Full Agenda

Are you and your cloud security team drained of managing noisy security alerts? Live easy, don’t let your cloud environment fall in the hands of cyber criminals. In this talk, the presenter will show how automation of incident response workflow...

With the advent of open banking in 2019, banks will have to provide APIs to share customers’ banking data with third parties. Hear the results of our research into the challenges of protecting the larger attack surface created by open banking...

How can you implement an enterprise-wide PKI governance function where previously the emphasis was simply on issuing certificates for applications’ use. What are your governance goals? What metrics show the effectiveness of a governance program?...

Identity and access management (IAM) plays a key role in enterprise security. This session will present the success story of Aetna, a CVS Health company, in building a world-class IAM program that leverages identity and access data analytics...

Small organizations often lack the tools and clear directions to effectively manage today’s evolving threat landscape. In this session, panelists will discuss how small businesses can be more secure by taking practical, actionable and easy-to-use...

Corporate security policies are a key component to any business, but unfortunately, by design, they read like legal documents. Are any of your project managers, creatives or engineers reading the policies? And if they are, do they know what...

This co-speaker session will lead the audience on an exploration of motivations behind breaches and what actually happens to the money that nefarious actors gain by exploiting compromised credentials. It is common knowledge that compromised...

Easy to understand KPIs are very powerful in not just measuring progress but also in encouraging action. Learning from fitness trackers and gaming leaderboards, Medallia built security KPIs for the business to drive measurable (positive) change....

If infrastructure is code, security needs to be code too—but that reality has tremendous implications on a security team. How can a security team adapt its culture, build the necessary skills, recruit the right talent and transform itself to...

This co-speaker session will lead the audience on an exploration of motivations behind breaches and what actually happens to the money that nefarious actors gain by exploiting compromised credentials. It is common knowledge that compromised...

Large organizations ignore international travel as a risk. Impenetrable core facilities provide a false sense of security if the weak link crated by border crossings is not controlled. This session will present a case study for implementing...

Learn how to manage the dynamic nature of both security standards and DevOps technologies in our product development pipeline. Learn to leverage automation of DevOps tools for rapid reaction to standards changes, work with standards groups to...

If infrastructure is code, security needs to be code too—but that reality has tremendous implications on a security team. How can a security team adapt its culture, build the necessary skills, recruit the right talent and transform itself to...

How do you identify and mitigate trendy items fraud? This talk will cover examples for hot-items fraud trends from the last decade (from Zhu Zhu Pets 2009, through airlines/travel 2016, to Bitcoin 2019). The talk will use an interactive game...

You must break free of password vulns but the reality is legacy auth woven into the org in various stages of technical debt. Large enterprises may close 95 percent of the holes while attackers find the remaining 5 percent. This session will...

TheHive is an open source Security Incident Response Platform that makes SOCs, CSIRTs, CERTs life easier. TheHive is integrated with Cortex, a standalone engine for Active Response and Incident Observable Analysis leveraging legacy and third-party...

Public-Key Cryptography Algorithms and Applications, Part 2:  Accumulators and Zero-Knowledge Proofs

Topic 1: Universally Composable Accumulators

Author(s): Foteini Baldimtsi (George Mason University, USA),...

Intuit safeguards financial information for millions of people, and encryption is one of the main tools to protect this data. Learn how Intuit developed a secure and scalable system to manage encryption keys for thousands of internal applications....

The cybersecurity community has discussed intelligence sharing for 30 years, but progress has been slow. One impediment is the idea that sharing threat intelligence gives away an advantage. However, sharing actually enhances your competitive...

Various protection features and constraints in a system make acquiring and reversing firmware a daunting task. The speakers will present a methodology that can efficiently reverse-engineer firmware, especially with the help of low-level hardware...

An overview of Equifax Canada’s experience in convincing multiple clients to participate in a single client cybersecurity audit, developing the scope and benefits to both clients and vendor.

Pre-Requisites: Some knowledge...

Artificial intelligence (AI) holds great promise to empower us with knowledge and scaled effectiveness. To harness the power of AI systems, we can—and must—ensure that we keep humans safe and in control. This session will introduce a new user...

SIMs and Secure Elements are well-proven hardware components, enabling various devices to be connected and trusted across multiple applications such as payment, travel and authentication, for example. Global manufacturers, IoT service providers,...

Planning on introducing a mobile app into your product mix? Expect new attacks on your API infrastructure. Help Shipfast and ShipRaider battle for control of a driver delivery app by exploiting API keys, OAuth2 user authorization, TLS certificate...

What is data ethics? How can we use data ethics, company values, and stakeholder and societal expectations to fuel privacy engineering and create better security products? The panelists will share their vision of a world in which data ethics...

You must break free of password vulns but the reality is legacy auth woven into the org in various stages of technical debt. Large enterprises may close 95 percent of the holes while attackers find the remaining 5 percent. This session will...

In this session presenters will share their experience monitoring the RSAC network for stability, security and stats of interest, exploring trends and sharing stories. If you’d like to see what a network looks like when its users know security,...

In this session presenters will share their experience monitoring the RSAC network for stability, security and stats of interest, exploring trends and sharing stories. If you’d like to see what a network looks like when its users know security,...

The worldwide Mercedes-Benz community creates and nourishes a mindset which is the foundation for how the company understands, develops and lives cybersecurity. For securing a diverse fleet, it is essential to leverage the power and skills of...

Not every generation is alike, nor should they be treated the same way. This session will discuss the importance of understanding how multigenerational psychology and attitudes impact your security strategy. You will learn about best practices...

What is data ethics? How can we use data ethics, company values, and stakeholder and societal expectations to fuel privacy engineering and create better security products? The panelists will share their vision of a world in which data ethics...