Workshop: How to Infuence Security Behaviors In Employees (WORKSHOP)
No ratings
Presented at SourceBoston 2017 by
Regularly, security professionals across disciplines have to interact with elements of the business to help drive more secure outcomes. The ability to influence the employees of an organization can improve practices such as secure coding, accepting fewer business risks, reducing phishing click-through, and increased reporting rates to name a few. But how do you actively engage people to get them to change their behaviors to bene t security? Learn the basics of habit change and get insight into how to effectively influence the security behaviors of your employees. This workshop will cover how to identify and prioritize key behaviors, a model for behavior change, and how to gather relevant metrics. Eisenhower and the Internet Damon Small, N/A N/A The speaker researches the history of one large, government-funded infrastructure and compares it to another. Specifically, the Eisenhower Interstate System and the Internet. Connections: Eisenhower and the Internet explores what the logistical challenges of moving vehicles across the Country can teach us about cybersecurity. Although these two topics seem unrelated, the speaker will take the audience on a journey that begins with early 20th century road-building projects, travels through ARPANET and the commercialization of the Internet, and arrives at current-day cyberspace. These two massive infrastructures have changed the world, and there are important lessons that the former can teach about the latter. The presentation concludes with predictions about the future of the Information Superhighway and how information security professionals can prepare. Security Measures and Vulnerabilities in .NET Anurag Dwivedy, N/A N/A Asp.Net is on the most important web application framework used across widely for development of web applications, dynamic websites and web services. Security has a very important and pivotal role to play in the successful implementation of business requirements based on above mentioned technologies. The presentation would cover the basic security mechanisms for .net applications and would provide a quick guide to exploit vulnerabilities in .NET and recommended countermeasures to combat them. Eyes on the ground: why you need security agents Nathan Cooprider, N/A N/A Whether you build, buy, borrow, or steal it, you need a security agent on your endpoints. We can already hear your cries of agent fatigue and we sympathize. Any agent, no matter how lightweight, has costs associated with running it. Minimize those costs and get an agent, because you need the information that only an agent can harvest from the endpoint. We talk about various types of security agents, including their respective strengths and weaknesses. We explore how agents can interact and interfere with each other, and provide some tips for evaluating agents. We cover open-source, custom-built, and vendor perspectives, from cloud to IoT. We need information to do our jobs, and we need agents on our digital assets to provide that information. Cyber Warfare: Implications of Cyber Security on International Relations Fatih Karayumak, N/A N/A Digital era presented us with many advancements. Not only individuals but organizations and nations are connected with each other in ways that may be even unbeknownst to them. This has brought about a new type of danger: Cyber Struggles. The classic information gathering competition between nations evolved into cyber espionage, cyber reconnaissance and probing missions. On the other hand allied nations try to establish new platforms to further their collaboration facing international cyber security threats.