RSA 2012

Presentations

• 20 in 2012: The Top Privacy Issues to Watch

• 3 "C" Words You Need to Know: Custody - Control - Cloud

• Adding a Security Assurance Dimension to Supply Chain Practices

• Advanced (Persistent) Binary Planting

• Adversary ROI: Why Spend $40B Developing It, When You Can Steal It for $1M?

• Applying the NFC Secure Element in Mobile Identity Apps

• A Timeline of Disaster

• Attacks 2011: How Complexity Evaded Defenses and Strategies for Prevention

• Base64 - the Security Killer

• Biometrics and Access Token Technology, 10 Years Later…

• Blending Embedded Hardware OTP, SSO, and Out of Band Auth for Secure Cloud Access

• Building a Security Operations Center (SOC)

• Building Robust Security Solutions Using Layering and Independence

• BYOD(evice) without BYOI(nsecurity)

• Can We Reconstruct How Identity is Managed on the Internet?

• ChromeOS vs. iCloud - a New Frontier in Security Challenges

• CISO View: Top 4 Major Imperatives for Enterprise Defense

• Cloud and Control: Any Program on 2000 or 2 Machines

• Code Red to Zbot: 10 Years of Tech, Researchers and Threat Evolution

• Collecting and Sharing Security Metrics - The End of "Security by Obscurity"

• Collective Defense: How the Defenders Can Play to Win

• Compliance, Audits and Fire Drills: In the Way of Real Security?

• Compliance Fatigue: How to Stop Chasing Compliance and Move on to Business

• Convergence of BCM and Information Security at Direct Energy

• Corporate Espionage for Dummies: The Hidden Threat of Embedded Web Servers

• Cracking Open the Phone: An Android Malware Automated Analysis Primer

• Critical Infrastructure: The IPv6 Transition Challenge

• Crowdsourcing Access Control in the Cloud

• Cryptographic Protocols I

• Cryptographic Protocols II

• Cyber War: You’re Doing it Wrong!

• Data Breaches and Web Servers: The Giant Sucking Sound

• Data Loss Prevention: The Evolving Landscape of Mobile Enterprise Threats

• Defending Behind the Device: Mobile Application Risks

• Deploying IPv6 Securely

• Digital Signatures I

• Digital Signatures II

• Does Defining Privacy Matter?

• Dormant Malware Attacks - What's Next?

• Earth vs. the Giant Spider: Amazingly True Stories of Real Pen-Tests

• Engineering Smart Grid Security

• Enteprise Access Control Patterns for REST and Web API

• Estimating the Likelihood of Cyber Attacks When There’s “Insufficient Data”

• Evil Through the Lens of Web Logs

• Exploiting a PCI Compliant Network: A How-To Guide

• Exploring Converged Access of IT Security and Building Access - Today, Tomorrow and the Future

• Firewall Fail: Live Test of Top Next-Gen Firewall to Expose Its Breaking Points

• Fraud and Data Exfiltration: Defending Against the Mobile Explosion

• Friending Your Life Away: How Social Networks Cause Long Term Damage to Individuals and Organizations

• From Technology to Psychology: Understanding the Social Psychology of Hackers

• From the Bottom to the Top: The Evolution of Application Monitoring

• Garage Sale Forensics: Data Discovery Through Discarded Devices

• Getting Your Session Proposal Accepted

• Grilling Cloudicorns- Mythical Cloudsec Tech You Can Consume Today

• Hacking Exposed: Embedded - The Dark World of Tiny Systems and Big Hacks

• Hacking Exposed: Mobile RAT Edition

• Hacking’s Gilded Age: How APIs Will Increase Risk and Foment IT Chaos

• Hacks, Flacks And Attacks: Collaborating on Communications During a Breach

• How Can a CIO Secure a Moving Target with Limited Resources?

• How to Create a Software Security Practice

• How to Launch a Secure Cloud Initiative: NASA’s Jet Propulsion Laboratory

• Human Hacking Exposed: 6 Preventative Tips That Can Save Your Company

• Identifying and Exploiting Cryptographic Padding Oracles

• Information Protection in Today's Changing Mobile and Cloud Environments

• Invited Talk I

• Invited Talk II

• iOS Security Internals

• (ISC)2’s SSO Program – Bringing Cybersecurity Experts to the Classroom

• Is Your Mobile Device Radiating Keys?

• Job Performance Model for Advanced Threat Responders

• Large Scale Cloud Forensics

• Legal & Ethical Considerations of Offensive Cyber-Operations?

• Lightning Round: Data Confidentiality and Integrity in the Cloud

• Lightning Round: Mobile Infrastructure Security: Licensed Spectrum Eavesdropping and GSM Threats

• Lightning Round: SAP Application Security

• Lightning Round: Security Risk Management: Insurance and Legal Responsibilities

• Live Forensics of a Malware Infection

• Looking Ahead - The Path to Moving Security into the Cloud

• Making World Class Cloud Security the Rule, not the Exception

• Message in a Bottle - Finding Hope in a Sea of Security Breach Data

• Minding the App Store - Protecting Software and Device Features

• Modern Cyber Gangs: Well-Organized, Well-Protected, and a Smart Adversary

• Modern Cyberthreats: The Changing Face Behind the Keyboard

• Never Waste a Crisis --- Necessity Drives Software Security Improvements

• New Threats to the Internet Infrastructure

• NSA's Secure Mobility Strategy

• Offensive Countermeasures: Making Attackers' Lives Miserable

• Optimizing Security for Situational Awareness

• PCI Security as a Lifecycle: How to Plan for PCI in 2012 and Beyond

• PenTesting People: Social Engineering Integration

• Privacy by Design: Baking Privacy into Business and Product Development

• Public-Key Encryption I

• Public-Key Encryption II

• Remediation Statistics: What Does Fixing Application Vulnerabilities Cost?

• Secure Implementation Methods

• Secure Multiparty Computation

• Security 2012: A Handbook for Cyber Security

• Security Enters the Boardroom: How Does Security Articulate Business Value?

• Security is Dead. Long Live Rugged DevOps: IT at Ludicrous Speed

• Side Channel Attacks I

• Side Channel Attacks II

• Side Channel Attacks III

• Smartphones: Placing Enterprise Security into the Hands of the Users

• Social Media in Marketing and the Workplace: Legal and Regulatory Compliance

• Software Security Goes Mobile

• SSL and Browsers: The Pillars of Broken Security

• SSL and the Future of Authenticity

• SSL Identifiers - Keeping Your Lines of Communication Open and Secure

• Stop the Maelstrom: Using Endpoint Sensor Data in a SIEM to Isolate Threats

• Strategies for the Eroding Network Perimeter: Defend the Perimeter or Retreat to Higher Ground

• Surviving Lulz: Behind the Scenes of LulzSec

• Symmetric Key Primitives

• Taking Information Security Risk Management Beyond Smoke & Mirrors

• Taking to the Skies: IT Flight Plan for Cloud Security

• Terrorist Groups in the Online World

• That Doesn't Actually Work: Hard Truths About Cryptographic Innovations

• The Art of Breaking and Designing CAPTCHAS

• The CERT Top 10 List for Winning the Battle Against Insider Threats

• The Faces of Fraud: An Inside Look at the Fraudsters and Their Schemes

• The First 24: Responding to an Attack within the Critical First Day

• The Hidden Risks: Managing Risks in Outsourcing Contract Relationships

• The Keys to the Cloud: How Aetna Addresses Certificate and Key Management

• The Psychology of a Cyber Predator; Decoding the Deviate Mind

• The Security Professional as Data Steward: Understanding Privacy

• The Social Web: Business vs. Security - How to Be a Winner

• The Three Myths of Cyberwar

• The Vendor Management Challenge: Doing More with Less

• The Virtualization Security Landscape: What's Changed?

• Three Ways to Lose Data and One Way to Stop It

• Update Your Software or Die

• Updating the Law on Government Access to User Data in the Cloud

• Victimless Malware - How Blackhats Make a Killing Targeting Companies

• Web Breaches in 2011-“This is Becoming Hourly News and Totally Ridiculous"

• What Happens in Vegas Goes on YouTube: Using Social Networks Securely

• When the Cloud Goes Bust: Data Breaches in the Cloud

• Why is Search Engine Poisoning Still the #1 Web Malware Vector?

• Zero Day: A Non-Fiction View

- See more at: http://www.rsaconference.com/events/us12/downloads-and-media?type=presentations#sthash.SX4qmOkU.dpuf

Presentations

• 10 Reasons Not to Virtualize: The Security Perspective

• 2012: Mayans, Mayhem And Malware

• 7 Highly Effective Habits of a Security Awareness Program

• Active Defence: How to Counter Your Attackers

• Adversary ROI: Evaluating Security from the Threat Actor’s Perspective

• A Flexible and Comprehensive Approach to a Cloud Compliance Program

• "Are We Getting Better?" Why We Don't Know. What We Can Do About It.

• Big Data: Big Threat or Big Opportunity for Security?

• Breaking the Failure Cycle – Why Breaches from Known Threats Still Happen

• Cases of JavaScript Misuse and How to Avoid Them

• Cloud Provider Assurance

• Cloud Provisioning and Security Using Oauth2 and SCIM

• Conflicting Visions of Cloud Identity

• Cracked SSL?

• Csirt, Cyber Extortion, Ddos Attacks, & Forensics

• Customisable Security: Leveraging Big Data for Mobile Security

• Cyber Crime, Easy as Pie and Damn Ingenious

• Dealing with Big Data in Cyber Intelligence

• Deceiving Permissions - Rules for Android Malware Detection

• Defending Behind the Device: Mobile Application Risks

• Developing Secure Software in the Age of Advanced Persistent Threats

• Developing Secure Software in the Age of Advanced Persistent Threats

• Dissecting Advanced Targeted Attacks – Separating Myths from Facts

• Duqu, Flame, Gauss: Followers of Stuxnet

• Encryption for Clouds

• Entitlement; And Why Identity Needs to be About More Than Just People

• Flipit: A Game-Theory Handle on Password Reset and Other Renewal Defences

• Full Employment: Good or Bad News for the Information Security Profession?

• Games of Keys and Clouds: Finding a (Nash) Equilibrium of Trust

• Good Guys vs. the Bad Guys: Can Big Data Tools Counteract Advanced Threats?

• Hacking Senior Management - Selling Security to the Board

• Hacking the Virtual World

• How SCIM Simplifies Migration to Cloud Services

• How to Build a Cyber Intelligence Capability

• How to Grow and Transform Your Risk and Security Programme into the Cloud

• How To Rob An Online Bank And Get Away With It

• How to Set Up Integrated Security Governance Processes

• Implementing an Intelligent SOC

• Intelligence-Driven Security: In Action

• Intelligence-Driven Security: The New Model

• Mastering Security in Agile/Scrum, Case Study

• Mastering Security in Agile/Scrum, Case Study

• Me and My Digital Shadow: Protecting and Detecting on the Social Web

• Microsoft Security Intelligence Report

• No Followers? No Botnet? No Problem! Asymmetric Denial of Service Attacks

• Opening the Kimono: Automating Behavioural Analysis for Mobile Apps

• Poortego: An OS-INT correlation tool for the 99%

• Practical Security Risk Management Strategies in a Mobile and Consumerised IT World

• Privacy by Design—From Theory to Practice

• Privacy by Design, Security by Design

• Protecting Your Data on Mobile Devices

• Risks and Rewards in Cloud Adoption

• Securing Big Data: Learning and Differences from Cloud Security

• Securing the Supply Chain: Guide to Risk Management

• Security Implications of the Internet Transition to IPv6

• Smartphone Security Winners & Losers

• Social [Media|Impact|Contracts|Unrest|Activism] in a Hyper-Connected Future

• SSL and Browser Security: Why is it Such an Uphill Battle?

• Step into the Future: HTML5 and its Impact on SSL VPNs

• Surviving as a CISO in a World of Zombie Auditors, Twitter Twits, and Cavity Searches

• Testing Darwinism: The History and Evolution of Network Resiliency

• The Future of Cloud Identity Security

• The Growing Threat of Embedded Hacking

• The Legal Attack Vector: How To Protect Yourself

• The Mobile Criminal: A Pocket Full of Maliciousness

• The Mobile Enterprise: 7 Strategies to Manage Risk & Maximise Opportunity

• The XX Factor: Why Women are Key to the Future of Security

• They’re Inside…Now What?

• Training Employees to Recognise and Avoid Advanced Threats

• Using Security Intelligence to Stay Out of the Headlines

• Using Social Engineering Tactics for Big Data Espionage

• Ways To Interpret Security Standards - What We Can Learn from the Law

• What the Security Profession Can Learn From the Intelligence Profession

- See more at: http://www.rsaconference.com/events/eu12/downloads-and-media?type=presentations#sthash.sNkBzpB8.dpuf