RSAC Conference 2021
| title | author | length |
|---|---|---|
| SolarWinds: What Really Happened? | Laura Koetzle, Sudhakar Ramakrishna | 23m |
A software build is trojaned with the Sunburst backdoor, attackers doing reconnaissance as early as January 2019 and remaining undetected until December 2020… | ||
| Cybersecurity as a National Imperative | Anne Neuberger | 15m |
Administration frames cybersecurity around lessons from SolarWinds and Microsoft Exchange breaches, cites $13 million per breach and cybercrime costing ~1% of… | ||
| The Five Most Dangerous New Attack Techniques | Heather Mahalik, Katie Nickels, Alan Paller, Ed Skoudis, Johannes Ullrich | 48m |
Yearly winners: software supply chain compromises (SolarWinds backdoor infecting tens of thousands, Dec 2020) and open-source attacks like dependency confusion… | ||
| The Coming AI Hackers | Bruce Schneier | 24m |
AIs already find unexpected exploits in code and in rule systems and will scale that to tax, finance, and politics, discovering loopholes at computer speed and… | ||
| Cybersecurity for an Inclusive Future | Chuck Robbins | 11m |
Argues that organizations must adopt end-to-end security and zero trust as the threat surface expands—cites 3,500 security vendors, 2.8 million active cyber… | ||
| A Resilient Journey | Rohit Ghai | 17m |
Lists concrete failures and wins from 2020 — a 2.3 Tbps DDoS and a supply‑chain breach impacting at least 18,000 organizations vs Netflix’s <30s weekly… | ||
| The Internet is Small: Own Your Attack Surface Before Somebody Else | Tim Junio | 15m |
Research shows internet-wide scans drop from ~weeks to 45 minutes in 2013 and to minutes today, letting attackers find targets almost instantly after exploit… | ||
| Safeguarding Privacy with Purpose and Passion | Vasu Jakkal | 13m |
Digital transformation drives over 300% increase in remote/hybrid work and generates more sensitive data while YouGov finds 90% concerned about sharing… | ||
| It’s Time for Data Contact Tracing | Doug Merritt | 14m |
Argues that Data Contact Tracing—correlating every access across VPNs, SSO, wireless, endpoints and cloud—lets teams shrink dwell time and prioritize… | ||
| Five Most Dangerous New Attack Techniques | Alan Paller, Ed Skoudis, Michael Murrill, Johannes Ullrich, Katie Moussouris | 02m |
Each year at RSA Conference, SANS provides the authoritative briefing on the most dangerous new attack techniques in use today, what's coming next, and what… | ||
| The Cryptographers' Panel | Ross Anderson, Zulfikar Ramzan, Ron Rivest, Adi Shamir, Carmela Troncoso, Whitfield Diffie | 44m |
Panel covers NFTs (analogy to a token pointing at a picture, plan to mint an MIT report page as an NFT for charity), a high-profile claim of a new… | ||
| Telling Hard Truths to Impact Change in Cybersecurity | Jimmy Sanders, Angela Weinman | 15m |
Claims three concrete hard truths: the risk picture is out of focus (an MIT study finds less than half of top executives happy with resiliency execution)… | ||
| Bathtubs, Snakes and WannaCry, Oh My! Risk in the Physical and Cyber World | Steve Grobman | 14m |
Argues for measuring cyber risk with a micromort-style metric (one-in-a-million chance) and uses concrete comparisons — driving 230 miles = one micromort… | ||
| Securing Today’s Unbound Enterprise | Georgie Barrat, Manny Rivelo | 15m |
Claims the industry is shifting to an unbound enterprise model where applications and users are everywhere, backed by concrete numbers: 46,000 phishing sites… | ||
| Hacking Exposed: Next-Generation Tactics, Techniques, and Procedures | Michael Sentonas | 23m |
Demonstrates harvesting an ADFS private certificate, forging SAML tokens to bypass MFA and access Azure/Office 365, and then using cloud contributor rights to… | ||
| The Cryptographers’ Panel | Whitfield Diffie | 02m |
Each year the founders and leaders of cryptography take to the RSA Conference keynote stage to debate and discuss the most pressing issues facing the… | ||
| The Invisible War to Hijack Minds, Distort the Truth, and Impact Elections | Theresa Payton | 29m |
Presentation exposes concrete claims: coordinated misinformation aims to sway elections and vaccine uptake, operators use a gaming PC plus NodeXL, CrowdTangle… | ||
| Cyberspace Solarium Commission – Next Steps | Mike Gallagher, Jim Langevin | 28m |
More than two dozen Solarium recommendations become statute via last year’s NDAA, with 27 recommendations into law including a joint Cyber Planning Office and… | ||
| The Hugh Thompson Show: Backyard Edition | Hugh Thompson, Steve Wozniak | 11m |
At a last‑minute CES push Apple needs a disk demo; an engineer reverse‑engineers a 5" Shugart drive and builds a floppy disk controller out of a state machine… | ||
| Reshaping Security to Power Business Growth | Mauricio Guerra, Mary O’Brien | 15m |
Dow Chemical reports moving from perimeter security to a zero trust network architecture across 109 sites across 31 countries supporting 36,000 employees, with… | ||
| Global Threat Brief: Hacks and Adversaries Unveiled | Dmitri Alperovitch, Sandra Joyce | 25m |
Claims that SVR used a supply‑chain Trojan with a kill switch in SUNBURST that Russia flipped to exit 99% of victims, and that HAFNIUM left web shells with… | ||
| What (Actually, Measurably) Makes a Security Program More Successful? | Wade Baker, Wendy Nather | 26m |
Survey of 4,800 respondents (analyzed down to ~150 qualified responses) uses multivariate statistics to link 25 practices to 11 measurable outcomes. Top… | ||
| Spanning the Globe: The State of the Industry from the People Who Run It | Marene Allison, Reem F. Al-Shammari, Darren Kane, Lakshmi Hanspal, Florence Mottay, Hugh Thompson, Phil Venables | 56m |
Retail and healthcare CISOs report concrete outcomes: 45,000 hires onboarded remotely with morning vitamin shots team check‑ins, vaccine developers see a 30%… | ||
| Spanning the Globe: The State of the Industry from the People Who Run It | Marene Allison | 02m |
The job of a CISO has always been challenging and varied, but the last year has been a stress test above all others. Global CISOs share their insights and… | ||
| nothing matches | ||