To The Point - Cybersecurity

This week Rachael and Eric discuss the recently published "Defending Ukraine: Early Lessons from the Cyber War" report from Microsoft and the accompanying blog post by Microsoft President and Vice Chair Brad Smith. They share insights and raise lingering questions on the report's findings and the five conclusions Microsoft framed from the war's first four months. They also briefly share insights from the June 2022 cyberdefense research report "The IT Army of Ukraine" from Stefan Soesanto of the Center for Security Studies in Zurich. So much to unpack in this week's episode! There will definitely be follow-on episodes with key players from these reports that you won't want to miss!

Host Rachael Lyon Rachael Lyon brings her journalistic curiosity and more than 20 years in technology working with global industry leaders and innovative start-ups to dig into today's cyber news and trends impacting us all.

Co-host Eric Trexler Eric Trexler is Vice President of Sales, Global Governments, Forcepoint. Eric has more than 21 years of experience in the technology industry with both the public and private sectors including the DoD, Civilian, and Intelligence components. Prior to joining Forcepoint, Eric was the Executive Director for Civilian and National Security Programs at McAfee, formerly Intel Security. Prior to joining McAfee in 2010, he managed multi-million dollar accounts at Salesforce.com, EMC Corporation and Sybase, Inc.

Eric served as an Airborne Ranger with the United States Army for four years, specializing in communications. He holds a bachelor's degree in marketing and an MBA with a concentration in strategy, both from the University of Maryland at College Park.

LinkedIn

https://www.linkedin.com/in/eric-trexler-8b6b39/ https://www.linkedin.com/in/rachaellyon/

For links and resources discussed in this episode, please visit our show notes at https://www.forcepoint.com/govpodcast/e187

Joining the podcast this week is John DiLullo, Chief Revenue Officer for Forcepoint and former CEO at LastLine Security, acquired by VMWare in 2020. He's spent decades in the security world. Speaking of world, as it has opened back up John has traveled the globe this year visiting every continent but Antarctica and shares insights from his many meetings with customers, partners, and security companies around the world. He also shares perspective on this year's RSA conference, the future of security trade shows and the future of the security industry - particularly as the economy stares down the barrel of an impending bear market. But it's not all doom and gloom, John shares a recent epiphany after seeing the "Wolverine" actor on Broadway and it paints a very positive picture for the cyber path ahead!

John DiLullo, Chief Revenue Officer, Forcepoint

John DiLullo is Chief Revenue Officer (CRO) at Forcepoint. He has nearly 30 years' experience in enterprise security, networking, cloud, and AI, plus go-to-market expertise spanning sales, marketing, customer success, technical support, and operations. Throughout the course of his career, DiLullo's special devotion has always been to improving the customer experience and embracing specialized routes to market for transformational business solutions.

DiLullo's professional experience includes extensive time domestically and abroad with market leaders such as Cisco Systems, Avaya, SonicWall, and Aruba Networks/Hewlett-Packard Enterprise serving customers large and small through traditional and emerging channels.

Prior to Forcepoint, he was Senior Operating Partner at Francisco Partners Consulting, a leading global investment firm that specializes in partnering with technology and technology-enabled businesses. He has also served as CEO of Lastline Security, a fast growing Network Threat Detection company acquired by VMware in 2020.

For links and resources discussed in this episode, please visit our show notes at https://www.forcepoint.com/govpodcast/e186

Joining the podcast this week is Mikko Hypponen, Chief Research Officer at WithSecure. He breaks down the rise and fall of cybercrime unicorns, the effectiveness of unicorn hunting season and bounties, the impact of nations fighting back in today's cyber war, Ukraine's preparedness for Russian cyber war, cryptocurrencies future and how he came up with Hypponen's Law. And be sure to keep an eye out for his upcoming book from Wiley later this summer, "If It's Smart, It's Vulnerable"!

Mikko Hypponen, Chief Research Officer, WithSecure Mikko Hypponen is a global security expert. He has worked at F-Secure, now WithSecure, since 1991. Mr. Hypponen has written on his research for the New York Times, Wired and Scientific American and he appears frequently on international TV. He has lectured at the universities of Stanford, Oxford and Cambridge. He was selected among the 50 most important people on the web by the PC World magazine and was included in the FP Global 100 Thinkers list. Mr. Hypponen sits in the advisory boards of t2 and Social Safeguard.

For links and resources discussed in this episode, please visit our show notes at https://www.forcepoint.com/govpodcast/e185

Joining us this week is Jarod Koopman, Acting Executive Director of Cyber and Forensic Services for the Internal Revenue Service (IRS) – Criminal Investigation division. He takes us inside the exciting world of cyber crimes and digital forensics – truly the investigations carried out by this team would make for an endless franchise of action thriller films or book series. So what did we talk about with Jared who has the most fascinating job at the IRS – the Bank Secrecy Act, all things cryptocurrency including crypto mixing, Frosties NFT, NFT wash trading, catching criminals through chipped tooth photos submitted for insurance claims, and so much more! You will definitely learn a lot of crypto lingo after listening to this episode! You don't want to miss it!

Jarod Koopman, Acting Executive Director of Cyber and Forensic Services for the IRS - Criminal Investigation

As the Acting Executive Director, Jarod Koopman is responsible for the establishment of the newly formed HQ section - Cyber and Forensics Services. As such, IRS-CI aligns the existing sections of Cyber Crimes, Digital Forensics and the National Forensic Lab to create necessary efficiencies and streamline the investigative efforts. Jarod oversees all global operations involving Cyber and Forensic activities, including policy, procedures, budget and investigative services. In addition to this role, Jarod will lead the establishment of a new centralized facility - the Advanced Collaboration and Data Center (ACDC), which will act as a mission centric hub for cyber projects, crypto compliance efforts, training, investigative support and concentrated knowledge. Jarod and his team will look to dismantle cyber-criminals through innovative tradecraft.

For links and resources discussed in this episode, please visit our show notes at https://www.forcepoint.com/govpodcast/e184

This week co-hosts Eric and Rachael are coming to you live from Cabo San Lucas! They cover hot topics including CyberWire's new CISA Cybersecurity alerts, the impact of ransomware on a 157 year-old university in Illinois, Colonial Pipeline's nearly $1M proposed fine by the Department of Transportation Pipeline and Hazardous Materials Safety Administration and the recent surge in tractor hacking!

Rachael Lyon Rachael Lyon brings her journalistic curiosity and more than 20 years in technology working with global industry leaders and innovative start-ups to dig into today's cyber news and trends impacting us all.

Eric Trexler Eric Trexler is Vice President of Sales, Global Governments, Forcepoint. Eric has more than 21 years of experience in the technology industry with both the public and private sectors including the DoD, Civilian, and Intelligence components. Prior to joining Forcepoint, Eric was the Executive Director for Civilian and National Security Programs at McAfee, formerly Intel Security. Prior to joining McAfee in 2010, he managed multi-million dollar accounts at Salesforce.com, EMC Corporation and Sybase, Inc.

Eric served as an Airborne Ranger with the United States Army for four years, specializing in communications. He holds a bachelor's degree in marketing and an MBA with a concentration in strategy, both from the University of Maryland at College Park.

For links and resources discussed in this episode, please visit our show notes at https://www.forcepoint.com/govpodcast/e183

This week Rob Flanders, Head of Threat and Incident Response at BAE Systems, joins the podcast to share an international perspective on cybersecurity today. We delve into hot topics including supply chain security, security trends for 5-50 person organizations and impact on the large enterprises they work with, growing regulation around reporting requirements, and the impact of security on business innovation. And, Rob shares his path to cybersecurity and the non-traditional master's degree he pursued leading up to his cyber career. It's a great discussion you don't want to miss!

Rob Flanders, Head of Threat and Incident Response at BAE Systems

Rob has 9 years experience, primarily in UK Gov delivering technical cyber security solutions and risk management and assurance. Rob has worked across a number of areas, from delivering ISO27000 risk assessments to security assurance for large programmes. Rob has also delivered more technical security focussed capabilities across government, leading GBEST assessments on behalf of government departments and supporting development of Threat Intelligence capability across the public sector. Rob also spoke at CyberUK in 2018 on the topic of Quantifying Cyber Risk.

Rob graduated from Oxford University with a Masters in Earth Sciences and maintains an interest in physical / Arctic oceanography from his Masters project

For links and resources discussed in this episode, please visit our show notes at https://www.forcepoint.com/govpodcast/e182

Joining the podcast this week is Bash Kazi, CEO of Cyber Range Solutions. He shares perspective on the importance of experiential and continuous training across red team, blue team and threat hunting and creating real world environments to learn based on existing and emerging threats. He also shares some stories from the field such as a voter hacking simulation won by a 15-year-old student as well as available resources and organizations that provide veterans a place to learn cyber skills for low or no cost.

CEO, Cyber Range Solutions Mubashir G. Kazi is the CEO of Cyber Range Solutions. He has over 25 years of global experience with governments and Fortune 500 companies (3M, Exxon & Xerox) in the areas of engineering, security, Information Technology and program management. Mr. Kazi holds graduate and post-graduate degrees in Engineering from McGill University in Montreal, Canada and has extensive post-graduate research and training in Advanced Project, Risk Management and Program Management skills specific to the fields of engineering and technology management from Stanford University. Mubashir has also served as a management consultant on several security programs around the world (Qatar, Israel, UAE, Pakistan, Afghanistan and USA). His expertise includes national border security, counter narcotics technology development & deployment, engineering management, cyber security training and international program management. Mubashir was the Architect and Program Manager supervising the design, management and execution for a program involving the deployment of several thousand personnel for the development of a National Data Repository, Border Security, Machine Readable Passport and Electronic Voter Registration system for the Ministry of Interior, Government of Pakistan. Mubashir has architected the creation of one of the largest citizen data repositories and overseen the national census data gathering initiative to document over 100 million individuals.

For links and resources discussed in this episode, please visit our show notes at https://www.forcepoint.com/govpodcast/e181

This week we catch up with Dr. Siwei Lyu, a SUNY Empire Innovation Professor and founding Co-Director of Center for Information Integrity (CII) at the University at Buffalo, State University of New York. Siwei breaks down the deepfake experience, both the good and the misleading aspects of the technology. He shares insights on techniques researchers are developing to detect deepfakes, including GAN (Generative Adversarial Network) detected artifacts that produce tell-tale deepfake signs – if you know where to look. He also delves into the area of audio deepfakes and the sophistication of the human auditory system that makes this pathway a tough one to win. And, fun fact, to learn more about Siwei's research contributions be sure to Google "DeepFake-o-meter"!

Dr. Siwei Lyu, SUNY Empire Innovation Professor at the University at Buffalo

Dr. Siwei Lyu received his B.S. degree (Information Science) in 1997 and his M.S. degree (Computer Science) in 2000, both from Peking University, China. He received his Ph.D. degree in Computer Science from Dartmouth College in 2005. From 1998 to 2000, he worked at the Founder Research and Development Center (Beijing, China) as a Software Engineer. From 2000 to 2001, he worked at Microsoft Research Asia (then Microsoft Research China) as an Assistant Researcher. From 2005 to 2008, he was a Post-Doctoral Research Associate at the Howard Hughes Medical Institute and the Center for Neural Science of New York University. Starting in 2008, he is Assistant Professor at the Computer Science Department of University at Albany, State University of New York. Dr. Lyu is the recipient of the Alumni Thesis Award of Dartmouth College in 2005, IEEE Signal Processing Society Best Paper Award in 2010, and the NSF CAREER Award in 2010. He has authored one book, and held two U.S. and one E.U. patents. He has published more than 50 conference and journal papers in the research fields of natural image statistics, digital image forensics, machine learning and computer vision. For links and resources discussed in this episode, please visit our show notes at https://www.forcepoint.com/govpodcast/e180

Joining the podcast this week is Stacy Janes, Head of Cybersecurity at Waymo. Stacy shares an awesome story of how he found his way to security and the automotive industry – and we'll bet it isn't at all the journey you thought it would be! He also shares perspective on the difference between connected and autonomous vehicles, security by design and 360-degree situational awareness with autonomous vehicles, Zero Trust models, as well as insights on safety and privacy. And he provides the gem of advice, "Don't take data from strangers!".

Stacy Janes, Head of Security at Waymo

Stacy is a self starter with a passion for cyber security. Co-Founder of Connected Transport Business Unit at Irdeto. Evangelist and active speaker on cyber security for the connected transportation space. Strong and demonstrated Stacy Janes, Head of Security at Waymo

technical history in cyber security areas such as PKI, authentication/authorization, end-point security and ethical hacking. Proven history of building teams to solve difficult industry problems.

For links and resources discussed in this episode, please visit our show notes at https://www.forcepoint.com/govpodcast/e179

This week on the podcast Bobby Chesney, James Baker Chair at the University of Texas School of Law, and co-founder of the awesome Lawfare.com blog and co-host of the National Security Law podcast, joins us for a discussion on all things cyber legal policy and regulations - and it is fun! We chat about the recent Viasat satellite hack that served dual-purposes for military application and disruption of industries (for example, impacting wind turbines!). He also shares perspective on cyber versus kinetic attacks, space wars, space law vs maritime law parallels and the geography of cyber. Want to learn more about cyber law and policy? Check out Chesney's free eCasebook on Cybersecurity Law, Policy, and Institutions here: https://papers.ssrn.com/sol3/papers.cfm?abstract_id=3547103

Bobby Chesney, James Baker Chair in Rule of Law and World Affairs at UT Austin

Bobby Chesney holds the James Baker Chair and also serves as the Associate Dean for Academic Affairs at the University of Texas School of Law. In addition, he is the Director of the Robert S. Strauss Center for International Security and Law, a university-wide research unit bridging across disciplines to improve understanding of international security issues. Professor Chesney is a co-founder and contributor to www.lawfareblog.com, the leading source for analysis, commentary, and news relating to law and national security. He also co-hosts the National Security Law Podcast and contributes to the National Security Law Lectures series (which he co-founded with Matt Waxman). In 2021, Professor Chesney was appointed to the Cybersecurity Advisory Committee for the U.S. government's Cybersecurity and Infrastructure Security Agency.

For links and resources discussed in this episode, please visit our show notes at https://www.forcepoint.com/govpodcast/e178