Kansas City

In this engaging presentation, we will explore the powerful intersection of artificial intelligence (AI) and video analytics in enhancing the physical security of cyber systems. With the increasing prevalence of cyber threats, it has become imperative for organizations to adopt innovative approaches to protect their physical infrastructure, which often serves as a gateway to their digital assets.

During the presentation, we will delve into best practices, compliance requirements (PCI-DSS, HIPAA, FNRA, etc.) for protecting physical assets of cyber systems, and how AI-based video analytics technologies can revolutionize physical security by providing proactive and intelligent monitoring capabilities. We will also discuss how these technologies leverage computer vision, machine learning, and deep neural networks to analyze video feeds, detect potential security incidents, and provide qualified alerts in real-time.

An often overlooked component of ‘data security’ is backup & recovery. Backup & Recovery is often an afterthought, and many companies assume that ‘if I have backups, I can recover my data.’

However, there are many factors that need to be taken into consideration in the backup architecture to ensure that the backup copies (data) is truly secure.

David’s presentation will show you common backup designs and attack vectors, tips/recommendations, and lessons learned over the years/examples of failures.

As security practitioners, we’re always trying to find ways to get ahead of attackers and mitigate threats before they wreak havoc in our environments. But, traditional defense-in-depth strategies rely more on reactive controls to build walls that we hope will stop attacks from being successful. However, time and again, we see news headlines proving how often and how easily these reactive approaches are defeated.

Today’s attack surface requires a different approach, focusing on preventative risk mitigation strategies that give more visibility, more context and a better mechanism to tie technical risk to business context. While reactive controls are still necessary, the more we can identify areas of risk before the attackers do and close the gaps in our defenses, the fewer attacks will take place and the more effective those reactive controls will be.

Preventative security strategies are driven by making better decisions about how, when and where to mitigate risks. In this talk, we’ll review techniques to implement within your security program that will give a better understanding of the technical and business risk across your attack surface, how to identify the areas to focus on first and ways to drive a more meaningful approach to mitigating risks before cyberattacks exploit your weaknesses.

Today, more than any other time in history, we are digitally connected. And, with a continuous rise in mobile related attacks, and an ever-increasing use of mobile devices to perform business tasks, protecting your organization from Mobile threats is more critical than ever. And, despite our best efforts, threats and breaches continue to increase.

Join Grant Asplund for this insightful presentation to learn about the latest mobile and user protection including Check Point’s Harmony suite for securing users and access. Today’s mobile security needs to prevent the download of malicious files to mobile devices, not just from the web and email but also collaboration tools like Teams and Slack and others. Learn out how you can achieve 99.7% efficacy against zero-day threats across your entire enterprise leveraging ThreatCloud, the best threat intelligence solution in the industry.

Generative AI is proving to increase productivity and augment humans in new ways. To seize the opportunities AI presents, organizations must first be aware of and manage its risks. That includes understanding how generative AI has changed the threat landscape and the security concerns that come with it – access control, cyber risk and compliance, data privacy, governance, and security. In this session, learn how applying Self-Learning AI across your organization’s digital environment will help your security team prevent, detect, respond, and heal from incidents, including those augmented by generative AI, through every stage of the attack lifecycle. These defensive capabilities share AI outputs with each other to strengthen autonomous insights and actions, giving your teams greater visibility, impact, and control to stay ahead of evolving threats.

“Pay Up, or Else”. The number of organizations who have been faced with this scenario has been steadily increasing over the past several years as ransomware attacks continue to rise — both in numbers and the size of payouts.

The clear and present danger of a ransomware attack looms large among cyber executives and business leaders as the number of vulnerabilities increases daily. According to a 2022 CRA Business Intelligence survey, nearly one in four respondents reported that their organization experienced one or more ransomware attacks in the past 12 months, and almost one out of three of these organizations said the attacker succeeded in gaining access to their systems, encrypting files, and demanding a ransom

According to this survey, many believe that the worst is yet to come and that they are at a significantly higher risk of a cyberattack than ever before – it’s not a matter of “if,” but “when.”

Preparing for the inevitable and defending against the threat of a ransomware attack requires constant evaluation and assessment, and then making the necessary adjustments.

On this panel, our lineup of industry experts will discuss the key security measures enterprises must take, going beyond backup and recovery and anti-malware/anti-virus solutions to include endpoint security, vulnerability management, Active Directory monitoring, credential protection, DNS security tools, SIEM, DLP and encryption, and cloud security software.

Modern networks are increasingly complex spanning many edges due to a mix of cloud and on-premises infrastructures in support of a digital transformation and hybrid workforces, with that comes requirements for more granular control through visibility and consistent security policy no matter where a user or resource is located.

Fortinet was founded with the mission “Security everywhere you need it” and provides a consolidated converged networking and security platform that empowers organizations to adopt and integrate new technologies while ensuring a consistent user experience and security posture.

Join Fortinet’s Director of Engineering, Mark Cole as he takes you through the journey of networking and security convergence and see how a consolidated platform approach leveraging best in class products praised by the industry and analysts gains you better visibility, performance and piece of mind. Walk through trends and challenges from last mile availability to phasing out VPN for private access while implementing flexible controls that apply no matter the context or where the user or application is located. Finally, we will discuss the emerging single vendor SASE quadrant and chat about it’s networking and cloud delivered security services.

The August 2023 SANS DevSecOps Survey shows that latest automated tools — such as CNAPP, CSPM, and CWPP — by themselves are not enough to succeed with DevSecOps. The survey reported that automated application testing grew by 52% between 2022 and 2023, yet organizations reported that tools like these were seen as less useful than in 2022. How is that possible? Great DevSecOps requires a foundation of solid testing data plus  good communications and consistent processes. Join Seemplicity as we share our insights from the SANS survey and talk about a foundation for successful DevSecOps and Remediation Operations.

During the past 10 years I’ve participated in many security incidents, received confidential readouts of other company incidents, collaborated with top well-known incident response firms as well as government agencies. It’s with these experiences and learnings I’ve applied an overlay of Zero Trust to the problem. Having also delivered Zero Trust strategies at two globally-recognized enterprises we can speak to the reality of the problem and solution.

In 2022 I presented how my Enterprise Security teams delivered Zero Trust at Adobe and Cisco. So, let’s talk about why we prioritized the initiative; a forward thinking strategy that really defended against the attacks we were seeing. During this session we’ll discuss some high-profile security incidents from the past year, reviewing the themes, kill chain, and how or where a Zero Trust strategy might help prevent the attack, slow them down, or reduce risk.

As an example, many high profile hacks all started similarly. Related to an employee or contractor credential theft (or purchase) and an MFA fatigue or bypass. These are NOT highly sophisticated attacks and there are strategies that can save your bacon.

Use of the cloud is continuously growing, not surprisingly so due to its perceived lower costs, greater agility, and ability to increase computing power with increased demand & continuously deploy new applications and software features.

Despite the appeal of cloud, there are many security risks and vulnerabilities and managing these risks has proven to be a big challenge as cyber criminals shift their tactics to cloud data and systems in responses to this increased use of the cloud. According to a CRA Business Intelligence’s September 2022 Cloud Security Survey, misconfigurations, lack of oversight, and little visibility across the organization are among their chief concerns regarding cloud deployments.

If organizations are going to successfully adopt/transition to the cloud, they must ensure security is part of their program. An effective cloud security program includes various process and technology capabilities to effectively keep up with the current threat landscape and vulnerabilities.