Information Warfare Summit

Kevin Turner will host the joint Oklahoma Military/State Team panel with commander National Guard Cyber Command Captain Dan Slusarchuk, this year sharing behind the scenes discussion from team members that participated in Cyber Shield 2021.

This presentation is an extension of the SANS Rekt Casino series which is based on numerous real world ransomware attacks.
In this presentation I will talk about what it's like from the incident responder perspective, the IT team perspective, and from the business perspective.
I will cover how to respond to the incident, negotiating with the attackers, recovering from the attack, and reporting to the business as an independent consultant, or as a member of the IT or security team.

Things never go as planned and this provides good insight as to what actually happens behind the scenes and how things can go very wrong with the appropriate preparation.

"Dependencies, pipelines, and vulnerabilities -- Oh, my!

Security teams and developers are often at odds with one another. With the fast and furious adoption of agile development cycles, how can we, as security professionals stay on top? Bridging the gap is now more important than ever!"

Security professionals won't allow users into their environment with hacking tools, so how do you address people with implants? People are the attack vector and the tool. The ability to compromise contactless tech threatens physical & digital security. How do you stop a Cyber threat from a human?

COVID demonstrated to the world that supply chains are critical to our society and are vulnerable to many different types of disruptions. Not just cyber security disruptions.

Go mingle!

Come grab a drink with us!

Sponsored by Optiv and Palo Alto. Give them thanks for the drinks!

Cybersecurity training is usually low on everyone's priority list, often falling to the individual practitioners to deal with on their own time. By neglecting training we are letting our cybersecurity knowledge atrophy, increasing the time it takes to identify bad actors and resolve threats. By using open source tools and frameworks, running small scale CTF's becomes a fun and easy way to train your staff on how to recognize and deal with threats.

In this session - Learn what free training tools you have at your disposal, how to run your first small scale CTF, and level up your Security Analysts the fun way!

Joseph Poyner is a Strategic Sales engineer for SentinelOne and is dedicated to making the world more secure by helping his customers deploy world class cybersecurity solutions. Over his 10+ years in the Cybersecurity field, Joseph has worked for 4 different EDR vendors and he uses that depth of knowledge when consulting with customers. Joseph also maintains his CISSP and volunteers with local groups that focus on teaching youth STEM and Cybersecurity topics.

Have you reviewed your organization's governmental information security compliance requirements? This talk is a cheat sheet for evolving FTC InfoSec safeguards required of organizations electing to store consumer financial information.

An executive at a large financial institution, hit with thousands of regulatory audit findings, recently said to me, “Where is it written that I have to implement certain information security safeguards? People have been saying that to me for years, so I went to find out. Join me for an opinionated review of the federal statutory foundations and evolving FTC regulatory requirements on “other persons” to implement and maintain information security safeguards. Plus, how could anyone miss a compliance-risk-feature-chart-road-map-cheat-sheet based upon a headless job analysis? Anyone? Beuler? Beuler? Ok, so I will try and make it as fun as I can.An executive at a large financial institution, hit with thousands of regulatory audit findings, recently said to me, “Where is it written that I have to implement certain information security safeguards? People have been saying that to me for years, so I went to find out. Join me for an opinionated review of the federal statutory foundations and evolving FTC regulatory requirements on “other persons” to implement and maintain information security safeguards. Plus, how could anyone miss a compliance-risk-feature-chart-road-map-cheat-sheet based upon a headless job analysis? Anyone? Beuler? Beuler? Ok, so I will try and make it as fun as I can.

Many new and experienced developers turn to Google for code examples when building software. Some will even copy and paste these examples into their project and publish without thinking twice. How is this affecting our systems' security?

Every Info Sec career has a report writing moment (likely several). Be it an email brief to management or a risk assessment, incident response, metrics or executive report. Your CEO, Board, VP, CISO, CIO, Director, etc. will thank you for learning these tips for successful Info Sec writing.

This is mission critical defense for your Linux systems! Red team rascals on the the outside, check! How do you make the the inside sider threat a non starter? And the worst gut check of all - the auditors! Come to this talk and learn documents to learn from and practices to don Lets suit up!

Learn about the OSSEM project and how it is being implemented in Azure Sentinel to normalize events from all types of sources, making searching your logs easier than ever. You will learn some Kusto Query Language (KQL) during the talk, but you don't need to know it beforehand.

Go mingle!

Come grab a drink with us!

Sponsored by Optiv and Palo Alto. Give them thanks for the drinks!