Data Connectors is proud to host the Canada-East Virtual Cybersecurity Summit.

Our audience primarily focuses on the provinces of Ontario and Quebec – so those in the metro areas around Toronto, Ottawa, and Montreal. Since we’re broadly focused on all those areas, all of the presentations today will be in English. (With apologies to our French-langauge preference attendees in Quebec.)

Your CEO is Not Your CEO! How to defend against email fraud

Email fraud leads to two main threats- one is Business Email Compromise (BEC) where attackers pretend to be you; the other one is Email Account Compromise (EAC) where attackers actually become you. BEC/EAC scams have cost the victimized businesses over $26 billion since 2016. What they have in common is that they both target people. They both rely on social engineering and are designed to solicit fraudulent wire transfers or payment. Unlike malware attacks, BEC and EAC don’t typically include detectable malicious payload. These types of threats can be hard to recognize because to the target these business requests sent by the impostors seem very routine and reasonable.

Join our session and learn about:

• What is BEC and EAC? And how do they work?
• What are the common attack tactics regarding this new form of email threats?
• Best practices to defend against BEC and EAC

Speaker’s Bio:

Denis Ryan is Senior Director, Email Fraud for Proofpoint, Inc. Previously, Denis held management positions at several well-known high-tech companies including Nominum (now part of Akamai), Tellabs (now Coriant), Verizon and IBM. As a sales leader of the fastest growing business unit in Proofpoint, Denis oversaw the go to market sales and sales engineering strategy post the Return Path business unit acquisition. The diverse background of IT and security solutions allows Denis to overlay the Proofpoint sales efforts in multiple verticals, most notably Healthcare as Proofpoint has ramped this specialized team to improve email authentication practices. He resides in the Dallas-Fort Worth metroplex, mentors undergraduates for his alma mater (University of Dallas) and volunteers his time for various local charities.

Evolution of An Attack: How a Persistent Threat Actor Adapts to Fool Microsoft

The arms race between email attackers and defenders is a long and expensive one. In this webinar, we analyze the attack methods of a single advanced persistent threat organization that guarantees its dark-web customers that their messages will bypass Microsoft security.

We review the software they use to send email from anywhere in the world, their techniques that take advantage of both short- and long-lived vulnerabilities and the infrastructure to harvest credentials and perform attacks almost instantaneously.

You will be surprised by the sophistication of the tools as well as their ease of use. Updated regularly with release notes and training videos, they are not ‘hackers’, so much as software developers with a very clear product offer: 100% access to your inbox.

We watch them over time and show how the tricks they use provide us with the indicators-of-attack we need to stop them.

Identity and Access Management: Embracing the complexity

Admittedly, IAM can be intimidating. Ensuring company assets are being accessed only by those who are authorized is a crucial, non-trivial task but we should embrace the challenge. In this session we will discuss the complexities of IAM by reviewing what digital identity really is, and what challenges exist when implementing access management controls. We will discuss a typical IAM use-case and how we can embrace its complexities while avoiding the need for large architectural changes.

Speaker’s Bio:

Matthew Marji is a Senior Product Security engineer for Auth0, an identity platform for application builders. He possesses the natural ability to simplify difficult security concepts; empowering the engineering teams he works with to build secure applications. In his free time, he lifts weights, enjoys espresso, and reads the OAuth2 RFC.

The Impossible Puzzle of Cybersecurity

With IT teams around the world struggling to keep up with the latest cybersecurity threats, it is now the norm to be hit by a cyberattack.

Finding an end-to-end security solution that can protect against all types of cyberattacks can be difficult, and ensuring that your organization has the resources to manage the different security products can be an even bigger challenge.

Sophos simplifies the management of all of your security needs with our Synchronized Security technology, and provides the latest in threat analysis and attack mitigation capabilities to maximize your protection, for your endpoints, servers and mobile devices.

Speaker’s Bio:

Darryl J. Maurice – Sales Engineer at Sophos, CISSP, CRISC, CISA

• Over fourteen years of experience in the field of IT technical services and twelve years in information security
• Over ten years serving in a highly customer-facing role, performing high-profile customer consultations and presentations (around North America and internationally)
• Industrial expertise with network security design, product integrations, training, maintenance, troubleshooting, pre-sales and post-sales support
• Architectural expertise with Check Point, Palo Alto and Sophos security products (network, mobile, endpoint, server, wireless, email, web), VPNs and network security design, with deep understanding of small, medium and large enterprise and non-enterprise environments
• In-depth customer relations experience with Fortune 1000 companies, as well as with government, police, health and financial institutions at all levels of network security
• Professional qualifications: Certified Information Systems Security Professional (CISSP – (ISC)²), Certified in Risk and Information Systems Control (CRISC – ISACA), Certified Information Systems Auditor (CISA – ISACA)

Driving the End Game in Cyber Hygiene

Critical labor shortages in Cyber Security have created unprecedented demand for solutions to deliver real-time actions that immediately reduce risk to operations. To do this, companies must have complete knowledge of everything on the network, machine-speed assessment of endpoint risk, and a willingness to automate actions to quarantine threats from high-risk devices or to isolate and protect vulnerable systems. In this session, Greg will share why automating your Cyber Hygiene at global scale is crucial to reducing risk across your extended enterprise.

Session highlights include:

• What is ”Cyber Hygiene” and why does it matter?
• How business-specific IOT complicates enterprise scale compliance
• Why properly managed network segmentation can “secure the un-securable” (or in other words: how to live in a state of known vulnerability)

Speaker Bio:

Greg Jackman joined Forescout in February 2019 as the Regional Director of Sales for Canada. Prior to joining Forescout, Greg spent 10+ years managing the Canadian network sales team and selling into major enterprise accounts for Brocade. Previous to Brocade, Greg was an Enterprise Sales executive at Veritas and RSA, where he focused on selling security solutions and data centre infrastructure to the largest organizations across service provider, financial, healthcare and utility verticals. With more than 25 years of experience in all facets of IT and cybersecurity, Greg brings a wealth of knowledge in leading the Forescout Canadian team.

Risk Management – Insights in a World Gone Crazy

Join Phil Richards, CISO for Ivanti, as we discuss key concepts and strategies for Risk Management. A few of the questions to be addressed in this session include: Is risk always a bad thing? How do you categorize risk according to your company’s objectives? Do data breaches really impact the big companies? What are the steps to recognizing, assessing and managing risk? The answers to these and many other questions will be discussed in this very important and timely session.

Speaker’s Bio:

Phil has both breadth and depth of security experience. He currently works as the Chief Information Security Officer for Ivanti. He has held other senior security positions including the head of operational security for a medical manufacturing corporation, Chief Security Officer for financial services technology (FinTech) company, and Engineering Director at a regional healthcare corporation. In his security leadership roles, he has created and implemented information security policies based on industry standards. He has led organizations to clean PCI DSS and HIPAA compliance attestations, implemented security awareness training, and established a comprehensive compliance security audit framework based on industry standards. He has led Ivanti through their most recent FedRAMP authorization process. He has implemented global privacy policies, including addressing privacy issues in the European Union. Transforming an organization requires focus on the objectives, clear communication, and constant coordination with executive leadership, which is exactly what Phil has focused on during his security career.

This session will feature all of the presenters from the morning agenda, answering questions from the audience live via video, in a panel format. Each presenter will take questions that pertain to their topic, and if there is time, they will also respond to a few questions about larger trends and directions that face all members of the cyber-security community.

Canadian Cybercrime Awareness and Prevention in 2020 

The rapid advancement and penetration of cyber and digital technologies is changing the world, and with it, the landscape
of threats from terrorism and organized crime. Every day there are new reports of data breaches, new kinds of online fraud,
and increasingly criminals are moving traditional forms of crime online to evade law enforcement.

The public expects the police to be able to protect them from criminals regardless of what platform those criminals operate
on or what technologies they use to commit crime.

The OPP Cybercrime Investigations Team is made up of civilian members and sworn officers like Detective Sergeant Crowley, who are dedicated to manage risks, reduce threats, and minimize harm caused by crime involving digital technologies. By proactively sharing the latest trends, attack vectors, and vulnerabilities being exploited, the OPP hopes to raise the level of awareness so organizations can take preventative measures to target harden their systems thereby reducing the level victimization caused by cybercrime in Ontario.

Speaker’s Bio:

D/Sgt. Vern Crowley, OPP Cybercrime Investigation Team, GHQ, Orillia, Ontario

Detective Sergeant Crowley is a 30-year member of the Ontario Provincial Police and currently the Outreach Manager of the OPP Cybercrime Investigations Team, in GHQ, Orillia, Ontario. He has been working on cases involving digital evidence since 2000 and holds several computer industry certifications.

The IoT storm … Will we survive the coming deluge?

IoT devices permeate the most intimate aspects of our everyday lives. Now more than ever we must address the risks associated with these always on, always connected devices!

Speaker’s Bio:

Robert Falzon is currently the Head of Engineering within the office of the CTO for Check Point Software Technologies Inc., the worldwide leader in securing the Internet. His background includes over 20 years of experience in large-scale network security architecture, design, and deployment projects for government and business organizations spanning the globe. Currently leading a large team of the most talented cyber security engineers in the industry, Robert and his team are responsible for educating the market on the latest cyber security trends.

Other past responsibilities have included operational, management, and developmental duties for major accounts within EDS Canada’s network security team, and lead engineer for many major European Telco accounts with Alcatel in Paris France. While with Alcatel, Robert worked to assist those accounts in moving to emerging voice technologies while maintaining a focus on security.

After obtaining his CISSP certification, Robert went on to provide security process and audit/penetration testing training to major financial and energy customers within Europe and the Middle East, in addition to providing audit and penetration testing and consulting services to customers worldwide.

Shifting PAM into High Gear with Zero Standing Privilege (ZSP)

Zero Standing Privilege (PAM) was a new term introduced in 2019 and might just be the best approach to shift your PAM strategy into high gear. In this short presentation, we’ll discuss how PAM projects were managed historically and highlight a new PAM approach to reduce the impact of compromised admin credentials.
Do you know what admin credentials exist today or even how they change over time in your organization? This is just one of several challenges we’ll discuss, offer a solution and discuss the need and value of frequent scanning of admin rights, reporting on current standing privileges and the adoption of a ZSP and Just-In-Time administration.
So, if you’re looking for quick wins in PAM, including removing local admin rights and support for DevOps+PAM use cases, join the discussion and learn how other organizations like yours have succeeded.

Speaker’s Bio:
Paul Lanzi is the co-founder and COO of Remediant. Paul and Tim Keeler worked together in the IT departments of several biotechs including Genentech, Roche and Gilead Sciences before starting Remediant. At each of those organizations, they saw first-hand the drawback of the legacy approaches to PAM and were inspired to create something new. Paul’s previous corporate IT experience includes project and program management, corporate mobile app development team management and recruiting and managing full-stack web development teams. Paul has a passion for excellent user experience (UX) and project management, having held a PMP certification from the Project Management Institute since 2005. Paul also holds a BS with Honors in Computer Science from UC Davis.

The Last Line of Defense:

The Importance of having a robust and comprehensive Data Protection strategy

Data protection is experiencing a resurgence. Historically its been seen as an innovation backwater and as “insurance”, but with the growth of Ransomware and cyber-crime, and increasing risk, organisations are having to modernize their data protection architectures and strategies to ensure that data can be recovered quickly to ensure that an Organisation can survive an attack. Join this session to learn about the latest innovations in the data protection space and how they can be deployed to provide a comprehensive last line of defence.

Speaker Bio:

David joined Pure Storage in October 2018 as the Rapid Restore Solutions Director and is responsible for the Rapid Restore solutions roadmap, working with our Data Protection partners (Veritas, Veeam, CommVault & Rubrik) and making sure the Pure sales field have all the tools and enablement they need to be successful. Previously, David spent a year at Amazon Web Services building a competitive team to work directly with Amazon’s sellers and customers. Before that David spent 17 years at Veritas Technologies in a number of roles – SE, SE Manager and later was responsible for building a Competitive Intelligence team. He left Veritas as the Director of Competitive and Market Intelligence in 2017.

How to counter data theft by eliminating the insider threat

Insider threats are among the top IT security risks organizations today must brace for. Conventional security measures typically focus on external attacks, but do not provide protection against attacks from potential internal perpetrators. Simon Cuthbert, responsible for International Business Development at tenfold, will demonstrate why you must never underestimate the threat from within and how you can use identity and access management to minimize the risk of insider threats in your company.

Speaker’s Bio:
Simon is a 30 year veteran of the Cyber-Security industry. Having worked over the years with cutting edge security companies such as Content Technologies, CA, Varonis and AEP Networks, Simon has an understanding of a broad range of security issues that companies and society face each day from Hackers and Cyber-Criminals. Spending a lot time researching, speaking to some of those people that create attacks and working with cutting edge technology Vendors Simon is always on the lookout for where the next threat vector is coming from and how best to counter it.

About Tenfold

The main ambition of our software company tenfold is to discover and provide simpler ways for businesses to meet the growing demands of permission management. With our innovative software solution, “tenfold“, we have successfully revolutionized the way IT users and IT permissions are dealt with – never before has it been so easy to control and automate all important processes involved in the life-cycles of IT users, while always keeping an up-to-date, company-wide overview of who has what permissions. Together with our partners, we support medium-sized and major companies from different industries. More than 500 notable businesses have adopted tenfold as their choice of user and permission management tool so far.

Acceleration of digital transformation by COVID-19

In response to “work from home” and other lockdown measures due to the COVID-19 pandemic, many companies have transformed their businesses by integrating digital technology to fundamentally change how they operate and how they deliver value to customers.

Join this presentation where we will discuss security considerations and how the pandemic has forced short-term adaptation, which could be viewed as a leap towards digital transformation, offering more flexibility to customers and employees — potentially opening new revenue opportunities.

Speaker Bio:

Tony Anscombe is the Chief Security Evangelist for ESET. With over 20 years of security industry experience, Anscombe is an established author, blogger and speaker on the current threat landscape, security technologies and products, data protection, privacy and trust, and Internet safety. His speaking portfolio includes industry conferences RSA, Black Hat, VB, CTIA, MEF, Gartner Risk and Security Summit and the Child Internet Safety Summit (CIS). He is regularly quoted in cybersecurity, technology and business media, including BBC, Dark Reading, the Guardian, the New York Times and USA Today, with broadcast appearances on Bloomberg, BBC, CTV, KRON and CBS.

This session will feature all of the presenters from the afternoon agenda, answering questions from the audience live via video, in a panel format. Each presenter will take questions that pertain to their topic, and if there is time, they will also respond to a few questions about larger trends and directions that face all members of the cyber-security community.

Summary of Day one, what to expect tomorrow… And Remember the Solutions Showcase is Open until 6:00pm ET on Day One!

Canada-East Virtual Cybersecurity Summit – Day Two

Shift Left – Building Security into the Application Development Lifecycle

By building security into your application development lifecycle you not only help reduce your attack surface, but also save roughly 30% in costs associated to resolving the application security vulnerabilities afterwards… never mind the costs associated to a breach, such as shareholder value and brand tarnishing.

Speaker’s Bio:
Rob Aragao is a Cyber Security Strategist for the Americas within the Enterprise Security business unit of Micro Focus (merger of Hewlett Packard Enterprise Software). In this role, Mr. Aragao is responsible for working with organizations collaboratively to drive strategic initiatives around cyber security and alignment with business objectives and desired outcomes. He also provides thought leadership and insight regarding the ever changing global threat landscape.
Prior to joining Micro Focus, Mr. Aragao served as Vice President of Security Strategy at ReliaQuest with responsibilities for driving strategy, innovation and execution of a portfolio of security service offerings focused on the Fortune 1000. Previously, he was with eIQnetworks where he led security operations and services. Prior to eIQnetworks, he was with Altiris (acquired by Symantec), where he led the Worldwide Security Management Division. He has also held leadership roles with Level 3/Genuity, Stream International and Siemens.
Mr. Aragao brings over 20 years of information security experience with an emphasis in security and cyber risk best practices, threat intelligence, security monitoring and regulatory compliance initiatives.
Mr. Aragao’s experience has provided him with key insights into the challenges and approaches to combat today’s cyber threats. He is a frequent speaker and panel member and has presented at security conferences such as the International Conference on Cyber Security, FBI InfraGuard, SC Congress, Cloud Expo, Harvard IT Summit and other national and regional security events. He earned a bachelor’s degree in Computer Information Systems and Business Management from Bryant University and is a Certified Information Systems Security Professional (CISSP).