RSA 2015

Presentations

• 10 Tips for Running an Effective SOC - BuzzFeed Style

• 2014 Hack, Exploit and Malware Retrospective...And the Worry List Ahead

• 70% of US Business Will Be Impacted by the CSF: Are You Ready?

• A Case Study for Building Cybersecurity Policies for Industrial Robots

• A Case Study in Building an AppSec Program: 0–60 in 12 months

• Achieving Defendable Architectures via Threat-Driven Methodologies

• A Comedy of Errors: Assessing and Managing the Human Element of Cyber Risk

• Across the Desk: Opposing Perspectives on InfoSec Hiring and Interviewing

• Active Response: Automated Risk Reduction or Manual Action?

• Addressing The Global Supply Chain Threat Challenge: Huawei, A Case Study

• Advanced Attacks: How One Exploited Endpoint Leads to Total Datacenter Breach

• Advancing Information Risk Practices Seminar

• Algorithms for Solving Hard Problems

• Amazing True Crimes and the Lessons They Can Teach Us

• Analysis of SSL and Crypto Vulnerabilities in Android Applications

• Android Security: Data from the Front Lines

• Another Bug Bites the Dust

• Applied Information Sharing: Lessons Learned from the Gameover/Zeus Takedown

• A Privacy Primer for Security Officers

• Are You Giving Firmware Attackers a Free Pass?

• A Short History of Attacks on Finance

• Assume Breach: An Inside Look at Cloud Service Provider Security

• A Tale of Two Mocks—a Deep Dive into the Issues Raised

• Attacks on Crown Jewels: SAP Vulnerabilities and Exploits

• Attribute and Identity Based Encryption

• Attribution Debate - Is It Worth It?

• Authenticated Encryption

• Automating Security Workflows: The SDDC Approach

• Avoiding the 'Creepy Factor' in Biometric and Other Technologies

• Balancing Compliance and Operational Security Demands

• Become the Leader the Industry Needs

• Before and Beyond the Breach: New Research in the 2015 DBIR

• Be Heard: Developing Effective Board-Level Communications for the CISO

• Be like Water: Applying Analytical Adaptability to Cyber Intelligence

• Best Practice or Bust? Test Your Approach to Third-Party Risk

• Beware the Cloudpocolypse: A Panel on Cloud Security from Cloud Providers

• Big Tech's Burden to Develop Predictive Indicators to Combat Cyber-Attacks

• Bitcoin's Future Threats: Expert's Roundtable based on 150 Case Studies

• Breach 360: How Top Attacks Impact Tomorrow’s Laws, Litigation, Security

• Bricks and Mortar to Bits and Bytes: A History and Future of Insider Threat

• Bridging the Divide between Security and Operations Teams

• Bug Bounties: Internet Savior, Hype or Somewhere Between?

• Bug Hunting on the Dark Side

• Building an Appsec Program with Sun Tzu, the Dalai Lama and Honey Badger

• Building a Next Generation Security Architecture

• Building the Bridge across the Great Minority Cyber Divide

• Building The Midgardian Citadel: Active Detection and Response

• But...It’s an App/Play Store Download: Research Exposes Mobile App Flaws

• Can Cyber Insurance Be Linked to Assurance?

• CForum: A Community Driven Solution to Cybersecurity Challenges

• Characterizing Malicious Traffic on Cellular Networks: A Retrospective

• Chipping: The Next Litigation Issue on the Horizon

• Cisco’s Security Dojo: Raising the Technical Security Awareness of 20,000+

• Closing the Gap: Steps to Satisfy the Demand for Security Talent

• Combating Cyber Risk in the Supply Chain

• Common IAM Flaws Plaguing Systems after Years of Assessment

• Compliance by Design: Using Innovation to Beat the Compliance Rat Race

• Constructions of Hash Functions and Message Authentication Codes

• Containers vs. VMs for Secure Cloud Applications

• Continuous Security: 5 Ways DevOps Improves Security

• Cookin Up Metrics with Alex and David: A Recipe for Success

• Countering Development Environment Attacks

• CSOC for Critical Infrastructure Protection

• Cultivating a New Generation of Cyber-Workforce Talent

• Curbing Email Threats & Spearphishing– The Promise & Results with DMARC

• Cyber Battlefield: The Future of Conflict

• Cyber Insurance: The Next Big Thing or the Next Requirement?

• CyberLegislation is Upon Us... But Are We Ready?

• Cyber Ranges – A Strategic Outlook

• Cyber Security and Aviation

• Cybersecurity as a Boardroom Investment: Business Speaks Resilience

• Cybersecurity Awareness is a Big Deal for Small Business

• Cyber Security for Start-ups: An Affordable 10-Step Plan

• Cybersecurity Legislation; Congressional & Administrative Action

• Cybersecurity: You’re Doing IT Wrong

• Cyber-Shock 2015: Corporate Breach Role Play

• Cyber-Shock 2015: Corporate Breach Role Play

• Dan Geer on the Future of Security

• Data Science Transforming Security Operations

• Deconstructing Incident Response

• Decrease Your Circle of Trust: An Investigation of PKI CAs on Mobile Devices

• Defending against State-Sponsored Cyber Theft of Intellectual Property

• Defending Critical Infrastructure: Preparing via Real-World Cyber Exercises

• Defending the Cloud from the Full Stack Hack

• Defense in Depth to Coordinated Defense: Organizing against Our Common Enemy

• Demystifying Cloud Security: Lessons Learned for the Public Sector

• Design and Analysis of Block Ciphers

• Detecting and Tracing Malicious Activities

• Detecting Unknown Malware: Security Analytics & Memory Forensics

• Dissecting Office Malware for Fun and Espionage

• Domain Name Abuse: How Cheap New Domain Names Fuel the eCrime Economy

• Don’t Get Left in the Dust: How to Evolve from CISO to CIRO

• Don't Touch That Dial: How Smart Thermostats Have Made Us Vulnerable

• Do You Know What You Don't Know?

• Drones: All Abuzz with Privacy & Security Issues

• Embedded Exploitation Party Trick

• Endpoints in the New Age: Apps, Mobility and the Internet of Things

• Enterprise Acquisition of Cloud Computing Services

• Enterprise Cloud: Advancing SaaS Security and Trust

• Enterprise Cloud Security via DevSecOps

• Epidigitalogy: Surveying for Digital Diseases like an Epidemiologist

• Evasive Malware Exposed and Deconstructed

• Evolution of Hackers and Reverse Incident Response

• Evolving Security Operations and Sharing at Net Speed

• Exploitation Trends: From Potential Risk to Actual Risk

• Fail-safe the Human Pysche to Advance Security and Privacy

• FBI Cyber: Leading Globally

• Finally We've Got Game: Real Government Info Sharing after 15 Years of Talk

• Following the Sun: A Worldwide View of Cybersecurity Laws and Regulations

• From Cowboys to Sales Engineers: Building Mature Security Services

• From the Battlefield: Managing Customer Perceptions in a Security Crisis

• Full Disclosure: What Companies Should Tell Investors about Cyber Incidents

• Game Consoles & Mobile Device Security: A Model for the Internet of Things

• Game of Hacks: The Mother of All Honeypots

• Gamification of your Global Information Security Operations Center

• General Alexander: Life After the NSA

• Getting a Jump on Hackers

• Gumshoes Part Deux – Security Investigative Journalists Speak Out

• Hacking Exposed: Beyond the Malware

• Hacking Exposed: Next Generation Attacks

• Hacking Smart Cities

• Hacking the CEO: Ninja Mind Tricks and Other Ruses to Get Security $$$’s

• Hack the Planet: Some Men Just Want to Watch the World Burn

• Hacktivism in 2015 - It Isn’t Just for the Lulz Anymore

• Healthcare Case Study: Beating Cybercrime, Nation-states & Insider Threats

• Homomorphic Encryption and Its Applications to DRM

• Hot Topics in Information Security Law 2015

• Hot Topics in Privacy: A Conversation with Facebook, Google and Microsoft

• How APIs Turned Cloud Security on Its Head

• How DHS Does Cybersecurity with Content Filtering

• How Much Does Your Ox Weigh?: Crowdsource Your Way to Data Protection

• How One Smart Phone Picture Can Take Down Your Company

• How Secure are Contact-less Payment Systems?

• How Security Can Be the Next Force Multiplier in DevOps

• How To: Aggressive Remediation in an APT World

• How to Avoid the Top Ten Software Security Flaws

• How To Become a World-Class CISO

• How to Design Data Centric Security and What to Watch For?

• How Vulnerable Are Our Homes? - The Story of How My Home Got Hacked

• How We Discovered Thousands of Vulnerable Android Apps in One Day

• Hunted to the Hunter

• Hunting the Undefined Threat: Advanced Analytics & Visualization

• IANS Research - The 7 Factors of CISO Impact

• Identithication: Convergence of Identity and Authentication - A Rock Opera

• Identity Proofing - Blinding the Eye of Sauron

• I’m in Control Here: Who’s in Charge of Cybersecurity?

• Implementation Attacks on Exponentiation Algorithms

• Implementing an Automated Incident Response Architecture

• Implementing the U.S. Cybersecurity Framework at Intel—A Case Study

• Inception: APT Campaign Spanning PCs, Mobile, the Cloud, and Home Routers

• Incident Response Agility: Leverage the Past and Present into the Future

• Incident Response: A Test Pilot’s Perspective

• Inconvenient Security: When Attorneys Drive Security Decisions

• Information Security Leadership Development: Surviving as a Security Leader

• Information Technology Insights from the DoD CIO

• Insider Threat and the Dark Web: Cyber Response Mini-Wargame

• Insider Threat and the Dark Web: Cyber Response Mini-Wargame

• Insider Threat Best Practice, Developing a Solid Program for Success

• Inside the Boardroom: How Boards Manage Cybersecurity and Risk

• Inside the World of Java Applets

• Internet of Threats: What’s Really Connected to the Net and Why You Care

• IoT: When Things Crawl into Your Corporate Network

• Is DevOps Breaking Your Company?

• Is Your Third-Party Service Provider Vendor Management Program Good Enough?

• I Was Attacked by My Power Supply: A Mock Trial

• Killing the Kill Chain: Disrupting the Cyber Attack Progression

• Leveraging Global Threat Intelligence: Raising the Cost of Cyber-Warfare

• License to Kill: Malware Hunting with the Sysinternals Tools

• Lie. Cheat. Deceive. How to Practice the Art of Deception at Machine Speed

• Limiting the Spread of Threats: A Data Center for Every User

• Live Mobile Hacking Demo and Dissection!

• Lock Your Front Door: Protecting Patient Portals

• LTE Security - How Good Is It?

• Majority Report: Making Security Data Actionable (and Fun!)

• Making Threat Intelligence Actionable: Recommending Responses with STIX

• Malware Persistence on OS X Yosemite

• Managing Expectations: The S.E.C. & F.T.C. Target InfoSEC Compliance

• Managing Risk in a Mobile First World

• Managing the Unmanageable: A Risk Model for the Internet of Things

• Medical Device Security: Assessing and Managing Product Security Risk

• Membership

• Minimizing the PCI Footprint: Reduce Risk and Simplify Compliance

• Misinforming Management

• Mobile Security Shootout - Which Smartphones Are Up to the task?

• Mobile Vulnerabilities: From Data Breach to Complete Shutdown

• Mobility and the Law: Protecting Your M-Info

• Mock Trial: International Discovery and Analysis: Miscarriage of Justice?

• Modern Department of Homeland Security Cyber: Our Vision Forward

• More Apt Than You Think: Data Protection at Massive Scale

• More Books You Should Have Read by Now: The Cybersecurity Canon Project

• Network Security and Operations When the Network Is Already Compromised

• News Flash: Some Things Actually Do Work in Security!!!

• New Trends In Cryptographic Algorithm Suites Used for TLS Communications

• Next Generation Healthcare Security

• Next Wave of Security Operationalization

• No More Snake Oil: Why InfoSec Needs Security Guarantees

• Notice of Eviction

• On the Care and Feeding of Human and Device Relationships

• Orchestrating Software Defined Networks (SDN) to Disrupt the APT Kill Chain

• Owning SAP ASE: Chained Database Attack

• Pass-the-Hash II: The Wrath of Hardware

• Patching Exploits with Duct Tape: Bypassing Mitigations and Backward Steps

• Penetration Testing with Live Malware

• Phishing Dark Waters – Defending against Malicious Emails

• Phishing for the Phoolish: Why Hackers Love Gilligans and Their Best Lures

• Please DON'T Share My Data: Imparting Sensitivity Markings on Shared Data

• PORTAL: Open Source Secure Travel Router for International Adventure

• POSitively under Fire: What Are Retailers Facing?

• Post-Snowden Cryptography Part I

• Post-Snowden Cryptography Part II

• Powering Your Threat Intel Team with Off-the-Shelf Tools

• Practical Advice for Embracing RASP - A New Kind of Defense

• Pragmatic Metrics for Building Security Dashboards

• Preventing and Disrupting National Security Cyber Threats

• Privacy and Security, the Ties That Bind

• Protecting Critical Infrastructure Is Critical

• Rapid Threat Modeling Techniques

• Realities of Private Cloud Security

• Renewing the Patriot Act

• Restoring Order: The Inevitable Evolution of IT Security Regulation

• Riding the Wave of the Digital Bank: A Security Perspective

• Rise of the Machines: An Internet-Wide Analysis of Web Bots in 2014

• Risk & Compliance Management for Private & Hybrid Cloud Deployments

• Risk-Ops at Scale: Framework Operationalization to Address Business Risk

• Secure and Efficient Implementation of AES Based Cryptosystems

• Secure Apache Web Server with HMTL5 and HTTP 2.0

• Secure Application Development with Go

• Secure Graphical Passwords

• Secure Multi-party Computation

• Securing Active Directory Correctly

• Securing Boomers, Gen Xers And Gen Yers: OMG We Are So Different!

• Securing the Grid: Opportunities and Risks in Operational Technology

• Securing the Internet of Things: Mapping IoT Attack Surface Areas with the OWASP IoT Top 10 Project

• Security and Privacy in the Cloud: How Far Have We Come?

• Security and Privacy: Let’s Stay Together, Baby

• Security Basics Seminar

• Security: Changing the Game

• Security Data Science: From Theory to Reality

• Security Hopscotch

• Security Humanitarianism: Extraordinary Examples of Tech Improving Lives

• Security in an Age of Catastrophic Risk

• Security in the App Economy: How to Ride the Wave Without Wiping Out

• Security: Meet Your New Roommate, The Dynamic Provisioning Environment

• Security Metrics That Your Board Actually Cares About!

• Security’s Evolving Role as an Enabler to the Business

• Separating Signal from Noise: Taking Threat Intelligence to the Next Level

• Seven Grades of Perfect Forward Secrecy

• Should Organizations Share Threat Intel to Avoid the Next Cybergeddon?

• Side-Channels in the 21st Century: Information Leakage from Smartphones

• Six Degrees of Kevin Bacon: Securing the Data Security Supply Chain

• Six Things Wireless Security Professionals Need to Know About Wireless

• Something Awesome on Cloud and Containers

• SSLammed, SSLayed and SSLapped Around - Why Hackers Love SSL

• Standards for Exchange of Identification Context between Federated Parties

• State of Cybersecurity: 2015 Findings and Implications

• States at Risk: Cyber Threat Sophistication, Inadequate Budget and Talent

• STIX in Practice for Incident Response

• Stop Selling and Start Marketing Your Information Security Program

• Structural Entropy Analysis for Automated Malware Classification

• Stuck in Patterns - How Your Mind Fools You Every Day

• Sun Tzu Meets the Cloud: Everything Is Different, Nothing Has Changed

• Supply Chain as an Attack Chain: Key Lessons to Secure Your Business

• Surviving SOC2 – The Why and How for Cloud Service Providers

• Taking a Business Risk Portfolio (BRP) Approach to Information Security

• Technologies That Will Shape the Future Privacy Debate

• Terror Gone Social: The Islamic State and Social Media

• That Point of Sale Is a PoS

• The 50-Minute MBA for Information Security Professionals

• The Art of Thinking Security Clearly

• The CISO Reporting Project

• The Coming Revolution: Industry Groups Defining Vendor Assessment Standards

• The Day My Kids Brought Home Malware

• The Economics of Online Identity: 6 Buzzwords to Impress your Boss

• The Emperor’s New Password Manager: Security Analysis of Password Managers

• The Evolution of the Cybersecurity Executive Trifecta: The CSO/CIO/CISO

• The Future of the ITU, ICANN and the IANA Transition

• The Hazards of Online Ads: What Is Being Done and What You and Your Employees Can Do

• The Insider Threat in the Cloud: The Harsh Reality in Today's World

• The Internet of Things: Revolutionary, Evolutionary or Fad?

• The Internet of TR-069 Things: One Exploit to Rule Them All

• The Internet of TR-069 Things: One Exploit to Rule Them All

• The Kelvin Mantra: Implementing Data-Driven Security Practices

• The Legal Pitfalls of Failing to Develop Secure Cloud Services

• The Library of Sparta: Applying Military Doctrine to Cybersecurity

• The Long and Winding Road: Building an InfoSec Career from Techie to CISO

• The Long Road to a Secure Web

• The Mother of All Pen Tests

• The Newest Piece of Defense-in-Depth: Social Media & DNS

• The “New Paradigm” of Business-Driven Cyber Defense: An Update from the FCC Chairman

• The Physics of Security

• The Promise and the Perils of Wearables

• There Are No Domestic Cyber Issues: US & UK Leaders on Global Partnership

• There’s a Cougar in the Car – Quickly Navigating through a Cyber Crisis

• There’s an App for That: How the Future of Privacy Will Be Consumer-Driven

• The Six Most Dangerous New Attack Techniques and What's Coming Next

• The Social Network Panel at RSA Conference

• The Sophisticated Attack Myth: Hiding Unsophisticated Security Programs

• The Sound of Metrics

• The Third Rail: New Stakeholders Tackle Security Threats and Solutions

• The Truth about Cyber Risk Metrics: Connecting Vulnerabilities to Economics

• The Wolves of Vuln Street: The 1st Dynamic Systems Model of the 0day Market

• Threat Intelligence Is Dead. Long Live Threat Intelligence!

• Threat Intelligence is Like Three-Day Potty Training

• Timing Attacks

• Tools of the Hardware Hacking Trade

• Top 10 Web Hacking Techniques of 2014

• To Sign and Protect - COPS in OS X and iOS

• To Swipe or Not to Swipe: A Challenge for Your Fingers

• Tracking Ghosts through the Fog

• True Cost of Fraud and Cybercrime Against Your Mobile Channel

• Trust in Mobile Enterprise – Have We Lost the Game?

• UMA in Health Care: Providing Patient Control or Creating Chaos?

• Understanding Threats Using Big Data and Contextual Analytics

• Updating Surveillance Law on Government Access to Your Online Data

• Use Context to Improve Your User Identification Odds

• Use of Technology in Preserving and Protecting Humanity

• U.S. Government Initiatives for Securing the Global Supply Chain

• Using an Open Source Threat Model for Prioritized Defense

• Using Team Structure as Defense in Depth

• Using the Cybersecurity Framework: Lessons Learned and Opportunities

• Vulnerability Management Nirvana: A Study in Predicting Exploitability

• Wait! Wait! Don't Pwn Me!

• Wanted: Innovation in Security Research

• Want to be Secure in the Cloud? Build a Casino

• Wargaming for the Boardroom: How to Have a Successful Tabletop Exercise

• Watt, Me Worry? Analyzing AC Power to Find Malware

• Website Counterintelligence: Leveraging Web Logs to Gather Intelligence

• We Have Met the Future of Security and It Is Us

• We're Gonna Need a Bigger Boat

• WestJet’s Security Architecture Made Simple—We Finally Got It Right!

• What a Relief - It Works! How to Build an Insider Threat Program in One Year

• Whats Next? Teaching Machines How to Speak Security.

• What Trusted Computing History Teaches Us about Today's Challenges

• What You Don't See WILL Breach You! "Intelligizing" Detection through Context

• When IT Threats Meet OT Innocence

• When Will InfoSec Grow Up?

• Whose Cloud Is It Anyway? Exploring Data Security, Ownership and Control

• You Are What You Click: Using Decoys to Identify Mobile Device Attackers

• You Can’t Stop What You Can’t See

• “Your VISA has been DEACTlVATED” – How Cybercriminals Cash In Via SMS Attacks

• You’ve Been Warned: iBeacons to Bring a Tsunami of Change to Data Security

• Zero Knowledge Security

- See more at: http://www.rsaconference.com/events/us15/downloads-and-media?keywords=&track=&type=presentations#sthash.lltQQSsI.dpuf