Agenda

From internet-connected CCTV cameras to office temperature sensors, IoT devices have introduced an entirely new threat into the attack landscape. While developers have focused on perfecting the convenience and utility of their products, their security proficiency has lagged behind. As a result, devices have been rushed to market rife with zero-day vulnerabilities. Such technology is often implemented without the consultation of security teams, is outside their awareness, and, subsequently, outside of corporate protection. For attackers, these are the perfect means of surreptitious entry.

Join Dave Masson, Darktrace’s Director of Enterprise Security, and Marcus Fowler, Darktrace’s Director of Strategic Threat, as they discuss the challenges of securing IoT devices, and learn how Cyber AI is able to spot the full range of IoT threats in their earliest stages, before autonomously responding to contain the malicious activity. In this session, find out more about:

• How Darktrace’s AI understands what ‘normal’ looks like for all IoT devices on the corporate network

• How Darktrace recently thwarted a Mirai malware attack on a CCTV camera

• How a low-and-slow attack on a smart locker was neutralized by Cyber AI within seconds

Speaker: David Masson

Director of Enterprise Security

David Masson is Darktrace’s Director of Enterprise Security, and has over two decades of experience working in fast moving security and intelligence environments in the UK, Canada and worldwide. With skills developed in the civilian, military and diplomatic worlds, he has been influential in the efficient and effective resolution of various unique national security issues. David is an operational solutions expert and has a solid reputation across the UK and Canada for delivery tailored to customer needs. At Darktrace, David advises strategic customers across North America and is also a regular contributor to major international and national media outlets in Canada where he is based. He holds a master’s degree from Edinburgh University.

Speaker: Marcus Fowler

Director of Strategic Threat

Marcus Fowler spent 15 years at the Central Intelligence Agency developing global cyber operations and technical strategies, until joining Darktrace in 2019. He has led cyber efforts with various US Intelligence Community elements and global partners, and has extensive experience advising senior leaders on cyber efforts. He is recognized as a leader in developing and deploying innovative cyber solutions. Prior to serving at the CIA, Marcus was an officer in the United States Marine Corps. Marcus has an engineering degree from the United States Naval Academy and a Masters’ Degree in International Security Studies from The Fletcher School. He also completed Harvard Business School’s Executive Education Advanced Management Program.

As we step into 2021, this is the year that we move past the old paradigm of identity being an important back-office function and leap into a realm where identity is the not only the critical tip of the security spear but also the driving force for a modernised business. Everyone is talking about Zero Trust – it is the identity buzz word of the year. In this presentation Lori Robinson will discuss how the Identity industry is innovating around a Zero Trust architecture and discuss the top 5 Identity trends that will dominate Identity in 2021.

Speaker: Lori Robinson

Sr. Director of Product & Market Strategy

Lori Robinson is a Sr. Director of Product and Market Strategy at SailPoint where she leads a team of individuals responsible for developing and evangelizing SailPoint’s corporate and product strategy. Lori has over 15 years of experience in the identity and access management industry. Prior to joining SailPoint, she was a Managing Vice President at Gartner where covered the identity governance and administration, privileged access management, and consumer IAM markets.  She also served as a Managing Vice President for Gartner’s data management team where she led a team of experts covering databases, data integration, and data governance technologies. Lori is a recognized industry thought leader, speaker, and publisher. She is passionate about advancing opportunities for women in IT and has led various user groups, round tables, and events for women in identity.  

SIEM data has the ability to transform systems beyond SOAR. In this talk Jake will demonstrate how the sharing of specific types of telemetry can be automated across multiple disparate systems to reduce risk and operational demands.

APIs will account for 90% of attack surface area for web applications this year1. Developers and attackers gravitate towards APIs for similar reasons: they’re flexible, suited for automation, and exchange critical data. As API footprint and functionality grows, so does their appeal to attackers. Proactive API protection must be a key priority in your application security strategy.

Security experts Jimmy Mesta and Rob Gibson will demonstrate tactics to stop four common API threats:

- Account takeover (ATO)

- Enumeration

- Content scraping and probing

- HTTP verb tampering

Speaker: Jimmy Mesta

Head of Security Research, Fastly

Jimmy Mesta is a veteran application and infrastructure security leader with 15+ years of experience. He has spent time on both the offensive and defensive sides of the industry, working to build modern, developer-friendly security solutions. Prior to Signal Sciences, Jimmy maintained a global network, consulting with companies, and delivering technical security training, research, and infrastructure around the world. He previously ran the local Santa Barbara OWASP chapter and taught Kubernetes, Docker, DevOps, mobile security, and pentesting courses for Manicode. Follow Jimmy on Twitter @jimmesta.

Speaker: Rob Gibson

Product Manager, Fastly

Rob Gibson is product manager for defense experience at Signal Sciences, now part of Fastly. Prior to that, Rob worked at Symantec where he focused on Norton consumer security, mobile security, and identity access management (IAM). He has an MBA from UCLA Anderson School of Management.

Cloud adoption has grown rapidly over the past decade and has increased exponen9ally due to COVID-19 and a globally distributed remote workforce. Join me in this session as we walk through 5 practical tips you can follow to improve security in your cloud services, including leveraging two factor authentication (2FA) and logging/monitoring cloud systems.

Speaker: Alex Jones

IT Security Manager, Cobalt

Alex Jones is the Information Security Manager at Cobalt.io. Alex is passionate about cloud security, offensive security and pentesting. He is a certified cybersecurity and technology professional with award-winning projects, services, support and consulting. With over fifteen years of experience in technical roles and seven years of direct security/compliance experience, he is dedicated to delivering exceptional results for both clients and the organization.

A deep dive into breaches and how vulnerability has been one of the key (and often the sole/main) contributors to their success. Join Steve Marshall, UK Group CISO, Bytes UK with Adam Palmer, Chief Cybersecurity Strategist from vulnerability management market leader Tenable to understand the role vulnerability plays in successful breaches, and learn how to lock down on this earlier, easier and with more lasting effect. See the importance of vulnerability visibility and prompt action and understand exactly how vulnerability was the lynchpin of many a headline hitting breach in recent times.

Speaker: Adam Palmer

Chief Cybersecurity Strategist, Tenable

Adam has over 20 years working in cybersecurity. His experience includes executive positions at large cybersecurity vendors, leading the U.N. Global Programme against Cybercrime, and working as the Global Director for IT & Cyber Risk at one of the largest EU banks. Adam’s diverse global background perfectly positions him to understand and advise security leaders to be successful.

The traditional perimeter is dead! So how do you protect your network in 2021 and beyond?

The answer is a fundamental shift in your attitude to security, away from implicit trust and towards a default position where you trust no one without good reason. The first step on the pathway is Zero Trust Network Access (ZTNA).

Even if you are not currently planning to adopt a Zero Trust approach, the technology decisions you make today will impact the ease of turning to this technology in the future.

We invite you to take the next step towards a more secure future by using our simple, accessible approach, which allows you to benefit from the security advantages of Zero Trust… and beyond.

Hear about how expectations are driving the world of security, customer needs and desires and the ultimate requirements for sustainable intelligence and reliable response. Listen to thoughts on risk, integration, critical metrics, common themes and the overall security journey that all businesses are on as they drive to understand and control their security posture and, ultimately, protect their customers and industry reputation.

Speaker: Chris Roberts

Business Development Manager, AI Ops, Fortinet

Chris has worked in IT since 1992 across a variety of disciplines such as IT support, project management, departmental head and business development management, moving into security focussed roles from 2003. Time at various key vendors such as HP, Cisco and Fortinet as well as time at more specialised VAR’s has given him a variety of relevant experience. Even though now in a business development commercially focussed role, he still enjoys the techier side of things so invariably spends some of his spare time configuring his home Fortinet deployment! Aside from technology and security he enjoys running, cycling, movies, reading, MotoGP and meeting up with friends and family when allowed!

50% of software vulnerabilities are found in the design. Once in production, they’re 100x more expensive to fix. The answer? Threat modeling. By scoping your security requirements in the design stage, you can avoid developer rework and delays to production - so why is no one doing it? In this session, Jonny Tennyson, Head of Client Innovation at IriusRisk, will talk about what threat modeling is, why people aren’t currently threat modeling, and ultimately ask the question: ‘why aren’t we all threat modeling?’

Cyber attacks via email are stealing millions of pounds from businesses and putting them at risk of going out of business. Every company, no matter its size is a target, and the damages go well beyond the financial loss to include the cost of recovery, the disruption of operations, undermining the business reputation …. We’ll talk about the risks your employees pose and who are the most likely phishing targets.. and about ways you can prevent them seeing those phishing emails in the first place.

Over the last decade, ransomware has increasingly become the most popular option for hackers to monetize the access they’ve obtained to corporate computer systems around the world. Over the last few years, we’ve observed the ransomware software and techniques adapt and evolve to include the theft and exposure of private information, creating extortionware as a new breed of malicious software. This talk will provide an overview of these techniques and discuss the potential privacy and security impacts you may face as a result.

Rob deMain takes you through the key challenges facing security operation teams today and outlines, with a demonstration, one view of the future of security operations in light of these challenges. 

Colonel John Doody is the Author of new book “From Stripes to Stars” & Director of Interlocutor Services, a company established to promote Information Assurance & Cyber Security issues nationally & internationally Prior to this John served at CESG/GCHQ for 10 years in the role of Head of Information Assurance Customer Services.

Ciaran Martin is Professor of Practice in the Management of Public Organisations. Blavatnik School of Government, University of Oxford.
Prior to joining the School, Ciaran was the founding Chief Executive of the National Cyber Security Centre, part of GCHQ.
Ciaran led a fundamental shift in the UK’s approach to cyber-security in the 2nd half of the last decade. 
With the GCHQ connections, a memorable encounter is anticipated.