Agenda 08:50-09:00 Chairman Welcome

Transkript

1 Agenda 08:50-09:00 Chairman Welcome 09:00-09:20 Presentation by ThyssenKrupp AG Stefan Eigler, Senior Manager Data Protection & IT 09:20-09:40 Think like a bad guy change the game to proactively protect your business Frank Mong VP, Solutions HP Enterprise Security Products Safeguard your business by changing the way you invest in and think about security from the perspective of the criminals targeting you What research is telling us and how it can help you can take a more proactive, offensive position when it comes to addressing threats. Improve and prioritise your organisation s ability to disrupt the adversary with actionable intelligence 09:40-10:00 Das geplante deutsche IT-Sicherheitsgesetz neue rechtliche Rahmenbedingungen für die Betreiber kritischer Infrastrukturen Hendrik Schöttle, Rechtsanwalt, Partner, Osborne Clarke Das geplante deutsche IT-Sicherheitsgesetz soll die Sicherheit bei kritischen Infrastrukturen verbessern. Ein erster Gesetzentwurf wurde von der Industrie abgelehnt, jüngst erarbeitete Neufassungen werden kontrovers diskutiert. Wen betrifft das kommende Gesetz? Welche Pflichten kommen auf Betreiber kritischer Infrastrukturen zu?

2 Was sind die wesentlichen Kritikunkte am Entwurf? Was ändert sich durch die ebenfalls geplante EU-Richtlinie zur Netzund Informationssicherheit? 10:00-10:20 Presentation by Threatmetrix 10:20-11:00 Education Seminar - Session 1 Of course you ve got your security under control. Right? Presenter: Erdal Ozkaya, IT Security Specialist, Secunia Catching malicious insiders through behavioural analytics Presenter: Michael Rohsé, CISSP Solutions Architect, DACH, HP Education Seminar by Unisys 11:00-11:30 Networking break 11:30-11:50 How does voice biometrics fit in the mobile development and threat landscape? Marc Cramer, Principal Consultant Cybercrime, ING Development of the mobile app Threats we see in that landscape Voice biometrics in the mobile app 11:50-12:10 Activating your human defence network A novel approach to combatting nation-state actors and cybercriminals Allan Carey, Vice President, PhishMe Background: As the security industry has continually failed to cultivate the human element of security, phishing has become the top attack vector for cyber criminals and APT IT departments often don t see the security value in humans and organisations don t provide any security training at all or boring lessons that fail to improve behaviour

3 Methods to improve employee security behaviour: Reducing human susceptibility, sending immersive simulated phishing exercises and presenting instant feedback and training to those that show susceptibility Empower users to be human sensors that can recognize attacks, report them and thus reduce the attack detection window 12:10-12:30 Presentation by Dell Raimar Melchior, Cyber Security Architect, Dell SecureWorks 12:30-12:50 Presentation tbc 12:50-13:30 Education Seminar - Session 2 You ve got Malware! Securing your DNS Infrastructure: Challenges & Solutions Presenter: Phil Rumi, Systems Engineer, Infoblox Germany GmbH Presentation by Unisys 13:30-14:30 Lunchbreak 14:30-14:50 Presentation by Daimler Christian Feige, Head of Daimler CERT & Manager Information Security Intelligence, Daimler 14:50-15:10 Presentation by Veracode 15:10-15:30 Presentation by Wave Boudewijn Kiljan, Chief Technology Officer EMEA, Wave Systems Corp.

4 15:30-16:10 Education Seminar - Session 3 Live Demo Powned! You were hacked - now what? Presenter: Erdal Ozkaya, IT Security Specialist, Secunia I Spy - I see something you don t see" Presenter: Tracy Varnum (CISSP, CISA, CRISC) & Dr Robert Strauss, Application Security Specialist, HP 16:10-16:30 Networking break 16:30-16:50 Cyber-Risiken und Datensicherheit Haftung der Geschäftsleitung, Schadenbeispiele und Risikomanagement Marc Heitmann, Leiter Branchenteam Cyber, Marsh Aus der Praxis: Datensicherheit Ein unterschätztes Risiko Haftung und Verantwortung der Unternehmensleitung: IT-Compliance als unternehmerische Pflicht Reelle Schadenbeispiele und Versicherungsfälle Kritik an klassische Versicherungen Kosten durch Cyber-Risiken und was neuartige Cyber-Risk- Versicherungen absichern können 16:50-17:10 Recent developments in the online threat landscape Gerhard Giese, Solutions Engineer, Akamai Technologies The has been a rapid increase in number and intensity of DDoS attacks this year While the largest known DDoS attack in 2013 was at a rate of around 100Gbit/s, those measure by Akamai in July already clearly exceeded the 300Gbit/s threshold DDoS attacks constitute an imminent threat not the least as an diversionary tactic in data espionage

5 This presentation will give an overview of the latest figures for a better predictability of the threat landscape and improved arrangements for preventitive systems 17:10-17:30 Executive Panel Discussion 17:30-17:30 Conference close