RSAC 2022 - Track Sessions

251 talks · 2022 · indexed by Breach Arc Archive. Links open each talk on YouTube.

• A Data Faustian Bargain?: An Analysis of Government-Mandated Data Access 2022
• A Data-Driven Topical History of the RSA Conference 2022
• A Practical Framework to Hack the Cyber Workforce Talent Gap 2022
• A Proven Methodology to Secure the Budget You Need 2022
• A Sanity Check on Technology. Viewpoints from Security Professionals. 2022
• A Whole Lotta BS (Behavioral Science) About Cybersecurity 2022
• Adaptive Assurance: Implementing an Automated Control Testing Program 2022
• Addressing Supply Chain Security Risks: MITRE's System of Trust™ 2022
• AI, ML and the Gig Economy — the Only Path Forward for the SOC 2022
• AI: Legal and Policy Considerations and Landmines to Avoid 2022
• All Hands on Deck: A Whole-of-Society Approach for Cybersecurity 2022
• All Your Macs Are Belong To Us ... Again! 2022
• American Labyrinth: Demystifying Adversary Use of Domestic Infrastructure 2022
• Another Lock? More Barbwire? It’s Time to Reimagine Modern Access Security 2022
• Anticipate and Defend Against Advanced Adversaries Targeting SaaS and IaaS 2022
• Are Data Localization Policies a Looming Disaster for Cybersecurity? 2022
• Are Low-Code and No-Code Tools a Security Risk? 2022
• Are You Sure You’re Doing That Right? A Mock Hearing 2022
• Assessing Vendor AI Claims like a Data Scientist, Even if You Aren't One 2022
• Atomic Red Team: Where Adversary Emulation and EDR Testing Meet 2022
• Attacking and Defending Kubernetes Cluster: Kubesploit vs KubiScan 2022
• Automated Threats: The Rise of Bots and What to Do About It 2022
• Barbarians at the Gate: Policy Options for Combating Ransomware Attacks 2022
• Be Debt Free! Using Cyber-Informed Engineering to Future-Proof Technology 2022
• BEC & Ransomware: Two Sides of the Same Cybercrime Coin 2022
• Being Open to a Zero Trust Future 2022
• Benefit from Cybersecurity Insurance: Taking Advantage of Insurer Panels 2022
• Best Teacher is Last Mistake: Improving and Applying Incident Response Plan 2022
• Better Bug Bounties? Lessons on Disclosure of Security Vulns v. AI Harms 2022
• Botnets Don't Die: Resurrecting the Dead to Feed on the Living 2022
• Breaking Prometheus: When Ransomware Crypto Goes Wrong 2022
• Bringing Zero Trust to Industrial Control Systems 2022
• Building a Vulnerability Management Program: How to Eat an Elephant 2022
• Building an Enterprise-scale DevSecOps Infrastructure: Lessons Learned 2022
• Business Information Security Officer: A Cybersecurity Secret Weapon 2022
• By Our Powers Combined: Critical Infrastructure Partners for Transparency 2022
• Bypassing Windows Hello for Business and Pleasure 2022
• Can A Real Security Platform Please Stand Up? 2022
• Can AppSec Be Fixed? 2022
• Can Innovation and Regulation Coexist? 2022
• Can the Workforce Shortage Be Fixed? 2022
• Can You Handle The Truth? Lawyers Can Be CyberPro's Best Friend 2022
• Can You Hear Me Now? Security Implications of Voice as the New Keyboard 2022
• Catch Me If You Can: Protecting Mobile Subscriber Privacy in 5G 2022
• Caterpillars to Butterflies: Transforming the Privacy Workforce 2022
• CHERNOVITE and PIPEDREAM: Understanding the Latest Evolution of ICS Malware 2022
• CHRYSALIS: Age of the AI-Enhanced Threat Hunters & Forensicators 2022
• CI/CD: Top 10 Security Risks 2022
• Cloud Security: How to Defend Healthcare Data in the Cloud 2022
• CloudTrail Logging Internals: Investigating AWS Security Incidents 2022
• Code Blue! Medical Devices Under Attack 2022
• Combatting Cybercrime & Fraud with Threat Intelligence 2022
• Confessions of a Sandbox: How AI is Disrupting Automated Threat Analysis 2022
• Connecting the Dots: Identifying and Mitigating Synthetic Identity Fraud 2022
• Continuous Security - Integrating Pipeline Security 2022
• Creating and Managing an Integrated Behavioral Cybersecurity Program 2022
• CSF Over Time: Shifting from Identify/Protect As You Grow 2022
• Cutting Through: Getting Real Answers on Supply Chain Security Policy 2022
• Cyber and Modern Conflict: The Changing Face of Modern Warfare 2022
• Cyber Defense Matrix: Revolutions 2022
• Cyber Insurance is Changing Cybersecurity: How We Got Here and What’s Next? 2022
• Cyber Invisibility: Developing a Security Incident Notification Regime 2022
• Cyber Range on a Budget 2022
• Cyber Resiliency Through Firmware Protections & Supply Chain Security 2022
• Cybersecurity as a Business Conversation 2022
• Cybersecurity Strategic Activity, Recent Trends & Predictions 2022
• Cybersecurity: What role do you play? 2022
• DANGER! Tips for Dealing with a Panicked C-suite During a Ransomware Event. 2022
• Dangerous: Critical Conversations About CISA’s “Bad Practices” 2022
• Data Protection and Privacy Development Around the World 2022
• Deconstructive Take-Over of Mitsubishi Electric Ecosystems 2022
• Defeat Your 'Curse of Knowledge' & Make Security Messaging More Impactful 2022
• Defeating Covert Foreign Influence While Protecting Free Expression 2022
• Defeating Windows Anti-Exploit & Security Features with WHQL Kernel Drivers 2022
• Defending Against New Phishing Attacks that Abuse OAuth Authorization Flows 2022
• Defending Security is Probabilistic, Not Deterministic: Get Over It 2022
• Demystifying the Identity Capabilities of AWS for Enterprise Practitioners 2022
• Designing a Data Ethics and Privacy Program for AI/ML 2022
• Digital Transformation Requires a Security Transformation 2022
• Dissecting The Ransomware Kill Chain: Why Companies Need It 2022
• DLP: An Implementation Story 2022
• DOJ’s Role in Countering Nation State Cyber Threats 2022
• Drones and Autonomous Vehicles: Privacy & Security vs. Surveillance 2022
• Eat Your Vegetables: Using Parenting Skills To Run A Security Program 2022
• Electrons to Clouds—One SDL to Rule the World from Hardware to the Cloud 2022
• Elite Security Champions Build Strong Security Culture in a DevSecOps World 2022
• Epic Journey of an Enterprise Cloud Transformation While Building Security 2022
• ESPecter: Showing the Future of UEFI Threats 2022
• Europe Gets its Identity Back 2022
• Evaluating Indicators as Composite Objects 2022
• Evolving Your Defense: Making Heads or Tails of Threat Actor Trends 2022
• Expect More: Realizing the True Impact of Your Intelligence Program 2022
• EXPOSURE: The 3rd Annual RSAC SOC Report 2022
• Extend EDR Visibility by Logging Everything: Demo with Free Integrations 2022
• Face/Off: The Battle to Authenticate with Biometrics 2022
• First 90 Days In the CISO Chair: A Practitioner's Perspective 2022
• Generative Email Attacks and How to Defend Against Them 2022
• Getting The Most Out Of Sysmon 2022
• Goodbye Credential Leaks: Securing Code Together 2022
• Hacker Law After the Supreme Court Ruling: Insider Threats, Research & CFAA 2022
• Hacking and Protecting Distributed Energy Infrastructure 2022
• Hacking Back – To Be or Not to Be? 2022
• How Behavioral Economics Can Help Make Better Security Decisions 2022
• How Fraudsters Scale Payment System Attacks 2022
• How Modern Bank Heists Are Escalating to Hostage Situations 2022
• How Tamper Resistant Elements (TREs) Can Secure the IoT 2022
• How to Introduce “Enterprise-Grade” Security at a Startup 2022
• How to Secure Private 5G Networks 2022
• How to Win with Cyber Insurance and Side-Step the 7 Biggest Pitfalls 2022
• Hydra Marketplace: Where Crypto Money Laundering Trail Goes Cold 2022
• Importance of Cyber Diligence in Third Party Risk Management 2022
• Importance of Cybersecurity Mesh Platform in Securing Digital Acceleration 2022
• Incorporating Cyber Expertise in Corporate Governance: Gula Tech Foundation 2022
• Inside the Making of a Zero Trust Architecture 2022
• Integrity Matters 2022
• IOT: Fix the Bugs That Leave Customers Inconvenienced, Stranded, or Dead 2022
• Is a Secure Software Supply Chain Even Possible, Let Alone Feasible? 2022
• Is Your Passwordless Really Passwordless? How to Tell and Why It Matters 2022
• ISACs’ Critical Role in Increasing Regulatory Environment for Cybersecurity 2022
• It's Getting Real & Hitting the Fan! Real World Cloud Attacks 2022
• It’s Not About Awareness. It’s About Managing Human Risk. 2022
• It’s Not Fair! Detecting Algorithmic Bias with Open Source Tools 2022
• Know Your Environment…Better Than the Enemy 2022
• Knowing The Robocallers: Illegal Call Centers And Efforts To Stop Them 2022
• Lessons from Aviation: Building a Just Culture in Cybersecurity 2022
• Leveraging AI & Deep Learning in the Battle against Zero Day Cyber Attacks 2022
• Leveraging Crowd-Forecasting to Improve Our Understanding of Cybersecurity 2022
• Leveraging Issues Management as a Force Multiplier in Cybersecurity 2022
• Linked-Out: Security Principles to Break Software Supply Chain Attacks 2022
• M365 Threat Hunting—How to Understand Attacker's TTPs in Your Tenant 2022
• Machine Learning to Ultimately Defeat Advanced Ransomware Threats 2022
• Making the Leap: Transform from Techie to CISO/Infosec Leader 2022
• Malicious Uses of API Frameworks and Scanning Tools 2022
• Managing De-Centralized Identities: A Relying Party Perspective 2022
• Maximizing Our Cyber Non-Profits 2022
• Measuring the Difference: Metric Development at NCCoE’s Securing AI Testbed 2022
• Measuring the ROI of Network Security Automation 2022
• Modernizing Cybersecurity Through a Single Solution Approach 2022
• Multifaceted Extortion: Insider Look at Ransom Payments and Cyber Defense 2022
• My Fuzzy Driver 2022
• Network Based Threat Hunting: Lessons Learned, Techniques to Share 2022
• Never Waste a Crisis: Identifying and Transforming Digital Risk into Reward 2022
• New Guidelines for Enhancing Software Supply Chain Security Under EO 14028 2022
• New Way of Tackling Privacy Assessments 2022
• Novel Swiss Re Framework Shortens 800+ Application Multi-Cloud Conversion 2022
• Open for Business: How to Build a Security Program as the First CISO 2022
• Open Source: Enterprise Adoption and Overcoming Barriers 2022
• Open XDR: A Strategy for Evolving Security Needs 2022
• Opening the Valve on an Untapped Human Pipeline 2022
• Operationalizing Identity: IAM for Customer Service 2022
• OT Reverse Engineering - What Can Be Automated? 2022
• OTP Bot Attacks 2022
• Pain in the Apps — Three Attack Scenarios Attackers Are Using to PWN SaaS 2022
• PCI DSS 4.0: Evolution, Revolution, or an Omen of Extinction? 2022
• Power of DNS as an Added Defense Against Modern Attacks 2022
• Practical Learnings for Threat Hunting and Improving Your Security Posture 2022
• Privacy and Compliance for AI – Open Source Tools and Industry Perspective 2022
• Privacy Standards in the Context of Information Security 2022
• Product Security at Scale: Lessons from Comcast 2022
• Progress in the Year of Ransomware: Analysis with the Ransomware Task Force 2022
• Proofs Without Evidence: Assurance on the Blockchain and Other Applications 2022
• Protect Valuable Data as Employee Turnover Rages 2022
• Protecting Against Evolving Threats to Global Shipping Infrastructure 2022
• Protecting Traditional and Blockchain Virtual Economies 2022
• Protective DNS, DNS Encryption, & Zero-Trust: Tackling NSA Guidance 2022
• Put A Label on It! Protecting IoT by Empowering Consumers 2022
• Ransomware Reality Checklist: 5 Ways to Prevent an Attack 2022
• Ransomware: How One Company Fought Back 2022
• Reaching Gen Z: Cybersecurity Outreach with Viral TikTok & YouTube Content 2022
• Red Teaming AI Systems: The Path, the Prospect and the Perils 2022
• Representation Matters 2022
• Scalable Confidential Computing on Kubernetes with Marblerun 2022
• Searching for the Grail: Zero Trust Cryptographic Keys & Services 2022
• Securing Entry Points and Active Directory to Prevent Ransomware Attacks 2022
• Securing Medical Devices—When Cyber Really Is a Life and Death Issue 2022
• Securing the Supply Chain: What Does Compliance Look Like? 2022
• Security Automation for DevOps at the Scale of Dell: A Real-Life Case Study 2022
• Security Industry Call-to-Action: We Need a Cloud Vulnerability Database 2022
• Security Leadership: Influence without Authority 2022
• Security's Holy Grail: Predicting Attacks Before They Happen 2022
• Service Mess to Service Mesh 2022
• Shift-left! Scanning for Security Compliance from Day Zero 2022
• Shift-left: Top 10 Most Disruptive Ideas of Modern Cloud Security 2022
• Sigstore, the Open Source Software Signing Service 2022
• Site Reliability Engineering and the Security Team They Love 2022
• Solving the Identity Security Crisis: A Guide to Today’s Top Threats 2022
• State of the Hacks: NSA’s Perspectives 2022
• Stop Being Sitting Cyber Ducks! Adversary Engagement: the New Cyber-Defense 2022
• Stop Chasing Insider Threats, Start Managing Insider Risk 2022
• Strong Story to Tell: Top 10 Mistakes by Administrators About Remote Work 2022
• Supplier Risk: Throw Out the Old Playbook! 2022
• Supply Chain Cyber Readiness: Upping Your Game 2022
• Talent Shortage: Fact or Myth? Resources for Finding and Growing Talent 2022
• Taming Identity Sprawl to Close the Cybersecurity Exposure Gap 2022
• Targeted, Consolidated & Coordinated Services For Better Risk Reduction 2022
• The 2 Sides of Social Media: Organizational Risk and Cyber Intelligence 2022
• The Challenges of Building Safe End-to-End Encrypted Services for Business 2022
• The Cloud Gray Zone: Vulnerabilities Found in Azure Built-in VM Agents 2022
• The Cyber Physical War – Lessons From the Digital Front Line 2022
• The Defense Industrial Base, CMMC, the False Claims Act, and Insider Threat 2022
• The Four Dimensions of Building a Security Program 2022
• The Jetsons Are Here – Now What Are the Security Implications 2022
• The Many Faces of Identity 2022
• The Missing Supply Chain Link: A Safe Harbor for Risk Information Sharing 2022
• The Non-Social Distanced Reality of the Internet of Things 2022
• The Practicalities of Pen Testing at Scale 2022
• The Privacy and Blockchain Paradox 2022
• The Reason Companies Fall Victim to Ransomware Isn’t What You Think 2022
• The Rise of API Security: It’s 10pm—Do You Know Where Your APIs are? 2022
• The Road to Cloud Is Paved with On-Prem Integrations 2022
• The SaaS RootKit: A New Attack Vector for Hidden Forwarding Rules in O365 2022
• The Science of Scams: Deconstructing How Criminals Steal Cash 2022
• The State(s) of Cyber Incentives: Creative Laws Driving Better Security 2022
• The Steps to Successfully Baking Privacy into an IAM Implementation 2022
• The Time is Now: Criticality of Time Synchronization & Information Security 2022
• The Transformation of Post Pandemic Mental Health 2022
• The Zoom Effect: A Framework for Security Program Transformation 2022
• Thinking Like a 5G Attacker 2022
• Time is Running Out: Post Quantum Cryptography Call to Action SAFECode/NIST 2022
• Token Theft Prevention (dPoP) – Nth Time is the Charm. 2022
• Token Theft: Hip Kids Are Doing It. Now What Are We Going to Do About It? 2022
• Too Much of Good Thing? The Cost of Overusing Encryption 2022
• Tooling up: Getting SBOMs to Scale 2022
• Top 10 Privacy Risks in Web Applications 2022
• Transform and Optimize Your Infosec Team with Managed Security Solutions 2022
• Transformational Security Strategy—Developing a Plan That Works 2022
• Transforming Security Champions 2022
• Transforming Security Through Design 2022
• Trust, but Verify: Protecting Your Business from Supply Chain Attacks 2022
• Uncovering “BadAlloc” Memory Vulnerabilities in Millions of IoT Devices 2022
• Understanding the Role of Cybersecurity Expert Witnesses 2022
• Users Are Not Stupid: Eight Cybersecurity Pitfalls Overturned 2022
• Using Critical Threat Intelligence Strategically 2022
• Validating the Integrity of Computing Devices 2022
• Victims & Vectors: Mitigating Legal Risks of Supply Chain Attacks 2022
• Voice Authentication: Robinhood and Pindrop’s Innovative Methodology 2022
• Wells Fargo PQC Program: The Five Ws 2022
• What (Actually, Specifically) Makes Security Programs EVEN MORE Successful? 2022
• What Could Possibly Go Wrong? Plain Language Threat Modeling in DevSecOps 2022
• What Executives Need to Know About CI/CD Pipelines and Supply Chain Security 2022
• What Have the Courts Done Now? Explaining the Impact of Recent Cyber Cases 2022
• What is Zero Trust? What ISN’T Zero Trust? Let’s Make Sense of This! 2022
• What the Headlines Don’t Tell You About Exploited Supply Lines 2022
• What We Learned Implementing Zero Trust Security at Microsoft 2022
• What Will it Take to Stop Ransomware? 2022
• Where Humane Technology and Secure Technology Meet 2022
• Why Does Cyber Tech so Often Fail? Addressing the Cyber “Market for Lemons” 2022
• Why Zero Trust Network Access is Broken, and How to Fix It 2022
• xGitGuard: ML-Based Secret Scanner for GitHub 2022
• Zero to Full Domain Administrator: Real-World Ransomware Incident 2022
• “Connecting the Dots” of NIST 800-207, TIC 3.0, and More Using SAFE 2022