Name: 境界防御を回避するAPI特有の攻撃の実態と最新の脆弱性対策
Start: 2023-11-30T06:00:00Z
End: 2023-11-30T06:00:51.000Z
Location: BrightTALK
Rating: 4.6

Looking for expertise and information to advance your career and tackle your challenges? Subscribe and join us for the educational webinars in APAC time zone. Earn CPEs quickly and at no cost by attending webinars: 1 hour of webinar equals 1 CPE. We welcome members and non members alike.

CCSP合格者が、合格の秘訣についてディスカッションします。CCSPについて、Webinar内で直接質問いただけます。 
 
より多くの企業がクラウドに移行する中、クラウドセキュリティのプロフェッショナルの需要が高まっています。世界的に認められているCCSPを取得することで、クラウドにおけるデータ、アプリケーション、インフラを設計・管理・保護するための高度な知識とスキルを有していることをアピールできます。 
 
本セミナーでは、CCSP資格についてご紹介した後、ライブQ&AでCCSPに関する質問にお答えします。勉強方法や問題を解くコツなど、気になることがありましたらお気軽にご質問ください。
認定要件、ドメイン、自習用リソース、トレーニング戦略、キャリアパスなどについて解説し、試験当日の準備に自信を持てるようサポートします。 
 
このウェビナーでは、以下を共有します。 
- CCSPはどのようにサイバーセキュリティの基礎的な理解を構築するのでしょうか。 
- ベンダーニュートラルな認定資格が求められる理由 
- どのようなトレーニングツールがあるのか 
  
是非、ご参加ください。

パネリスト：
諸角 昌宏（保有資格：CCSP）
ISC2 認定講師

矢部 沖比古（保有資格：CISSP、CCSP）
ベライゾンジャパン合同会社　
ソリューションアーキテクト

日比野 恒（保有資格：CISSP、CCSP）
株式会社リクルート
セキュリティ戦略グループ　
セキュリティアーキテクト

モデレーター：
小熊 慶一郎 （保有資格：CISSP）
ISC2 Director of Business Development, Japan

CCSP EXAM READY: CCSP合格者が、合格の秘訣についてディスカッションします

Join us for this live webinar where we’ll tell you all about two newly enhanced Official ISC2 Online Training options for SSCP — self-paced and instructor-led exam prep. Find out how both options provide a clear-cut and comprehensive review of the SSCP domains for a structured and intuitive learning experience.
You’ll learn about:
• Enhanced ISC2 Online Instructor-Led SSCP Training
• Enhanced ISC2 Online Self-Paced SSCP Training
• New study tools
• Education Guarantee

Save your spot now.

Enhanced! SSCP Official ISC2 Online Training

CISSP合格者が、合格の秘訣についてディスカッションします。CISSPについて、直接合格者に聞いてみましょう。
 
世界中でサイバーセキュリティの安全が脅かされている現在、今ほど専門家が必要とされている時代はないでしょう。CISSP保持者はグローバルで認知され、セキュリティリーダーとして活躍しています。CISSP資格を取得することは、一流のサイバーセキュリティプログラムを効果的に設計、開発、管理するために必要な能力を持っていることを証明することになります。
 
ライブQ&Aでは、試験合格者がCISSPに関する質問にお答えします。勉強方法や問題を解くコツなど、気になることがありましたらお気軽にご質問ください。
認定要件、ドメイン、自習用リソース、トレーニング戦略、キャリアパスなどについて解説し、試験当日の準備に自信を持てるようサポートします。
 
このウェビナーでは、以下を共有します。
- CISSPはどのようにサイバーセキュリティの基礎的な理解を構築するのでしょうか。
- ベンダーニュートラルな認定が求められる理由
- どのようなトレーニングツールがあるのか
 
是非、ご参加ください。

パネリスト：
安田 良明（保有資格：CISSP、 SSCP）
ISC2 認定講師
株式会社ラック
サイバーセキュリティサービス統括部
デジタルペンテストサービス部 副部長

松山 祥子（保有資格：CISSP）
日本マイクロソフト株式会社
クラウド＆AIソリューション事業本部
クラウドセキュリティ技術営業本部
セキュリティテクニカルスペシャリスト

田上 岳夫（保有資格：CISSP）
日本電気株式会社 
コーポレートIT・デジタル部門
CISO統括オフィス シニアディレクター

モデレーター：
小熊 慶一郎 （保有資格：CISSP）
ISC2 Director of Business Development, Japan

CISSP EXAM READY: CISSP合格者が、合格の秘訣についてディスカッションします

The cybersecurity industry continues to face many challenges, including shortages of skilled security personnel, record-level ransomware attacks, and increased risks associated with modern attack surfaces. However, investments in security products and services continue to remain strong, including AI-fueled threat prevention, zero trust security, managed detection and response (MDR), and more. So, what does next year have in store for the cybersecurity industry? Join Steve Piper, Founder & CEO of CyberEdge (and proud CISSP), as he shares his top five cybersecurity predictions for 2024.

Top Five Cybersecurity Predictions for 2024

As financial services from banking to fintech embrace digital transformation and open banking initiatives, the attack surface has grown exponentially. Our latest research reveals a striking revelation - financial services in Asia Pacific and Japan (APJ) stand as the prime targets, bearing the brunt of nearly half of all web app & API attacks across every industry vertical in this region. Join us in this webinar where we will unveil the extensive data collected and analyzed to support the fortification of your defenses. We will explore: 

- Emerging cyberattacks targeting financial services in APJ 
- Prominent attack vectors like web application vulnerabilities 
- Dissection of preferred attack vectors used by adversaries 
- Potential supply chain risks from third-party scripts and aggregators 
- Proactive measures to combat threats 
- from APIs to bots

Presenter:
Reuben Koh, Director of Security Technology & Strategy, Akamai

Moderator:
Alan Chan, CISSP-ISSMP, CSSLP, Member, ISC2 Hong Kong Chapter

Unraveling Threats to Financial Services in Asia Pacific & Japan

In an age where cybersecurity threats are becoming increasingly sophisticated and dynamic, a holistic approach to threat detection and response is imperative. Extended Detection and Response (XDR), with its all-rounded threat detection and response capabilities, offers a powerful solution to address the evolving threat landscape in the world of containers. Explore the synergy between XDR and container security, offering a comprehensive strategy to understand threat detection and response in container security, and how XDR can be a game-changer in the cybersecurity strategy.

This event is a must-attend for security professionals, CTOs, CISOs, IT leaders, and anyone interested in staying ahead of the curve in the ever-evolving cybersecurity world. Join us to explore how XDR can be your ally in protecting containerized applications and securing your digital infrastructure.

Presenters:
Alexey Serebryakov, Business Development Manager, Unified Platform, Kaspersky
Ng Yeok Chong, CISSP, Head of Pre-Sales, APAC, Kaspersky Lab Singapore

Moderator:
Yohanna Kho, CISSP

XDR and Container Security: A Holistic Approach to Threat Detection and Response

Last month, CyberEdge's CEO and Chief Analyst, Steve Piper, participated in an ISC2 webinar to share his perspectives on how artificial intelligence (AI) is impacting the cybersecurity industry. As AI is such a hot topic, more participants registered for that webinar than any other in ISC2 Knowledge Vault history! As enthusiasm for this topic remains sky high, ISC2 has invited Steve back to respond to unanswered audience questions from our last webinar and to address your burning questions in this webinar.

The Impact of Artificial Intelligence on the Cybersecurity Industry: Part 2

New to the security industry? Or thinking about transitioning into an information security role? If so, this webinar is for you. Join Steve Piper, Founder & CEO of CyberEdge (and proud CISSP), as he provides a one-hour ‘crash course’ on the entire security industry, including:

- Size and growth of the security industry
- Useful vocabulary terms and buzz words
- Five types of cyberthreat actors 
- Modern cyberthreats and tactics
- Categories of security defenses
- Common security job roles
- Security industry ecosystem

Security Industry 101: A 'Crash Course' for Security Newbies

CCSP合格者が、合格の秘訣についてディスカッションします。CCSPについて、Webinar内で直接質問いただけます。 
  
より多くの企業がクラウドに移行する中、クラウドセキュリティのプロフェッショナルの需要が高まっています。世界的に認められているCCSPを取得することで、クラウドにおけるデータ、アプリケーション、インフラを設計・管理・保護するための高度な知識とスキルを有していることをアピールできます。 
 
本セミナーでは、CCSP資格についてご紹介した後、ライブQ&AでCCSPに関する質問にお答えします。認定要件、ドメイン、自習用リソース、トレーニング戦略、キャリアパスなどについて解説し、試験当日の準備に自信を持てるようサポートします。 
 
このウェビナーでは、以下を共有します。 
- CCSPはどのようにサイバーセキュリティの基礎的な理解を構築するのでしょうか。 
- ベンダーニュートラルな認定資格が求められる理由 
- どのようなトレーニングツールがあるのか 
  
是非、ご参加ください。

パネリスト：
諸角 昌宏 (保有資格：CCSP)
ISC2 認定講師

末吉 亜樹子（保有資格：CISSP、CCSP）
株式会社NTTデータグループ 
技術革新統括本部 部長

大島 悠司（保有資格：CISSP、CCSP）
ニューリジェンセキュリティ株式会社
クラウドセキュリティアーキテクト

モデレーター：
小熊 慶一郎 （保有資格：CISSP） 
ISC2 Director of Business Development, Japan

CCSP EXAM READY:  CCSP合格者が、合格の秘訣についてディスカッションします

Artificial intelligence developers have made huge strides in recent months, transforming a wide variety of human endeavors. Unfortunately, that includes ransomware. Attend this webinar and get expert insights and forecasts about the trends we can expect to see as ransomware—already a significant and costly threat—gains new, AI-based capabilities, including: 
- Extreme customization of phishing, smishing, and email attacks 
- Relentless, automated attacks that could make current security strategies obsolete 
- Extreme optimization of attacks, from finding vulnerabilities to ransom negotiations 

Plus, see how you can fight back against the coming wave of threats using advanced strategies that incorporate AI. Like all technologies, AI can be used for good or ill. Attend this important webinar to understand how both threats and defensive strategies are being transformed by the AI revolution.

Presenter: Fleming Shi, Chief Technology Officer, Barracuda Networks AND Anastasia Hurley, Principal Product Marketing Manager, Barracuda Networks
Moderator: Yohanna Kho, CISSP

This Changes Everything: Ransomware in the Age of Artificial Intelligence

CISSP合格者が、合格の秘訣についてディスカッションします。CISSPについて、直接合格者に聞いてみましょう。
 
現在、世界中でサイバーセキュリティの安全が脅かされており、専門家が今ほど必要とされている時代はないでしょう。CISSP保持者は世界的に認知され、セキュリティリーダーとして活躍しています。CISSP資格を取得することは、一流のサイバーセキュリティプログラムを効果的に設計、開発、管理するために必要な能力を持っていることを証明することになります。
 
ライブQ&Aでは、CISSPに関する質問にお答えします。認定要件、ドメイン、自習用リソース、トレーニング戦略、キャリアパスなどについて解説し、試験当日の準備に自信を持てるようサポートします。
 
このウェビナーでは、以下を共有します。
- CISSPはどのようにサイバーセキュリティの基礎的な理解を構築するのでしょうか。
- ベンダーニュートラルな認定が求められる理由
- どのようなトレーニングツールがあるのか
 
是非、ご参加ください。

パネリスト：
小林 浩史（保有資格：CISSP） 
ISC2 認定主任講師、
グローバルセキュリティエキスパート株式会社 (ＧＳＸ) 
コンサルティング本部　教育事業部

末吉 亜樹子（保有資格：CISSP、CCSP）
株式会社NTTデータグループ 
技術革新統括本部 部長

三原 千穂（保有資格：CISSP）
株式会社 東芝 
技術企画部 サイバーセキュリティセンター
 
モデレーター：
小熊 慶一郎 （保有資格：CISSP） 
ISC2 Director of Business Development, Japan

Despite the growing awareness of ransomware threats and an availability of numerous tools, the Asia Pacific and Japan (APJ) region continues to witness a significant rise in victim companies. In the latest State of the Internet report, Akamai’s threat researchers meticulously examine the evolving ransomware landscape. Gain deep insights into the ‘who, what, and how’ aspects, especially concerning APJ, alongside Reuben Koh, a contributor to the report. 

Join us for this session to understand: 
- The evolving tactics and prominent trends in ransomware 
- Which ransomware operators are currently dominating the scene in APJ 
- Which industries are bearing the brunt of these attacks 
- The most potent attack techniques employed 
- How to better defend against ransomware

Presenter: Reuben Koh, Director, Security Technology and Strategy, APJ, Akamai
Moderator: Emily Kong, CISSP, CCSP

What’s Changing in Ransomware for Asia Pacific: Who, What and How?

The impact of artificial intelligence (AI) on the cybersecurity industry is among the hottest topics discussed and debated amongst security professionals. From a positive perspective, AI has infused a myriad of threat detection and prevention platforms with newfound methods for uncovering sophisticated threats. It has also helped short-staffed security teams automate complex processes, such as incident validation and response. But AI also comes at a price. Join Steve Piper, Founder & CEO of CyberEdge (and proud CISSP), as he addresses the good, the bad, and the ugly outcomes of artificial intelligence.

The Impact of Artificial Intelligence on the Cybersecurity Industry

Governance, risk and compliance (GRC) professionals play a vital role in organizations, aligning IT goals with objectives as they manage cyber risks and achieve regulatory needs. Learn how CGRC certification demonstrates that you have the knowledge and skills to integrate governance, performance management, risk management and regulatory compliance within an organization.

Join us to learn more about:
- What is GRC?
- Why is GRC important for cybersecurity?
- What are the core global frameworks?
- How is GRC relevant in every industry?
- What is the pathway to CGRC?

Save your spot today!

Moderator: Brandon Dunlap
Panelists: 
AJ Yawn, Partner in Charge, Product and Innovation
Mohamed Malki, Director, Enterprise Security Architecture
Chris Stanley, Exam Content Developer

Everything You Need to Know about CGRC

Cybercriminals are deploying sophisticated new kinds of phishing attacks that are undetectable by traditional email security solutions—and even by some of the most advanced solutions. Attend this webinar to get a detailed explanation of how these new phishing techniques exploit online tools, special characters, and image-only emails to evade detection and commit fraud or credential theft leading to data breaches and other costly impacts. At the webinar, you’ll see analyses of several real-world attacks uncovered by Barracuda threat teams—and you’ll discover how new strategies and technologies can keep your organization and users safe by spotting and blocking these dangerous threat tactics.

Presenter: Nishant Taneja, Senior Director, Product Marketing, Barracuda Networks; Prebh Dev Singh, Manager, Product Management, Barracuda Networks
Moderator: Sukhdev Singh, CISSP, CCSP, Member, (ISC)² Singapore Chapter

Using AI to Shut Down Sophisticated New Phishing Threats

Join us for this live webinar where we’ll tell you all about newly enhanced ISC2 Online Self-Paced CISSP Training with AI-driven adaptive learning. Find out how this dynamic experience pinpoints areas that require focus and guides you through every stage of your personalized exam prep. You’ll study smarter, not harder, and go into the CISSP exam with confidence.

You’ll learn:
• Why it makes training more efficient busy professionals 
• What makes it a more efficient route to exam readiness
• How artificial intelligence tailors learning to your needs
• And much more

New! AI-Driven Adaptive Learning for CISSP from ISC2

Since 2003, the OWASP Top 10 project has been the authoritative list of information prevalent to web application vulnerabilities and the ways to mitigate them. This year, OWASP are making updates to their API Security Top 10 list, which focuses specifically on the top ten vulnerabilities in API security and provides guidance on how to increase security. The list is available on the OWASP website: https://owasp.org/API-Security/editions/2023/en/0x11-t10/

Join our webinar as we go into detail on: 
- The new updates to the OWASP API Security Top 10 list. 
- The state of API security in 2023 and the reasons behind the OWASP Top 10 list updates. 
- The best form of defense for API security vulnerabilities. 

This session will conclude with a live Q&A where you’ll have the opportunity to ask your API security questions to our Barracuda expert.

Speakers: Tushar Richabadas, Senior Product Marketing Manager, Barracuda Networks; Anshuman Singh, Senior Director of Product Management, Barracuda Networks
Moderator: Cyril Tan, CISSP, Volunteer Outreach Director, (ISC)² Singapore Chapter

OWASP Top 10 API Security Risks For 2023

WebAPIは、スマホアプリやIoT、B2Bサービス連携など広く利用されていますが、商用のアプリやサービスの設計でマイクロサービス化が前提となり、さらに幅が広がっています。しかし、APIを狙う攻撃も急増しています。今年更新された、OWASP API Security Top 10で示された主な脅威が、実はAPIの特有の脆弱性を悪用する攻撃です。さらに、これらの攻撃は、従来のWAFやAPI-Gatewayなどの境界型防御では検知できないという課題があります。本セッションでは、企業ごとに異なるサービス連携やビジネスロジックに沿って実装されるAPIの、特に認証・認可に関する脆弱性を中心に、それを巧みに利用する攻撃の手口を実例を挙げて解説するとともに、対策を考えるうえでの課題を考察し、ふるまい検知とAIを用いた最新の検知技術のポイントについてご紹介します。

Presenter:
中西 一博, プロダクト・マーケティング・マネージャー, Akamai Technologies

Moderator:
Emily Kong, CISSP, CCSP

境界防御を回避するAPI特有の攻撃の実態と最新の脆弱性対策

Web API

OWASP

Welcome to the mobile computing community on BrightTALK! With the consumerization of IT and the widespread adoption of mobile devices across the globe, mobile computing has become an important part of many people's lives in a culture of bring your own device (BYOD). With mobile devices doubling as work phones and more employees working from home, businesses need to provide secure access to data and work applications from anywhere at any time. Join this growing community and hear from industry thought leaders in webinars and videos as they share their insight on mobile computing research and trends.

Mobile Computing

Cloud computing has exploded over the past few years, delivering a previously unimagined level of workplace mobility and flexibility. The cloud computing community on BrightTALK is made up of thousands of engaged professionals learning from the latest cloud computing research and resources. Join the community to expand your cloud computing knowledge and have your questions answered in live sessions with industry experts and vendor representatives.

Cloud Computing

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

The application development community features top thought leadership focusing on optimal practices in software development, SDLC methodology, mobile app development and application development platforms and tools. Join top software engineers and coders as they cover emerging trends in everything from enterprise app development to developing for mobile platforms such as Android and iOS.

Application Development

Join thousands of engaged IT professionals in the application management community on BrightTALK. Interact with your peers in relevant webinars and videos on the latest trends and best practices for application lifecycle management, application performance management and application development.

Application Management

Network infrastructure professionals understand that a reliable and secure infrastructure is crucial to enabling business execution. Join the network infrastructure community to interact with thousands of IT professionals. Browse hundreds of on-demand and live webinars and videos to learn about the latest trends in network computing, SDN, WAN optimization and more.

Network Infrastructure

Welcome to the big data and data management community on BrightTALK. Join thousands of data quality engineers, data scientists, database administrators and other professionals to find more information about the hottest topics affecting your data. Subscribe now to learn about efficiently storing, optimizing a complex infrastructure, developing governing policies, ensuring data quality and analyzing data to make better informed decisions. Join the conversation by watching live and on-demand webinars and take the opportunity to interact with top experts and thought leaders in the field.

Big Data and Data Management

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Information Technology

Thousands of healthcare IT professionals compose the health IT community on BrightTALK. Learn alongside them with relevant webinars on healthcare IT compliance, big data in healthcare and IT solutions for healthcare organizations. Join the conversation by asking questions and engaging with other participants during live webinars and organized discussions.

境界防御を回避するAPI特有の攻撃の実態と最新の脆弱性対策

Presented by

About this talk

More from this channel