Networking Check-in with Continental Breakfast

Please check in at our registration table and enjoy a complimentary breakfast with a side of networking.

KEYNOTE Steven Bay, Director-Threat Reconnaissance Unit, Security On-Demand; CISSP, Writer, Speaker

Edward Snowden, the Ultimate Insider.

Abstract: Having served as Edward Snowden's boss at the time Edward fled the country with millions of Top-Secret NSA documents, Steven will share his inside story of what happened with Snowden. His presentation will illustrate how Snowden matched the profile of a malicious insider and provide lessons learned and solutions focused on information security and insider threats.

Jeff Huth, Vice President of Product Strategy at U.S. Information Services – Government Information Solutions at Transunion

Data Driven Risk Indicators of Insider Threats

Insider risk programs use a combination of internal and external data on employees to highlight areas of risk.  External data can show predispositions and stressors that might put someone at a higher risk of deciding to do something nefarious.  In this presentation we will review our prior research and will provide updates on the best practices to use external data in insider risk programs.

Antonio "Tony" Rucci, Director, Information Security & Threat Intelligence at Information International Associates, Inc.

Insider Threats Slipping Through the Cracks.

“Whatcha Gon’ Do ‘bout it?”

Your critical data… your corporate IP… your “secret sauce,” and then, trust has been compromised. Someone has gone rogue; or was negligent. Either way, it’s gone! 

In the ensuing aftermath, you’ll have to ask and address many hard questions… How did you get there? How did it happen? More importantly; What happened to the information? Where has it gone and end up? How do you get it back? Can you get it back? How do you move forward? What could you have done to prevent it? What can YOU do?

We’ll address these, and many other questions as we take a brief tour through several scenarios of the interrogatives of the Insider; addressing the Third-Order Effects and impact on things you may never be able to control, and maybe some which you can. Either way, it’ll be an interesting, entertaining journey from old-school risks and threats to the cutting edge - IoT, Smart-Yet-Scandalous Technologies, yes, you guessed it… we’re talking “Sex Toys.” Oh, come on, I’m not the first one to talk about it! Maybe the first one here though! You’ll stifle those chuckles when you see the results of years of dedicated research, and walk away with some how-to tips, and a smile.

​

BREAK

Please visit our sponsors, without them iTS4 would not be possible.

Harry Perper, Chief Engineer, The MITRE Corporation Senior Cybersecurity Engineer, National Cybersecurity Center of Excellence at NIST

NCCoE: Increasing the adoption of standards-based cybersecurity technologies

Description: Identity and access management is one of the pillars of cybersecurity that directly address the issues of insider threats.   The NCCoE will discuss its identity and access management projects.  The projects are based on standards based cybersecurity technologies.  The goal of this presentation is to convey the concepts the center has developed to integrate available technologies to address current identity and access management challenges.

Nat Bongiovanni, Chief Technology Officer at NTT Data Services

The Intersection of Knowledge and Trust: Making “Need to Know” Work

​

Multiple major compromises have occurred because people and/or devices had access to information that was not related to their function at all. A primary question should be “Why did they have access?”

​

This presentation will demonstrate an approach for your organization to implement “need to know” using Attribute Based Access Control (ABAC). ABAC cultivates the nuanced approach necessary to define who gets access to what in today’s dynamic digital environment in contrast to the traditional Role Based Access Control (RBAC) methodology.

​

NTT DATA’s ABAC methodology is designed to work in a dynamic environment where access to knowledge is governed by the “need to know” and granted to those who can be trusted.

LUNCH BREAK

​

Brandon Bean, Chief of Regional Support - West at Department of Defense

Where is your HITL?

With machine learning taking the front seat in insider threat detection, organizations must ensure that they do not overlook the most vital part of the Insider Threat Detection Team: The Human-In-The-Loop (HITL). This presentation will look at the value of the HITL and provides vignettes where the HITL proved critical to the success of Insider Threat Detection.

Chris Grijalva, Chief Technologist at GCE

Killer Robots and Other Crazy Ideas

​

A look at the potential future with regards to AI and Insider Threat. Exploring some possible near future scenarios and what the implications are. 

BREAK

​

Charlie Sowell, Chief Operating Officer of iWorks Corporation

Lessons Learned from a Fancy Bear Target

​

In 2015, the Russian government-aligned cyberespionage group “Fancy Bear” targeted more than 500 U.S.-based people and groups in a concentrated spear-phishing attack. Many were long-retired, but about one-quarter were still in government or held security clearances at the time they were targeted. The attack on personal Gmail accounts uncovered a gap in our security processes. Although the FBI is the lead federal agency for investigating cyber attacks by criminals, overseas adversaries, and terrorists, they did not notify the targets. When DSS was notified 87 of the emails belonged to cleared defense contractors, they stated “We simply have no insight into or oversight of anyone’s personal email accounts or how they are protected or notified when something is amiss.” Charlie Sowell, one of the targets, discusses his experience with this attack that exposed gaps in victim notification responsibility.

Dr. Adam Sorini Managing Scientist with Dr. Dustin Burns Scientist from Exponent

Forensic Investigations of Alleged Data Exfiltration

​

Exponent will present analysis techniques and tools employed to investigate cases involving alleged 

data exfiltration by one or more insiders, including discussion of the complexities of the analyses and questions that often arise during such forensic investigations.

KEYNOTE Warren Yu, Chief Learning Officer, Cebrowski Institute for Innovation at the Naval Postgraduate School

​

KEYNOTE WORKSHOP

Radically Cutting the U.S. Navy’s Killchain - An Intrapreneurial DevOps Workshop

This provocative, disruptive discussion about improving our federal government’s ability to manage change stems from the executive education of our nation’s Admirals, Generals, and Senior civilian leadership. Condensed from 33 years to 90 minutes, this multimedia presentation uses digital storytelling and motion graphics. 

Intended learning outcomes center around thinking, innovation, balance and how to sow a culture of Learning.

* Audience members should consult a physician beforehand if they possess health conditions like:

• Heart trouble, high blood pressure, or motion sickness 

• Infatuation with bureaucracy or an aversion to heretics

• Bodily control issues that may prevent them from properly bracing themselves during the presentation

​

*Rated R

​

​

Closing Comments and Networking Reception in the Ferrantes Room

Closing comments including important event highlights will be given by iTS4 moderator, Paul Temple. Please enjoy our networking reception, at the top floor of the  Marriott in the Ferrantes Room with the best Views in Monterey Bay!