RSAC 365 Virtual Summit 2021
2021-01-27
-- online --
| title | author | length |
|---|---|---|
| Quick Look: Really a New Mouse Trap? Exploring Risks with Artificial Intelligence | Brett Tucker | 01m |
Presenter: Brett Tucker, Technical Manager, Cyber Risk, Carnegie Mellon University, Software Engineering Institute
This Quick Look provides a short preview of… | ||
| Quick Look: These Aren't the Threats You're Looking For: How Our APT Focus Ruins CTI | Katie Nickels | 01m |
Presenter: Katie Nickels, Director of Intelligence, Red Canary
This Quick Look provides a short preview of the full session at the RSAC 365 Virtual Summit… | ||
| Quick Look: Chasing Shadows: Securing APIs in a Digital Economy | Joe Krull | 01m |
Presenter: Joe Krull, Senior Analyst - Cybersecurity, Aite Group
This Quick Look provides a short preview of the full session at the RSAC 365 Virtual Summit… | ||
| Critical Infrastructure Network Attacks: Code Red, Alert Network Operators | Israel Barak | 29m |
A deployed electric transmission substation honeypot is internet-facing for two days before initial compromise via brute-forced RDP on a remote technician… | ||
| Ransomware in ICS: Impacting Critical Infrastructure and Operations | Selena Larson, Camille Jackson Singleton | 27m |
Ransomware attacks against ICS-connected organizations increase 500% from 2018–2020 across 220 incidents, with 56% causing operational impacts like plant… | ||
| Scaling Your Defenses: Next Level Security Automation for Enterprise | Tomasz Bania | 28m |
Roadmap from manual SOC work to full SOAR implementation with concrete steps: ingest AV/EDR, proxy and firewall alerts, collect MITRE ATT&CK hits and sandbox… | ||
| Really a New Mouse Trap? Exploring Risks with Artificial Intelligence | Brett Tucker | 34m |
Argues that AI is a normal technology risk and recommends concrete controls: use a standardized process such as OCTAVE FORTE or FAIR, decompose problems and… | ||
| AI/Machine Learning: What is Actually Working in Cybersecurity? | John Pescatore | 32m |
Claims that ML cuts time to detect, time to respond and time to restore get supported with concrete tools and caveats: supervised models for malware scoring… | ||
| AI Reliability in Security: A New Data Science Paradigm | Celeste Fralick | 25m |
Defines mean time to decay (MTTD) as a deliverable metric and gives equations to compute an instantaneous failure rate from monitored feature drifts… | ||
| Navigating the Unknowable: Resilience through Security Chaos Engineering | Jamie Dicken, Aaron Rinehart | 31m |
Claims that Security Chaos Engineering uncovers real gaps by running live experiments and collecting empirical data. Verica’s open source tool ChaoSlingr… | ||
| A Primer: Getting Started with MITRE Shield | Christina Fowler, William Hill | 26m |
MITRE Shield presents an actionable active‑defense knowledge base: an MITRE ATT&CK–linked matrix with eight tactics and 33 techniques, plus an attack‑mapping… | ||
| These Aren't the Threats You're Looking For: How Our APT Focus Ruins CTI | Katie Nickels | 35m |
Argument: overemphasis on APTs misdirects CTI and resources. Evidence: Red Canary’s 2020 top‑10 shows no malware exclusive to state actors; CrowdStrike… | ||
| When Application Security “The Wrong Way” Is the Right Thing for Your Organization | Jennifer Czaplewski | 30m |
Target describes a concrete product security stack: a transparent Product Intelligence score (300–850) that weights findings 45%, security services 35%… | ||
| The Return of Hacktivism – The Insider | Jadee Hanson, Masha Sedova | 31m |
Claims that 30% of breaches trace to insiders and that 63% of departing employees admit taking data, citing IDC’s “five years” acceleration of collaboration… | ||
| Zooming through your security crisis – Are you resentful or resilient? | Elliott Franklin | 35m |
Claims that resilience, not resentment, is the actionable defense, backed by concrete numbers: post-COVID mental health rises (about one in three adults… | ||
| Managing Privacy and Cyber In A Pandemic: Lessons Learned For 2021 & Beyond | Behnam Dayanim | 29m |
Companies report 76% asking employees to notify COVID diagnoses, ~50% adopting remote tech with most bypassing privacy review, 15% doing DPIAs and under 25%… | ||
| Pilots, Surgeons & Developers - Improving AppSec With Checklists | Joe Kuemerle | 33m |
Build a customized application security checklist tied to actual tech stacks and workflows, not vague rules: use do-list vs challenge response where… | ||
| Understanding Response Risk Relative to Ransomware and DoT Guidelines | Catherine Lotrionte, Adam Hickey, Stewart Baker | 38m |
October 2020 Treasury guidance warns that payments to ransomware operators risk civil enforcement, citing four designated groups (CryptoLocker, SamSam… | ||
| Chasing Shadows: Securing APIs in a Digital Economy | Joe Krull | 29m |
Research finds API security awareness is surprisingly low across finance and fintech: an Aite Group study assesses 31 companies, finds only one has a… | ||
| Lessons Learned Developing an AI Cyber Immune System: The Good, Bad & Ugly | Michael Mylrea | 32m |
An industrial immune system called digital ghost uses a high‑fidelity digital twin plus about 40 machine learning algorithms to monitor physics (voltage… | ||
| Nowhere to Hide: How COVID-19 Forever Changed Your Company’s Attack Surface | Jason Rivera | 34m |
CrowdStrike telemetry shows a big Q1 2020 spike tied to remote work: a 98% increase in distinct, sophisticated intrusions and ~75% of North American attacks… | ||
| nothing matches | ||