Mark Rodriguez
System Engineer
Southwest Region

Analyzing the DNA and Risks associated with Privileged Accounts. 

Privileged accounts and passwords are extremely powerful, and have complete control of the target system with full access to all of the information on that system. This vulnerability could potentially cause tremendous financial losses and reputational damage for businesses.

For enterprises, privileged accounts are especially difficult to manage:

• The average enterprise has thousands of privileged identities, accounts, and passwords. Manually managing and updating these are a time-consuming, costly and repetitive process.
• Administrative and application accounts (hard-coded, embedded credentials) are found on virtually every piece of hardware, software, and application within an organization, including virtual environments.
• Administrative or application accounts are shared, which means that the system does not track WHO logged in as an Administrator, merely that a login occurred—a significant audit challenge.
• Unlike a personal identity, such as JDoe, administrative or application accounts are nearly impossible to disable due to high potential for disruption to business.
• Administrative and application accounts are subject to regulations such as Sarbanes Oxley, PCI, and Basel II, requiring that companies prove exactly who logs in to sensitive systems and, increasingly, what they are doing.

Do you know how many privileged identities are in your environment? 

Mike Jackson
Solutions Engineer

Five Security Questions to Ask When Choosing a Cloud Provider

Increasingly, companies are moving components of their business operations to the cloud, including backup and disaster recovery. The reasons are compelling:

• Reduced IT expenses
• Greater efficiency
• Greater collaboration and mobility

But news headlines are a stark reminder that not all Clouds are created equal. When evaluating a Cloud service provider to manage your critical business data, it’s important to understand how your security goals and those of the Cloud provider are aligned.

Asking five critical questions today could save you considerable headaches tomorrow. Learn what these questions are and how they can help you ensure a secure cloud solution for your organization.

>>click here for the presentation

Chadd Milton
Principal Sales Engineer

Fight back against Java exploits and Spear-Phishing

Your adversaries have figured out that the quickest way into your network is through your users and a new favorite exploit pathway is through Java. Java is proving itself to be an absolute security mess but you can't just uninstall it - the bad guys are using this to their advantage as is evidenced by the wave of recent 0days found in the wild. Using Java based exploits among a big bag of other tricks, our adversaries are hitting our users on a daily basis. Spear-phishing using malicious links or weaponized document attachments; watering-hole attacks using hijacked legitimate sites; poisoned search engine results and social networking worms; and scare ware tactics are all on the rise. Training your users is not an effective solution to this problem. Join us for an educational discussion and learn how you can turn the tide against user directed threats.

In this session, we will discuss:
Real-world case studies of Java exploits in the wild, spear-phishing and watering hole attacks.
The emergence of virtualized environments for the browser, PDF reader and complete document suite that can detect zero-days without signatures, thwart attacks in progress and feed pre-crime forensic information to the broader security infrastructure.
The differing motives of adversaries and how they are targeting your users and duping them into becoming the unwitting accomplices to breach.

>>click here for the presentation

Matt Hubbard
Sr. Regional Product Manager

Securing Your Physical, Virtual, Cloud Infrastructure

Protect confidential data, ensure compliance and prevent costly damage, without hindering productivity. Join Trend Micro and learn how to secure your data at rest or in motion; accessible on servers, desktops, laptops, tablets, smartphones and even removable media. Let Trend empower you to prevent unauthorized access and data breeches throughout your enterprise, regardless of whether your infrastructure is physical, virtual or in the cloud.

>>click here for presentation

Neal Hartsell
VP of Marketing

Real-time Security Analytics: Visibility, Alerting or Forensic Digging - Which is it?

Global cybercrime is now a $388 billion business.  It only takes minutes for hackers to breach your network and exfiltrate valuable assets.  But, it takes weeks to months to figure out it even happened.  Signature products are easily bypassed.  Other point security products aren't able to piece together multistage attacks.  Log management and forensics tools are rearview mirrors at best.  The attack surface, hacker automation, and overwhelmed security personnel are creating the perfect opportunity for your company to make the wrong headlines.  It’s time for a new approach.

Security Analytics is an emerging market focused on finding, contextualizing and automating action around the hard to find activity that leaves breadcrumbs of dangerous activity in the massive volume of data companies are collecting.  Click Security is focused on Real-time Security Analytics -  the real-time conversion of data into actionable intelligence that helps organizations address a broad range of security needs associated with BYOD, IP Theft, Consumerization of IT, APT's and more.

In this session we will address the following questions:

1. What is a security analytic anyway?
2. Who on my staff would actually use this product?
3. What problems does it actually solve?
4. Does it replace products like Log Management systems and SIEMs?

Jay Gregg

Dynamic Security against Modern Threats in a Virtualized Environment

Securing the network has never been more challenging.  First, threats are increasingly targeted, fast-moving and evasive.  Second, the computing environment is constantly changing with initiatives like virtualization and BYOD.  This presentation reviews these challenges and offers approaches to network security that keeps pace with both the dynamic computing and threat landscapes.

>>click here for the presentation