Phishing simulations are shown to be effective tools to increase user awareness in information security issues. This session will convey experiences in setting up an automated phishing program and delivering game-based 15 minute training modules.

After completing this session, you will be able to:

• How to effectively implement a Phishing Campaign
• Metrics that can move a security program forward
• Behavioral based techniques to reinforce learning
• Develop a project plan to rollout phishing program

Companies benefit from the security controls when they use a cloud service. However, CIOs, CISOs, and cloud users in general have to also understand their responsibilities in this new paradigm called “The Shared Responsibility Model”.

After completing this session, you will be able to:

• Explain the different cloud computing models
• Explain security controls in cloud services
• Explain the shared responsibility model
• Explain cloud security tools and best practices

Based off military doctrine, Lockheed Martin’s Computer Incident Response Team has created an intelligence-driven defense process, Cyber Kill Chain® This session also reviews the contributions of ISACA CSX and ENISA Cybersecurity kill chains.

After completing this session, you will be able to:

• Define an Advanced Persistent Threat (APT)
• Identify the phases of a Cybersecurity kill chain
• Identify attacks via the ENISA cyber kill chain.
• Importance of breaking the kill chain for security

In this presentation, we will discuss a year-long study of exploits kits, attacks and vulnerability attributes and learn how to use them for prioritization. We will share best practices for improving remediation and reducing risk.

After completing this session, you will be able to:

• Understand how attacks happen in real world
• Understand Exploits and Vulnerabilities
• Understand how to prioritize remediation.
• Reduce overall risk.

App vulnerabilities and insecure software are undermining our nation’s critical infrastructure. This presentation will explore the problem, offer some solutions, and will give a live demo that shows how vulnerabilities like SQL injection, etc. work.

After completing this session, you will be able to:

• Understand the problem of insecure software
• Identify common software vulnerabilities
• Understand how common vulnerabilities work
• Discuss mitigation of app security vulnerabilities