Agenda

Targeted ransomware attacks and data breaches are on the rise with increasing complexity and frequency. The pressure is on security teams to detect and respond to cyber incidents before they can affect business operations and your reputation.

Join us as we delve into the critical role proactive threat hunting plays in detection and response and learn what is required to be effective, debunking some of the common myths about SIEM, vulnerability scanning, threat intelligence, and more.

In this session, we will discuss the need for a holistic approach to security and how de-centralization provides an opportunity to move towards zero trust.

Authentication is a foundational element of every cybersecurity program. With more than 80% of data breaches and most ransomware incidents stemming from credential-based attacks (e.g., phishing, credential stuffing, RDP brute, etc.), it has become clear that passwords are a fatally flawed authentication method. Unfortunately, many common solutions are “band-aids” on top of passwords and are lacking from both a security and user experience perspective.  Replacing passwords as an authentication factor is finally possible. While eliminating passwords is a critical step in stopping credential-based attacks, it is just a first step on the journey to advanced authentication and access control needed to achieve zero trust.In this talk, we will discuss:

• A brief history of authentication
• Changing requirements in the new work from home(or anywhere) business model and cloud-centric architectures
• Can we gain risk-reduction improvements by converging the traditionally disparate identity and security processes and technologies?
• A case for continuous user authentication
• What is device risk and why is the real-time assessment of endpoint security important

Bad actors have recognized the power of open source and are now beginning to create their own attack opportunities. This new form of assault, where OSS project credentials are compromised and malicious code is intentionally injected into open source libraries, allows hackers to poison the well.  In this session, Sonatype will explain how both security and developers must work together to stop this trend. Or, risk losing the entire open source ecosystem.

·        Analyze, and detail, the events leading to today’s “all-out” attack on the OSS industry

·        Define what the future of open source looks like in today’s new normal

·        Outline how developers can step into the role of security, to protect themselves, and the millions of people depending on them