CISO, Ashley Madison's parent company Ruby Life Inc.
The scale of connectedness we're experiencing is unprecedented. The pace of change and technology advancement in recent years could be compared to another industrial revolution. But the connectedness that allowed us to bring the power and security of the Visa network to each transaction in real time, also created the potential for criminals to reach into the payment system from anywhere in the world. This presentation will examine how Visa is securing the future of digital payments.
Tech Spotlight - "The Criminals Don't Operate in Silos and Neither Should We"
Open source and third-party components help developers build and deploy applications faster. But with increased speed comes greater risk. Vulnerabilities in components are a hidden cost of free software. And their widespread use creates opportunities for attackers looking to exploit the most possible victims by breaching a single vulnerability, which could lead to later incidents of breach. To reduce these risks, development and security teams need strategies to tackle the challenge of securing their applications from vulnerabilities in third-party and open source components.
The concept of deploying multiple layers of security controls throughout IT systems was just the first step in the evolution of cyber warfare. Now organizations are equipped with a broad portfolio of tool sets providing a false sense of security.
How an in-depth defense strategy can create overconfidence that paves the way for cybercriminals.
We've spent countless hours and dollars getting ready for the arrival of the EU'S GDPR. In the months since, what's actually changed? How have companies reacted? What should we expect going forward in the EU, and in North America? Has it been all bark and no bite? This session will outline how companies dealt with GDPR's arrival, and how other jurisdictions around the world have put the wheels in motion to create their own sharp-toothed legislations in the wake of the EU's changes.
Due to the volume of personally-identifiable information (PII) available on the black market as a result of high profile breaches, fraudsters can open an account with a real identity using a few key pieces of compromised information. Fraudsters have also begun creating synthetic identities by piecing together different data elements from multiple sources to create a new identity. The US alone saw a113% increase in incidence of new account fraud since the EMV shift, which now accounts for 20% of all fraud losses.
Financial services companies must take more stringent measures to combat the rise of fraud in the digital channel, yet doing so can cause more friction and inconvenience for customers. On the other hand, customers are looking for enhanced services on the digital channel with a full 70% of checking and 80% of credit card applicants preferring to apply via the digital channel rather than in person. Given this, how can businesses improve risk decisions when little information is known about the end user as with new digital account opening?
This session will discuss how advanced digital intelligence technologies, leveraging device and user data, can help companies offer account opening as a seamless, yet secure experience for consumers in the digital channel.
How to secure the perimeter by applying policy to defensively registered domains and identifying open vulnerabilities from look-alike domains.
Explore the state of DDoS attacks as observed by network and security professionals directly responsible for operating and securing global networks. This session covers a range of issues from threat detection and IR to managed services and staffing . Hear about the daily operational challenges, as well as strategies adopted to address and mitigate them, including the latest attack techniques and current best practices for defense.
Learn how to defend your network from these attacks.
An in-depth look at the frequency, magnitude, and manner in which modern enterprise networks change and the risks these changes pose, across all F100 FSI organizations. We highlight different technological and organization processes, such as M&A events, cloud migration, IoT deployment, and network misconfigurations that result in unexpected, large, and rapid changes in modern enterprise networks, and how these types of unexpected changes create exposures that have led to large, well publicized breaches. All insights are sourced from data gathered independently of all organizations.
2018 has been an important year in Canada from a cybersecurity and privacy standpoint. The introduction of Canada's new National Cybersecurity Strategy in June of this year along with the upcoming mandatory breach notification requirements effective November 1, 2018 are just the tip of the iceberg. In a complex world where data protection and privacy laws from multiple jurisdictions collide, it's important for organization to have a clear grasp of what's happening in in Canada. This session will provide an overview of recent key developments from a policy, legal and caselaw standpoint.
What does a targeted attack really look like? How can you effectively defend your organization? What does it take to recover from a headline-grabbing breach and rebuild trust with your customers?
"Offensive-driven" risk management and how to best ensure breach resilience.
The University of Toronto has been impersonated over a dozen times in the past two and a half years in a somewhat sophisticated scam designed to steal goods to order. This presentation will detail how the scam works (with examples!), talk about some of the mitigating actions that have been performed, as well as some of the reactions the University has seen from various groups involved. Finally, the presenter will open the floor to discussion of possible solutions to this ongoing fraud scheme.