RSA 2013

Presentations

• 2012—The Year of Geolocation Privacy: Where are Law and Policy Headed?

• 20 in 2013: The Top Privacy Issues to Watch

• 25 Years of Vulnerabilities: 1988-2012

• 7 Highly Effective Habits of a Security Awareness Program

• Actionable Intelligence for the Enterprise

• Adapting OAuth to the Enterprise

• Administration Cyber Security Priorities for Federal Information Systems

• Advanced Malware Sinkholing

• Advancing Information Risk Practices Seminar

• Advancing the SOC: Agile, Intelligent and Context Aware

• Analytic of China Cyber Warfare

• Application Security Everywhere: Getting Over the Old and Making the New

• Application Security: One Size Doesn’t Fit All

• Application Security Response: When Hackers Come A-Knockin

• Are the 20 Critical Controls a New Standard of Due Care for Cybersecurity?

• “Artificial Intelligence:” The Myth Surrounding Perimeter Defense

• Automating the 20 Critical Controls

• Banking Fraud: Where is the Liability – With the Customer, Bank or Vendor?

• Best Practices for Surviving and Thriving through a DDoS Attack

• Big Brother’s Greek Tragedy: State-Deployed Malware & Trojans

• Big Data and Security: At the Edge of Prediction

• Big Data Calls for Big Security!

• Building Your Own Central Intelligence System in the Real World

• BYOD: Productivity vs. Privacy - and at What Cost?

• Can You Trust Your Mobile Applications?

• Certification of Products or Accreditation of Organizations: Which to Do?

• Chopping Up the Cloud: How Patchwork Data Rules Undercut the Global Market

• Combating Next Generation Cyber Crimes: An ROI Paradigm

• Computer Crime Law: Recent Developments

• !Con: RSA Conference Rump Session

• Controlling Trust and Risk: Lessons Learned at Boeing and New Ponemon Research

• Control Quotient: Adaptive Strategies for Gracefully Losing Control

• Corporate Espionage Via Mobile Compromise

• Cracked SSL?

• Cracking Cyber Stress: How to Stay Healthy at Work

• Cryptographic Protocols I

• Cryptographic Protocols II

• Customers & Criminals: Use Web Session Intelligence to Detect 'Who Is Who' Online

• Cyber Attacks: The Call for Retaliation and the Legal Ramifications

• Cyber Battlefield: The Future of Conflict

• Cyberpunk & Hacker Culture - From Fiction to Reality

• Cybersecurity SLAs: Managing Requirements at Arm’s Length

• Cyber Security, Technology and Social Networking in Crisis Management

• Cyber Security & the American States: Threats, Challenges & the Way Forward

• Data Analysis and Visualization for Security Professionals

• Data Breach Intelligence: Does History Always Repeat Itself?

• Data Breach Law Update – Global Trends, Legal Complexities

• Debate: Does Security Awareness Training Actually Improve Enterprise Security?

• Debate: Internet GUN CONTROL - Are Pentesting Tools Good or Evil?

• Deployment Strategies for Effective Encryption

• Detecting the One Percent: Advanced Targeted Malware Detection

• Did Anyone Get the Name of that Hacker Who PWNED Me?

• Digital Signatures I

• Do We Have the Authority? Legal Issues in Protecting Government Networks

• Doxing and Anti-Doxing: Information Recon for the Stalker and Stalked

• Do Your Business Partners' Web Sites Put You at Risk?

• E-Discovery: Exploring the Rising Star on Your Risk Horizon

• Emerging Conflicts in Identity Space

• ENCORE - ENCORE: Studio: When State Actors and Cybercriminals Join Hands

• ENCORE: Studio: When State Actors and Cybercriminals Join Hands

• Everything We’re Doing with Passwords is Wrong

• Everything You Wanted to Know About Cyber Insurance but Were Afraid to Ask

• Evolving Security of Electronic Patient Data

• Examining the Legal & Policy Implications of a Breach: Who's Responsible?

• Exploding the Phone: The Story of the Teenagers & Outlaws Who Hacked Ma Bell

• Extreme Cyber Scenario Planning & Fault Tree Analysis

• Foolish Zebras: Log-tracking Your Riskiest Users to Find the Bad Guys

• FPKIMA: The Dial-Tone for FPKI

• From Hours to Seconds: Managing Security in Real Time

• Get Off My Cloud: A Panel Discussion on Cloud Security from Cloud Providers

• Getting to the Board Level: Evolving Security and Risk Management in FSIs

• Hacking Exposed – Embedded

• Hot Topics in Information Security Law 2013

• How Organization Embedded Risk Scoring Improves Corporate Security DNA

• How the Constitution Protects your Cell Phone and Laptop Encryption Key

• How to Get the Budget and Resources Needed for Information Security?

• How to Prevent End Users from Being Fooled by Social Engineering Attacks

• Hunting for Indicators of Compromise

• Identity-Based Encryption

• Implicit Risk Management - When is “Good Enough” Sufficient?

• I (Mr. Techie) Got the CISO Job! Should I Prepare 3 Envelopes?

• Incident Scene Authorization using a Mobile Handheld Device

• Indian Airlines Flight 814 - Hijack Mission Failed

• Information Security Certifications: Do They Still Provide Industry Value?

• Information Security Leadership Development: Surviving as a Security Leader

• Infosec Intelligence and Regulatory Filings: Has It Made a Difference?

• Integrating OpenStack’s Keystone Service with an Access Management System

• Invited Talk I

• Invited Talk II

• Is a Privacy Compliant Public Cloud Solution an Oxymoron?

• Is it Whack to Hack Back a Persistent Attack?

• Is Your Design Leaking Keys? Efficient Testing for Side-Channel Leakage

• It Takes a Village: CSR Programs For the Next Generation of InfoSec Workers

• I Was Blind, but Now I See: CISOs Discuss Visibility with Big Data Security

• Just In Time Security: Difficulty of Being Proactive in Cyber Environments

• Lawyers, Regs and Money: The Breach Has Hit the Fan

• Less is More - PCI DSS Scoping Demystified

• libinjection: New Directions in SQLi Detection

• Life as a Target

• Living Below the Security Poverty Line: Coping Mechanisms

• Locking Down the Cloud – Security is not a Myth

• Making Rugged DevOps and Infosec Work

• Making the Cloud a Secure Extension of Your Datacenter

• Managing Daily Security Operations with Lean and Kanban

• Managing Enterprise Risk: Y U NO HAZ METRICS?

• Managing Risk When Everything is Changing

• Managing Security Risk: The CSO Panel

• Managing Trust and Risk at CME Group and Blue Shield of California

• Mega-Trends in Information Risk Management for 2013 and Beyond: CISO Views

• Microsoft Security Intelligence Report

• Mitigating the Top Human Risks

• New German BYOD Security and Infrastructure Solutions

• New Ways of Mitigating Botnets

• Next-Generation Threat Protection to Counter Advanced Attacks

• NSA Suite B Crypto, Keys, and Side Channel Attacks

• NSTIC Report–Path from Cyber-Identity Puzzle to Interoperable ID Ecosystem

• OASIS Privacy Management Reference Model (PMRM)

• Offensive Security: Hope or Hype?

• Patching Stupidity

• Practical Advice for Cloud Forensics

• Privacy: A Conversation with Facebook, Google, Microsoft & Mozilla

• Privacy Compliance and Oversight in the National Security Context

• Privacy is Not Dead, You Just Need to Try Harder

• Privacy Perspectives: Leveraging Data to Protect Data

• Psychographics of the CISO

• Public-Key Encryption I

• Public-Key Encryption II

• Public Sector Identity: The Evolution of an Idea

• Public vs. Private Sector: Funding a Successful Security Program

• Real Time Forensics: Finding the Culprit While the Body is Still Warm

• Relationship Issues: Privacy and Security — Can this Marriage Last?

• Resolving the Security Risks Between Consumer Shadow IT and Enterprise IT

• Riot Control: The Art of Managing Risk and the Internet of Things (Riot)

• Risk Management: How to Put Theory into Practice

• Roadmap Toward a More Secure and Resilient Cyber Ecosystem

• Rugged Identity Management - Avoiding Single Points of Failure

• SAST, DAST and Vulnerability Assessments, 1+1+1 = 4

• Secure Implementation Methods

• Security Culture: Figuring Out How Bad Your Company Really Is

• Security Leadership - Your Secret Weapon

• Security: Looking Forward - Protecting Critical Applications with OWASP

• Sharing Indicators of Compromise: An Overview of Standards and Formats

• Side Channel Attacks I

• Side Channel Attacks II

• SocialKlepto: Corporate Espionage with Fake Social Network Accounts

• Social Media in Marketing and the Workplace: Legal & Regulatory Compliance

• Software Security: A Waste of Time

• Solving the Cyber Security Hiring Crisis – Hiring the Un-Hireable

• Special Operations Tactics Applied to BYOD Defense

• Standards-Based Secure Single Sign-On for Native Mobile Applications

• Stateless Architecture for Smaller IT and Risk Footprint

• Stay Relevant! Move Security From the Back Office to the Board Room

• Strange Bedfellows: Security & Marketing Need to Combat Phishing Together

• Studio: 20 in 2013: The Top Privacy Issues to Watch

• Studio: Application Security Response: When Hackers Come A-Knockin

• Studio: Extreme Cyber Scenario Planning & Fault Tree Analysis

• Studio: Nation-State Attacks on PKI

• Studio: The Cyber Threat Landscape: New Themes in Prevention, Detection and Response

• Studio: The Five Habits of Highly Secure Organizations

• Studio: Trickle Down Cyber-Warfare

• Studio: We Were Hacked: Here's What You Should Know

• Studio: Who, What, Where and How: Five Big Questions in Mobile Security

• Surviving in a Feudal Security World

• Symmetric Key Primitives I

• Symmetric Key Primitives II

• Techno-Ethics for Lawyers - How Technology Complicates Ethical Compliance

• The Art of... Partnership? - Global Security Org Meets Local Business Unit

• The Call for a Comprehensive Privacy Program

• The Cyber Security Industry: Survival in the Age of Cyber Warfare

• The Cyber Threat Landscape: New Themes in Prevention, Detection and Response

• The FBI and the Private Sector: Safeguarding Our Cyber Security

• The First 48: The Early Hours of Incident Response

• The Five Most Dangerous New Attack Techniques and What's Coming Next

• The Future of Cyber Security: A Top Investor's View

• The Future of Mass Mobile Threats – Coming to a Phone Near You?

• The Internet Health Model for Cyber Security

• The Killer Next Door - Devastating Impacts of Third Party Breaches

• The Loophole: Federal Crimes Not Being Addressed

• The Probability of Exploit: Predictive Analytics & Security Management

• The Real Economics of Cybercrime

• The Secret to Effective Cyber Threat Intelligence and Information Sharing

• The Security Plateau Effect

• The Threat Horizon: The 2013 Global Information Security Workforce Study

• The Top Ten Things I Wish Static Analysis Tools Commonly Did

• Think a Password is Going to Protect You? Think Again

• Thin Slicing a Black Swan

• Too Big to Fail: CISO Panel on Scaling Security in the Era of Big Data

• To the Cloud! Software Security Evolution at Adobe

• Tracking Employees via Mobile Devices - Legal.. or Not?

• Trojan Horse: The Widespread Use of International Cyber-Espionage as a Weapon

• Trust Frameworks: Alternative Approaches to Achieve the Panacea

• Truth and Consequences: Clouds and Virtualization

• Updating the Rules for Government Access to Your Cloud Data

• Using HTML5 WebSockets Securely

• Waiter, There's a Fly in My Code

• We Were Hacked: Here's What You Should Know

• What? Me, Worry? I've Already Been Hacked. Haven't You?

• When I Need You to Know Who I Am

• Where the Streets Have No Name: CISOs Paving the Path to a New C-Suite

• Who, What, Where and How: Five Big Questions in Mobile Security

• Why Companies Fail with Compliance Initiatives

• Why Haven’t We Stamped Out SQL Injection and XSS Yet?

• Why the Scarecrow of Oz Had It Right

• Will They EVER ''Get'' Security?

• Will You Ever Be Able to Trust Social Networks?

• Winchester House Security: Why Enterprise Security Architecture Matters

• Windows 8 Security - The Unsung Hero!

• Writing Applications that are Easier to Defend than Attack

• Your Honor, it Was Self-Defense—a Mock Trial

• Your Honor, it Was Self-Defense—a Panel Discussion

- See more at: http://www.rsaconference.com/events/us13/downloads-media?type=presentations#sthash.r6Xp3eRo.dpuf

Presentations

• 2013: Attack Trends For The Year Ahead

• Accelerating The Analyst Workflow: Learning From Investigative Actions

• Advanced Threats and Intelligent Defense

• Alternatives to Certification Authorities for a Secure Web

• An Investigation into the Methods Used for Trafficking of Child Abuse Material

• APAC of Possibilities – Tips for Increasing Cloud Security and Adoption

• Application Security: From Web to Mobile, Different Vectors and New Attacks

• APTs By The Dozen: Dissecting Advanced Attacks

• Architecture of a New DDoS and Web Attack Mitigation System for Data Center

• Assuming a State of Compromise: Effective Detection of Security Breaches

• Big Data Calls For Big Security!

• BYOD and Mobile Security: Empowering Employees While Securing Corporate Assets

• BYOD and Next-Generation Mobile Security

• Cloud Security – Are You Forgetting Something

• Cloud Security through COBIT, ISO27001 ISMS Controls, Assurance and Compliance

• Common IT Security Mistakes Made by Asian Organisations

• Contextual Privacy – Redefining Privacy for the Perpetually Connected World

• Cutting Through the Hype: What is True "Next Generation" Security?

• DARPA Active Authentication Program: Behavioral Biometrics

• Data and Application Security: A Context Based Approach

• DdoS Attacks: Motives, Mechanisms, and Mitigation

• Developing an Enterprise Mobile Security Strategy

• Does Better Security Contribute to Your Bottom Line?

• Extending Network Security: Taking a Threat-Centric Approach to Security

• Forensic Treasure Hunt

• From Web to Mobile: Different Vectors and New Attacks

• Hacking the Virtualized World

• How to Make Security Everyone’s Responsibility In The Modern Enterprise

• Know your Enemy, Know Yourself

• Lessons Learned From a Rigorous Analysis of Two Years of Zero-Day Attacks

• Ma, I Got Me a Cloud Too! Building and Managing a Secure Private Cloud

• Mobile Web Reputation: Tracing Bad Territories on Your Smartphone

• Practical Identity and Access Management for Cloud – A Primer on Three Common Adoption Patterns for Cloud Security

• Preventing Zero-Day Attacks in Mobile Devices

• Removing the Mystery of Security Engines & Their Effect On Your Network

• Rethinking Web-Application Architecture for the Cloud

• Secure Freedom

• Secure Mobile App Development: Differences from Traditional Approach

• Securing REST APIs – Protecting the new world of Mobile and Cloud services, using OAuth and API Keys

• Securing Software Against Library Attacks

• Sharing Threat Intelligence Analytics for Collaborative Attack Analysis

• Smile You've Been Profiled: How Intrusion Deception Is Shrinking Hacker Profits

• STAMP: An Automated Unknown Zero-Day Vulnerability Discovery System for Mobile Platforms

• Taking Down the World’s Largest Botnets

• The Droid Exploitation Saga

• The Future of Digital Forensics

• The State Of SAP Security 2013: Vulnerabilities, Threats and Trends

• The Three Adversaries – Know Your Enemy

• The True Cost of Security – The Impact to End Use QoS in a Mobile World

• Understanding and Building Threat Models

• Vulnerability Management and Research – Penetration Testing overview

- See more at: http://www.rsaconference.com/events/ap13/downloads-and-media?type=presentations#sthash.UalHjVOG.dpuf

Presentations

• 10 IT Trends Influencing the Information Security Profession

• Alternatives and Enhancements to CAs for a Secure Web

• Android Malware Exposed - An In-depth Look at its Evolution

• Automating the 20 Critical Security Controls

• Battle Scars And Friendly Fire: War Stories from a Threat Research Team

• ‘Big Data’ for Security Purposes – How to Be Effective

• Breach-Aholic Anonymous – What Can We Learn From Data Breaches?

• Breaking The Kill Chain - An Early Warning System For Advanced Threat

• Bug Parades, Zombies, and the BSIMM: A Decade of Software Security

• Comparative Study: Iran, Russia & PRC Cyber War

• Concurrent Behaviour Analysis: Resilient Indicators of Emergent Exploits

• Considering Cloud? Learn About Current Trends In Cloud Computing

• Control Quotient: Adaptive Strategies For Gracefully Losing Control

• Crafting An Adaptive Mobile Security Posture

• Cryptography as a Service

• Cut Through the Hype to Expose the Truth About Advanced Persistent Threats

• Cyber Security Information Exchange

• Defending Against Low-Bandwidth, Asymmetric Denial of Service Attacks

• Did You Read The News? Http Request Hijacking

• Dissecting Banking Trojan Carberp

• Entropy, Random Numbers And Keys: What's Good Enough?

• Evolving from Breach Prevention to Breach Acceptance to Securing the Breach

• Good Guys vs. Bad Guys. Using Big Data to Counteract Advanced Threats

• Hacking Back as a Law Enforcement Role

• How Hackers are Outsmarting Smart TVs and Why it Matters to You

• If I Want a Perfect Cyberweapon, I'll Target ERP

• Information Stewardship: Avoiding Data Breaches and Managing Big Data

• iOS App Analysis

• Is a Secure Agile SDLC Programme a Possibility?

• Lessons Learned from a Rigorous Analysis of Two Years of Zero-Day Attacks

• Managing Daily Security Operations with Lean and Kanban

• Microsoft Security Intelligence Report

• My Personality - Your Security Problem!

• Nailing Cloud Security With Pre-Cloud Security Thinking?

• Network and Information Security Legislation in the EU

• Old Vulnerabilities In New Protocols? Headaches About IPv6 Fragments

• Overhauling Compliance Frameworks for Software-Defined Data Centers

• Playing the Game of Thrones: ensuring the CISO role at the King’s Table

• Preventing Attackers From Using Verifiers: A-Pake With Pk-Ids

• Raising Awareness of Information Security Through Human Analogies

• Relax Everybody: HTML5 Is Securer Than You Think

• Rogue Apps & Desktop Malware: A Dangerous Combination For Online Security

• SAML meets OAuth in the Cloud: A Marriage Made in Heaven

• Scalable Authentication

• Securing BYOD: Mitigating Risk, Not Forcing Control!

• Security Culture: Figuring Out How Bad Your Company Really Is

• Security Debt and the Rule of 72

• Security Implications of NFC in Authentication and Identity Management

• Security vs. Privacy – The BIG Fight

• Social Media Deception

• Supply Chain Assurance Framework: The Supply Chain Standards Translator

• Supply Chain Assurance Framework: The Supply Chain Standards Translator

• The Era of Destructive Cyber Attacks - Are you Prepared?

• Thousands Of Apps Can't Be Wrong: Mobile Application Analysis At Scale

• Top Ten Proactive Software Controls

• Turning The Table Through Federated Information Sharing

• Understanding and Fighting Evasive Malware

• Using Big Intelligence to Defend against Modern Attacks

• When Worlds Collide - Harmonising Governance Between Security And Privacy

• Why Can’t You Get What I’m Saying? Penetrating the Mental Firewall

• Why Does Database Patching Require A PhD?

• You’re Not Your iPhone – or Are You?

- See more at: http://www.rsaconference.com/events/eu13/downloads-and-media?type=presentations#sthash.8NX8BINL.dpuf