Full Agenda

We know based on conversations with our community that ransomware attacks are increasing for a variety of reasons and that payments have been increasing accordingly. The FBI discourages organizations from paying ransomware and now the Department...

In addition to being a global health crisis, COVID-19 fundamentally altered the attack surface of organizations worldwide. As companies transitioned from the office to a remote-workforce posture, adversaries levied tactics designed specifically...

This session will use real-world examples to demonstrate how the erosion of boundaries between work and life, coupled with an increasingly distributed workforce, have laid the groundwork for a evolved threat: insider hacktivists. This session...

Meet MITRE ATT&CK’s younger cousin: MITRE Shield! MITRE InfoSec leaders will dive into Shield, a new, active defense knowledge base focused on foundational techniques for deception and adversary engagement. The presentation will unpack the knowledge...

The spread of COVID created an urgency to build resilience in our enterprises. As the lines continue to blur between digital and physical cyberattacks, what impact is this having on security professionals? Resilience in both our security strategy...

The amount of work security teams have to handle is increasing rapidly, but without the tooling or staffing to keep up, how do you address the challenge? Many teams try to leverage automation, but they find that it only helps them with the basics....

The COVID pandemic triggered massive health, economic and societal disruption and loss. It also upended privacy and cybersecurity challenges and expectations. This presentation will explore lessons learned as a result of those experiences –...

When someone thinks of cyber threat intelligence, they often think of one thing: advanced persistent threats (APTs). In this talk, Katie will explain why too much focus on APTs has misled our community about the value cyber threat intelligence...

What’s a common challenge for application security teams? To drive meaningful change and scale to the pace and size of IT. Target’s experience was no different—so the team switched from enforcer to teacher. This session will describe successes...

This session will first show how the terms "Artificial Intelligence" and "Machine Learning" have been overhyped in cybersecurity but point out the starting points for use cases that advanced techniques have shown value. The session will then...

Although APIs offer the means to rapidly roll out new business models and create pleasant customer experiences, APIs have become a growing target for attackers. The session includes a case study highlighting how a company increased API visibility...

AI reliability has yet to be considered in data science, yet is required to predict how a model will perform over time in the field. What exactly constitutes AI reliability, how do we maximize and measure it, and why is it needed? This session...

In this session you will build an application security checklist customized for your specific technology needs. The checklist you build can be used by development, operations and/or security teams to improve the application security posture...

This session will include findings and insight about both the opportunity as well as the challenges to transform organizations from cybersecurity to cyber resilience, including: How to establish and lead their own diverse teams down a roadmap...

When applied to Cyber Security, Chaos Engineering is advancing our ability to reveal objective information about the effectiveness of operational security measures proactively through empirical experimentation. In this session we will introduce...