Cyber Security Dispatch

Key Points From This Episode:
An introduction to our guests and their roles at ESET.
What brings our guests to RSA.
High detection, low maintenance and avoiding false positives.
Resistance to the cloud and what the slow migration means for security.
The obvious relationship between cyber security and the Internet of Things.
Practical and safe application of IOT in the home.
Targeted attacks and specific ransomware.
Looking at how these products in our homes can be leveraged by cyber criminals.
The benefits of complexity and putting the pieces together.
The reflected complexity of the criminal tactics.
The ongoing struggle even as security technology develops.
GDPR, cars that start with your phone and the future now.
Creating a ‘naughty list’ of companies to avoid?
And much more!

Key Points From This Episode:
The beginnings of ShieldX and the time leading up to this.
The arrival of the cloud and the effect of ‘east-west’ security.
Implications for the lack of orchestration for traditional systems.
Reducing the total cost of ownership in addressing these scenarios.
Transferring the security of on-premise systems to the larger, cloud scale.
The logistics of migrating your security to any of the large cloud services.
The futility of an agent based approach to cloud security.
Compatibility and the platforms with which ShieldX corresponds.
Customer experience and how the service has been most widely utilized.
The three dimensional problem that ShieldX solves and secures.
Some information on ShieldX’s investors.
And much more!

Key Points From This Episode:
Learn more about the 2012 KPN hack and its impacts on cyber security today.
Riding the security rollercoaster: How to sustainably manage vulnerabilities and incidents.
Dealing with the known knowns, the known unknowns and the unknown unknowns…
How KPN works to reduce the window of opportunity for a potential hack to take place.
How does KPN ensure that security becomes embedded in different organizations.
Jaya shares more about the impact of cyber security when it comes to saving lives.
Why companies need to get their basics right before adding on more security services.
KPN’s risk mitigation strategies and why Jaya believes that risk acceptance is pretty evil.
Learn more about KPN’s “dumb” tool and the information they decided to make open source.
Jaya shares more about the KPN CISO app and where you can download it for free.
Jaya’s candid advice to fellow CISO’s and cyber-security product buyers out there today.
And much more!

Key Points From This Episode:
An introduction to Gary and his professional life.
The tragic turn that Gary’s company took after it was hacked from the inside.
How Gary and his wife handled the crimes that were committed against their company.
The change of career that followed the downfall of the company.
The hacks that persisted ten years after Gary left his original career.
The decision to turn his lack of cyber knowledge into a lesson for anyone.
The birth of the Cyber Heroes comic!
Looking at the motivations of the employees who hacked Ben.
The actual, legal ramifications of hacking.
Thinking of new ways to strengthen the general public against hacks.
And much more!

Key Points From This Episode:
Discover how Lisa entered the field of cyber security.
How Lisa came to work as a “bureaucracy hacker” at the Pentagon.
Learn more about the aims and direction of the DARPA program.
Lisa shares more about DARPA’s flagship program titled PlanX.
Find out more about the intricate links between Cybercom and the NSA.
Hear what Lisa believes is the problem with standards and compliance.
How to ensure mature cyber security ecosystems today? Lisa’s thoughts.
Hacking the Pentagon: How, why, when did this happen? Because it did.
Also, hacking the defense travel system, the Army and Air Force (twice).
How Hacking the Pentagon saved over a million dollars in defense.
The effects of the demonization of hackers in popular media today.
Why you cannot tell the world you are secure if you aren’t!
How Hack the Pentagon created a culture shift in security practices.
Lisa shares her view on vulnerability disclosure and policy.
See something, say something: The importance of reporting vulnerabilities.
And much more!

Key Points From This Episode:
The latest product John and King & Union have launched called Avalon.
Avalon’s target market and the space it occupies in security operations.
What differentiates Avalon from other similar products.
Entering a crowded market and integrating into existing systems.
The architecture of securing information for a large company.
Housing these systems and the cloud services Avalon uses.
The experience of venture capitalism and the start-up game.
Building the team at King & Union and the benefit of shared experience.
The location of the company and its branding choices.
And much more!

Key Points From This Episode:
David’s current position at Nuix and his background in the US Secret Service.
Some information on the Black Report and it’s defining characteristics.
The biggest realizations David has had working for Nuix.
Underestimating the human factor in current cyber attacks.
Better understanding the profiles and motivations of hackers.
The evolution of the mind of the attacker and how things stay the same.
Possible ways to go about testing and preparing for attacks.
David estimation of the social cohesion of hacker organizations.
How the security protocols and processes could be streamlined or sped up.
And much more!

Key Points From This Episode:
Learn more about Mike, his background in the industry and his role at ZeroFOX.
Find out why security never appears to be top of mind when it comes to social.
Are people more welcoming of digital intruders versus in-person intruders?
Mike shares his views on social interaction from an enterprise perspective.
How ZeroFOX assists companies who are being harmed by behavior on social.
Why is crypto mining such a big issue right now and are consumers at a security risk?
Is the home becoming a new target for hackers and how consumers can protect themselves?
Discover whether Mike sees a battle between
AIML and data privacy.
And much more!

Key Points From This Episode:
Some of Simon’s background and the areas in which he has worked.
The work Simon did at Bloomberg the and role of financial services in security.
The rising value of data and how this fits into an organization’s security.
The continuous role of a CISO in maintaining security over time.
Balancing risk preparation with cost effectiveness.
The easy ways to make sure your company is not very exposed to attack.
Matching your security practices to your company and it’s customer’s needs.
Disclosure of bugs and vulnerabilities to clients.
Taking responsibility for the risks you may be aware of within products.
The danger of incremental risk and putting an end to this growth.
The dimension that cloud and multi-cloud adds to these security concerns.
Simon’s perspective on the history of the RSA conference.
And much more!

Key Points From This Episode:
Arthur’s background in International Relations and role in the Obama administration.
The new challenge that cyber security poses to the state commission.
Highlights from the important process of Connecticut cyber security report.
The meetings that followed this report process and what contributed to its success.
Differences between public utilities and the general business sector.
Responding to the ongoing and evolving challenge of cyber crime.
The idea of cyber resilience replacing that of security.
Better communication and cooperation across the board to aid this issue.
Responding the potential foreign threat and timely recovery to these.
And much more!

Links Mentioned in Today’s Episode:
Arthur House — https://csi.uconn.edu/cyberseed-speakers- 2017/arthur-house/
Connecticut Cyber Security Report — http://portal.ct.gov/Office-of- the-Governor/Press-
Room/Press-Releases/2017/07- 2017/Gov-Malloy- Releases-Cybersecurity- Strategy-for-
Connecticut
C2M2 — https://www.energy.gov/oe/cybersecurity-critical- energy-infrastructure/cybersecurity-
capability-maturity- model-c2m2- program
Eversource — https://www.eversource.com/content/
Avangrid — https://www.avangrid.com
Connecticut Water — https://www.ctwater.com/
Aquarion — http://www.aquarion.com/CT/
Dr. Ron Ross — https://www.nist.gov/people/ronald-s- ross
NIST — https://www.nist.gov/
Belfer Center — https://www.belfercenter.org/