@RSA // San Francisco // April 20
www.cloudsecurityalliance.org
www.cloudsecurityalliance.org
Credential Theft
Credential theft was involved in 85% of cyber attacks (Verizon Data Breach Report
2015)
In Hackathon #3 we're giving the name/password to Bob Flore's account on a file server
protected by a SDP gateway
The first Hackathon participant to successfully access the file server using Bob's "stolen"
credentials (which we will give to you) will get $10,000
www.HackSDP.com
SDP Experts at the CSA Booth #2621, 12-1pm Tuesday-Thursday
www.cloudsecurityalliance.org
Cloud Controls Matrix & CAIQ as a SaaS tool
Manage cloud assessments and compliance with CSA best practices
Manipulate CCM & CAIQ in a database format
Beta opens this week: www.cloudsecurityalliance.org/star/watch
STAR Watch demo at the CSA Booth #2621
Monday 5:30-6:30pm
Tuesday 11:30-12pm
Wednesday 4-5pm
Thursday 11:30-12pm
www.cloudsecurityalliance.org
Tuesday - PLI Center, 685 Market Street
9:00
Cloud Data Governance Working Group
10:15
IoT Working Group
11:30
CSA Cyber Incident Sharing Center Initiative: Overview & Pilot
Discussion (Lunch provided by CSA)
1:15
Big Data Working Group
3:45
CCM/CAIQ/Cloud Brokerage/Enterprise Architecture
www.cloudsecurityalliance.org
Wednesday - EMC Offices: 250 Montgomery Street (4th Floor)
Russian Hill Conference Room
9:00
Mobile Application Security Testing Kick – off Meeting
10:00
Open Certification Framework
11:30
Quantum – Safe Security Working Group
12:30
Subject Matter Expert Council
2:00
International Standardization Council
4:00
Virtualization Working Group
www.cloudsecurityalliance.org
Cloud CISC:
Developing a framework for cloud incident sharing
Learn from the lessons & challenges of CloudCERT
Anonymization and removal of attribution from incidents a key concept
Standards for incident sharing and an operational system
Tuesday 11:30am at PLI Center, 685 Market Street (lunch served)
www.cloudsecurityalliance.org
Authored by Brian Honan, Raj Samani & Jim
Reavis (a little)
Tuesday 3-4pm at CSA Booth #2621
Wednesday 11-11:30am at RSA Bookstore
www.cloudsecurityalliance.org
@RSA // San Francisco // April 20
www.cloudsecurityalliance.org
Cloud Without Borders:
Paving the Way for Global Security and Privacy
Presenting:
Philippe Courtot
Chairman & CEO, Qualys
www.cloudsecurityalliance.org
Future Crimes:
Why Cyber Was Only the Beginning:
Presenting:
Marc Goodman
Global Security Advisor & Futurist
www.cloudsecurityalliance.org
www.cloudsecurityalliance.org
Moderator:
Jim Reavis, CEO,CSA
Panelists:
Sol Cates, CSO, Vormetric
Jay Chaudhry, Chief Executive Officer and Founder, Zscaler
John DiMaria, ISO Product Manager, British Standards Institution
Rehan Jalil, President and CEO, Elastica
Krishna Narayanaswamy, Chief Scientist, Netskope
Chenxi Wang, VP of Cloud Security & Strategy, CipherCloud
www.cloudsecurityalliance.org
1.
2.
3.
4.
5.
Data Security
Navigating Global Trust Issues
Shadow IT
Advanced Attacks & Cyber Conflicts
Provider Visibility & Translating Enterprise
Requirements into the Cloud
www.cloudsecurityalliance.org
Presenting:
Brigadier General (Ret.)
Nadav Zafrir, Cyber and Intelligence Expert
Former Commander of Israel Defense Forces (IDF)
Technology & Intelligence Unit (8200)
Founder of the IDF Cyber Command.
www.cloudsecurityalliance.org
Addressing the Cloud Security Challenge
A Practitioner’s Experience
Presenting:
Jim Routh
CISO Aetna, Inc.
Rajiv Gupta
CEO Skyhigh Networks
www.cloudsecurityalliance.org
Moderator:
Jim Reavis, CEO, Cloud Security Alliance
Panelists:
Chad Woolf, Global Risk and Compliance Leader for Amazon Web Services
Jerry Cochran, Principal Security Engineering Manager, Microsoft Office 365
Eran Feigenbaum, Director of Security, Google for Work, Google
Patrick Heim, Head of Trust & Security, Dropbox
Brian Kelly, Chief Security Officer, Rackspace
www.cloudsecurityalliance.org
www.cloudsecurityalliance.org
Credential Theft
Credential theft was involved in 85% of cyber attacks (Verizon Data Breach Report
2015)
In Hackathon #3 we're giving the name/password to Bob Flore's account on a file server
protected by a SDP gateway
The first Hackathon participant to successfully access the file server using Bob's "stolen"
credentials (which we will give to you) will get $10,000
www.HackSDP.com
SDP Experts at the CSA Booth #2621, 12-1pm Tuesday-Thursday
www.cloudsecurityalliance.org
SAML
Gatewa
IdP
Client
y
Crypto
IP’s
SDP Controller
SD
P
SDP
Gateways
Web-based
File Server
www.cloudsecurityalliance.org
Cloud Controls Matrix & CAIQ as a SaaS tool
Manage cloud assessments and compliance with CSA best practices
Manipulate CCM & CAIQ in a database format
Beta opens this week: www.cloudsecurityalliance.org/star/watch
STAR Watch demo at the CSA Booth #2621
Monday 5:30-6:30pm
Tuesday 11:30-12pm
Wednesday 4-5pm
Thursday 11:30-12pm
www.cloudsecurityalliance.org
Tuesday - PLI Center, 685 Market Street
9:00
Cloud Data Governance Working Group
10:15
IoT Working Group
11:30
CSA Cyber Incident Sharing Center Initiative: Overview & Pilot
Discussion (Lunch provided by CSA)
1:15
Big Data Working Group
3:45
CCM/CAIQ/Cloud Brokerage/Enterprise Architecture
www.cloudsecurityalliance.org
Wednesday - EMC Offices: 250 Montgomery Street (4th Floor)
Russian Hill Conference Room
9:00
Mobile Application Security Testing Kick – off Meeting
10:00
Open Certification Framework
11:30
Quantum – Safe Security Working Group
12:30
Subject Matter Expert Council
2:00
International Standardization Council
4:00
Virtualization Working Group
www.cloudsecurityalliance.org
Cloud CISC:
Developing a framework for cloud incident sharing
Learn from the lessons & challenges of CloudCERT
Anonymization and removal of attribution from incidents a key concept
Standards for incident sharing and an operational system
Tuesday 11:30am at PLI Center, 685 Market Street (lunch served)
www.cloudsecurityalliance.org
Authored by Brian Honan, Raj Samani & Jim
Reavis (a little)
Tuesday 3-4pm at CSA Booth #2621
Wednesday 11-11:30am at RSA Bookstore
www.cloudsecurityalliance.org
www.cloudsecurityalliance.org