: Kerry Tomlinson, Editor in Chief, Ampere News
Cybersecurity messaging is more urgent than ever before. People need to listen, but are they? The… | ||
| The Privacy and Blockchain Paradox | Jim Amsler, Greg Schu | 49m |
Presenters:
Jim Amsler, Director - Governance, Risk & Compliance, BDO USA
Greg Schu, Partner, Cybersecurity - National PCI Compliance Lead, BDO Digital
If an… | ||
| Cyber Range on a Budget | Rick Trilling | 38m |
Presenter: Rick Trilling, Professor, Wentworth Institute of Technology
Cyber Ranges (CRs) prepare teams for incidents, but they are expensive to build. Shared… | ||
| What Executives Need to Know About CI/CD Pipelines and Supply Chain Security | Dan Cornell | 50m |
Presenter: Dan Cornell, Vice President Product Strategy, Coalfire
Developer pipelines expose complicated and often uncharted attack surfaces. This talk will… | ||
| CI/CD: Top 10 Security Risks | Omer Gil, Daniel Krivelevich | 32m |
Presenters:
Omer Gil, Head of Research, Cider Security
Daniel Krivelevich, CTO and Co-Founder, Cider Security
Rooted in research done by cross-referencing and… | ||
| The Transformation of Post Pandemic Mental Health | Chloe Messdaghi | 50m |
Presenter: Chloe Messdaghi, Chief Impact Officer, Cybrary
Few people are not the same they were in 2019. Life has changed due to the pandemic, and for some… | ||
| Stop Chasing Insider Threats, Start Managing Insider Risk | Randy Trzeciak | 48m |
Presenter: Randy Trzeciak, Technical Director, Carnegie Mellon Software Engineering Institute
This session will cover best practices for maturing an… | ||
| New Way of Tackling Privacy Assessments | Lisa McKee | 49m |
Presenter: Dr. Lisa McKee, Director of Governance, Risk, Compliance, and Privacy, Hudl
Recent changes have increased the need for and awareness of privacy… | ||
| Strong Story to Tell: Top 10 Mistakes by Administrators About Remote Work | Paula Januszkiewicz | 52m |
Presenter: Paula Januszkiewicz, CEO, Cybersecurity Expert, CQURE Inc.
The sudden shift to remote working has left businesses at a far higher risk of… | ||
| Cloud Security: How to Defend Healthcare Data in the Cloud | Sai Gunaranjan, Kyler Middleton | 50m |
Presenters:
Sai Gunaranjan, Principal Architect, Veradigm
Kyler Middleton, Cloud IAM Advocate, IAM Pulse
Adopting a cloud platform can be tricky, especially… | ||
| Site Reliability Engineering and the Security Team They Love | Aaron Rinehart, James Wickett | 49m |
Presenters:
Aaron Rinehart, CTO Co-Founder, Verica
James Wickett, Head of Research, Verica
Site Reliability Engineering (SRE) is here to stay, and security… | ||
| Token Theft Prevention (dPoP) – Nth Time is the Charm. | Pam Dingle | 51m |
Presenter: Pam Dingle, Director of Identity Standards, Microsoft
Enterprises are securing identities with MFA/FIDO2. But is that enough? Adversaries are… | ||
| Is a Secure Software Supply Chain Even Possible, Let Alone Feasible? | Steven Lipner, Tony Sager | 51m |
Presenters:
Steven Lipner, Executive Director, SAFECode
Tony Sager, Senior VP and Chief Evangelist, Center for Internet Security
Many of the concepts… | ||
| Product Security at Scale: Lessons from Comcast | Sandra Cavazos | 50m |
Presenter: Sandra Cavazos, Vice President, Product Security and Privacy, Comcast
Product security programs are intense; running a successful program at a… | ||
| American Labyrinth: Demystifying Adversary Use of Domestic Infrastructure | Adam Hickey, Amy Hogan-Burney, Tonya Ugoret, David Ring | 50m |
Moderator:
David Ring, Section Chief, FBI
Panelists:
Adam Hickey, Deputy Assistant Attorney General, National Security Division, U.S. Department of… | ||
| Put A Label on It! Protecting IoT by Empowering Consumers | Katerina Megas, Ravi Sharma, Henry Tan, Andreas Kuehn | 49m |
Moderator:
Andreas Kuehn, Senior Fellow, Observer Research Foundation America
Panelists:
Katerina Megas, Cybersecurity for IoT Program Manager, National… | ||
| What is Zero Trust? What ISN’T Zero Trust? Let’s Make Sense of This! | Amanda Berlin, Jerry Chapman, Chase Cunningham, Evan Gilman | 50m |
Moderator:
Jason Garbis, Chief Product Officer, Appgate
Panelists:
Amanda Berlin, Lead Incident Detection Engineer, Blumira
Jerry Chapman, Engineering Fellow… | ||
| Progress in the Year of Ransomware: Analysis with the Ransomware Task Force | Michael Daniel, Michael Phillips, Megan Stifel | 51m |
Moderator:
Phil Reiner, Chief Executive Officer, Institute for Security and Technology and Ransomware Task Force
Panelists:
Michael Daniel, President and… | ||
| Better Bug Bounties? Lessons on Disclosure of Security Vulns v. AI Harms | Joshua Kenway | 38m |
Presenter: Joshua Kenway, Policy Analyst, PayPal
This session will cover findings of recent, design-oriented research from the Algorithmic Justice League on… | ||
| How Fraudsters Scale Payment System Attacks | Mike Lemberger | 41m |
Presenter: Mike Lemberger, SVP of North America Risk, Visa
Threat actors have been taking advantage of vulnerabilities in the payments threat landscape. With… | ||
| BEC & Ransomware: Two Sides of the Same Cybercrime Coin | Crane Hassold | 47m |
Presenter: Crane Hassold, Director of Threat Intelligence, Abnormal Security
BEC and ransomware are the two biggest threats today. While it may seem that… | ||
| The Time is Now: Criticality of Time Synchronization & Information Security | Ben Rothke | 50m |
Presenter: Ben Rothke, Senior Information Security Manager, Tapad
Organizations rely on the server clocks for time stamping. But don’t assume the time is… | ||
| The Challenges of Building Safe End-to-End Encrypted Services for Business | Elie Bursztein, Nicolas Lidzborski | 44m |
Presenters:
Elie Bursztein, Cybersecurity Research Director, Google
Nicolas Lidzborski, Security & Encryption Technical Lead / Gmail & Google Workspace… | ||
| Connecting the Dots: Identifying and Mitigating Synthetic Identity Fraud | Michael Timoney | 50m |
Presenter: Michael Timoney, VP Secure Payments, Federal Reserve Bank of Boston
Synthetic identity fraud is a growing problem, with the industry struggling to… | ||
| Why Does Cyber Tech so Often Fail? Addressing the Cyber “Market for Lemons” | Grace Cassy, Ciaran Martin, Greg Rattray | 53m |
Moderator:
Joe Hubback, MD Global Academy and EMEA Region, Istari Global
Panelists:
Grace Cassy, Co-Founder, CyLon
Ciaran Martin, Professor of Government… | ||
| Open Source: Enterprise Adoption and Overcoming Barriers | Ted Ipsen, Srinath Kuruvadi, Peter Manev | 51m |
Moderator:
Kelley Misata, CEO and President, Sightline Security and OISF
Panelists:
Ted Ipsen, President & COO, Positroniq, LLC
Srinath Kuruvadi, Head of… | ||
| What We Learned Implementing Zero Trust Security at Microsoft | Yulia Evgrafova, Carmichael Patton | 52m |
Presenters:
Yulia Evgrafova, Senior Service Engineer, Microsoft
Carmichael Patton, Senior Security Architect, Microsoft
Microsoft has been on a three year… | ||
| All Hands on Deck: A Whole-of-Society Approach for Cybersecurity | Tom Garrison, Aanchal Gupta, Diane Janosek, Abhilasha Bhargav-Spantzel | 52m |
Moderator:
Abhilasha Bhargav-Spantzel, Partner Security Architect, Microsoft
Panelists:
Tom Garrison, VP, Cyber Security and Assurance, Intel
Aanchal Gupta… | ||
| ISACs’ Critical Role in Increasing Regulatory Environment for Cybersecurity | Denise Anderson, Peder Jungck, Jeffrey Troy, Suzie Squier | 48m |
Moderator:
Suzie Squier, President, Retail & Hospitality ISAC
Panelists:
Denise Anderson, President and CEO, H-ISAC
Peder Jungck, President, IT-ISAC
Jeffrey… | ||
| Securing Medical Devices—When Cyber Really Is a Life and Death Issue | Marty Edwards, Ankit Patel, Errol Weiss, Jenny Menna | 51m |
Moderator:
Jenny Menna, Vice President, Humana
Panelists:
Marty Edwards, VP Operational Technology, Tenable
Ankit Patel, Business Information Security Office… | ||
| EXPOSURE: The 3rd Annual RSAC SOC Report | Jessica Bair Oppenheimer, Steve Fink, Dave Glover | 51m |
Presenters:
Jessica Bair Oppenheimer, Director, Technical Alliances, Cisco
Steve Fink, Regional Vice President, NetWitness
Dave Glover, Principal Sales… | ||
| Proofs Without Evidence: Assurance on the Blockchain and Other Applications | Dave Archer, Riad S. Wahby, Dan Boneh | 53m |
Moderator:
Dan Boneh, Professor, Stanford University
Panelists:
Dave Archer, Principal Scientist, Galois Inc.
Riad Wahby, Faculty, Carnegie Mellon… | ||
| Combatting Cybercrime & Fraud with Threat Intelligence | Matthew Swenson, Mary Yang | 42m |
Presenters:
Matthew Swenson, Division Chief - Cyber Division, Homeland Security Investigations
Mary Yang, Chief Marketing Officer, LookingGlass Cyber… | ||
| Power of DNS as an Added Defense Against Modern Attacks | Artsiom Holub | 52m |
Presenter: Artsiom Holub, Senior Research Analyst, Cisco Umbrella (OpenDNS)
Cybercriminals became highly sophisticated in how they attack networks. This… | ||
| Leveraging Crowd-Forecasting to Improve Our Understanding of Cybersecurity | Mary Brooks, Paul Rosenzweig | 30m |
Presenters:
Mary Brooks, Fellow, R Street Institute
Paul Rosenzweig, Principal, Red Branch Consulting PLLC
Can we crowdsource our way toward a better… | ||
| Are Data Localization Policies a Looming Disaster for Cybersecurity? | Edna Conway, Danielle Kriz, Peter A. Swire, John Miller | 55m |
Moderator:
John Miller, Senior Vice President of Policy and General Counsel, Information Technology Industry Council
Panelists:
Edna Conway, Vice President… | ||
| DANGER! Tips for Dealing with a Panicked C-suite During a Ransomware Event. | Carol Barkes, Edward Vasko | 50m |
Presenters:
Carol Barkes, Conflict Resolution Consultant | Speaker | Best Selling Author, NeuroMediation Group
Edward Vasko, Director, Institute for Pervasive… | ||
| Hydra Marketplace: Where Crypto Money Laundering Trail Goes Cold | Vlad Cuiujuclu, Kimberly Grauer, Andras Toth-Czifra, Ian Gray | 50m |
Moderator:
Ian Gray, Senior Director, Research and Analysis, Flashpoint
Panelists:
Vlad Cuiujuclu, Team Lead, Cybercrime Intelligence, Flashpoint
Kimberly… | ||
| Protecting Our Democracy and the 2022 Midterm Campaigns | Ethan Chumley, Grace Hoyt, Alissa Starzak, Michael Kaiser | 50m |
Moderator:
Michael Kaiser, President & CEO, Defending Digital Campaigns
Panelists:
Ethan Chumley, Senior Security Strategist for Critical Institutions… | ||
| Security Smackdown 2022 | Sherron Burgess, Mary Ann Davidson, Charles Kolodgy, Larry Whiteside Jr | 51m |
Moderator:
Larry Whiteside Jr, Co-Founder & President, Cyversity
Panelists:
Sherron Burgess, CISO, BCD Travel
Mary Ann Davidson, CSO, Oracle… | ||
| Barbarians at the Gate: Policy Options for Combating Ransomware Attacks | Frank Cilluffo, Eric Goldstein, Chris Painter, Catherine Lotrionte | 50m |
Moderator:
Dr. Catherine Lotrionte, Professor, Georgetown University
Panelists:
Frank Cilluffo, Director, McCrary Institute for Cyber and Critical… | ||
| Supply Chain Cyber Readiness: Upping Your Game | Michele Brown, Monty McGee, Christine Pelione | 47m |
Moderator:
Christine Pelione, Strategic Planning Manager, General Motors / Cybersecurity
Panelists:
Michele Brown, Director, GM Information Security & IT Risk… | ||
| By Our Powers Combined: Critical Infrastructure Partners for Transparency | Cheri Caddy, Cassie Crossley, Virginia Wright, Allan Friedman | 50m |
Moderator:
Allan Friedman, Senior Advisor and Strategist, CISA
Panelists:
Cheri Caddy, Senior Advisor for Cybersecurity, U.S. Department of Energy
Cassie… | ||
| How Behavioral Economics Can Help Make Better Security Decisions | Kelly Shortridge, Sounil Yu | 49m |
Presenters:
Kelly Shortridge, Senior Principal Product Technologist, Fastly
Sounil Yu, CISO and Head of Research, JupiterOne
Using fun props and relevant… | ||
| Novel Swiss Re Framework Shortens 800+ Application Multi-Cloud Conversion | Michael Coden, Colin Troha | 50m |
Presenters:
Michael Coden, Senior Advisor, Boston Consulting Group
Colin Troha, Managing Director, Boston Consulting Group
Swiss RE, global reinsurer, must… | ||
| Red Teaming AI Systems: The Path, the Prospect and the Perils | Hyrum Anderson, Nicholas Carlini, Christina Liaghati, Ram Shankar Siva Kumar | 48m |
Moderator:
Ram Shankar Siva Kumar, Data Cowboy, Microsoft, Harvard
Panelists:
Hyrum Anderson, Distinguished Engineer, Robust Intelligence
Nicholas Carlini… | ||
| Talent Shortage: Fact or Myth? Resources for Finding and Growing Talent | Rita Gurevich, John Hammond, John Strand | 50m |
Moderator:
Don Pezet, Co-founder and Edutainer, ITProTV
Panelists:
Rita Gurevich, CEO and Founder , SPHERE
John Hammond, Senior Security Researcher… | ||
| Integrity Matters | Jerry Davis, Pamela Fusco, Juan Gomez-Sanchez | 50m |
Moderator:
Malcolm Harkins, Chief Security & Trust Officer, Epiphany Systems
Panelists:
Jerry Davis, Vice President, Chief Information Security Officer… | ||
| Inside the Making of a Zero Trust Architecture | Alper Kerman, Scott Rose | 50m |
Presenters:
Alper Kerman, Security Engineer/Project Manager, National Institute of Standards and Technology (NIST) National Cybersecurity Center of Excellence… | ||
| OTP Bot Attacks | Kelsey Dean, Kristen Spaeth | 45m |
Presenters:
Kelsey Dean, Global Intelligence Manager, Coinbase
Kristen Spaeth, Senior Investigator, Global Intelligence, Coinbase
This session will discuss… | ||
| Validating the Integrity of Computing Devices | Themistocles Chronis, Tom Dodson, John Loucaides | 52m |
Moderator:
Nakia Grayson, IT Security Specialist, National Institute of Standards and Technology (NIST)
Panelists:
Themistocles Chronis, Advisory Sales… | ||
| Wells Fargo PQC Program: The Five Ws | Dale Miller, Richard Toohey | 48m |
Moderator:
Sam Phillips, Senior Vice President, Information Security, Wells Fargo
Panelists:
Dale Miller, Information Security Senior Manager, Wells… | ||
| Cyber Invisibility: Developing a Security Incident Notification Regime | Kevin Albano, Robert Boyce, Coleman Mehta | 50m |
Moderator:
Courtney Lang, Senior Director of Policy, Information Technology Industry Council
Panelists:
Kevin Albano, Associate Partner, IBM Security… | ||
| First 90 Days In the CISO Chair: A Practitioner's Perspective | Allison Miller, Olivia Rose, Caleb Sima | 48m |
Moderator:
Chenxi Wang, Founder, Rain Capital
Panelists:
Allison Miller, CISO and VP of Trust, Reddit
Olivia Rose, CISO, VP of IT & Security, Amplitude
Caleb… | ||
| Bringing Zero Trust to Industrial Control Systems | Bill Malik | 44m |
Presenter: Bill Malik, VP of Infrastructure Strategies, Trend Micro
Zero Trust proposes an alternative to the perimeter. Applying Zero Trust to the Industrial… | ||
| nothing matches | ||