AttackIQ

FIN6, a financially-motivated cybercrime group possibly of Russian origin, has been linked to attacks against point-of-sale systems in retail and hospitality sectors since at least 2015. The group is known to have used FrameworkPOS and GratefulPOS malware, deployed Ryuk and LockerGaga ransomware, and also linked to various Magecart campaigns. Learn how to use MITRE ATT&CK techniques with the FIN6 emulation plan to know what will happen if your organization gets hit by this cybercrime group. Join AttackIQ cyber experts Jose Barajas and Mark Bagley to learn how your team can leverage breach and attack simulation to test the group’s activities in production, at scale. They will also touch on other groups, such as APT29, to understand your risks by looking at the results of what happened after running an emulation plan.

Speakers:

Mark Bagley - AttackIQ

Jose Barajas - AttackIQ

AttackIQ Purple Hats: https://www.purplehats.org/

AttackIQ Academy: https://academy.attackiq.com/

AttackIQ: https://attackiq.com/

Since the publication of MITRE ATT&CK, MITRE Engenuity has been at the global forefront in fostering the practice of “threat-informed defense.” Since the founding of MITRE Engenuity’s Center for Threat-Informed Defense two years ago, the Center has brought industry leaders together to learn from each other and publish transformative research, including a comprehensive adversary emulation library for the public, mapping the MITRE ATT&CK framework to the NIST 800-53 family of security controls, and the new “Sightings” database that invites contributions from across the cybersecurity community. Join Richard Struse, Center Director, Jon Baker, Center Director of Research and Development, and Jonathan Reiber, AttackIQ Senior Director for Cybersecurity Strategy and Policy, for a conversation about the evolution of ATT&CK, how to put it to use, and the future of threat-informed defense research and operations.

Speakers:

Jonathan Baker - MITRE Engenuity

Richard Struse - MITRE Engenuity

Jonathan Reiber - AttackIQ

AttackIQ Purple Hats: https://www.purplehats.org/

AttackIQ Academy: https://academy.attackiq.com/

AttackIQ: https://attackiq.com/

How do you operationalize the concept of “cyber excellence” in your organization and move your program from being reactive to proactive and preventative? It takes an evolution of your technology stack, organizational structure, and processes. Join Marlys Rodgers, CISO of CSAA Insurance Group, with leaders in her cybersecurity team to learn how to move from a defensive to offensive cybersecurity program. They’ll share best practices for validating controls, leveraging the MITRE ATT&CK framework, assessing control maturity, discovering potential gaps, and working with the audit team. You will walk away with actionable steps and insights to begin your journey to a threat informed defense.

Speakers:

Brian Kindred - CSAA Insurance Group

Michael McCurrey - CSAA Insurance Group

Randa Moore - CSAA Insurance Group

Marlys Rodgers - CSAA Insurance Group

AttackIQ Purple Hats: https://www.purplehats.org/

AttackIQ Academy: https://academy.attackiq.com/

AttackIQ: https://attackiq.com/

Since the field of cybersecurity began, teams have struggled to measure a clear return on cyberdefense investment. After years of focus on advanced technology procurement and workforce development, today there’s a shift occurring in cybersecurity practice away from “speeds and feeds” and towards outcomes-based management and security program effectiveness. In this session Allan Alford, CISO/CTO of TrustMAPP and host of the Cyber Ranch podcast, will lead a discussion with Gabe Lawrence, GM of Cybsercurity Protection at Toyota, and Ben Opel, a former U.S. Marine who led the development of the Marine Corps cyberspace operational doctrine, on what it takes to successfully build and adopt a threat-informed defense strategy through purple team operations and automated testing.

Speakers:

Allan Alford - TrustMAPP

Gabe Lawerence - Toyota

Ben Opel - AttackIQ

AttackIQ Purple Hats: https://www.purplehats.org/

AttackIQ Academy: https://academy.attackiq.com/

AttackIQ: https://attackiq.com/

Against a backdrop of increasing cybersecurity risk — particularly ransomware and concurrent data exfiltration — CISOs in healthcare and public health (HPH) organizations are investing hundreds of billions of dollars in cybersecurity. Much of this is going to security controls that protect critical clinical and administrative systems, data, and networks. Learn how Ron Mehring, the CISO of Texas Health Resources, is uniting risk and threat management as part of his strategy to look at security through the lens of adaptive risk. You'll learn how to automate and more cleanly orchestrate processes with security stack technologies, as well as how tto manage end-to-end risk across disparate environments, all the way from consumer side.

Speaker

Ron Mehring - Texas Health Resources

AttackIQ Purple Hats: https://www.purplehats.org/

AttackIQ Academy: https://academy.attackiq.com/

AttackIQ: https://attackiq.com/

The definition of resilient is “being able to withstand or recover quickly from difficult conditions.” In cybersecurity, resilience is “the ability to prepare, prevent, respond and successfully recover to the intended secure state during a crisis or after a security breach.” Learn how Clayton Chandler, the CISO of Credit Suisse, thinks about operational resilience and strategies to assess gaps and drive enhancements to the overall security posture of the bank. He’ll be interviewed by Neal Bridges, a former NSA hacker, who is a cybersecurity influencer, streamer, and expert. In addition to operational resiliency, they will also discuss the role of breach and attack simulation as a foundational technology to help cybersecurity teams think differently and be more agile in handling new risks and attackers.

Speakers

Clayton Chandler - Credit Suisse

Neal Bridges - INE Training

AttackIQ Purple Hats: https://www.purplehats.org/

AttackIQ Academy: https://academy.attackiq.com/

AttackIQ: https://attackiq.com/

Faced with mounting attacks, tighter regulations, and greater budget scrutiny, cybersecurity teams have increasingly found themselves in strategic boardroom conversations. Yet, despite years of "blank check' investments in security controls, adversaries keep coming. What questions should business leaders to be asking about emerging cybersecurity trends? Which technologies, processes, and strategies will best protect the organization? How can you help guide investments that are based on optimizing business outcomes, not technology for technology's sake? AttackIQ CEO Brett Galloway will share his vision for 2021 and beyond in his opening keynote.

Speaker: Brett Galloway - AttackIQ

AttackIQ Purple Hats: https://www.purplehats.org/

AttackIQ Academy: https://academy.attackiq.com/

AttackIQ: https://attackiq.com/