The Importance of the Community in Learning InfoSec – Tony “tjnull” Punturiero – BH21 #1
Tony "TJ Null" from Offensive Security will discuss the role of the community in learning infosec, particularly pentesting, and also in continuing education. Additionally, he will offer some practical tips on learning pentesting with help from the community.
This segment is sponsored by Offensive Security.
Visit https://securityweekly.com/offSec to learn more about them!
Tony Punturiero (aka @tjnull) to the OffSec is an experienced pentester and red teamer for a government contractor and is known for his great passion for educating and
mentoring others. TJ is also an Adjunct Professor for a Local Community
College teaching cybersecurity courses and coaches one of the top
Community College’s cyber team in the State of Maryland.
Shifting Left Probably Left You Vulnerable/Here’s How You Can Make it Right – Sonali Shah – BH21 #1
Shifting security left is good - but it’s an incomplete strategy that often leads to a false sense of security. In this segment, Sonali will discuss how organizations can reduce their risk of breach by embracing the modern AppSec techniques, that will allow development, operations and security teams to work together in order to efficiently and effectively secure all of their applications.
This segment is sponsored by Netsparker.
Visit https://securityweekly.com/netsparker to learn more about them! This segment is sponsored by Invicti. Visit https://securityweekly.com/invicti to learn more about them!
A seasoned business and product leader, Sonali Shah brings more than 20 years of B2B SaaS and cybersecurity sector experience, having led product management, marketing, and strategy teams at companies such as HUMAN (formerly White Ops), Veracode, BitSight, and VeriSign, among others. Skilled at leading teams with a proven track record in bringing innovative solutions to market, she will be building on Invicti’s long history of innovation, transforming the application security market, with its enterprise Netsparker and mid-market Acunetix solutions.
Rapid Data Analysis With Apache Drill – Charles Givre – BH21 #1
Data exploration is one of the most challenging areas for data scientists and analysts. Charles has been working on some new tooling which makes data exploration a lot simpler. He recently launched a startup called DataDistillr which encapsulates a lot of the open source work as well.
Charles Givre CISSP is CEO and co-founder of DataDistillr.
A Global Assessment of Legalized Government Access to Data – Andrea Little Limbago – BH21 #1
There has been a growing interest in exploring if and where private sector companies are obliged to turn over data to a foreign government in exchange for market access. My Black Hat presentation introduces a new global index of countries based on government-mandated data access requirements and why this should be factored into growing global assessments of cyber risk.
Dr. Andrea Little Limbago is a computational social scientist specializing in the intersection of technology, national security, and cybersecurity. As the Vice President of Research and Analysis at Interos, Andrea leads the company’s research and analytic work modeling global supply chain risk, with a focus on globalization, cybersecurity, and geopolitics. She previously was the Chief Social Scientist at Virtru and Endgame, a technical lead in the Department of Defense, and taught in academia.
What Even Is Black Hat in 2021? – BH21 #1
A boots on the ground look at hacker summer camp after a tumultuous year, amid a pandemic that's encouraged a whole bunch of the regulars to stay home. What is Black Hat right now?
Joe will offer a preview of the rest of Las Vegas conference week, including looks at emerging research released on day one of Black Hat, including GPT influence campaigns, vulnerabilities in pneumatic tube systems that keep hospitals operational and TCP/IP stacks, and policy issues being addressed throughout the week.
Joe is a senior reporter at SC Weekly, focused on policy issues. He previously covered cybersecurity for Axios, The Hill and the Christian Science Monitor’s short-lived Passcode website.
