Brian honan ipexpo keynote

•Download as PPTX, PDF•

1 like•162 views

This is my keynote speech at IPExpo 2018. In this talk i highlight how cybersecurity need to take lessons learnt from the development of safety in the motor industry and apply them to the cybersecurity industry

Technology

Lessons I learnt about
Cybersecurity from my Dad
Brian Honan
@brianhonan

Ransomware - Your Money or Your Bytes
@brianhonan

What's hot

Rakuten, membership system is the core of our ecosystem. With one Rakuten account, the user can enjoy all products offered in our ecosystem, for example, e-commerce, movie streaming, music, bank, e-money, book a golf course, buy a lottery, and more. Hence Rakuten accounts are high value target for fraudsters. In Fraud Prevention Group, we combat with fraudsters from around the world trying to compromise our user’s accounts. We categorize attack in to 3 groups; massive login attack, ID hijacking, and massive registration. Each type of attack has different characteristics and goals. This also means we have to apply different prevention techniques to suit with each type of attack. We have three main tools for fraud prevention, namely; rules base, machine learning base, and 3rd party solution. Each has its own advantage and disadvantage. In this presentation, We will explains each category of the attack, what hit us in the past, and also provide general idea of how we combat each attack category.

Account Fraud Situation and Prevention in Rakuten

Rakuten Group, Inc.

Service providers have a responsibility to provide two factor authentication (2FA) and help their users make informed decisions about which 2FA method(s) to enable. In this talk, I discuss the AWS Shared Responsibility Model and highlight that implementing 2FA follows a similar pattern. I dive into the details of the 4 most common methods of 2FA and explain the security and usability tradeoffs of each. I cover SMS, time-based one-time passwords (TOTP), push notifications, and Universal 2nd Factor (U2F). Audio and slides on YouTube: https://www.youtube.com/watch?v=ub7tU6ZLxAs

Shared responsibility model: Why and how to choose the right 2 fa method for ...

ConorGilsenan1

The Other Side of the SEO Coin: Conversion Rate Optimization, Gamification, a...

Nik Pasic

Two-factor authentication (2FA) is the most straightforward way for companies to drastically improve the security of their user authentication process. However, not all 2FA implementations are created equal. Thinking of quickly throwing together a workflow using SMS and calling it a day? Think again! Though popular, 2FA via SMS has many security issues and was actually deprecated by NIST in 2017. In this presentation, I dive into the technical details of the most common 2FA implementations and highlight security and usability trade-offs. You will learn how to develop a 2FA implementation strategy that will best serve your users.

Effective 2FA - Part 1: the technical stuff

ConorGilsenan1

What is hacking

MuhammadUmer411

ECSM 2021 - Sfaturi pentru a te proteja în mediul online

One-IT

Internet

Marcia

Online Trust and Safety, A New Dimension for Real-Time Engagement

Tiffany Xingyu Wang

Security & privacy on the internet: things you should now

Mediaraven vzw

Internal Threats in Kazakhstan. Cyber crime. How to defend. Cyber Security

Ken Tulegenov

Mimecast BCI Event October 2017

bcilondonforum

What's hot (11)

Account Fraud Situation and Prevention in Rakuten

Shared responsibility model: Why and how to choose the right 2 fa method for ...

The Other Side of the SEO Coin: Conversion Rate Optimization, Gamification, a...

Effective 2FA - Part 1: the technical stuff

What is hacking

ECSM 2021 - Sfaturi pentru a te proteja în mediul online

Internet

Online Trust and Safety, A New Dimension for Real-Time Engagement

Security & privacy on the internet: things you should now

Internal Threats in Kazakhstan. Cyber crime. How to defend. Cyber Security

Mimecast BCI Event October 2017

More from Brian Honan

GDPR & Brexit - What Does the Future Hold?

Brian Honan

Ransomware Prevention Guide

Brian Honan

Brian honan

Brian Honan

The dark side of the internet

Brian Honan

Data security brian honan

Brian Honan

Presentation on EU Directives Impacting Cyber Security for Information Securi...

Brian Honan

Incident Response in the Cloud

Brian Honan

This is my presentation from Source Dublin 2014 on cyber crime and social media. Social media networks provide individuals and businesses with exciting opportunities to communicate and collaborate with others throughout the world. But with these opportunities come a number of security challenges and risks. This talk will outline how social media networks can pose various threats to businesses, from information leakage, reputational damage, to social engineering profiling, and vectors for enabling compromise of corporate systems. Social media networks also enable the rapid dissemination of news which in the event of an information security breach could either save or destroy an organisations reputation. Understanding and dealing with these challenges will enable companies to like and favourite social media networks in a secure way.

How to Like Social Media Network Security

Brian Honan

Bridging the air gap

Brian Honan

Proactive incident response

Brian Honan

Security breaches are becoming a regular occurrence with many creating headlines. Yet, despite this publicity the details of breaches are often not disclosed so other organisations cannot learn from them. IRISSCERT has been contributing data on incidents in Ireland to the Verizon Data Breach Incident Report and will use this data to outline to those attending what types of attacks are happening to Irish organisations, what steps they can take to prevent becoming a victim of those same attacks and the lessons learnt to better improve their own incident response capabilities

Learning from History

Brian Honan

Incident response cloud

Brian Honan

Preparing for Failure - Best Practise for Incident Response

Brian Honan

Best practises for log management

Brian Honan

Cloud security

Brian Honan

Layer 8 Security - Securing the Nut Between the Keyboard & Screen

Brian Honan

Creating a CERT at WARP Speed

Brian Honan

The Case for Mandatory Data Breach Disclosure Laws

Brian Honan

Ic Sconf2010presentation Dp Bh

Brian Honan

Knowing Me Knowing You

Brian Honan

More from Brian Honan (20)

GDPR & Brexit - What Does the Future Hold?

Ransomware Prevention Guide

Brian honan

The dark side of the internet

Data security brian honan

Presentation on EU Directives Impacting Cyber Security for Information Securi...

Incident Response in the Cloud

How to Like Social Media Network Security

Bridging the air gap

Proactive incident response

Learning from History

Incident response cloud

Preparing for Failure - Best Practise for Incident Response

Best practises for log management

Cloud security

Layer 8 Security - Securing the Nut Between the Keyboard & Screen

Creating a CERT at WARP Speed

The Case for Mandatory Data Breach Disclosure Laws

Ic Sconf2010presentation Dp Bh

Knowing Me Knowing You

Recently uploaded

Advantages of Hiring UIUX Design Service Providers for Your Business

Pixlogix Infotech

MySQL Webinar, presented on the 25th of April, 2024. Summary: MySQL solutions enable the deployment of diverse Database Architectures tailored to specific needs, including High Availability, Disaster Recovery, and Read Scale-Out. With MySQL Shell's AdminAPI, administrators can seamlessly set up, manage, and monitor these solutions, ensuring efficiency and ease of use in their administration. MySQL Router, on the other hand, provides transparent routing from the application traffic to the backend servers in the architectures, requiring minimal configuration. Completely built in-house and supported by Oracle, these solutions have been adopted by enterprises of all sizes for their business-critical applications. In this presentation, we'll delve into various database architecture solutions to help you choose the right one based on your business requirements. Focusing on technical details and the latest features to maximize the potential of these solutions.

Mastering MySQL Database Architecture: Deep Dive into MySQL Shell and MySQL R...

Miguel Araújo

[2024]Digital Global Overview Report 2024 Meltwater.pdf

hans926745

Axa Assurance Maroc - Insurer Innovation Award 2024

The Digital Insurer

Finology Group – Insurtech Innovation Award 2024

The Digital Insurer

Bajaj Allianz Life Insurance Company - Insurer Innovation Award 2024

The Digital Insurer

ProductAnonymous-April2024-WinProductDiscovery-MelissaKlemke

Product Anonymous

This presentation explores the impact of HTML injection attacks on web applications, detailing how attackers exploit vulnerabilities to inject malicious code into web pages. Learn about the potential consequences of such attacks and discover effective mitigation strategies to protect your web applications from HTML injection vulnerabilities. for more information visit https://bostoninstituteofanalytics.org/category/cyber-security-ethical-hacking/

HTML Injection Attacks: Impact and Mitigation Strategies

Boston Institute of Analytics

Scaling API-first – The story of a global engineering organization Ian Reasor, Senior Computer Scientist - Adobe Radu Cotescu, Senior Computer Scientist - Adobe Apidays New York 2024: The API Economy in the AI Era (April 30 & May 1, 2024) ------ Check out our conferences at https://www.apidays.global/ Do you want to sponsor or talk at one of our conferences? https://apidays.typeform.com/to/ILJeAaV8 Learn more on APIscene, the global media made by the community for the community: https://www.apiscene.io Explore the API ecosystem with the API Landscape: https://apilandscape.apiscene.io/

Apidays New York 2024 - Scaling API-first by Ian Reasor and Radu Cotescu, Adobe

apidays

GenCyber Cyber Security Day Presentation

Michael W. Hawkins

Workshop - Best of Both Worlds_ Combine KG and Vector search for enhanced R...

Neo4j

Handwritten Text Recognition for manuscripts and early printed texts

Maria Levchenko

How to Troubleshoot Apps for the Modern Connected Worker

ThousandEyes

What are drone anti-jamming systems? The drone anti-jamming systems and anti-spoof technology protect against interference, jamming, and spoofing of the UAVs. To protect their security, countries are beginning to research drone anti-jamming systems, also known as drone strike weapons. The anti-jam and anti-spoof technology protects against interference, jamming and spoofing. A drone strike weapon is a drone attack weapon that can attack and destroy enemy drones. So what is so unique about this amazing system?

What Are The Drone Anti-jamming Systems Technology?

Antenna Manufacturer Coco

How to Troubleshoot Apps for the Modern Connected Worker

ThousandEyes

Created by Mozilla Research in 2012 and now part of Linux Foundation Europe, the Servo project is an experimental rendering engine written in Rust. It combines memory safety and concurrency to create an independent, modular, and embeddable rendering engine that adheres to web standards. Stewardship of Servo moved from Mozilla Research to the Linux Foundation in 2020, where its mission remains unchanged. After some slow years, in 2023 there has been renewed activity on the project, with a roadmap now focused on improving the engine’s CSS 2 conformance, exploring Android support, and making Servo a practical embeddable rendering engine. In this presentation, Rakhi Sharma reviews the status of the project, our recent developments in 2023, our collaboration with Tauri to make Servo an easy-to-use embeddable rendering engine, and our plans for the future to make Servo an alternative web rendering engine for the embedded devices industry. (c) Embedded Open Source Summit 2024 April 16-18, 2024 Seattle, Washington (US) https://events.linuxfoundation.org/embedded-open-source-summit/ https://ossna2024.sched.com/event/1aBNF/a-year-of-servo-reboot-where-are-we-now-rakhi-sharma-igalia

A Year of the Servo Reboot: Where Are We Now?

Igalia

Imagine a world where information flows as swiftly as thought itself, making decision-making as fluid as the data driving it. Every moment is critical, and the right tools can significantly boost your organization’s performance. The power of real-time data automation through FME can turn this vision into reality. Aimed at professionals eager to leverage real-time data for enhanced decision-making and efficiency, this webinar will cover the essentials of real-time data and its significance. We’ll explore: FME’s role in real-time event processing, from data intake and analysis to transformation and reporting An overview of leveraging streams vs. automations FME’s impact across various industries highlighted by real-life case studies Live demonstrations on setting up FME workflows for real-time data Practical advice on getting started, best practices, and tips for effective implementation Join us to enhance your skills in real-time data automation with FME, and take your operational capabilities to the next level.

From Event to Action: Accelerate Your Decision Making with Real-Time Automation

Safe Software

Building Digital Trust in a Digital Economy Veronica Tan, Director - Cyber Security Agency of Singapore Apidays Singapore 2024: Connecting Customers, Business and Technology (April 17 & 18, 2024) ------ Check out our conferences at https://www.apidays.global/ Do you want to sponsor or talk at one of our conferences? https://apidays.typeform.com/to/ILJeAaV8 Learn more on APIscene, the global media made by the community for the community: https://www.apiscene.io Explore the API ecosystem with the API Landscape: https://apilandscape.apiscene.io/

Apidays Singapore 2024 - Building Digital Trust in a Digital Economy by Veron...

apidays

What is a good lead in your organisation? Which leads are priority? What happens to leads? When sales and marketing give different answers to these questions, or perhaps aren't sure of the answers at all, frustrations build and opportunities are left on the table. Join us for an illuminating session with Cian McLoughlin, HubSpot Principal Customer Success Manager, as we look at that crucial piece of the customer journey in which leads are transferred from marketing to sales.

04-2024-HHUG-Sales-and-Marketing-Alignment.pptx

HampshireHUG

Three things you will take away from the session: • How to run an effective tenant-to-tenant migration • Best practices for before, during, and after migration • Tips for using migration as a springboard to prepare for Copilot in Microsoft 365 Main ideas: Migration Overview: The presentation covers the current reality of cross-tenant migrations, the triggers, phases, best practices, and benefits of a successful tenant migration Considerations: When considering a migration, it is important to consider the migration scope, performance, customization, flexibility, user-friendly interface, automation, monitoring, support, training, scalability, data integrity, data security, cost, and licensing structure Next Wave: The next wave of change includes the launch of Copilot, which requires businesses to be prepared for upcoming changes related to Copilot and the cloud, and to consolidate data and tighten governance ShareGate: ShareGate can help with pre-migration analysis, configurable migration tool, and automated, end-user driven collaborative governance

Strategize a Smooth Tenant-to-tenant Migration and Copilot Takeoff

sammart93

Recently uploaded (20)

Advantages of Hiring UIUX Design Service Providers for Your Business

Mastering MySQL Database Architecture: Deep Dive into MySQL Shell and MySQL R...

[2024]Digital Global Overview Report 2024 Meltwater.pdf

Axa Assurance Maroc - Insurer Innovation Award 2024

Finology Group – Insurtech Innovation Award 2024

Bajaj Allianz Life Insurance Company - Insurer Innovation Award 2024

ProductAnonymous-April2024-WinProductDiscovery-MelissaKlemke

HTML Injection Attacks: Impact and Mitigation Strategies

Apidays New York 2024 - Scaling API-first by Ian Reasor and Radu Cotescu, Adobe

GenCyber Cyber Security Day Presentation

Workshop - Best of Both Worlds_ Combine KG and Vector search for enhanced R...

Handwritten Text Recognition for manuscripts and early printed texts

How to Troubleshoot Apps for the Modern Connected Worker

What Are The Drone Anti-jamming Systems Technology?

How to Troubleshoot Apps for the Modern Connected Worker

A Year of the Servo Reboot: Where Are We Now?

From Event to Action: Accelerate Your Decision Making with Real-Time Automation

Apidays Singapore 2024 - Building Digital Trust in a Digital Economy by Veron...

04-2024-HHUG-Sales-and-Marketing-Alignment.pptx

Strategize a Smooth Tenant-to-tenant Migration and Copilot Takeoff