RVAsec is pleased to announce Assura as a Gold level sponsor for RVAsec 10!
Everything we do at Assura is designed for you to win against hackers and make you look like a superhero — to your boss, your stakeholders, and your customers. Whether your a cyber security novice or have been in the fight as long as we have, Assura has a service that’s right for you.
Twitter @Assura_Inc
The conference is right around the corner, and the MetaCTF (https://metactf.com/) team is hard at work preparing for this year’s Capture the Flag competition!
In keeping with the format of the past several years, we’ll be providing a practice environment on Day 1 of the conference to help participants prepare for the competition, find teams, and get familiar with the platform. If you’ve never participated in a CTF before, this is a perfect opportunity to get started!
The actual competition will take place on Day 2. There will be plenty of challenges for participants at all skill levels, so whether you’re a seasoned CTF player or a beginner, there will be something for you! Among others, challenge categories will include web exploitation, reverse engineering, OSINT, cryptography, forensics, and binary exploitation.
You’ll need a laptop to participate. Teams can have up to 4 people, or you may compete as an individual.
For those who like to come prepared, we suggest that you have a VM or two ready. You can download Kali Linux here (https://www.kali.org/
The MetaCTF team has been involved with the RVAsec CTF since 2016. If you’re interested in helping out with the CTF or have any questions, please reach out to roman[at]metactf.com
We are still looking for a sponsor for the CTF. Please consider supporting the conference and help us provide a great experience and amazing prizes!
Richard Thayer has been in IT for over 35 years. From his early beginnings of working on IBM’s 8086XT system(s), to designing robust security architectures for Fortune 50 companies; Mr. Thayer has consulted for vertical markets within Finance, Energy, Manufacturing, Retail, Insurance, and DoD & Civilian Government.
Three Worlds of Application / Cloud Security
Application / Cloud security goes hand in hand in our ever-changing IT environments. With the cloud actually “being” an application, we need to look at three areas of Application Security that encompass what goes into the cloud, the cloud itself, and how to secure its communications and workloads.
This discussion will start to the extreme “far left” in the security lifecycle, all the way to the developer’s keyboards. Then we will explore the DevSecOps security process, based on the “Defense in Depth” theory of security. Then finally we will address the workloads in the cloud, with some of the public cloud’s native functionality to protect itself, and how we can use additional toolsets to enhance them.
Companies need to identify not only the tools, but when to use them, and how to automate them.
Come see Richard at RVAsec! Register now.
RVAsec is pleased to announce AIS Network (AISN) as the official Wi-Fi sponsor of RVAsec 10!
AISN operationalizes your IT strategy. Solving complex IT challenges and managing digital risk to help clients thrive in an unpredictable world has been our core business for nearly 29 years. As the trusted and reliable partner of Forbes- and Fortune-ranked global corporations, government agencies, the Commonwealth of Virginia and other large enterprises, we drive exceptional value through our deep knowledge of data protection, compliance, governance and internal auditing procedures and controls.
Our unmatched customer experience is rooted in decades of expertise engaging with clients to deliver these solutions in addition to multi-cloud managed services for the world’s leading platforms, data visualization and analytics, high security hosting and consultative reviews.
Twitter @AIS_Network
John Behen is the Vulnerability Management Lead for Newport News Shipbuilding, in Newport News, VA. He has been an IT professional for 25 years at a diverse range of companies including Newport News Shipbuilding, The Martin Agency and Procter & Gamble. Outside of Information Security, John enjoys spending time with his family and competitive offshore yacht racing.
5.4 Million Vulnerabilities and Counting…
More and more, Vulnerability Management is becoming a central function in an organization’s defensive posture. Along with that realization, companies are discovering that there is no central framework for implementing a Vulnerability Management program. Facing millions of vulnerabilities, we implemented a prototype vulnerability management framework that can be applied to any organization, regardless of size. This presentation will take attendees through the six core Vulnerability Management domains, with tips on how this framework can be applied to other organizations.
Come see John at RVAsec! Register now.
RVAsec is pleased to announce Armis as the official Wi-Fi sponsor of RVAsec 10!
Know your devices better than ever before. Powered by the world’s largest device knowledgebase, you’ll get granular, industry-specific device details and behavioral insights in real-time to trigger faster, more effective detection and response.
Twitter @ArmisSecurity
The RVAsec 10 after party, brought to you by Risk Based Security and GuidePoint Security, will be at in the main Omni Ballroom on Thursday, November 4th, right after the conference ends!
Monkey Fist has been amazing audiences in the Central Virginia area since 2006 with a high-energy rock show that promises stellar musicianship and vocals, and a wide range of musical selections: from 80’s anthems to today’s new rock and everything in between.
This is an exclusive event, so you must be registered to attend or you will not be allowed entrance–no exceptions!
Important Notes:
Even if you have a ticket for RVAsec and said that you wanted to attend during the signup process, you MUST now registered for the party!
If you haven’t bought a ticket for the RVAsec conference yet, now is the time…. click this link, you know you want to!
Or if you know better, don’t click that link, copy and paste this (https://www.eventbrite.com/e/rvasec-2021-security-conference-tickets-86646133919) in and purchase that ticket!
Karl is a business technologist through experience and a private pilot by fascination. While spending most work days in “the Cloud”, weekends are often spent flying below the cloud deck.
Network Assessments: Cybersecurity, Quackery and Fraud
Network assessments are valuable tools to provide insight into infrastructure. It is no surprise they are used to close 7 out of 10 new business opportunities for managed service providers. Their benefit to business is often an illusion. This talk covers the basics of assessments, how they are misused, and what companies of all sizes should be doing instead.
Come see Karl at RVAsec! Register now.
RVAsec is pleased to announce A10 Networks as a Silver sponsor for RVAsec 10!
Deliver business-critical applications that are secure, available, and efficient for multi-cloud transformation and 5G readiness. A10 Networks’ portfolio of secure application services solutions are engineered to accelerate and secure the most important enterprise and service providers networks in the world.
Twitter @A10Networks
Caleb Mattingly is the CEO and founder of Secure Cloud Innovations, a cybersecurity consulting firm. Prior to starting SCI, Caleb worked in defense contracting supporting the Army, Navy, Air Force, and DISA. Caleb’s highest level of education is a MS in Cybersecurity from Liberty University.
Bake Security Into Your Infrastructure-as-Code
Baking takes time, dedication, and effort throughout the entire process. If you leave an ingredient or step out, you risk ruining the entire cake. Infrastructure-as-Code (IaC) is surprisingly similar. When you leave security out of your IaC process, you risk ruining what you worked so hard to create. In this talk we’ll dive into some best practice options for securing your IaC and explain the risks when you don’t.
Come see Caleb at RVAsec! Register now.
