2018 Washington DC Breach Prevention Summit

Breach Response: The Board's Role & PR Mistakes to Avoid

Mark Rasch - Rasch Technology and Cyber Law  •   • 

• Twitter
• Facebook
• LinkedIn

In the modern cybersecurity regime, it is no longer about whether or even if an entity will suffer a breach, but rather how it will respond. This session will focus on the roles and responsibilities of the Board of Directors and senior management in the prevention of and response to data security and privacy...

Start this Session

Cyber Insurance: A Rising Role in Mitigating Risk for CISOs

Richard Bortnick - Traub Lieberman Straus & Shrewsberry, LLP  •   • 

• Twitter
• Facebook
• LinkedIn

As malware, business email compromises, phishing and vishing scams, etc. continue to evolve and proliferate, the same is true with cyber insurance. In the past two years, the cyber insurance market has matured, as growing numbers of insurers, brokers and policyholders have gained a greater understanding of the...

Start this Session

First, Last and Best Line of Defense: Perimeter Security Still Matters

Adam Bixler - NETSCOUT Systems, Inc.  •   • 

• Twitter
• Facebook
• LinkedIn

There is no shortage of security tools in any large government IT environment that are targeting specific cyber threats for a specific outcome. Yet, most agencies lack an always-on, in-line capability that allows them to operationalize their cyber threat intelligence programs. Blocking suspicious connections to...

Start this Session

Cyberwarfare - Hacking the Giants

Eddie Doyle - Check Point Software Technologies  •   • 

• Twitter
• Facebook
• LinkedIn

Nation States have unlimited resources to build cyberweapons. Coordinated Crime Syndicates steal those cyberweapons & use them or sell them, causing massive destruction. We need a cyber "red phone" dialogue available with other nations, but the internet is a nefarious nation's best friend. Come & hear how just a few...

Start this Session

Implementing a Zero Trust Security Model in an Untrusting World

General Gregory Touhill, Retired - Cyxtera Federal Group  •   • 

• Twitter
• Facebook
• LinkedIn

Snowden proved you can't trust on the inside. OPM proved you can't trust the outside. Who should you trust when it comes to your data? No one! In this provocative and informative presentation, retired Brigadier General Greg Touhill, the first Chief Information Security Officer of the U.S. government and current...

Start this Session

Protecting the Nation's Critical Assets: When Cyber Hygiene Is Not Enough

Ron Ross - National Institute of Standards and Technology (NIST)  •   • 

• Twitter
• Facebook
• LinkedIn

As we push computers to "the edge," building an increasingly complex world of interconnected information systems and devices, security and privacy continue to dominate the national dialogue. The Defense Science Board in its 2017 report, Task Force on Cyber Defense, provides a sobering assessment of the current...

Start this Session

Continuous Assurance Using Data Threat Modeling

Fouad Khalil - SecurityScorecard  •   • 

• Twitter
• Facebook
• LinkedIn

Enterprises are challenged to move the process of accounting for data in a structured, systematic way higher on the list of priorities. One option to accomplish this challenge is by applying application threat modeling principles to data (data threat modeling). Application threat modeling provides value by allowing...

Start this Session

Identity Deception and Social Engineering Attack Vectors - Email Makes It Easy!

Andrew Coyle - Agari  •   • 

• Twitter
• Facebook
• LinkedIn

Despite the proliferation of social networks and messaging apps, email remains the primary means of communication today. Unfortunately, it also remains a persistent threat vector for cybersecurity abuse. We see these evil emails everywhere: at work, at home and in the news, attempting to sell something, or steal...

Start this Session

Blockchain and Fraud Prevention: Business and Technical Challenges to Make it Scale - Will We Ever Get There?

Avivah Litan - Gartner Research  •   • 

• Twitter
• Facebook
• LinkedIn

Financial fraud can be notoriously hard to detect and easy to cover up. But does blockchain technology with its distributed digital ledger now offer a new tool to help organizations reduce risk and prevent fraud? Which key business and technical factors will help blockchain scale for the large enterprise? Attend this...

Start this Session

Open Source Components - Vulnerabilities at Work: An Exponential Increase in Speed and Risk of Breach

Maria Loughlin - Veracode  •   • 

• Twitter
• Facebook
• LinkedIn

Open source and third-party components help developers build and deploy applications faster. But with increased speed comes greater risk. Vulnerabilities in components are a hidden cost of free software. And their widespread use creates opportunities for attackers looking to exploit the most possible victims by...

Start this Session

Introducing the New Common Risk Management Framework: The Financial Services Sector Cybersecurity Profile

Denyette DePierro - American Bankers Association  •   • 

• Twitter
• Facebook
• LinkedIn

In October of this year, the banking industry unveiled its new Cybersecurity Profile to help financial institutions develop and maintain cyber risk management programs. This groundbreaking document - the culmination of two years' work - marries the NIST Cybersecurity Framework with the finance sector's highly complex...

Start this Session

Identity theft and ATO, CNP and IRS Fraud at scale: A Walk-through From the Founder of Shadowcrew.com on Profiting From the Underground for 20 Years

Brett Johnson - "The Original Internet Godfather"  •   • 

• Twitter
• Facebook
• LinkedIn

Brett Johnson, referred to by the United States Secret Service as "The Original Internet Godfather" has been a central figure in the cybercrime world for almost 20 years. He founded and was the leader of Counterfeitlibrary.com and Shadowcrew.com. Working alongside the top cyber criminals of our time, he helped design,...

Start this Session

Finding Fraud Using Machine Data: It Works!

Jim Apger - Splunk  •   • 

• Twitter
• Facebook
• LinkedIn

Security hygiene can be poor, and criminals know it. Fraudulent activity costs are in the billions worldwide across industries, and over 16 million consumers in the US were victims of identity theft or fraud in the past year. Learning to onboard new data at the speed of the business will ensure your fraud team can...

Start this Session

Data Integrity: We've Lost the Confidentiality & Availability Battle

Diana Kelley - Microsoft  •   • 

• Twitter
• Facebook
• LinkedIn

Stolen data is one thing - the consequences are obvious. But what if data is not stolen or leaked, but rather altered? What could be the damage? Diana Kelley of Microsoft discusses data integrity and how to preserve it. Join this session, as Kelley discusses: How and where data can be altered - and the potential...

Start this Session

Insider Threat Program Goals: Thwarting Malicious and Accidental Insiders - Why Are We Still Failing?

Randy Trzeciak - CMU  •   • 

• Twitter
• Facebook
• LinkedIn

When it comes to fraud prevention, many organizations overlook the insider threat - both the malicious actor who intends to commit fraud, as well as the accidental insider who makes a mistake or is taken advantage of by an external entity? This topic is particularly relevant now, when many public and private sector...

Start this Session