RSAC 2023 - Track Sessions

286 talks · 2023 · indexed by Breach Arc Archive. Links open each talk on YouTube.

• "I Am Not Worthy" - Battling Imposter Syndrome in Information Security 2023
• 2023: Cyber Professionals Challenges and Insights. Let's Talk. 2023
• 4 Ways IoT Devices Are Creating Privacy Implications For Organizations 2023
• 5 Open Source Security Tools All Developers Should Know About 2023
• A CISO's Best Friend: The Pentester 2023
• A Journey in Building an Open Source Security-as-Code Framework 2023
• A NIST 800-207 Playbook: Zero Trust from the Whiteboard to the Boardroom 2023
• A Taste of Privacy Threat Modeling 2023
• Abuse of Repository Webhooks to Access Hundreds of Internal CI Systems 2023
• Advanced Public-Key Encryption 2023
• Advanced Symmetric-Key Encryption 2023
• Adversary Emulation: How I Stopped Being Polite and Got Real Results 2023
• After a Data Breach: How Will the Compliance Program Measure Up? 2023
• AI: Law, Policy and Common Sense Suggestions on How to Stay Out of Trouble 2023
• Aikido: Turning EDRs to Malicious Wipers Using 0-day Exploits 2023
• An Army of… Zeros and Ones? How the Military Services Compete in Cyberspace 2023
• Anatomy of the Attack: The Rise and Fall of MFA 2023
• Applying Forensic Engineering in Cybersecurity Incidents 2023
• Applying Logic in an Illogical World: Third-Party Risk Management at TikTok 2023
• Architecting Security for Regulated Workloads in Hybrid Cloud 2023
• Assume Compromise: Think Like a Hacker to Build Resilience 2023
• Attacking and Detecting Attacks on Kubernetes Clusters 2023
• Avoiding the Four Biggest Mistakes That Will Blow Up an M&A 2023
• Better Risk Assessment for Cyber Insurance: How Will We Get There? 2023
• Betting the Farm on Digital Disruption 2023
• Bon Appetit: Establishing an Effective Cyber Risk Appetite 2023
• Bridging the Cybersecurity Skill Gap: Re-Thinking Job Profiles 2023
• Bug Bounty: Keeping Hacks Ethical in 2022 2023
• Building a DevOps Supply Chain on Zero Trust Principles 2023
• Building International Coalitions to Scale Defense 2023
• Building the Always-On Purple Team 2023
• Catch Me If You Can. LOLBins and the Adversaries Who Abuse Them 2023
• CatPhish Automation - The Emerging Use of Artificial Intelligence in Social Engineering 2023
• ChatGPT: A New Generation of Dynamic Machine Based Attacks? 2023
• CISO Legal Risks and Liabilities 2023
• CISOs and Legal Uniting in a Post Uber and Twitter World 2023
• Cloud Agnostic or Devout? How Cloud Native Security Varies in EKS/AKS/GKE 2023
• Cloud Security Made for the EU: Securing Data & Applications 2023
• Cloud Threat Gamification: Lessons Learned and How to Set One Up 2023
• Collaboration Without Data Loss: Keep IP From Leaking to Competitors 2023
• Colorful Vulnerabilities - From RGB Colors to Privilege Escalation 2023
• Common Myths about PQ Migration and Standards Busted! 2023
• Comprehensive Cyber Capabilities Framework: A Tech Tree for Cybersecurity 2023
• Conducting a Pre-Mortem on the Next Zero Trust Breach 2023
• Connecting the Dots - An Effective Cybersecurity Strategy 2023
• Construction Time Again: A Lesson in Paving Paths for Security 2023
• Container Escape: All You Need Is Cap (Capabilities) 2023
• Corporate Reputation Attacks: Dissecting the Latest Job Offer Scams 2023
• Creating the Standard for Supply Chain Risk - MITRE's System of Trust™ 2023
• Credential Sharing as a Service: The Dark Side of No Code 2023
• Crucial Cyber Hygiene Defenses for 2023 2023
• Crypto FinTech Systems: Can the Ultimate Trust Machine Be Trusted? 2023
• Cryptographic Implementations 2023
• Curiosity Killed the Hack 2023
• Cutting Through the Noise of XDR – Are Service Providers an Answer? 2023
• Cyber Informed Engineering: Getting Engineers to Live Security-by-Design 2023
• Cyber Safety Review Board – Looking Back to Move Forward 2023
• Cybersecurity in the Boardroom - The Impact of the Latest SEC Proposal 2023
• Cybersecurity Strategic Activity, Recent Trends & Predictions 2023
• Cyberwar and the Law of Armed Conflict 2023
• Data Privacy Concerns - A Risk Based Approach to De-Identification 2023
• Dealing with Data Pack Rats: Reduce Data Footprints to Control Risks 2023
• Defender Perspectives: Getting ROI from Cyber Threat Intelligence Vendors 2023
• Designing Product Security for a Brighter Smile and a Healthier Tomorrow 2023
• Destroying Long-Lived Cloud Credentials with Workload Identity Federation 2023
• Detecting Influence Campaigns Across Social Media Platforms 2023
• DevOps is Now DevSecOps 2023
• DFIR Evidence Collection and Preservation for the Cloud 2023
• Digital Life and Physical Death 2023
• Digital Signatures 2023
• Disasters’ First Responders - Nonprofits, the Other Critical Infrastructure 2023
• Diversity, Equity, & Inclusion: The Paradoxical Effect & Impact on Security 2023
• Diving into the Tenacious Threats of Cloud Data Lakes 2023
• Do Attackers Use Algorithms to Evade ML? An In-the-Wild Phishing Case Study 2023
• Do Better: Board-Level Accountability in Cybersecurity 2023
• Driving Smart Innovation - Connected Car Identity at Scale 2023
• Droned Out: Surveilling the Noise in the Russian War in Ukraine 2023
• eBPF Warfare - Detecting Kernel & eBPF Rootkits with Tracee 2023
• Emotet Exposed: Insider the Cybercriminal's Supply Chain 2023
• Employees Are the New Perimeter- How the Pandemic Shaped Workforce Risk 2023
• Engagement through Entertainment: How to Make Security Behaviors Stick 2023
• Expanding Opportunities in Cyber for the Neurodivergent - Award Ceremony 2023
• Exploiting Vulnerabilities and Flaws to Attack Supply Chain 2023
• Exposure Management: The Rise of Proactive Cybersecurity Platforms 2023
• EXPOSURE: The 4th Annual RSAC SOC Report 2023
• Fault Attacks & Side Channels 2023
• Field Guide to Building an Operational Technology Cybersecurity Capability 2023
• Finding Vulnerabilities through Static Analysis and Scripting 2023
• Forensics Skillset: Techniques for Extraction and Analysis of the Evidence 2023
• From Public-Private Partnerships to Operational Collaboration 2023
• Future Proofing SMBs for the Evolving Global Compliance Landscape 2023
• Gapped Out: Unconventional Strategies for Addressing Cyber Talent Shortage 2023
• Geopolitical Resilience: Why Operational Resilience Is No Longer Enough 2023
• Ghosts in the Machine… Is There a Security Patch for People? 2023
• Hack the Institution – A Map To a Strong Partner-Based Security Program 2023
• Hacking Exposed - Hacking the Sec into DevOps 2023
• Hacking the Cloud: Play-by-Play Attack on GitHub, Okta, and Salesforce 2023
• Hardening AI/ML Systems - The Next Frontier of Cybersecurity 2023
• Hardware Security Following CHIPS Act Enactment - New Era for Supply Chain 2023
• Heuristic Approaches 2023
• Hiring & Retaining Security Talent: Guidance for Your Staffing Strategy 2023
• How a Secure Enterprise Starts with the Web 2023
• How AI is Transforming Network Security and User Experience 2023
• How Corporate Governance Transformed Cyber Resilience of a Ukrainian Bank 2023
• How Do You Trust Open Source Software? 2023
• How to Adapt to Security Changes in Cloud SaaS Transformation 2023
• How to Benefit from Internal Audit 2023
• How to Create a Breach-Deterrent Culture of Cybersecurity, from Board Down 2023
• How to Design and Execute Superior Employee Privacy Practices 2023
• How to Distribute Keys Securely for 20% of the Web 2023
• How to Kick Off Privacy Engineering Within a Security Team 2023
• How to Map Networked Devices Using Graph-Based AI to Preempt Cyber Threats 2023
• How to Operationalize Access Policies for Multiple Clouds 2023
• Hunting Stealth Adversaries with Graphs & AI 2023
• Hybrid Active Directory Attacks: Anatomy and Defenses 2023
• Hype and Reality: How to Evaluate AI/ML in Cybersecurity 2023
• I Shot a Deceptive Arrow into the Air—A Mock Hearing 2023
• Implement ZeroTrust with Dedicated DevSecOps Pipeline 2023
• Implementing and Managing Electronic Data Disposal and Destruction 2023
• Improve Likelihood Calculation by Mapping MITRE ATT&CK to Existing Controls 2023
• Insights into New Supply Chain and Cloud-Identity Attacks 2023
• Integrating Cyber Operations: CISA & CyberCom-CNMF Partnership 2023
• Integrating Privacy Protections into National Security Systems 2023
• Intel on a Shoestring: Building a Great Program, Even on a 3-figure Budget 2023
• Intelligence and AI at the Convergence Zone of Data and Threats 2023
• Intelligently Managing the Geopolitics and Security Interplay 2023
• Introducing the Secure Supply Chain Consumption Framework (S2C2F) 2023
• Investigation & Incident Response Challenges for the Hybrid Enterprise 2023
• Investing in Cyber: How to Raise Money for a Cyber Startup 2023
• IR: Optimizing Communications and Action Between Legal and Tech Leaders 2023
• Is Increasing Security Maturity And Decreasing Operational Load Possible? 2023
• It’s a Journey…Where is NIST Headed with the Cybersecurity Framework 2023
• It’s All Geek to Me: Communicating The Business Value of Zero Trust 2023
• It’s Getting Real & Hitting the Fan 2023 Edition (Real World SaaS Attacks) 2023
• It’s Not All Fun and Games: Cyber Threats to Professional Sports 2023
• Joining Forces with the White Hat Researchers: Aviation Industry Lessons 2023
• Key Agreement 2023
• Key Trends in the Shifting Threats to Payments as Blended Commerce Returns 2023
• Lateral Movements in Kubernetes 2023
• Living off the Cloud: A Server-Free Approach to Malware Ops 2023
• Look Far Afield: Metaverse Security Secrets from the Gaming Industry 2023
• M365 Adversary ROI: Microsoft Cloud Attack Insights 2023
• Machine Learning over Encrypted Data with Fully Homomorphic Encryption 2023
• MacOS Behavioral Detections using Apple Endpoint Security API 2023
• macOS: Tracking High Profile Targeted Attacks, Threat Actors & TTPs 2023
• Making oRAT Go...Further 2023
• Making Sense of a Confusing Detection and Response Solutions Landscape 2023
• Making Standards Safe for Democracies – Rebuilding the US Standards Team 2023
• Managing Cyber Risk to Systemically Important Critical Infrastructure 2023
• Managing the Mobile Endpoint Attack Surface 2023
• Mapping the Ransomware Payment Ecosystem & Opportunities for Friction 2023
• Metaspace Race, Securing Minors in the Metaverse - from the Start 2023
• Misinformation Is the New Malware 2023
• Modern Bank Heists 2023
• Multiparty Protocols 2023
• Nation-State at Fault: The Future of Automotive Accidents? 2023
• National Security to Nation State Target: Cybersecurity Effects on a Warfighter 2023
• Navigating Faulty Assumptions and Magical Thinking in Cybersecurity 2023
• Navigating Top Cyber Risks And Regulatory Requirements 2023
• Negotiating with Terrorists: The High Stakes Game of Ransomware Response 2023
• Nine Cloud Security Reasons for Resting Breach Face 2023
• NIST Cybersecurity Framework v2.0: What’s changing? 2023
• Nonconsensual Tracking and Victim Safety: A Case Study in Abusability 2023
• On Our Worst Day: Whole-of-Nation Industrial Incident Response in the USA 2023
• Open Source OS Approach Self-Detects Attacks & Self-Restores in Seconds 2023
• Panel: Migrating to Post-Quantum Schemes 2023
• Passkeys: The Good, the Bad and the Ugly 2023
• Pentesting AI: How to Hunt a Robot 2023
• Perilous Posts: The Risks of Biometric Patterns Exposed in Social Media 2023
• Phishing With a Net: The NIST Phish Scale and Cybersecurity Awareness 2023
• Playing With Fire? The Latest Cyber Law Hot Topics 2023
• Preparing for Quantum: A Pragmatic Approach towards Readiness 2023
• Preparing for the New Era of Cybersecurity Disclosure 2023
• Problems in the Mirror Are Larger Than They Appear - True Horrors of BEC 2023
• Protecting the Attack Surface and Data Silos of an EV Charging Network 2023
• Pwning the CI (GitHub Actions Edition) 2023
• Quantum Cryptanalysis 2023
• Ransom Demand? 10 Reasons to Think Before Paying 2023
• Ransomware 101: Get Smart Understanding Real Attacks 2023
• Reconsidering Ragnarok: The Cyber Threat Terrain After the Ukraine Invasion 2023
• Reinforcement Learning for Autonomous Cyber Defense 2023
• Reset Assumptions: Rate of Security Control Degradation "RoCD" and How to Reset 2023
• Responding to Supply Chain Vulnerabilities – A Maritime Perspective 2023
• Rethinking Recruiting: Effective Hiring Practices to Close the Skills Gap 2023
• REvil: Riches to Rags – The Rise and Takedown of a Cybercrime Empire 2023
• Rise of the Machines: Achieving Data Security and Analytics with AI 2023
• RSAC Security Scholar Poster Pitch-Off 2023
• Running in the Shadow: Perspectives on Securing the Software Supply Chain 2023
• Russia’s RT Leads Global Disinformation to Bypass Censorship on Ukraine 2023
• Saving Lives… and Money: Fighting Human Crimes and Financial Fraud 2023
• Scaling Product Security with a Product Security Lead Program 2023
• Scaling Software Supply Chain Source Security in Large Enterprises 2023
• Securing the World’s Open Source Software, Together 2023
• Security Challenges of Cloud Native Companies with Remote Workers 2023
• Security Implications of Artificial Intelligence Synthesizers 2023
• Semi-Advanced Threats vs the Semi-Critical Infrastructure 2023
• Signing Out and Session Management in 2023 2023
• Siloed to Unified: The Evolution of Security Analyst Experience 2023
• Slack Hackers Slackers 2023
• Spotlight On Latest Web Application and API Attack Data 2023
• State of the Hack 2023 2023
• Stay Ahead of Adversarial AI in OT/ICS Environments – Mitigating CWE-1039 2023
• Stop Drowning in Lake Assurance: Supply Chain Security and a New Frontier 2023
• Stories from the SOC Front Lines 2023
• Strategic Approaches to Growing Talent (Lightning Talks) 2023
• Strengthening Cyber Through Inclusion 2023
• Stronger Together: The US-Ukrainian Cyber Partnership 2023
• Surfing as a Team Sport: Riding the Regulatory Wave as a Top Competitor 2023
• Symmetric Cryptanalysis I 2023
• Symmetric Cryptanalysis II 2023
• Symmetric-Key Primitives 2023
• Tackling the Recent Rise of Cross-Tenant Vulnerabilities 2023
• Take a Walk on the Wild Side: Cyber Insurance Claims Trends 2023
• Taking Advantage of a Recession to Push a Program to World Class 2023
• Technical Metamorphosis: The 3 Stages of DSAR Automation 2023
• Telling Fairy Tales to the Board: Turn Attack Graphs into Business Stories 2023
• Ten Key Privacy Challenges of the Hybrid Workforce 2023
• Ten Legal Issues for CISOs 2023
• The Application Security State of the Union 2023
• The Art of Metawar: Hacking & Weaponizing the Metaverse to Redefine Reality 2023
• The Buck Stops….Where? Data Breach Accountability and the C-Suite 2023
• The Critical Importance of Identity for Instant Payments 2023
• The Dark Underbelly of 3rd-Party Application Access to Corporate Data 2023
• The Death of Conventional MFA: How AiTM Attacks Are Changing the Game 2023
• The Devil's in the Data: Role of Data Governance in Cyber Risk Mitigation 2023
• The Digital Trust Gap: How Cyber Pros Break Silos to Advance Digital Trust 2023
• The Elephant in the Security Room: Climate Change 2023
• The Emperor Has No Clothes: the Current State of the CISO 2023
• The Evolution of CVEs, Vulnerability Management, and Hybrid Architectures 2023
• The Fearless Cybersecurity Leader and Future CISO 2023
• The Future of Cyber Workforce - An Ecosystem View and Global Perspectives 2023
• The Hacker's Guide to Cloud Governance 2023
• The Hidden Risk in Undocumented API Behavior 2023
• The Industrial Cyberthreat Landscape: Year in Review Report with Updates 2023
• The Life of an Image: Evolution of Vulnerabilities in Popular Containers 2023
• The Lunacy of Web3 2023
• The Megatrends Driving Cloud Adoption – and Improving Security – for All 2023
• The Next-Gen Elephant in the Room 2023
• The Old is New Again: An Intro to SMS Security and Why It’s Vital 2023
• The Opposite of Transparency 2023
• The Promise and Peril of a UN Cybercrime Treaty 2023
• The Psychology of DevSecOps 2023
• The Rise of Confidential Computing, What It Is and What it Means to You 2023
• The Rise of Malware Within the Software Supply Chain 2023
• The Risks of Blind Trust in Code from Strangers 2023
• The Secret Life of Enterprise Botnets 2023
• The State of Venture Capital in Cybersecurity 2023
• The US National Cyber Label Program for Consumer Connected Devices 2023
• The World in Crisis: Prepare for Extreme Events via Supply Chain Resilience 2023
• The World on SBOMs 2023
• The ’Future of Work’(in Cybersecurity) Is Probably Not What Folks Think 2023
• Threat Informed Planning with Macro-level ATT&CK Trending 2023
• Threats Inside the Darkverse: The Shadowy Underbelly of the Metaverse 2023
• Tools for Privacy-Enhancing Technologies 2023
• Top 10 Ways to Evolve Cloud Native Incident Response Maturity 2023
• Trust Unearned? Evaluating CA Trustworthiness Across 5 Billion Certificates 2023
• Turning the Backpage: Combating Human Trafficking with Threat Intelligence 2023
• Under Pressure: What Cyber Can Learn from First Responders 2023
• Unveiling The Truth – A Case Study on Zero Trust for Consumers 2023
• Using Influence to Stop the Unfluence: The Secret Sauce of Cybersecurity 2023
• Verifiable Credential in Actions During ID-Verification Process 2023
• Verifiable Credentials and the Future of Enterprise Security 2023
• Walking on Broken Clouds 2023
• Wanna Get Malware Out of Emails? CISA’s Latest Research 2023
• Want to Play a Game? Get Your Game On with Hacking Gamification 2023
• We (Could Have) Cracked Open the Network for Under $100 2023
• Web3 – Paving a Path to Identity First 2023
• What 40 CEOs Told Us About Building Cyber Resilience 2023
• What the Authn? Passkeys Offer a Fresh Take to Authentication Dilemmas 2023
• What Workforce Shortage? Create Your OWN Talent Pipeline 2023
• What You Need to Know about the Global Cybersecurity Regulatory Landscape 2023
• When Everything Is Critical, Nothing Is: ISA and Mitigation Prioritization 2023
• When Worlds Converge and Consolidate: Blueprint for IT and Security Leaders 2023
• Where Are All of the Container Breaches? 2023
• While You Were Shielding: The Impact of Schrems II on EU Data Protection 2023
• Who Says Cybersecurity Can’t Be Creative? 2023
• Whoa, You’ve Been the CISO for 3 Years at Your Firm—Now What? 2023
• Why Extended Detection and Response (XDR) Must Unite the Industry 2023
• Why Having a Security Reference Architecture Matters! 2023
• Winning the Battle Against Scam Calls – How We Mitigated Caller ID Spoofing 2023
• You Are Not an Island - Threat Model as a Team 2023
• You Have a Firewall, But Do You Have a Cyber Bodyguard? 2023
• You Too Can Secure OT 2023
• Your Third-Party Risk Management Program Is Bad and You Should Feel Bad 2023
• Zero Effort Zero Trust K8s Security for Blocking Zero Day Attacks 2023
• Zero Trust Privacy: Rethinking a Data Strategy 2023