Don Moose
Systems Engineering Manager
Southeast District

Using The Next Generation Firewall for Detection and Control of Modern Malware

Modern malware is at the heart of many of the most sophisticated IT security breaches the industry has ever seen. Malware has evolved to become some of the most highly evasive, adaptable and resilient networked applications in the world, and often act as the platform for attackers to launch and control increasingly sophisticated attacks. Join us as we dive into the world of modern malware to see what is real, what is hype and what things we need to be doing as an industry and as individual security practitioners to protect our users and networks.

Ruby Raley

Understanding Managed File Transfer:
Moving from Chaos to Control

In this session you will learn about the many aspects of securing file transfers both internally and with partners and customers.

Learn what organizations have done in the past to transfer files

• What is FTP, and why it is ubiquitous and a problem
• Understanding Managed File Transfer
• A look at things we do today to move files for differing reasons
  

Understand the reasons organizations transfer files through patterns of file transfer

• Application integration
• Multi-site integration
• Business to business communication
• Portal based file transfers
• Human to human ad-hoc transfers
  

Discover best practices for creating solutions that securely satisfy your organizations file transfer needs

• Creating architectures that provide confidentiality, integrity and availability for transfers
• Building a flexible platform that satisfies multiple file transfer patterns
• Providing governance of file transfers through visibility and control of transfers
• Creating a solution that is operationally efficient

>>click here for the presentation

Charlie Provenza

Onboarding Personal Devices to Corporate Networks

Many IT organizations are being asked to allow personal devices onto corporate networks.  Unlike corporate-issued devices that are well-managed and under IT’s control, this new Bring-Your-Own-Device (BYOD) initiative introduces a unique set of security challenges that require a balance of flexibility, visibility, security.

This presentation will explain the concept of a “BYOD Blueprint” and lessons learned from onboarding personal devices to over 800 networks around the world.

>>click here for the presentation

Trey Ackerman
Director Systems Engineering, NA

SIEM: The Tangible and Intangible ROI

Steve Ward

Protecting the Unwitting Accomplice to Breach - Putting Your Users in a Bubble

Last year at this conference, we introduced significant evidence that the user had become the unwitting accomplice to the breach of your networks. Fast forward one year later; the only thing that has changed is the fact that adversarial targeting of your users has increased exponentially.

The adversary knows that you have to grant your users access to the outside world - and that no amount of training will ever change human tendencies of curiosity. They know that every time your users go out to the Internet or open their email clients, they have a high likelihood of being tricked into opening the drawbridge to your financial data, your client and patient PII and the crown jewels of your organization...your intellectual property.

What can be done to protect the network from the user and the user from themself?

• Put the user in a protective bubble EVERY time they go out to the Internet or open the email client.
• Place the user in a contained environment when running highly targeted applications such as the web browser, PDF reader and Office suite.
• Arm the environment with behavioral as opposed to signature based detection and kill attacks immediately upon identification.
  

You can attend hundreds of sessions and still face a massive problem related to user targeting...or you can attend this session and finally start fighting back.