Philadelphia, PA

Amidst the fear and hype surrounding AI, it’s important to take a grounded and realistic approach to understanding its potential impact on humanity. We examine the current state of AI and its potential trajectory, and what will it take to shape the future.

Cyber security is hard, and often one hears that being breached is not a question of “if” but “when?”  In this talk, we will give you reasons why ensuring good cybersecurity is a “winnable” battle, and how it starts with knowing your attack surface.  Of course, this begs the question, “what is my attack surface?”  By looking at it from an attacker’s perspective, we’ll explore how complex this question can be, and discuss steps you can take to minimize the risks involved.

As one of the most popular software languages 20+ years running, Java has many security capabilities built into it already. Instead of shifting left with work and adding steps, you can shift a decision left about how you’ll use the JVM with things it already does. Instead of bolting security on (just earlier), you can integrate it more easily. This means more trust with your development and operations teams because they don’t need to do as much, and your team sounds more credible and influential by speaking the same terms that developers use. As you will learn in this interactive session, simple adjustments or ways of discussing the JVM can yield big security improvements.

Sometimes just having a SOC isn’t enough to address insider threat issues. Security operations teams are managing massive amounts of data across billions of events from on premises to the cloud. Looking for specific needles like insider threats in this complex haystack has special requirements that encompass both searching historic data and seeing evolving credential behavior changes as they happen.

Whether from downsizing or expanding the business, employees, vendors, contractors, and more are moving in and out of your environment. And often, it is during turbulent times that insider threats go unobserved as everything  changes so quickly. Insider threat initiatives require a new, more focused approach.

This presentation will explore:

• The common scenarios that indicate you need an insider threat team, how to build a mission statement, and tools
• Four attributes of a successful insider threat program
• How behavioral analytics baseline “normal” behavior of users and devices—showing risk faster
• An automated investigation experience that replaces manual routines and effectively guides new insider threat teams