Abstract: 

There is an explosion in the number, type and mix of connected IoT in enterprises, and this creates a large attack surface to manage and control. There are an estimated 75 billion connected IoT devices and these devices are estimated to generate around 73.1ZB of data by 2025. This data created and used by IoT is expected to seamlessly traverse through devices, networks, remote office and cloud environments. The resulting volume of structured and unstructured data will challenge the security practitioners in effectively tracking the data and protecting it.

Zero trust means that each device, application, data flow, and location should be monitored/observed continuously, even those which have authenticated correctly. Further, monitoring and observation must involve device fingerprinting and risk profiling to get an accurate behavioral map, with access to other resources dependent on the outcome of this mapping and observations. Thus achieving ZTNA for IoT is a seemingly unattainable task considering the sheer volume of devices and data.
With this backdrop, this presentation discusses how we can effectively simplify implementation of ZTNA for IoT at enterprise scale and level.

About the speaker: 

Srinivas is an entrepreneur and a technologist with a strong cyber security, cloud, and SaaS background. He founded WootCloud Inc, an IoT Security company. In this role, he has architected the WootCloud product line and oversaw the execution of all phases of products and solutions across WootCloud’s IoT Security portfolio. WootCloud is now acquired by Netskope Inc. Srinivas has over 25 years of experience in Engineering and Leadership roles. He holds four patents in IoT Security.

Abstract: 

In this talk, Vinod and Russell will present the latest trends in SCA (Software Composition Analysis) scanning and vulnerability remediation. This hands-on presentation is intended for security professionals AND will showcase various technologies available to users. A set of recommended reading post the talk will be provided. At the end of the talk the goal is to allow participants to:

• Understand Important Software Supply Chain Risk Trends

• Understand SCA Scanning Regulatory/Compliance Pressures

• Understand the basics of SCA scanning (what it does, how it works, how it's measured, how scans are used, and how these processes can be improved)

• Understand Vulnerabilities and SBOMs generally, the different types of SBOMs, and their various benefits and drawbacks

• Understand and quantify the differences in quality between various SCA scanners Evaluate commercials scanners along with open-source scanning options and core scanner features

• Understand various options for where and how SCA Scanners are typically deployed

About the speakers: 

Vinod Gupta is an accomplished leader with extensive experience developing innovative products and services for the cybersecurity and DevOps industries. He holds over 15 patents in Cloud Computing and Cybersecurity. Vinod has worked at many well-known companies, including Apple. He is currently pursuing an MBA at the Wharton School.

Russ Andersson has been an early member of several successful Bay Area startups including HintMD sold to Revance, and ZyBooks acquired by Wiley. Russ founded Eden Ventures (European Venture Fund of the Year 2006) and Nadex which was acquired by the IG group.