Ed Lin is Security Architect from Varonis’ Incident Response and Security Architecture team. Since joining the IR team, Ed has been helping customers integrate Varonis into their security ecosystems so that they can effectively detect and respond to cyber threats. Ed has a cybersecurity analyst background working with both on-prem and cloud environments and a focus in incident response and data protection. Outside of cybersecurity, Ed enjoys skateboarding, playing guitar, and spending time outdoors.
KAM is Dito’s Cloud Fellow, responsible for bridging technology, engineering, sales, and leadership for customer success. He evangelizes for organizations to migrate, modernize & maximize their use of the cloud securely. He founded and leads the Dito Cyber Security practice, awarded Google Cloud Security Partner of the Year in June 2022.
He is a Google Cloud Innovators Champion, Workspace Product Expert, Developer Expert, and Ambassador as well as member expert in the U.S. Marine Corps Cyber Auxiliary.
KAM enjoys working with Open Source Software and is a proud member of the Apache Software Foundation. He has battled spammers for decades and his research protects hundreds of millions of Internet users every day.
KAM is also a Center for Innovative Technology MACH37 Cyber Security Incubator Graduate and a member of the board of advisors for Virtru.com & SecurityUniversity.edu. KAM’s latest honor is to be named a Distinguished Senior Fellow as a thought leader in the field of Cyber Security at Thomas University’s Armed Services Institute in the Center for Military Life.
Kevin has over 15 years of experience in network security and infrastructure, including a director-level role at SNT Media, where he led the design and implementation of a secure and scalable cloud-based platform. Before joining Seemplicity, he was an engineering leader at Rapid7. He leverages skills in Windows, Linux, VRM, SIEM, AppSec and Cloud to provide innovative and effective security solutions to clients across various industries. Kevin is passionate about helping organizations protect their data and assets from cyber threats.
IT executive with 23 years’ experience in Management, Security Administration, Auditing, Network Administration, and Corporate Training. Extensive Experience building policies, procedures, and mechanisms for use in HIPAA, SOX and PCI compliance.
Mark Mastrangeli, a Cloud Engagement Director at Palo Alto Networks has nearly 20 years of experience in the industry protecting some of the largest companies in the world.
As Chief Marketing Officer at Phosphorus Cybersecurity, John’s achieved more than 25 years of experience in high-tech security marketing, strategy, product marketing, product management, and consulting. A serial CMO and security visionary, he has helped build and lead some of the biggest brands in enterprise security, including Solera Networks, Blue Coat Systems, Check Point Software, McAfee, Zscaler, Anitian, ColorTokens, and Anonyome Labs. Throughout his career, John’s been featured at events and conferences worldwide, built an award-winning security podcast titled “Security on Cloud,” and wrote as a featured columnist at SECURITYWEEK, writing about advanced threats and big data security.
Ken has been actively involved in the Data Networking and Cyber Security fields for over 35 years now. He has spent the past 25 years focused on Enterprise Cybersecurity and Defense against advanced threats to corporate organizations and federal governments across 22 countries. During this period, he designed, built and managed several global NOC and SOCs in America, India, and the United Kingdom.
Ken previously held security clearances and worked for various government agencies on Deep Packet Processing and Threat Intelligence projects.
Ken holds a patent relating to protection against the nonsense name DNS attacks, and holds a degree in computing from Glyndwr University, Wales.
Ken is currently a Senior Sales Engineer for Next working on Data Loss Prevention and Insider Risk solutions for customers in the Americas.
Veteran systems and pre-sales engineer with 20+ years of datacenter and infrastructure modernization experience. Always the key player in evangelizing and building solutions for bridging the gap between second and third platform application and data management strategies. Constantly seeking new technology challenges to enhance skill sets and to educate peers, partners, and customers.
Dennis is a proud Kentuckian who now calls Tennessee home; he is a father, Husband, Grand Father, and Veteran. Dennis started his Information Security career in the Military and has worked in the Automotive, Healthcare, Federal Government, Higher Education, and Finance Industries as an Information Security Leader. Dennis currently serves as the Chief Information Security Officer (CISO) for UCONN Health. Previous roles include the CISO & Chief Technology Officer (CTO) at The University of Tennessee Health and Science Center (UTHSC), and CISO for the Cabinet for Health and Family Services (CHFS) at the Commonwealth of Kentucky.
Dennis has a passion for Information Security and igniting that same passion in others to create future leaders. Dennis teaches Information Security courses at different colleges and regularly speaks at conferences and group events.
Dennis holds an Associate’s Degree in Business Management, a Bachelor’s of Science in Information Security, a Master’s of Information Systems, and a Ph.D. in Technology – Cybersecurity.
Some of Dennis’ most recent accomplishments include:
- Named one of the top 100 CISOs 2021
- Named to the Cybersecurity Hall of Fame 2020
As the VP of Security, IT, and Privacy at Woebot Health, I spearhead the development and execution of comprehensive IT, Security, and Privacy programs for the organization and product, ensuring regulatory compliance and safeguarding sensitive patient data. I have over 20 years of experience providing IT Security, Operational, and Service solutions in highly regulated verticals, such as healthcare and biotechnology.
I am recognized for developing and maintaining tactical, comprehensive enterprise information security and risk management programs, maturing the security posture of an organization. I am driven to work with the business to meet operational needs and help protect not only businesses but the information and people under their purview. I have real-world breach experience, reducing risk profiles and collaborating 360 degrees, including C-Suite Executives.
Nashville Cybersecurity Conference
Wednesday, November 15, 2023
Live in Person @ The Westin Nashville
In Person | Virtual | Hybrid
Earn up to 10 CPE credits
About the Event
FutureCon Events brings high-level Cyber Security Training discovering cutting-edge security approaches, managing risk in the ever-changing threat of the cybersecurity workforce.
Join us as we talk with a panel of C-level executives who have effectively mitigated the risk of Cyber Attacks.
Educating C-suite executives and CISOs (chief information security officers) on the global cybercrime epidemic, and how to build Cyber Resilient organizations.
“Cybersecurity is no longer just an IT problem”
Gain the latest knowledge you need to enable applications while keeping your computing environment secure from advanced Cyber Threats. Demo the newest technology, and interact with the world’s security leaders and gain other pressing topics of interest to the information security community.
The FutureCon community will keep you updated on the future of the Cyberworld and allow you to interact with your peers and the world’s security leaders.
For sponsorship opportunities email sales@futureconevents.com
Keynote Speaker
"Cybersecurity resilience. Building a business continuity plan in order to recover from cyber attacks."
Jason Beaty
Vice President of Information Technology and Security Officer Promises Behavioral Health
IT executive with 23 years’ experience in Management, Security Administration, Auditing, Network Administration, and Corporate Training. Extensive Experience building policies, procedures, and mechanisms for use in HIPAA, SOX and PCI compliance.
CISO/Industry Leader Panel
“Cybersecurity Leaders and Experts on Current Cyberthreats and Practices”
Kevin A. McGrail
Cloud Fellow and Deputy CISO
Dito
Dr. Dennis E. Leber
Director of Cybersecurity/CISO.
Honest Medical Group
Barbee Mooneyhan
VP | Security, IT, and Privacy, Woebot Health |
WiCyS TN Affiliate and BISO Affiliate Leader
Darin McCloy
Chief Information Security Officer
PolicyCo
Ammar L. Ammar
Chief Information Security Officer | Chief Technical Officer
The University of Tennessee Health Science Center
Roger Brotz
CISO
Acadia Healthcare
Premier Platinum Sponsors
Dito is a full-service Google cloud enabler that makes transformations as close to perfect as possible. We drive innovation. We enable change. Most importantly, we transform organizations. Since 2008, we’ve helped thousands of organizations change the way they do business by employing smart cloud technologies (Google solutions ranging from Cloud, Chrome, Workspace, Maps, and more). Wherever you are going, we have the expertise to get you there. You focus on business. We focus on your data, your security, and your technology – so you don’t have to. From onsite labs to security assessments, from cloud deployments to app development, we work to create bold, lasting solutions. Transformation happens here.
Gold Sponsors
Exabeam is a global cybersecurity leader that created New-Scale SIEMTM for advancing security operations. Built for security people by security people, we reduce business risk and elevate human performance. The powerful combination of our cloud-scale security log management, behavioral analytics, and automated investigation experience gives security operations an unprecedented advantage over adversaries including insider threats, nation states, and other cyber criminals. We Detect the UndetectableTM by understanding normal behavior, even as normal keeps changing – giving security operations teams a holistic view of incidents for faster, more complete response. Learn more at www.exabeam.com.
We see the world of cybersecurity differently.
We’re fighting a different battle than conventional cybersecurity companies, relentlessly focused on securing data. Data assets are the most valuable – and vulnerable – components of the global economy. Along with employees, data is at the heart of almost every organization, yet conventional cybersecurity solutions, by themselves, have failed to protect it.
On average, 20% of an organization’s data is accessible to every employee. Seventy percent of attacks take months or years to discover. But not for our customers.
Our customers always know where their most valuable data is – on premises or in the cloud. Only the right people have access to only the right data. With real-time awareness of how employees use data, our clients flag and stop malicious behavior in its tracks.
Cloudflare, Inc (www.cloudflare.com / @cloudflare) is on a mission to help build a better Internet. Cloudflare protects and accelerates any Internet application online without adding hardware, installing software, or changing a line of code. Internet properties powered by Cloudflare have all traffic routed through its intelligent global network, which gets smarter with each new site added. As a result, they see significant improvement in performance and a decrease in spam and other attacks. Cloudflare was recognized by the World Economic Forum as a Technology Pioneer, named the Most Innovative Network & Internet Technology Company for two years running by the Wall Street Journal, and ranked among the world’s 50 most innovative companies by Fast Company. Headquartered in San Francisco, CA, Cloudflare has offices in Austin, TX, Champaign, IL, Boston, MA, Washington, DC, London, and Singapore.
For organizations with valuable data or brand, Next Reveal is a user-centric data protection solution that uncovers risk, educates employees and fulfills security, compliance and regulatory needs. Unlike legacy DLP, Next is a flexible, cloud-native, AI/ML powered solution built for today’s threat landscape.
Arctic Wolf® is the market leader in security operations. Using the cloud-native Arctic Wolf® Platform, we help organizations end cyber risk by providing security operations as a concierge service. Highly-trained Concierge Security® experts work as an extension of internal teams to provide 24×7 monitoring, detection and response, as well as ongoing risk management to proactively protect organizations while continually strengthening their security posture.
Palo Alto Networks, the global cybersecurity leader, is shaping the cloud-centric future with technology that is transforming the way people and organizations operate. Our mission is to be the cybersecurity partner of choice, protecting our digital way of life. We help address the world’s greatest security challenges with continuous innovation that seizes the latest breakthroughs in artificial intelligence, analytics, automation, and orchestration. By delivering an integrated platform and empowering a growing ecosystem of partners, we are at the forefront of protecting tens of thousands of organizations across clouds, networks, and mobile devices. Our vision is a world where each day is safer and more secure than the one before. For more information, visit www.paloaltonetworks.com.
Phosphorus Cybersecurity® is the leading xTended Security of Things™ platform designed to secure the rapidly growing and often unmonitored Things of the enterprise xIoT landscape. We fully automate the remediation of the biggest IoT, OT, and network device vulnerabilities—including unknown and inaccurate asset inventory, default device credentials, out-of-date device firmware, and out-of-date certificates.
Silver Sponsors
It’s not about the technology. It’s about the performance improvement of your business. Founded in 1978, Keller Schroeder is an employee-owned, information technology consulting services firm, and a value-added reseller and systems integrator of hardware and software products. We have a cross-industry market focus, including a concentration of clients in manufacturing, finance, utilities, and healthcare. We have clients ranging in size from international organizations to small regional offices. Our diversity allows us to realize the positive impacts that can come from the implementation of technology to improve business processes in organizations of all sizes. Keller Schroeder exists to make positive, personal impacts on our employee-owners, our clients, and our communities. We are a technology company in the performance improvement business, and our mission is to leverage technology tools and services to help our clients more successfully achieve their objectives. Our ownership culture earns us consistently high feedback from our employee-owners, our clients, and our community. We genuinely value ‘owning.’ From owning follow-through and communication to owning our portion of positive outcomes on projects to owning our responsibilities as members of our communities, Keller Schroeder employee-owners engage differently because of our culture. We work like owners because we are all business owners.
InNet partners with customers to design, deploy, and support a full suite of advanced technology solutions focusing upon enterprise and mid-market IT organizations and assisting in regards to networks, information security, business continuity, storage, cloud migration, virtualization and performance monitoring. As one of the most trusted solution providers in the Central and Eastern USA, InNet brings many years of valuable experience from a myriad of customer perspectives working with leading enterprise and corporate customers to deliver technology that meets business objectives.
Vicarius helps Security and IT teams protect their most critical apps and assets against software exploitation through vRx, a consolidated end-to-end vulnerability remediation platform. Headquartered in New York and backed by tier-one Silicon Valley investors, Vicarius was founded by security experts on a mission to provide problem-solving remediation solutions that proactively reduce risk wherever assets reside. Effortlessly find and eliminate threats while reducing the strain on internal security resources, freeing up personnel to focus on other mission-critical tasks without sacrificing security. Get started for free today or learn more at https://vicarius.io
Unitrends increases uptime and confidence in a world in which IT professionals must do more with less. Unitrends leverages high-availability hardware and software engineering, cloud economics, enterprise power with consumer-grade design, and customer-obsessed support to natively provide all-in-one enterprise backup and continuity. The result is a “one throat to choke” set of offerings that allow our customers to focus on their business rather than backup. Learn more at www.unitrends.com; follow us on Twitter @Unitrends.
Datalink Networks is your trusted managed service provider We are a leader in managed IT services, with over 30 years of experience serving small to medium-sized organizations in both the private and public sectors throughout the United States. Datalink Networks can plan, design, build, deploy, support, and monitor IT solutions for your organization. Our team is available to meet your requirements and provide customized solutions to meet your business objectives and reporting needs. Our people are passionate about solving IT problems and delivering unrivaled support to your organization. When you call us you’re reaching someone who is experienced, who cares about delivering great service and great value, and who is dedicated to helping you out. Datalink Networks can be your IT staff (Managed Service Provider) or fill in a specific role: network security, cloud security, system administration, engineering, support, etc.
Barracuda was launched to give businesses an email-security solution that didn’t cost a small fortune. With more than 1 million cloud-enabled products delivered since, we continue to disrupt the IT-security market with innovative solutions that every business can afford. We’re on a mission to protect customers, data and applications from today’s advanced threats by providing the most comprehensive and easy-to-use IT-security platform and backing it up with best-in-class customer support.
ZeroFox delivers proactive external cybersecurity to outfox the adversary and disrupt, identify, and dismantle threats outside the traditional corporate perimeter. The ZeroFox Platform combines advanced AI-driven analysis to detect complex threats on the surface, Deep, and Dark Web with fully managed threat intelligence services and threat analysts who become an extension of your team – all while providing automated remediation to effectively disrupt threats.
Forcepoint is the human-centric cybersecurity company that understands behavior and adapts security response and enforcement to risk. The Forcepoint Human Point platform delivers Risk-Adaptive Protection to continuously ensure trusted use of critical data and systems. Based in Austin, Texas, Forcepoint protects data and identities for thousands of enterprise and government customers in more than 150 countries.
AuditBoard is the leading cloud-based platform transforming audit, risk, and compliance management. More than 30% of the Fortune 500 leverage AuditBoard to move their businesses forward with greater clarity and agility. AuditBoard is top-rated by customers on G2 and Gartner Peer Insights, and was recently ranked for the third year in a row as one of the fastest-growing technology companies in North America by Deloitte. To learn more, visit: AuditBoard.com.
KACE® by Quest supports your unified endpoint management (UEM) strategy by helping you discover and track every device in your environment, automate administrative tasks, keep compliance requirements up-to-date and secure your data from a range of cyberthreats.
Unsure what endpoint management solution is right for you? Use our KACE Solution Designer tool (on the right) to quickly and easily find the right fit within your existing environment.
BeyondTrust is the worldwide leader in Privileged Access Management, offering the most seamless approach to preventing data breaches related to stolen credentials, misused privileges, and compromised remote access.
Our extensible platform empowers organizations to easily scale privilege security as threats evolve across endpoint, server, cloud, DevOps, and network device environments. BeyondTrust unifies the industry’s broadest set of privileged access capabilities with centralized management, reporting, and analytics, enabling leaders to take decisive and informed actions to defeat attackers. Our holistic platform stands out for its flexible design that simplifies integrations, enhances user productivity, and maximizes IT and security investments.
BeyondTrust gives organizations the visibility and control they need to reduce risk, achieve compliance objectives, and boost operational performance. We are trusted by 20,000 customers, including half of the Fortune 100, and a global partner network.
Garland Technology is an industry leader delivering network products and solutions for enterprise, service providers, and government agencies worldwide. Since 2011, Garland Technology has developed the industry’s most reliable test access points (TAPs) and packet brokers, enabling data centers to address IT challenges and gain complete network visibility. For more information, or learn more about the inventor of the first bypass TAP, visit GarlandTechnology.com or @GarlandTech.
Commvault is a worldwide leader in delivering data readiness. We’re committed to ensuring you can protect, manage, move, recover, and use your data. Always. Commvault backup and recovery software helps you easily manage your data in a consistent, compliant way. Our software automates mind-numbing IT tasks and makes your data work harder for you — so you can gain invaluable insights for your business. Commvault solutions work on-prem and in the cloud, and work with the digital tools and procedures you’re already using. Get Commvault direct and through our global ecosystem of trusted partners. Keep your data accessible and actionable with a single solution that ensures your data is available — no matter what. https://www.commvault.com/
BARAMUNDI IS YOUR PROVIDER FOR RELIABLE UNIFIED ENDPOINT MANAGEMENT
Security requirements are constantly growing as professionally managed IT infrastructures become increasingly complex. The work of IT administrators in a company, and the performance of the IT department as a whole, are therefore becoming a key success factor within their organization, in business and in the marke. We have been the experts in unified endpoint management for the past 20 years. With the baramundi Management Suite, we can provide you with a versatile tool to help you achieve your full IT potential. Maintain control and maximize your productivity by automating routine tasks. The baramundi Management Suite is ideal for your client lifecycle management and helps to reliably manage and protect all of your devices. It is quick to install and implement, intuitive to operate, and has a modular design, thereby offering a high level of usability and transparency. Start now and benefit from the long-term advantages for your IT.
trackd.com is a modern patch management platform with a unique twist. Our solution records the experience of vulnerability remediation practitioners after they’ve applied a given patch (i.e. did it break something?), anonymizes that data, and then shares it in real-time with all other trackd platform users. The data enables remediation teams to identify the small percentage of patches that are likely to break something, as well as those with little or no history of disruption that can be considered strong candidates for auto-patching.
SecuritySnares was created to stop business disruption and damage caused by malware. Founded by cybersecurity experts and executives frustrated with advanced endpoint protection technologies, SecuritySnare’s mission is to supplement endpoint detection & response (EDR) technologies enhancing where they are weak.
SecuritySnare’s flagship product, RansomSnare, stops ransomware damage, including “zero-day ransomware”.
We are developing focused products (we like to call them snares), designed to prevent damage from the highest cybersecurity risks businesses face. SecuritySnares designs solutions to work offline, without continuous patching, or needing learning periods. Our goal is to immediately stop damage that notoriously occurs with the specialized tactics used by cyber attackers.
HelpSystems has long been known for helping organizations become more secure and autonomous. However, over the years, our customers have shared with us that it has gotten harder and harder to protect their data. As technology plays an increasingly important role in the way organizations operate, cyberthreats are evolving to become more powerful than ever before. If there’s one thing we’ve learned from being in an industry where the only constant is change, it’s that being adaptable is the best way to grow in the right direction. So we’ve listened to our customers’ concerns, problem-solved, and delivered with impressive results. Consequently, we’re a different company today — one that is tackling cybersecurity head-on.
That’s why HelpSystems is now Fortra, your cybersecurity ally. We’re bringing the same people-first support and best-in-class portfolio that you’ve come to expect from HelpSystems, only now we’re unified through the mission of providing solutions to organizations’ seemingly unsolvable cybersecurity problems. We offer leading solutions like data security, infrastructure protection, managed services, and threat research and intelligence. Throughout every step of our customers’ journeys, our experts are determined to help increase security maturity while decreasing the operational burden that comes with it. Because our team puts the same level of care into protecting our customers’ peace of mind as their precious data. We’re driven by the belief that nothing is unsolvable. We’re tenacious in our pursuit of a better future for cybersecurity.
We are Fortra.
Impelix is a trusted partner in cybersecurity and risk solutions for organizations of all sizes, we blend human expertise with technology, prioritize customer satisfaction, champion continuous innovation in security, and work tirelessly to enhance our client’s security and risk posture for their data and people, all while constantly passionate about what we do. We’re the cyber security Partner as Platform™ delivering our clients the strategy, solutions, products, and services for a secure and seamless digital transformation.
Rubrik, the Zero Trust Data Security Company™, delivers data security and operational resilience for enterprises. Rubrik’s big idea is to provide data security and data protection on a single platform, including: Zero Trust Data Protection, ransomware investigation, incident containment, sensitive data discovery, and orchestrated application recovery. This means data is ready at all times so you can recover the data you need, and avoid paying a ransom. Because when you secure your data, you secure your applications, and you secure your business.
Array Networks, the network functions platform company, develops purpose-built systems for hosting virtual networking and security functions with guaranteed performance. Proven at over 5000 worldwide customer deployments, Array is recognized by leading enterprises and service providers for next-generation technology that delivers agility at scale.
Darktrace is the world’s leading cyber AI company and the creator of Autonomous Response technology. It provides comprehensive, enterprise-wide cyber defense to over 4,000 organizations worldwide, protecting the cloud, email, IoT, traditional networks, endpoints and industrial systems.
A self-learning technology, Darktrace AI autonomously detects, investigates and responds to advanced cyber-threats, including insider threat, remote working risks, ransomware, data loss and supply chain vulnerabilities.
The company has 1,300 employees and 44 office locations, with headquarters in Cambridge, UK and San Francisco. Every 3 seconds, Darktrace AI fights back against a cyber-threat, preventing it from causing damage.
Partners
Founded in 2012, the Women’s Society of Cyberjutsu (WSC) is a National 501(c)3 non-profit community, focused on empowering women to succeed in the cybersecurity industry. WSC’s mission is to advance women in cybersecurity careers by providing programs and partnerships that promote hands-on training, networking, education, mentoring, resource-sharing and other professional opportunities.
WSC serves thousands of women across the globe by bringing awareness to, and advancing careers in, cybersecurity. The WSC community includes information security professionals, IT professionals, programmers, computer scientists and engineers, as well as women wanting to explore and join the field. Recognizing the importance of encouraging girls to embrace a future in STEM-related professions through its Cyberjutsu Girls Academy, WSC provides a unique hands-on curriculum focused on securing information technology. For more information, visit http://www.womenscyberjutsu.org.
The Pan Asian American Business Council (“PAABC”) is a non-profit organization consisting of Asian American businesses that would like to promote and grow their own and other Asian American businesses.
To enable Asian American owned businesses to develop and grow.
We put our heart and soul into this Cybersecurity Conference directory.
Way back in 2013 we had another website called “Concise Courses” which used to market and sell InfoSec training courses. We published a blog post listing all the upcoming InfoSec Conferences of that year, and Google loved the resource and put us right to the top of the search engines. That ‘accidental’ occurrence spawned this directory which is maintained by a small team comprising of Henry Dalziel and Charles Villaneuva and a bunch of freelance programmers.
What We Do:
We list, literally, every single Information Security conference, event and seminar within every niche in Cybersecurity.
We have a dedicated team that maintains our in-house tech stack, directory, and data curation.
Agenda
Times are subject to change
Opening Introductions | Check In | Networking
Presentation
Hacking the Cloud: Play-by-Play Attack
Security Architect Ed Lin will demonstrate how an attacker uses off-the-shelf security tools, API calls, and scripting to discover secrets in a public repository. This leads to user impersonation, privilege escalation and sensitive data discovery, and ultimately data exfiltration. We’ll show you how we can help detect and defend against these types of attacks at every step.
Presentation
AI & Cybersecurity: Fears, Fumbles and Fame
Kevin A. “KAM” McGrail enjoys moving the cybersecurity needle and loves the recent focus on Artificial Intelligence (AI) tools. During this talk, KAM will discuss his thoughts on the definition of AI, the need for Ethical AI, and using AI in cybersecurity, as well as regale attendees with some lessons learned from a few AI success and failure stories.
Presentation
The Future of AI in Security
There seems to be a new article every day covering the intersection of artificial intelligence (AI), machine learning (ML), and the security industry. Vendors are suggesting that AI has the potential to act as a team member, replace missing expertise, and reduce headcount for detecting, investigating, responding to, and predicting new cyberthreats. The concept of a fully computerized SOC may be a dream in a world lacking cybersecurity professionals, but can it be realized?
Increasing the autonomy of the SOC is a noble goal, especially for smaller organizations struggling to hire and retain the necessary cybersecurity skills. However, the need for self-learning and self-repairing capabilities in an autonomous SOC raises an important concern: If your IT and security system becomes self-referential and self-healing, how can you investigate to ensure it’s getting it right? Who watches the watchers?
This talk will explore:
- The history of AI, ML, and automation already in your security stack
- The dangers and challenges of unrestricted GPT and other chat bots as information sources
- Ways humans and AI can work together
- How Exabeam uses ML today and is exploring AI in the future
Networking
Sponsor Networking Time
Visit Sponsor Booths – find amazing people, information, and prizes! Get updated on the latest technologies!
Presentation
DevSecOps Alchemy: Communications, Processes and Visibility
Presentation
Moving Towards a Zero Trust Mindset
Networking
Sponsor Networking Time
Visit Sponsor Booths – find amazing people, information, and prizes! Get updated on the latest technologies!
Lunch
Keynote
"Cybersecurity resilience. Building a business continuity plan in order to recover from cyber attacks."
Jason Beaty
Vice President of Information Technology and Security Officer Promises Behavioral Health
Networking
Sponsor Networking Time
Visit Sponsor Booths – find amazing people, information, and prizes! Get updated on the latest technologies!
Presentation
Cloud Security Update: Trends, Learning and Best Practices
Presentation
xIoT Hacking Demonstrations to Disappoint Bad Actors
We’ve unleashed our dark allies from the nightmare dimension on an unholy crusade to demonstrate cyberattacks for your enlightenment. If you love seeing devices compromised as much as we do, join us for hacking demonstrations, detailed security research findings, and threat mitigation techniques that will disappoint cybercriminals. We’ll demonstrate several hacks against xIoT, or Extended Internet of Things, devices. For those who would say, “But they’re just security cameras monitoring the parking garage, wireless access points in the cafeteria, PLCs controlling robotic welding arms, or our OT devices aren’t at risk like our IT devices are; what harm can they cause?” – this will illuminate that harm.
xIoT (IoT, OT and network assets) encompasses disparate but interrelated device groups with purpose-built hardware and firmware, are typically network-connected, run well-known operating systems and disallow the installation of traditional endpoint security controls. In addition, many xIoT devices have open ports, protocols, storage, memory, and processing capabilities. Even though most industrial environments have tens to hundreds of thousands of these devices in production, they go largely unmanaged and unmonitored and operate with weak credentials, old, vulnerable firmware, extraneous services, and problematic certificates.
Cybercriminals have shifted their focus to xIoT attacks. Why? Because they work. This massive, vulnerable attack surface is being successfully exploited by bad actors engaging in cyber espionage, data exfiltration, sabotage, and extortion, impacting xIoT assets. And this is especially true for operational technology as businesses gain powerful business benefits but increase their risk as OT and IT infrastructures converge.
Bad actors count on you being passive. They want you to fail so they can continue to evade detection and maintain persistence on your devices. Disappoint them! Take your devices back by understanding how to hack them, recognizing where they’re most vulnerable, and employing strategies to successfully protect them at scale.
Networking
Sponsor Networking Time
Visit Sponsor Booths – find amazing people, information, and prizes! Get updated on the latest technologies!
Presentation
Protecting Data in a Distributed World
Change is the only constant.
Back in the 1970s all computing data was predominantly held on mainframes, which were located in highly secure data centers. They were only accessed over private networks utilizing propriety communications protocols and hard-wired devices.
Today that model has changed dramatically; both company confidential and customer data is available anywhere via a myriad of devices and often accessed remotely from the company’s offices as the data is stored in the cloud. Understanding exactly where that data is located and protecting it, is critical to all businesses, both from revenue protection and avoiding loss of credibility from high profile breaches and the regulatory fines that often accompany those breaches. Just because a company moves its data to the cloud does not absolve it of the responsibility and ownership of the required cybersecurity and data protection controls, and often this is regulated by governments or their agencies.
Threats are evolving daily, and your cybersecurity team must stay on top of the controls that are required. They also need to be able to constantly monitor what is happening to the company’s sensitive data. Are you ready for those challenges? Let’s explain that journey.
No man steps in the same river twice
Presentation
End Cyber Risk
In an ever-changing cybersecurity landscape, it’s easy to get lost in a sea of new security tools. How do you know if you have the right security mix? Wouldn’t it be easier if your security posture evolved with the rapidly changing threat landscape? Join us for a technical discussion on our mission to end cyber risk where we will demonstrate how you can navigate through your organization’s unique security journey, gain broad visibility into complex cyber-threats and set your security posture on the path of continuous improvement!
Networking
Sponsor Networking Time
Visit Sponsor Booths – find amazing people, information, and prizes! Get updated on the latest technologies!
Panel Discussion
“Cybersecurity Leaders and Experts on Current Cyberthreats and Practices”
Barbee Mooneyhan
VP | Security, IT, and Privacy, Woebot Health | WiCyS TN Affiliate and BISO Affiliate Leader
