Thought leadership roundtable

Time
Wednesday, September 12, 2024
3:20pm-5:10pm in Harmony Room

Abstract
A Tall Task – Ransomware Defense, Information Security Program Efficacy and Agility in an Unpredictable World

In this roundtable our customer panelists and attendees will discuss practical risk assessment, architectural, operational and governance trends, insights and lessons learned as we all embark on a journey to prevent, detect and recover from a ransomware attacks… while AI-enabling your organization… and meeting your business needs.  

We will discuss the role risk frameworks (NIST CSF), controls frameworks (CIS CSC) and financial modeling play in the board room and in the field. Dealing with the complexity of the Known Knowns, Known Unknowns and Unknown Unknowns threats requires a shift in leadership’s expectations of your Information Security program. To deal with the complexity there is a need to not only assess risk but also validate vulnerabilities to focus your resources on what moves the needle.  In parallel we are evolving architectural and security tools capabilities from threat-specific controls to behavioral-based visibility access your endpoints, networks and applications. What is the vision for a future minimum viable toolset and how do we get there?

Speaker
Moderators:

Mark Sollazo – President, CEO, Co-founder @ SynerComm
Kirk Hanratty – VP, Co-founder @ SynerComm

Panelists:

Keynote – Day 1

Time
Wednesday, September 11, 2024
1:00pm-2:30pm in Serenity Room

Abstract
A Tall Task – Information Security Program Efficacy, Ransomware Readiness, and Agility in an Unpredictable World – Day 1

In this keynote we will discuss practical risk assessment, architectural, operational and governance trends, insights and lessons learned as we all embark on a journey to prevent, detect and recover from a ransomware attacks… while AI-enabling your organization… and meeting your business needs.

We will discuss the role risk frameworks (NIST CSF), controls frameworks (CIS CSC) and financial modeling play in the board room and in the field. Dealing with the complexity of the Known Knowns, Known Unknowns and Unknown Unknowns threats requires a shift in leadership’s expectations of your Information Security program. To deal with the complexity there is a need to not only assess risk but also validate vulnerabilities to focus your resources on what moves the needle. In parallel we are evolving architectural and security tools capabilities from threat-specific controls to behavioral-based visibility access your endpoints, networks and applications. What is the vision for a future minimum viable toolset and how do we get there?

Speaker
Moderators:

Mark Sollazo – President, CEO, Co-founder @ SynerComm
Kirk Hanratty – VP, Co-founder @ SynerComm
Marc Spindt – VP Services @ SynerComm
Brian Judd – VP Information Assurance @ SynerComm
Bill Kiley – Practice Leader of Appdev, Software Architect of CASM @ SynerComm

Keynote – Day 2

Time
Thursday, September 12, 2024
8:45am-10:15am in Serenity Room

Abstract
A Tall Task – Information Security Program Efficacy, Ransomware Readiness, and Agility in an Unpredictable World – Day 2

In this keynote we will discuss practical risk assessment, architectural, operational and governance trends, insights and lessons learned as we all embark on a journey to prevent, detect and recover from a ransomware attacks… while AI-enabling your organization… and meeting your business needs.

We will discuss the role risk frameworks (NIST CSF), controls frameworks (CIS CSC) and financial modeling play in the board room and in the field. Dealing with the complexity of the Known Knowns, Known Unknowns and Unknown Unknowns threats requires a shift in leadership’s expectations of your Information Security program. To deal with the complexity there is a need to not only assess risk but also validate vulnerabilities to focus your resources on what moves the needle. In parallel we are evolving architectural and security tools capabilities from threat-specific controls to behavioral-based visibility access your endpoints, networks and applications. What is the vision for a future minimum viable toolset and how do we get there?

Lessons in Resiliency – Preparing for and Dealing with the “Unkowns” of Racing

In this presentation Townsend Bell will share some insights and lessons that he learned from his career as a professional race car driver and NBC Sports TV commentator. Whether you are a cybersecurity professional, a business leader, or a racing enthusiast this presentation will inspire you to embrace the race car driver’s perspective and apply it to your own endeavors.

Speaker
Moderators:

Mark Sollazo – President, CEO, Co-founder @ SynerComm
Kirk Hanratty – VP, Co-founder @ SynerComm
Marc Spindt – VP Services @ SynerComm
Brian Judd – VP Information Assurance @ SynerComm
Bill Kiley – Practice Leader of Appdev, Software Architect of CASM @ SynerComm

Guest Speaker

Lessons in resiliency – preparing for and dealing with the “unkowns” of racing

Keynote Session

Abstract
In this presentation Townsend Bell will share some insights and lessons that he learned from his career as a professional race car driver and NBC Sports TV commentator. Whether you are a cybersecurity professional, a business leader, or a racing enthusiast this presentation will inspire you to embrace the race car driver’s perspective and apply it to your own endeavors.

Speaker

Unleashing the power of flipper zero: hands-on pentesting workshop

Workshop

Time
Thursday, September 12, 2024
1:00pm-1:40pm in Inspire Room

Abstract
Dive into the world of pentesting with SynerComm’s exclusive hands-on workshop, featuring the versatile Flipper Zero device. Join our expert pentesters as they guide you through the initial setup and unleash the full potential of your Flipper Zero, equipped with the Flipper WiFi Dev Board. In this immersive session, you’ll explore real-world WiFi attacks, including deauthentication and capturing WPA handshakes, and master the art of capturing and cloning RFID and NFC fobs. Whether you’re a seasoned security professional or a curious newcomer, this workshop offers a unique opportunity to learn cutting-edge techniques in a collaborative, hands-on environment. Limited to 20 participants—reserve your spot and take your pentesting skills to the next level!

⭐ Please sign up in advance. Supplies are limited.

Speaker

Hunting in high definition

by

Time
Thursday, September 12, 2024
10:25am-10:55am Harmony Room

Abstract
This session delves into the art of threat hunting, anomaly detection, forensic investigations, and more, presenting a comprehensive approach to bolstering security operations. This presentation explores the concept of amplifying security operations by harnessing the power of high-definition data analysis. One of the key strategies highlighted is the innovative concept of ”Chained Detections.” This methodology involves connecting seemingly unrelated artifacts and events to unveil hidden patterns, identify potential threats, and proactively mitigate risks before they escalate. Join us as we explore the forefront of cybersecurity operations and discover how the art of hunting in high definition, coupled with chained detections, can amplify your security operations.

Speaker

Why hardware matters – Infrastructure enabled AIOps

by

Time
Wednesday, September 11, 2024
2:40pm-3:10pm Serenity Room

Abstract
As network hardware becomes increasingly democratized, vendors are turning to AI to differentiate their solutions. This session explores the impact of this industry realignment on everything from hardware design, network operation, and org charts. Set against the backdrop of Juniper’s own AI Ops journey, we’ll discuss how networking solution vendors are adapting to these changes, and what it means for consumers.

Speaker

The modern attack: understanding the adversary

by

Abstract
Understanding your organization’s exposure and the adversary is key to building resilience against the modern attack. Adversaries continuously evolve their tradecraft and find new, inventive ways to attack organizations around the world. However, this doesn’t mean we always have to play defense by reacting. In this session will discuss the current state of the threat landscape, adversary operations including access and post exploitation along with target environments.

Data and ai assets security

by

Abstract
We’ll dive into the essential strategies and tools CISOs need to protect data and AI assets. We’ll cover the latest trends, real-world challenges, and best practices in data security and AI protection. You’ll walk away with actionable insights into the evolving threat landscape, regulatory demands, and advanced defense tactics to keep your organization safe.

Comprehensive identity protection and resiliency

by

Abstract
In today’s digital world, keeping your organization’s identity systems safe and resilient is more important than ever. Join us for a practical and engaging session where we’ll share key strategies and best practices to protect your identity infrastructure. We’ll cover how to guard against identity-based attacks, ensure continuity, and build trust in your systems. Learn about proactive defense measures, effective incident response, and the role of identity governance.

Speaker

Leadership panel: how the rise of ai threats is leading to new challenges, technologies & expectations

by

Abstract
Come hear from Industry Leaders within Abnormal Security, Footlocker and In-Place Machining as they delve into a discussion around the rise of threats in AI and the challenges that businesses face as a result. Additionally, they’ll address the technologies being developed to address the threats and protect businesses from potential risks. This panel session will offer valuable insights into how AI impacts businesses and the importance of considering its implications on the corporate world

Speaker

Iot device security: the high cost of inaction

by

Time
Thursday, September 12, 2024
1:40pm-2:10pm Harmony Room

Abstract

In today’s era of connected devices, IoT cyberattacks could be hiding in plain sight. And the cost of ignoring them is higher than ever before. Join Asimily IoT expert Peter Hancock as he discusses:

• The staggering financial and operational impacts of IoT security breaches
• Why traditional cybersecurity solutions fall short in the world of IoT
• Key steps and best practices for securing your devices to strategically reduce risk

Speaker

Anti-ransomware for backups: strategies for business continuity & compliance

by

Time
Wednesday, September 11, 2024
2:40pm-3:10pm Clarity Room

Abstract

Are your backups clean, uncompromised and recoverable?

In today’s digital ecosystem, ransomware attacks pose a significant threat to organizations, underscoring the urgent need for robust data protection measures. Join us for a session focused on securing your backups against ransomware to bolster cyber resilience and ensure compliance requirements such as NYDFS data protection policies.

In this session, Elastio Chief Scientist Dr. Srinidhi Varadarajan will cover:

• The evolving landscape of ransomware threats and their impact on data security
• Practical insights and best practices for achieving compliance with NYDFS and other data protection compliance policies
• Real-world case studies and success stories highlighting the importance of proactive backup security measures for cyber resilience and regulatory compliance

Don’t miss this opportunity to gain actionable insights and guidance from a cybersecurity expert on safeguarding your backups against ransomware threats and ensuring alignment with regulatory data protection compliance policies, including NYDFS, DORA, and NIST CSF 2.0.

Speaker

Observability with network automation – the future now

by

Abstract

In today’s fast-paced IT landscape, leaders face the daunting challenge of managing complex, multi-vendor networks while contending with limited resources, frequent issues, and ever-evolving infrastructure. This session will explore how NetBrain transforms these challenges into opportunities by combining advanced network observability with powerful, no-code automation.

Discover how to leverage your team’s existing expertise and NetBrain’s observability tools to automate network troubleshooting, proactively identify and mitigate security risks, and streamline operations. We’ll also delve into emerging leadership principles in automation and AI that are reshaping the future of IT, offering new perspectives on what’s possible and how to lead your team into the next era of innovation.

Speaker

Fortifying digital frontiers: a people centric approach to security risks

by

Abstract
In an era where digital threats are ever-evolving, understanding the landscape of security risks is crucial. This presentation delves into the core areas of threat risk, impersonation risk, data exfiltration risk, and identity risk. We will explore effective strategies to mitigate these risks, emphasizing a human-centric security program that adapts to the complexities of modern digital operations and threat intelligence. Join us to strengthen your security posture with actionable insights.

Speaker

Are your assets causing an information security crisis?

by

Time
Thursday, September 12, 2024
1:40pm-2:10pm Clarity Room

Abstract

Complexity is the new norm for security. Today, more than ever before, security teams are under pressure to deliver fast, continuous, and reliable services to the business. With so many tools and an abundance of data at their fingertips, you’d think it would be easier for security and operations teams to find and fix issues that could lead to a data breach, network outages, inaccessible systems or data, and much more. But making sense out of sprawling IT ecosystems requires going back to security basics.

In this session, Adib Sarakby with Axonius, will discuss why we have to focus on our foundations – asset hygiene – as a means to meeting today’s business demands. In addition to demos, topics discussed will include:

• “Why is network visibility so hard?” How your security team can accurately identify assets and make sense of your IT ecosystem.
• “What’s impacting performance?” It is more than what’s communicating on your networks. How you can use the data that’s already available to you to baseline and remediate problems before they become security events.
• “How do I create a sustainable program?” How to ensure an effective asset management program that will make you a true business enable

Speaker

The many ways hackers can bypass mfa

by

Abstract

Too many people think that MFA is a perfect, unhackable solution. Hackers can send you a regular phishing email and entirely take control of your account even if you use a super-duper MFA token or smartphone app. Join us to learn the 12+ ways hackers get around your favorite MFA solution. This session will include a (pre-filmed) hacking demo and real-life successful examples of every attack type. In the end, you will learn how to better defend your MFA solution so that you get maximum benefit and security.

Speaker

M365 scorecard – a false sense of security! Who is watching the watchers?

by

Thursday, September 12, 2024
11:45am-12:15pm Clarity Room

Abstract

What M365 Scorecard tells you, what CIS CSC tells you and what they doesn’t tell you about your security posture settings will shock you. What is going on in your MFA, Conditional Access environment and compensating controls outside the Microsoft environment?

Speaker

Uncensored llms are here – is your infosec program prepared?

by

Thursday, September 12, 2024
3:00pm-3:30pm Clarity Room

Abstract

Everyone is focused on how to secure GenAI applications for their business. But how can you prepare to understand and defend against bad actors using uncensured Large Language models to do unethical things to our organizations. In this session we will interact with a LLAMA 3 uncensored LLM and compare it to Meta’s LLAMA 3 for reference. Be prepared to be shocked with the graphic detailed, actionable code-based answers to our nefarious question.

Speaker

Digital twins: what is it and why you should have it. Network and security infrastructure modeling

by

Thursday, September 12, 2024
2:20pm-2:50pm Clarity Room

Abstract

In this session we discuss and demonstrate real-world examples and lessons learned in an EVE-NG environment from modeling with digital twins and simulating proposed infrastructure changes to validate they have the intended impact on network and security infrastructure functionality prior to executing during an outage window.

Speaker

Getting the most out of your pan ngfw platform investment leveraging an assessment program that has stood the test of time

by

Thursday, September 12, 2024
3:40pm-4:10pm Clarity Room

Abstract

We will delve into our proven assessment process for optimizing your PAN NGFW platform to identify security risks, configuration drift and make detailed platform tuning recommendations specific to your environment. This session will share real-world findings that have helped organization’s over the years fortify their enterprise’s defenses.

Speaker

Ransomware uncovered: understanding and countering the threat

by

Thursday, September 12, 2024
2:20pm-2:50pm Harmony Room

Abstract

Play, Ransomhub, BianLian, Akira, Rhysida – These are some of the most active ransomware groups that are wreaking havoc across various industries in the US andaround the world. In this discussion, we go over how exactly ransomware works, andwe will take a closer look at some of these groups and the tools and malware they are using to take down their targets. We will discuss each step of the targeted attack lifecycle starting from initial compromise to the exfiltration of data and ransomware deployment. We will also discuss how having SynerComm’s ContinuousPenetration Testing service in your corner can help you in the fight to protect your network.

Speaker

An adversary simulation program: real-world testing for enhanced cybersecurity

by

Thursday, September 12, 2024
3:40pm-4:10pm Harmony Room

Abstract

This session will cover the benefits of stress-testing against real-life attack scenarios and how to improve and validate preventive and detective controls over time.

Speaker

The tides are changing: modernizing it assurance techniques to address the “Breach of the week”

by

Time
Wednesday, September 11, 2024
4:00pm-4:30pm Inspire Room

Thursday, September 12, 2024
2:20pm-2:50pm Serenity Room

Abstract

As the attack surface of everyone’s IT footprint continues to expand, the demands from the compliance world are changing and expanding along with it in a scramble to keep up. New versions of frameworks, new privacy laws, and new requirements from insurers and clients now require more than just the completion of a checklist or questionnaire related to your IT controls.

The whole process needs to, and finally is changing. During this session, Jeff Lemmermann, a senior member of the SynerComm IT Assurance team, will bring his experiences from both public accounting and IT security in an exploration of:

1. The importance of control validation
2. What the MOP process is
3. Where continuous can help
4. Applying financial audit concepts like materiality and tolerance to IT assurance

You will also learn what changes are on the horizon that affect IT assurance needs, the importance of measuring business risk, and what SynerComm recommends to produce more value in the process.

Speaker

Your existing nist or cis framework compliance evidence can chart your path forward

by

Abstract

In this session we will explore proven cyber risk assessment methodologies measured against NIST CSF risk framework and CIS CSC control framework implementation efficacy. Assessing and validating cyber risks can lead to significant efficacy and financial ROI. Additional benefits include identifying the minimum viable toolset for your environment and creating a platform for ongoing what-if scenario financial impact analysis.

Speaker

Penetration testing apis: essential strategies for security

by

Thursday, September 12, 2024
11:45am-12:15pm Harmony Room

Abstract

APIs are great for operations and security tool integration. In this session we will discuss why you need a strategy, security validation testing and standards before opening up vast amounts of data access. What you don’t know can and will hurt you.

Speaker

Everyone has an ASM, but they don’t all look the same

by

Abstract

Discover CASM, SynerComm’s groundbreaking platform designed specifically for penetration testing. It’s more than continuous reconnaissance and vulnerability management; it’s a revolution in organizing assets and vulnerabilities for peak pentester performance. Intrigued? Join us to uncover the strategic advantages that Continuous Penetration Testing offers and learn why ASM is a pentester’s tool.

Speaker

Enumerating javascript files in web application penetration testing

by

Thursday, September 12, 2024
3:00pm-3:30pm Harmony Room

Abstract

In modern web applications, JavaScript files play a crucial part in managing functionality, user permissions, and much more. This talk breaks down the tools and techniques used to enumerate JS files that travel to end user browsers for valuable and potentially exploitable information. We’ll discuss how to enumerate sensitive information, endpoints, parameters, perform response poisoning, and discuss real world case studies where exposed JavaScript lead to critical security vulnerabilities.

Speaker

Securing the software delivery lifecycle: synercomm’s secure sdlc practice area expert insights

by

Abstract

Join Bill Kiley, SynerComm’s Software Architect, as he unveils common security risks within the Software Delivery Lifecycle (SDL/SDLC). This presentation will dissect the intersection of people, practices, and technology, revealing SynerComm’s capabilities in identifying and mitigating these vulnerabilities. Learn how their comprehensive approach not only identifies but also addresses the security challenges faced in modern SDL environments, ensuring a fortified and resilient software development process.

Speaker

Lodging

To book your room: