Event Details:

Date: 11 July 2024

Location: Thrive – 50 Pall Mall, St. James’s, City of Westminster, London, SW1Y 5JH, United Kingdom Google Map

Event Schedule:

• 6:00 PM – ISC2 London Chapter – Welcome Introduction
• 6:30 PM – Phoenix Security

  • Topic: Surfacing Product Security – One Surface to Rule Them All

• 7:45 PM – Networking
• 9:00 PM – End of Event

Talk Description:

The landscape of application security has evolved dramatically since 2015. With the advent of cloud, containerization, and rapid development cycles, security challenges have become more complex. This talk by Phoenix Security will delve into how modern development teams can support developers in this intricate environment.

Key Questions Addressed:

• What constitutes an asset in today’s dynamic landscape?
• How are assets interconnected?
• What are the concepts of reachability and exploitability, and how do they impact vulnerability management?

Highlights:

The session will present a comprehensive solution that has enabled tech and fintech startups to prioritize vulnerabilities effectively, providing context and measuring progress. Attendees will gain insights into exploitable, fixable vulnerabilities through data-driven scenarios.

Explore More:

• Exploitability Data Visualization
• CISA KEV Visualization

Target Audience:

• Application Security Professionals
• Vulnerability Management Experts
• Heads of Application Security
• Product Security Managers
• Security Engineers
• CISOs
• GRC Professionals

Takeaways:

1. Implementing DevSecOps and Scanning:

   • Learn how to integrate security into the DevOps pipeline effectively.

2. Product Security vs. Application Security:

   • Understand the differences and intersections between these two critical areas.

3. Metrics for an Application Security Program:

   • Identify and leverage key metrics to measure the success of your security initiatives.

4. Creating a Security Narrative:

   • Develop compelling narratives around product security to engage management and business stakeholders.

5. Management Involvement:

   • Strategies to involve top management in the application security lifecycle.

6. Attribution Challenges:

   • Gain insights into the complexities of security attribution.

7. Reachability Analysis:

   • Understand how to conduct and leverage reachability analysis for better security outcomes.

8. Exploitation Insights:

   • Learn about exploitability, probability of exploitation, and contextual vulnerability management.

9. Threat Feed Validation and Automation:

   • Identify valid threat feeds and automate Cyber Threat Intelligence (CTI) processes for enhanced security.

Quiz and Raffle:

To make the event even more exciting, we will conclude with a quiz based on the presentation. Participants will have the chance to win fantastic prizes in our raffle, including:

• Chargers
• Noise-Cancelling Headphones
• Hoodies

Book Signing:

We are thrilled to announce that Francesco Cipollone will be present at the event and will bring 10 copies of his book, “Building Resilient Application Security.” He will be signing these books for the lucky attendees. Don’t miss this exclusive opportunity to get a signed copy from the author himself. For more information about the book, visit Building Resilient Application Security.

Download the Presentation:

For those who would like to review the material beforehand or after the event, the presentation is available for download: One Surface to Rule Them All – A Tale of the Evolution of Cyber Attack Surface.

Join us for an evening of insightful discussions, networking, and learning how to navigate the ever-evolving landscape of application security. Don’t miss out on the opportunity to win great prizes, meet industry experts, and get a signed book while enhancing your knowledge and professional network.

How Phoenix Security Can Help

Phoenix Security helps organizations identify and trace which systems have vulnerabilities, understanding the relation between code and cloud. One of the significant challenges in securing applications is knowing where and how frameworks like Struts are used. ASPM tools can scan the application portfolio to identify the vulnerability that matters and attribute to the right team, mapping out where it is deployed across the organization. This information is crucial for targeted security measures and efficient patch management. Phoenix Security’s robust Application Security Posture Management (ASPM) system is adept at managing and preempting the exploitation of vulnerabilities through its automated identification system. This system prioritises critical vulnerabilities, ensuring that teams can first address the most pressing threats and then optimise resource allocation and remediation efforts.