James A. Marsteller
•Download as PPT, PDF•
2 likes•223 views
The document summarizes the work of the TeraGrid Security Working Group, including developing security policies, coordinating incident response, and current/future projects. Key points include: - The WG coordinates secure and rapid response to security incidents across TeraGrid resource providers. - Incident response activities include weekly conference calls to share information, a 24/7 security hotline, and a standardized incident response playbook. - Current projects focus on risk assessments, science gateway security, user portal security, and integrating with external security groups. - Future work includes improving incident tracking, using science gateway attribute data to help with response, and preparing for the transition to Extreme Digital.
Report
Share
Report
Share
![Agenda ,[object Object],[object Object],[object Object],[object Object]](data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7)
Recommended
Security Automation Quick Wins - Siemplify Webinar
This document discusses security automation and provides examples of processes that can be automated. It notes that 96% of respondents have security orchestration projects underway to automate manual tasks. The top areas ripe for automation include data collection/enrichment, triage of low fidelity alerts, and establishing consistent processes. The document then provides examples of automation workflows that can be used for common security issues like phishing, malware, DLP, and account misuse. These examples outline steps that can be automated, like data gathering, analysis, response, and feedback.
Big Data Analytics to Enhance Security คุณอนพัทย์ พิพัฒน์กิติบดี Technical Ma...
This document discusses using big data analytics to enhance security. It begins by defining big data analytics and describing security trends like the evolution from intrusion detection systems to security information and event management (SIEM) to next-generation SIEM using big data analytics. An example of an advanced persistent threat is provided. The document then discusses integrating security analytics with open source tools like SQRRL and Prelert. Finally, it covers how to apply these concepts by determining what security-related data can be collected and two options for implementing big data analytics in a security program.
Fluency - Next Generation Incident Response Utilizing Big Data Analytics Over...
Fluency’s vision empowers decisions through a holistic view of the network, fusing the ability to monitor traffic with SIEM-like capability. Fluency provides clarity & measurable value by leveraging Big Data & Packet Monitoring to provide more information, not less; additionally Fluency is open & integrates with existing deployed security solutions protecting investments made while providing measurable, complementary value & an extremely quick ROI from the day implemented.
****Fluency In The Press:
- RSA Selected as 1 of 9 Most Innovative Security Products of 2015 (Only Breach Offering Selected) - 04/15
- CRN Selected #6 of the 10 Coolest Security Startups of 2015 - 07/15
- CRN Selected as 1 of the Top 25 Disrupters (Across all IT Disciplines) of 2015 - 08/15
Telesoft Cyber Threat Hunting Infographic
How to use threat hunting in your cyber security strategy. Discover the steps you need to take to mitigate the risk to your network security.
Leverage Big Data for Security Intelligence
In January IBM Security Systems has announced a new solution wherein it combines the security intelligence capabilities of QRadar SIEM and Big Data + analytics to
What's a MITRE with your Security?
From MITRE ATT&CKcon Power Hour November 2020
By Matt Snyder, Senior Threat Analytics Engineer, VMware
The market for Security products is flooded with vendors offering all sorts of solutions, and organizations are spending a record amount of money defending their environments. Nevertheless, an increasing number of breaches are reported each year, resulting in organizations spending millions of dollars to remediate them. The Security industry responds with more products, all offering to stop the next breach, and the cycle continues. In this presentation from the MITRE ATT&CKcon Power Hour session on November 12, 2020, Matt discusses what VMware is doing internally to address this fundamental flaw in the Security industry and how they are leveraging the MITRE ATT&CK framework to reshape how we think about security.
MITRE ATT&CKcon 2.0: Keynote Address - The Friends We Made Along the Way; Ton...
The document summarizes a presentation about using the MITRE ATT&CK framework to improve security operations. It discusses how ATT&CK provides a common language to understand adversary tactics, helps measure security performance and effectiveness, and can be used to plan detection capabilities, evaluate security products, and improve decision making. However, fully utilizing ATT&CK requires significant time and effort to implement and get organizational buy-in.
How is ai important to the future of cyber security
Today’s era is driven by technology in every aspect of our lives, so much that we’ve now increased our dependence on technology on a daily basis. With an increase in the dependency, we’re now very vulnerable and exposed to the intermittent threat posed as cyber-attacks. Cyber-attack threats have plagued businesses, corporates, governments, and institutions.
Recommended
Security Automation Quick Wins - Siemplify Webinar
This document discusses security automation and provides examples of processes that can be automated. It notes that 96% of respondents have security orchestration projects underway to automate manual tasks. The top areas ripe for automation include data collection/enrichment, triage of low fidelity alerts, and establishing consistent processes. The document then provides examples of automation workflows that can be used for common security issues like phishing, malware, DLP, and account misuse. These examples outline steps that can be automated, like data gathering, analysis, response, and feedback.
Big Data Analytics to Enhance Security คุณอนพัทย์ พิพัฒน์กิติบดี Technical Ma...
This document discusses using big data analytics to enhance security. It begins by defining big data analytics and describing security trends like the evolution from intrusion detection systems to security information and event management (SIEM) to next-generation SIEM using big data analytics. An example of an advanced persistent threat is provided. The document then discusses integrating security analytics with open source tools like SQRRL and Prelert. Finally, it covers how to apply these concepts by determining what security-related data can be collected and two options for implementing big data analytics in a security program.
Fluency - Next Generation Incident Response Utilizing Big Data Analytics Over...
Fluency’s vision empowers decisions through a holistic view of the network, fusing the ability to monitor traffic with SIEM-like capability. Fluency provides clarity & measurable value by leveraging Big Data & Packet Monitoring to provide more information, not less; additionally Fluency is open & integrates with existing deployed security solutions protecting investments made while providing measurable, complementary value & an extremely quick ROI from the day implemented.
****Fluency In The Press:
- RSA Selected as 1 of 9 Most Innovative Security Products of 2015 (Only Breach Offering Selected) - 04/15
- CRN Selected #6 of the 10 Coolest Security Startups of 2015 - 07/15
- CRN Selected as 1 of the Top 25 Disrupters (Across all IT Disciplines) of 2015 - 08/15
Telesoft Cyber Threat Hunting Infographic
How to use threat hunting in your cyber security strategy. Discover the steps you need to take to mitigate the risk to your network security.
Leverage Big Data for Security Intelligence
In January IBM Security Systems has announced a new solution wherein it combines the security intelligence capabilities of QRadar SIEM and Big Data + analytics to
What's a MITRE with your Security?
From MITRE ATT&CKcon Power Hour November 2020
By Matt Snyder, Senior Threat Analytics Engineer, VMware
The market for Security products is flooded with vendors offering all sorts of solutions, and organizations are spending a record amount of money defending their environments. Nevertheless, an increasing number of breaches are reported each year, resulting in organizations spending millions of dollars to remediate them. The Security industry responds with more products, all offering to stop the next breach, and the cycle continues. In this presentation from the MITRE ATT&CKcon Power Hour session on November 12, 2020, Matt discusses what VMware is doing internally to address this fundamental flaw in the Security industry and how they are leveraging the MITRE ATT&CK framework to reshape how we think about security.
MITRE ATT&CKcon 2.0: Keynote Address - The Friends We Made Along the Way; Ton...
The document summarizes a presentation about using the MITRE ATT&CK framework to improve security operations. It discusses how ATT&CK provides a common language to understand adversary tactics, helps measure security performance and effectiveness, and can be used to plan detection capabilities, evaluate security products, and improve decision making. However, fully utilizing ATT&CK requires significant time and effort to implement and get organizational buy-in.
How is ai important to the future of cyber security
Today’s era is driven by technology in every aspect of our lives, so much that we’ve now increased our dependence on technology on a daily basis. With an increase in the dependency, we’re now very vulnerable and exposed to the intermittent threat posed as cyber-attacks. Cyber-attack threats have plagued businesses, corporates, governments, and institutions.
MITRE ATT&CKcon 2018: Decision Analysis Applications in Threat Analysis Frame...
In the modern age, all organizations face threats from various types of cyber attacks. Although great strides have been made to consider human factors in cybersecurity and to become more proactive in threat analysis, security is still generally a reactive, technical field. The research presented in this talk seeks to develop a framework which adapts the existing MITRE ATT&CK framework to look at attacks in a less linear, more human-centered framework that focuses on the capabilities and decisions of the threat actor.
The framework approaches threat analysis from a binary assessment of success vs. failure in order to see the entire attack and consider the potential for a number of methods and attempts made in a single attack. A detailed methodology and sample charts are included for a reference and a starting point in developing one’s own personalized charts, and recommendations are made for ways to integrate this methodology into the risk management process.
AI & ML in Cyber Security - Why Algorithms are Dangerous
This document discusses the dangers of using algorithms in cybersecurity. It makes three key points:
1) Algorithms make assumptions about the data that may not always be valid, and they do not take important domain knowledge into account.
2) Throwing algorithms at security problems without proper understanding of the data and algorithms can be dangerous and lead to failures.
3) A Bayesian belief network approach that incorporates domain expertise may be better suited for security tasks than purely algorithmic approaches. It allows modeling relationships between different factors and computing probabilities.
Mitre getting-started-with-attack-october-2019
This document provides guidance on getting started with using the MITRE ATT&CK framework for threat intelligence, detection and analytics, adversary emulation and red teaming, and assessments and engineering. It is broken into chapters that each focus on one of these use cases and provide advice at three different levels - level 1 for those just starting out, level 2 for mid-level teams, and level 3 for more advanced teams. The chapter on detection and analytics discusses starting with understanding available data sources and search capabilities, collecting relevant data into a security information and event management system, and running example analytics created by others to detect adversary techniques.
Demystifying Security Analytics: Data, Methods, Use Cases
Many vendors sell “security analytics” tools. Also, some organizations built their own security analytics toolsets and capabilities using Big Data technologies and approaches. How do you find the right approach for your organization and benefit from this analytics boom? How to start your security analytics project and how to mature the capabilities?
(Source: RSA USA 2016-San Francisco)
User Behavior Analytics And The Benefits To Companies
User behavior analytics and user activity monitoring can help organizations detect insider threats by analyzing patterns of user behavior and flagging anomalies. These tools collect user activity log data to monitor interactions with sensitive data and systems. They use algorithms and statistical analysis to identify meaningful anomalies that could indicate potential threats like data exfiltration. This provides a rich data source for investigations and helps focus an organization's security efforts on detecting insider threats, as internal actors often pose more risk than external ones.
The Incident Response Playbook for Android and iOS
What is your mobile device incident response plan? If you cannot answer that question, you should attend this session. The session will cover the challenges in mobile, how and why it is different from traditional incident response, and the building blocks you can use to craft your own mobile incident response plan.
(Source: RSA USA 2016-San Francisco)
UserEntityandBehaviorAnalyticsFriedman
The document discusses user and entity behavior analytics (UEBA), which analyzes user and system behavior to detect threats and anomalies. UEBA goes beyond traditional security information and event management (SIEM) tools by using machine learning instead of rule-based detection. UEBA vendors study behaviors at the user, application, device and server levels to create profiles and detect deviations that could indicate insider threats, data exfiltration or compromised accounts. The UEBA market is growing as organizations increasingly need to detect complex, unknown threats like insider threats. UEBA has limitations but can be a valuable part of a security analytics platform when integrated with other tools.
Cloudbrew 2019 - Threat hunting with the Microsoft Cloud
With the release of Azure Sentinel, Microsoft has shifted some features from Azure Security Center to their new threat hunting solution. But how do all the security tools Microsoft offers nowadays integrate with each other? How can you find a way through this security jungle? And how do you make sure to have the right tools in place when it comes to protecting your IT environments and hunting threats?
Join cloud security expert and Microsoft MVP Tom Janetscheck for this demo-rich session to get all these questions answered and to learn how to protect your resources easily and efficiently.
Transforming Adversary Emulation Into a Data Analysis Question
From MITRE ATT&CKcon Power Hour October 2020
By Matan Hart, Co-Founder & CEO Cymptom @machosec
Adversary emulation is commonly used to validate security controls and is considered one of the most popular use-cases for the ATT&CK framework. However, emulating adversary TTPs on production environments is often very limited in testing scope and frequency, and such practice may cause unwanted business disruption. In this talk from the MITRE ATT&CKcon Power Hour session on October 9, 2020, Hart presents a different approach to testing controls against ATT&CK. He demonstrates how it is possible to provide data-based methods to evaluate the exploitability of ATT&CK techniques by gathering information from the network, endpoint, and services; this unique approach does not emulate any sort of malicious action, thus reducing the potential of causing business disruption to the minimum. Hart also outlines a new open-source guideline based on ATT&CK mitigations, that security teams can use to assess their security posture non-intrusively and at scale.
Full time PII data protection: How Randstad uses Elastic Security to keep cli...
See how Randstad Netherlands uses all the features of the Elastic Stack to monitor their environments and put their analysts first. Randstad NL, an Elastic user since version 1.7, combines events from applications, systems and third party tooling into their Elastic Stack to detect and mitigate threats at scale — all from within Elastic Security.
How Machine Learning & AI Will Improve Cyber Security
Machine Learning (ML) and Artificial Intelligence (AI) have been proclaimed as perhaps the next great leap in human quality of life, as well as a potential reason for our extinction. Somewhere in between lies how ML & AI can potentially improve our Cyber Security efforts. But are ML & AI a true panacea or merely the next shiny trinket for the cyber industry to fixate on? In this webinar we will explore:
How ML & AI are currently being utilized in cyber security efforts.
What is working and what has not worked
What is on the both the short term and near-term horizon for ML &AI
Practical steps you can take now to begin leveraging these technologies to tangibly improve your cyber security posture
Join our panel of industry experts as we explore this brave new frontier in cyber security with a candid look cutting through the hype.
Operational Security Intelligence
You have spent a ton of money on your security infrastructure. But how do you string all those things together so you can achieve your goals of reducing time to response, and early detection and prevention of events. See a live demonstration that will showcase how to operationalize those resources so that your organization can reap the maximum benefit.
Audit logs for Security and Compliance
Audit logs and trails provide important security and compliance information about systems and networks. They can be used to detect threats, investigate incidents, and ensure regulatory compliance. However, simply collecting logs is not enough - they must be consistently analyzed through a log review program to extract meaningful insights and optimize security decisions. Common mistakes include not actually reviewing logs, storing logs for too short a time period, and not normalizing logs to facilitate analysis across different sources.
MassTLC Opening Slides and Simulation Session
The MassTLC Security Conference featured a simulated data breach of WindResources, a wind turbine manufacturer. The breach began when a sales director's computer was infected with malware from a phishing email. An investigation found other infected computers and logs showing customer credentials being accessed from Russia. The breach escalated as stolen data was found online and a customer discovered their personal details exposed. The simulation panel discussed lessons around having an incident response plan, engaging legal and law enforcement, communicating about the breach, and practicing incident response.
PEARC17: Workshop on Trustworthy Scientific Cyberinfrastructure. Cybersecurit...
This document summarizes an NSF-funded project aimed at accelerating the transition to practice (TTP) of cybersecurity research. It discusses three main areas of focus: Internet of Things, distributed big data and analytics, and end-to-end trust and security. Interviews with cybersecurity researchers and practitioners revealed key needs to enable TTP, including funding, early user feedback, and opportunities for pilot deployments. The project plans to address these needs through matchmaking events connecting researchers with potential user partners to encourage pilots and provide feedback to inform future research.
Cyber threat intelligence ppt
Cyber threat intelligence (CTI) involves collecting, evaluating, and analyzing cyber threat information using expertise and all-source information to provide insight and understanding of complex cyber situations. CTI can include tactical, operational, and strategic intelligence about security events, indicators of compromise, malware behavior, threat actors, and mapping online threats to geopolitical events over short, medium, and long timeframes. Implementing CTI enables organizations to prepare for and respond to existing and unknown threats through evidence-based knowledge and actionable advice beyond just reactive defense measures.
Lecture #4: Access Control Policies
Access Control Policies
Module I of Advanced System Security and Digital Forensics.Access Control List
Enterprise Security featuring UBA
This document provides an overview of Splunk Enterprise Security and User Behavior Analytics (UBA). It discusses the evolving threat landscape and how Splunk has been recognized as a leader in security information and event management. The document outlines Splunk's analytics-driven security capabilities for threat detection, investigation, and response. It also describes new features for reducing storage costs, enhancing investigations, extending analytics with automation, and improving threat detection with UBA. The document promotes a quick UBA demo and mentions happy hour.
Lecture #2: Defence Strategies and Techniques (Security): Part I
Defence Strategies and Techniques: Part I
Module I of Advanced System Security and Digital Forensics.
user centric machine learning framework for cyber security operations center
In order to ensure a company's Internet security, SIEM (Security Information and Event Management) system is in place to simplify the various preventive technologies and flag alerts for security events. Inspectors (SOC) investigate warnings to determine if this is true or not. However, the number of warnings in general is wrong with the majority and is more than the ability of SCO to handle all awareness. Because of this, malicious possibility. Attacks and compromised hosts may be wrong. Machine learning is a possible approach to improving the wrong positive rate and improving the productivity of SOC analysts. In this article, we create a user-centric engineer learning framework for the Internet Safety Functional Center in the real organizational context. We discuss regular data sources in SOC, their work flow, and how to process this data and create an effective machine learning system. This article is aimed at two groups of readers. The first group is intelligent researchers who have no knowledge of data scientists or computer safety fields but who engineer should develop machine learning systems for machine safety. The second groups of visitors are Internet security practitioners that have deep knowledge and expertise in Cyber Security, but do Machine learning experiences do not exist and I'd like to create one by themselves. At the end of the paper, we use the account as an example to demonstrate full steps from data collection, label creation, feature engineering, machine learning algorithm and sample performance evaluations using the computer built in the SOC production of Seyondike.
NGOs Field Security Management Approach & Systems 2.pptx
The document provides information on security risk management and security risk assessments for NGOs operating in unstable environments. It defines key terms like strategy, planning, tactics, security risk management, and security risk assessment. It also discusses developing a security risk assessment, identifying threats and vulnerabilities, and using risk assessments to effectively manage security risks. The document provides examples of how to classify risk levels in different areas and outlines contingency plans, relocation thresholds, and evacuation procedures.
More Related Content
What's hot
MITRE ATT&CKcon 2018: Decision Analysis Applications in Threat Analysis Frame...
In the modern age, all organizations face threats from various types of cyber attacks. Although great strides have been made to consider human factors in cybersecurity and to become more proactive in threat analysis, security is still generally a reactive, technical field. The research presented in this talk seeks to develop a framework which adapts the existing MITRE ATT&CK framework to look at attacks in a less linear, more human-centered framework that focuses on the capabilities and decisions of the threat actor.
The framework approaches threat analysis from a binary assessment of success vs. failure in order to see the entire attack and consider the potential for a number of methods and attempts made in a single attack. A detailed methodology and sample charts are included for a reference and a starting point in developing one’s own personalized charts, and recommendations are made for ways to integrate this methodology into the risk management process.
AI & ML in Cyber Security - Why Algorithms are Dangerous
This document discusses the dangers of using algorithms in cybersecurity. It makes three key points:
1) Algorithms make assumptions about the data that may not always be valid, and they do not take important domain knowledge into account.
2) Throwing algorithms at security problems without proper understanding of the data and algorithms can be dangerous and lead to failures.
3) A Bayesian belief network approach that incorporates domain expertise may be better suited for security tasks than purely algorithmic approaches. It allows modeling relationships between different factors and computing probabilities.
Mitre getting-started-with-attack-october-2019
This document provides guidance on getting started with using the MITRE ATT&CK framework for threat intelligence, detection and analytics, adversary emulation and red teaming, and assessments and engineering. It is broken into chapters that each focus on one of these use cases and provide advice at three different levels - level 1 for those just starting out, level 2 for mid-level teams, and level 3 for more advanced teams. The chapter on detection and analytics discusses starting with understanding available data sources and search capabilities, collecting relevant data into a security information and event management system, and running example analytics created by others to detect adversary techniques.
Demystifying Security Analytics: Data, Methods, Use Cases
Many vendors sell “security analytics” tools. Also, some organizations built their own security analytics toolsets and capabilities using Big Data technologies and approaches. How do you find the right approach for your organization and benefit from this analytics boom? How to start your security analytics project and how to mature the capabilities?
(Source: RSA USA 2016-San Francisco)
User Behavior Analytics And The Benefits To Companies
User behavior analytics and user activity monitoring can help organizations detect insider threats by analyzing patterns of user behavior and flagging anomalies. These tools collect user activity log data to monitor interactions with sensitive data and systems. They use algorithms and statistical analysis to identify meaningful anomalies that could indicate potential threats like data exfiltration. This provides a rich data source for investigations and helps focus an organization's security efforts on detecting insider threats, as internal actors often pose more risk than external ones.
The Incident Response Playbook for Android and iOS
What is your mobile device incident response plan? If you cannot answer that question, you should attend this session. The session will cover the challenges in mobile, how and why it is different from traditional incident response, and the building blocks you can use to craft your own mobile incident response plan.
(Source: RSA USA 2016-San Francisco)
UserEntityandBehaviorAnalyticsFriedman
The document discusses user and entity behavior analytics (UEBA), which analyzes user and system behavior to detect threats and anomalies. UEBA goes beyond traditional security information and event management (SIEM) tools by using machine learning instead of rule-based detection. UEBA vendors study behaviors at the user, application, device and server levels to create profiles and detect deviations that could indicate insider threats, data exfiltration or compromised accounts. The UEBA market is growing as organizations increasingly need to detect complex, unknown threats like insider threats. UEBA has limitations but can be a valuable part of a security analytics platform when integrated with other tools.
Cloudbrew 2019 - Threat hunting with the Microsoft Cloud
With the release of Azure Sentinel, Microsoft has shifted some features from Azure Security Center to their new threat hunting solution. But how do all the security tools Microsoft offers nowadays integrate with each other? How can you find a way through this security jungle? And how do you make sure to have the right tools in place when it comes to protecting your IT environments and hunting threats?
Join cloud security expert and Microsoft MVP Tom Janetscheck for this demo-rich session to get all these questions answered and to learn how to protect your resources easily and efficiently.
Transforming Adversary Emulation Into a Data Analysis Question
From MITRE ATT&CKcon Power Hour October 2020
By Matan Hart, Co-Founder & CEO Cymptom @machosec
Adversary emulation is commonly used to validate security controls and is considered one of the most popular use-cases for the ATT&CK framework. However, emulating adversary TTPs on production environments is often very limited in testing scope and frequency, and such practice may cause unwanted business disruption. In this talk from the MITRE ATT&CKcon Power Hour session on October 9, 2020, Hart presents a different approach to testing controls against ATT&CK. He demonstrates how it is possible to provide data-based methods to evaluate the exploitability of ATT&CK techniques by gathering information from the network, endpoint, and services; this unique approach does not emulate any sort of malicious action, thus reducing the potential of causing business disruption to the minimum. Hart also outlines a new open-source guideline based on ATT&CK mitigations, that security teams can use to assess their security posture non-intrusively and at scale.
Full time PII data protection: How Randstad uses Elastic Security to keep cli...
See how Randstad Netherlands uses all the features of the Elastic Stack to monitor their environments and put their analysts first. Randstad NL, an Elastic user since version 1.7, combines events from applications, systems and third party tooling into their Elastic Stack to detect and mitigate threats at scale — all from within Elastic Security.
How Machine Learning & AI Will Improve Cyber Security
Machine Learning (ML) and Artificial Intelligence (AI) have been proclaimed as perhaps the next great leap in human quality of life, as well as a potential reason for our extinction. Somewhere in between lies how ML & AI can potentially improve our Cyber Security efforts. But are ML & AI a true panacea or merely the next shiny trinket for the cyber industry to fixate on? In this webinar we will explore:
How ML & AI are currently being utilized in cyber security efforts.
What is working and what has not worked
What is on the both the short term and near-term horizon for ML &AI
Practical steps you can take now to begin leveraging these technologies to tangibly improve your cyber security posture
Join our panel of industry experts as we explore this brave new frontier in cyber security with a candid look cutting through the hype.
Operational Security Intelligence
You have spent a ton of money on your security infrastructure. But how do you string all those things together so you can achieve your goals of reducing time to response, and early detection and prevention of events. See a live demonstration that will showcase how to operationalize those resources so that your organization can reap the maximum benefit.
Audit logs for Security and Compliance
Audit logs and trails provide important security and compliance information about systems and networks. They can be used to detect threats, investigate incidents, and ensure regulatory compliance. However, simply collecting logs is not enough - they must be consistently analyzed through a log review program to extract meaningful insights and optimize security decisions. Common mistakes include not actually reviewing logs, storing logs for too short a time period, and not normalizing logs to facilitate analysis across different sources.
MassTLC Opening Slides and Simulation Session
The MassTLC Security Conference featured a simulated data breach of WindResources, a wind turbine manufacturer. The breach began when a sales director's computer was infected with malware from a phishing email. An investigation found other infected computers and logs showing customer credentials being accessed from Russia. The breach escalated as stolen data was found online and a customer discovered their personal details exposed. The simulation panel discussed lessons around having an incident response plan, engaging legal and law enforcement, communicating about the breach, and practicing incident response.
PEARC17: Workshop on Trustworthy Scientific Cyberinfrastructure. Cybersecurit...
This document summarizes an NSF-funded project aimed at accelerating the transition to practice (TTP) of cybersecurity research. It discusses three main areas of focus: Internet of Things, distributed big data and analytics, and end-to-end trust and security. Interviews with cybersecurity researchers and practitioners revealed key needs to enable TTP, including funding, early user feedback, and opportunities for pilot deployments. The project plans to address these needs through matchmaking events connecting researchers with potential user partners to encourage pilots and provide feedback to inform future research.
Cyber threat intelligence ppt
Cyber threat intelligence (CTI) involves collecting, evaluating, and analyzing cyber threat information using expertise and all-source information to provide insight and understanding of complex cyber situations. CTI can include tactical, operational, and strategic intelligence about security events, indicators of compromise, malware behavior, threat actors, and mapping online threats to geopolitical events over short, medium, and long timeframes. Implementing CTI enables organizations to prepare for and respond to existing and unknown threats through evidence-based knowledge and actionable advice beyond just reactive defense measures.
Lecture #4: Access Control Policies
Access Control Policies
Module I of Advanced System Security and Digital Forensics.Access Control List
Enterprise Security featuring UBA
This document provides an overview of Splunk Enterprise Security and User Behavior Analytics (UBA). It discusses the evolving threat landscape and how Splunk has been recognized as a leader in security information and event management. The document outlines Splunk's analytics-driven security capabilities for threat detection, investigation, and response. It also describes new features for reducing storage costs, enhancing investigations, extending analytics with automation, and improving threat detection with UBA. The document promotes a quick UBA demo and mentions happy hour.
Lecture #2: Defence Strategies and Techniques (Security): Part I
Defence Strategies and Techniques: Part I
Module I of Advanced System Security and Digital Forensics.
user centric machine learning framework for cyber security operations center
In order to ensure a company's Internet security, SIEM (Security Information and Event Management) system is in place to simplify the various preventive technologies and flag alerts for security events. Inspectors (SOC) investigate warnings to determine if this is true or not. However, the number of warnings in general is wrong with the majority and is more than the ability of SCO to handle all awareness. Because of this, malicious possibility. Attacks and compromised hosts may be wrong. Machine learning is a possible approach to improving the wrong positive rate and improving the productivity of SOC analysts. In this article, we create a user-centric engineer learning framework for the Internet Safety Functional Center in the real organizational context. We discuss regular data sources in SOC, their work flow, and how to process this data and create an effective machine learning system. This article is aimed at two groups of readers. The first group is intelligent researchers who have no knowledge of data scientists or computer safety fields but who engineer should develop machine learning systems for machine safety. The second groups of visitors are Internet security practitioners that have deep knowledge and expertise in Cyber Security, but do Machine learning experiences do not exist and I'd like to create one by themselves. At the end of the paper, we use the account as an example to demonstrate full steps from data collection, label creation, feature engineering, machine learning algorithm and sample performance evaluations using the computer built in the SOC production of Seyondike.
What's hot (20)
MITRE ATT&CKcon 2018: Decision Analysis Applications in Threat Analysis Frame...
MITRE ATT&CKcon 2018: Decision Analysis Applications in Threat Analysis Frame...
AI & ML in Cyber Security - Why Algorithms are Dangerous
AI & ML in Cyber Security - Why Algorithms are Dangerous
Demystifying Security Analytics: Data, Methods, Use Cases
Demystifying Security Analytics: Data, Methods, Use Cases
User Behavior Analytics And The Benefits To Companies
User Behavior Analytics And The Benefits To Companies
The Incident Response Playbook for Android and iOS
The Incident Response Playbook for Android and iOS
Cloudbrew 2019 - Threat hunting with the Microsoft Cloud
Cloudbrew 2019 - Threat hunting with the Microsoft Cloud
Transforming Adversary Emulation Into a Data Analysis Question
Transforming Adversary Emulation Into a Data Analysis Question
Full time PII data protection: How Randstad uses Elastic Security to keep cli...
Full time PII data protection: How Randstad uses Elastic Security to keep cli...
How Machine Learning & AI Will Improve Cyber Security
How Machine Learning & AI Will Improve Cyber Security
PEARC17: Workshop on Trustworthy Scientific Cyberinfrastructure. Cybersecurit...
PEARC17: Workshop on Trustworthy Scientific Cyberinfrastructure. Cybersecurit...
Lecture #2: Defence Strategies and Techniques (Security): Part I
Lecture #2: Defence Strategies and Techniques (Security): Part I
user centric machine learning framework for cyber security operations center
user centric machine learning framework for cyber security operations center
Viewers also liked
NGOs Field Security Management Approach & Systems 2.pptx
The document provides information on security risk management and security risk assessments for NGOs operating in unstable environments. It defines key terms like strategy, planning, tactics, security risk management, and security risk assessment. It also discusses developing a security risk assessment, identifying threats and vulnerabilities, and using risk assessments to effectively manage security risks. The document provides examples of how to classify risk levels in different areas and outlines contingency plans, relocation thresholds, and evacuation procedures.
NGOs Field Security Management Approach & Systems
NGOs security management system implementation is facilitated by the NGOs security management framework.
The Security Risk Management model
is the managerial tool of NGOs for the analysis of safety and security hazards that may affect its personnel, assets and operations.
The definition of Security Risk Management is:
SRM is an analytical procedure that assists in assessing the operational context of the NGO; and identifies the risk level of undesirable events that may affect personnel, assets, and operations; providing guidance on the implementation of solutions in the form of specific mitigation strategies and measures with the aim of lowering the risk levels for the NGO by reducing the impact and likelihood of an undesirable event.
Security threats and countermeasures in daily life - Symantec
Security threats and countermeasures in daily life - Symantec. This walks you through various day-to-day information security threats one person undergoes on daily life and relevant counter-measures offered by Symantec. Find it useful, and shared it!
Security Training Incident Investigation And Report Writing.Ppt
The document provides guidance on preserving crime scenes and investigating security incidents. It outlines policies and procedures for responding officers to secure both the immediate crime scene as well as potential entry and exit points. Investigations should involve interviewing witnesses without leading questions to establish facts. Reports should be objective and based on facts rather than opinions.
Data identitas Siswa Baru lengkap sesuai dapodik
Formulir pelengkap Pendaftaran Peserta Didik Baru jenjang Dikdas yang disesuaikan sesuai format Aplikasi Dapodik
Viewers also liked (9)
NGOs Field Security Management Approach & Systems 2.pptx
NGOs Field Security Management Approach & Systems 2.pptx
Security threats and countermeasures in daily life - Symantec
Security threats and countermeasures in daily life - Symantec
Security Training Incident Investigation And Report Writing.Ppt
Security Training Incident Investigation And Report Writing.Ppt
Similar to James A. Marsteller
Data Connectors San Antonio Cybersecurity Conference 2018
This document discusses operationalizing big data security analytics. It provides lessons learned from case studies of implementing security analytics at various organizations. The key lessons are: 1) Security analytics should help analysts deal with fewer, higher-quality alerts rather than more alerts. 2) It is important to test the mathematical models on historical data to validate the analytics can surface useful threats. 3) Metrics must be defined to measure the impact and ensure the analytics are optimized over time for the organization's needs. The document advocates agreeing on use cases, evaluating results, assessing risk level, and ensuring feedback for continuous improvement.
What Every Organization Should Log And Monitor
My Old MISTI Presentation called "What Every Organization Should Log And Monitor", old but still very useful
Insider threat kill chain
Presentation about insider threat ways of working, their impact on organizations and how technical and human indicators can be monitored to detect and neutralize insider threats. Professionals working in security operations should monitor these indicators to create profile of possible insider going rogue.
Aujas incident management webinar deck 08162016
In this presentation we will look at the cause and effect of the problem, analyze preparedness and learn how you can better prepare, detect, respond and recover from cyber-attacks.
Operationalizing Big Data Security Analytics - IANS Forum Toronto Keynote
Presented by Stephan Jou, Interset CTO, at IANS Forum Toronto 2018, this presentation explores how companies can operationalize security analytics with Interset's threat detection platform, which distills billions of events into a handful of prioritized threat leads through unsupervised machine learning and an open source, big data architecture.
Logs for Information Assurance and Forensics @ USMA
This is my presentation on "Logs for Information Assurance and Forensics", which was given to 2 of the USMA @ West Point, NY classes in April 2006. It sure was fun! Now I know where all the smart college students are :-)
Cobit 2
The document discusses managing information security risks and risk management. It covers identifying valuable information assets, threats to those assets like identity theft and hacking, and vulnerabilities in existing safeguards. It also discusses how to assess security spending based on asset value and risk likelihood. The document recommends understanding risks, accepting or mitigating risks, and outlines how MPC Security Solutions can help with services like security assessments, policy reviews, and monitoring/auditing tools.
Main Menu
The document discusses managing information security risks and risk management. It covers identifying valuable information assets, threats to those assets like identity theft and hacking, and vulnerabilities in existing safeguards. It also discusses how to assess security spending based on asset value and risk likelihood. The document recommends understanding risks, accepting or mitigating risks, and outlines how MPC Security Solutions can help with services like security assessments, policy reviews, and monitoring/auditing tools.
[Webinar] Supercharging Security with Behavioral Analytics
In this presentation, special guest Joseph Blankenship, principal analyst at Forrester, joined Interset CTO Stephan Jou and Security Strategist Paul Reid for a discussion on how to practically and effectively boost the IQ of your security arsenal with behavioral analytics so you can find threats faster than ever.
Learn more at Interset.AI
Operationalizing Big Data Security Analytics - IANS Forum Dallas
This document discusses operationalizing big data security analytics. It provides lessons learned from case studies of using advanced analytics to detect security threats. The key lessons are: 1) Ensure the analytics math is tested using historical data, 2) Solutions should reduce alerts rather than generate more, 3) Systems should allow for automated responses to different risk levels, and 4) Metrics should be meaningful for measuring the analytics impact over time. The document recommends agreeing on use cases, evaluating results with and without analytics, assessing risk levels, and ensuring feedback and response integration. Overall it advocates testing analytics effectiveness and focusing on reducing security teams' workloads.
Risk Factory: How to Implement an Effective Incident Response Programme
The document outlines steps for establishing an effective incident response plan in 3 stages: preparation, response, and review. It recommends identifying stakeholders and their roles, crafting policies and procedures for responding to incidents, collecting evidence, and conducting training. Key elements include defining incident severity levels, outlining response procedures, documenting actions taken, and measuring outcomes to improve security. The goal is to limit damage from incidents, recover quickly, and prevent future issues.
The LEAD Portal: An OGCE based weather science gateway
The document summarizes the LEAD Portal, a weather science gateway built using open grid computing environments. It provides key statistics on usage, describes the architecture including integration with workflow engines and security systems, discusses challenges in development and production deployment, and outlines future work areas. The portal has supported over 10 participants running 279 workflows storing 2.6 TB of data across various resources like TeraGrid's Big Red cluster.
Towards a Digital teammate to support sensemaking in Cyber Security teams
1) The document discusses developing a digital teammate to support collaborative sensemaking in cyber security incident response teams.
2) It identifies challenges such as the large amounts of information analysts must process and the ad-hoc and time-constrained nature of their work.
3) The proposed digital teammate would provide tools to facilitate sensemaking, team and incident awareness, and connect different sites to potentially help teams handle incidents better and faster.
Database development and security certification and accreditation plan pitwg
Information Systems Development and Database Development Management Meeting Security legal security requirements
Information Leakage - A knowledge Based Approach
Illyas Kooliyankal CISCO -ADC Presentation at the CIO Event for more information click here http://bit.ly/oR262i
FIRST 2006 Full-day Tutorial on Logs for Incident Response
Outline:
Incident Response Process
Logs Overview
Logs Usage at Various Stages of the Response Process
How Log from Diverse Sources Help
Log Review, Monitoring and Investigative processes
Standards and Regulation Affecting Logs and Incident Response
Incident Response vs Forensics
Case Studies
Log Analysis Mistakes
Changing the Security Monitoring Status Quo
This solution overview discusses solving Security Information and Event Management (SIEM) challenges with RSA Security Analytics, which enables security analysts to be effective in protecting an organization’s digital assets and IT systems.
Activity Streaming as Information X-Docking
The document discusses activity streaming, which integrates information from various sources into a single stream in real-time. It draws an analogy between activity streaming and cross-docking in logistics. While cross-docking consolidates item flows and facilitates distribution, activity streaming faces challenges in determining information needs, tagging and filtering data from diverse sources, and integrating streams with user environments and roles. Six key challenges of activity streaming are identified: determining information needs, tagging data with metadata, filtering contextual delivery, heterogeneous receivers and senders, and integration with user work practices.
2° Ciclo Microsoft Fondazione CRUI 7° Seminario: Proteggersi dai Cyber Attack...
Oggi, il tema della sicurezza informatica si è spostato dal datacenter a livelli più alti. Gli attacchi e le minacce sono cresciuti notevolmente oltre ad essere più sofisticati.
Gli attackers risiedono all'interno di una rete una media di otto mesi prima di essere rilevati. La percentuale maggiore degli attacchi compromettono le credenziali utente e utlizzano strumenti legittimi piuttosto che malware, rendendo molto difficile la loro rilevazione.
In questo webinar conosceremo ATA (Advanced Threat Analytics) strumento che aiuta le aziende a tenere sotto controllo comportamenti anomali e non leciti all’interno della propria organizzazione li dove gli strumenti di sicurezza tradizionali offrono una protezione limitata contro questo tipo di attacchi.
Correlog Overview Presentation
The SIEM market grew 30% in 2008 and demand remains strong despite difficult economic conditions. However, many companies still struggle to realize benefits from their SIEM solutions. CorreLog provides a SIEM platform that uses real-time event correlation, high-speed indexing, and flexible reporting to help organizations address challenges like prioritizing threats, reducing false positives, and ensuring compliance. CorreLog has over 200 customers globally and its solution integrates with existing management tools while providing a single pane of glass for security visibility.
Similar to James A. Marsteller (20)
Data Connectors San Antonio Cybersecurity Conference 2018
Data Connectors San Antonio Cybersecurity Conference 2018
Operationalizing Big Data Security Analytics - IANS Forum Toronto Keynote
Operationalizing Big Data Security Analytics - IANS Forum Toronto Keynote
Logs for Information Assurance and Forensics @ USMA
Logs for Information Assurance and Forensics @ USMA
[Webinar] Supercharging Security with Behavioral Analytics
[Webinar] Supercharging Security with Behavioral Analytics
Operationalizing Big Data Security Analytics - IANS Forum Dallas
Operationalizing Big Data Security Analytics - IANS Forum Dallas
Risk Factory: How to Implement an Effective Incident Response Programme
Risk Factory: How to Implement an Effective Incident Response Programme
The LEAD Portal: An OGCE based weather science gateway
The LEAD Portal: An OGCE based weather science gateway
Towards a Digital teammate to support sensemaking in Cyber Security teams
Towards a Digital teammate to support sensemaking in Cyber Security teams
Database development and security certification and accreditation plan pitwg
Database development and security certification and accreditation plan pitwg
FIRST 2006 Full-day Tutorial on Logs for Incident Response
FIRST 2006 Full-day Tutorial on Logs for Incident Response
2° Ciclo Microsoft Fondazione CRUI 7° Seminario: Proteggersi dai Cyber Attack...
2° Ciclo Microsoft Fondazione CRUI 7° Seminario: Proteggersi dai Cyber Attack...
Recently uploaded
Essentials of Automations: The Art of Triggers and Actions in FME
In this second installment of our Essentials of Automations webinar series, we’ll explore the landscape of triggers and actions, guiding you through the nuances of authoring and adapting workspaces for seamless automations. Gain an understanding of the full spectrum of triggers and actions available in FME, empowering you to enhance your workspaces for efficient automation.
We’ll kick things off by showcasing the most commonly used event-based triggers, introducing you to various automation workflows like manual triggers, schedules, directory watchers, and more. Plus, see how these elements play out in real scenarios.
Whether you’re tweaking your current setup or building from the ground up, this session will arm you with the tools and insights needed to transform your FME usage into a powerhouse of productivity. Join us to discover effective strategies that simplify complex processes, enhancing your productivity and transforming your data management practices with FME. Let’s turn complexity into clarity and make your workspaces work wonders!
Monitoring and Managing Anomaly Detection on OpenShift.pdf
Monitoring and Managing Anomaly Detection on OpenShift
Overview
Dive into the world of anomaly detection on edge devices with our comprehensive hands-on tutorial. This SlideShare presentation will guide you through the entire process, from data collection and model training to edge deployment and real-time monitoring. Perfect for those looking to implement robust anomaly detection systems on resource-constrained IoT/edge devices.
Key Topics Covered
1. Introduction to Anomaly Detection
- Understand the fundamentals of anomaly detection and its importance in identifying unusual behavior or failures in systems.
2. Understanding Edge (IoT)
- Learn about edge computing and IoT, and how they enable real-time data processing and decision-making at the source.
3. What is ArgoCD?
- Discover ArgoCD, a declarative, GitOps continuous delivery tool for Kubernetes, and its role in deploying applications on edge devices.
4. Deployment Using ArgoCD for Edge Devices
- Step-by-step guide on deploying anomaly detection models on edge devices using ArgoCD.
5. Introduction to Apache Kafka and S3
- Explore Apache Kafka for real-time data streaming and Amazon S3 for scalable storage solutions.
6. Viewing Kafka Messages in the Data Lake
- Learn how to view and analyze Kafka messages stored in a data lake for better insights.
7. What is Prometheus?
- Get to know Prometheus, an open-source monitoring and alerting toolkit, and its application in monitoring edge devices.
8. Monitoring Application Metrics with Prometheus
- Detailed instructions on setting up Prometheus to monitor the performance and health of your anomaly detection system.
9. What is Camel K?
- Introduction to Camel K, a lightweight integration framework built on Apache Camel, designed for Kubernetes.
10. Configuring Camel K Integrations for Data Pipelines
- Learn how to configure Camel K for seamless data pipeline integrations in your anomaly detection workflow.
11. What is a Jupyter Notebook?
- Overview of Jupyter Notebooks, an open-source web application for creating and sharing documents with live code, equations, visualizations, and narrative text.
12. Jupyter Notebooks with Code Examples
- Hands-on examples and code snippets in Jupyter Notebooks to help you implement and test anomaly detection models.
CAKE: Sharing Slices of Confidential Data on Blockchain
Presented at the CAiSE 2024 Forum, Intelligent Information Systems, June 6th, Limassol, Cyprus.
Synopsis: Cooperative information systems typically involve various entities in a collaborative process within a distributed environment. Blockchain technology offers a mechanism for automating such processes, even when only partial trust exists among participants. The data stored on the blockchain is replicated across all nodes in the network, ensuring accessibility to all participants. While this aspect facilitates traceability, integrity, and persistence, it poses challenges for adopting public blockchains in enterprise settings due to confidentiality issues. In this paper, we present a software tool named Control Access via Key Encryption (CAKE), designed to ensure data confidentiality in scenarios involving public blockchains. After outlining its core components and functionalities, we showcase the application of CAKE in the context of a real-world cyber-security project within the logistics domain.
Paper: https://doi.org/10.1007/978-3-031-61000-4_16
20240605 QFM017 Machine Intelligence Reading List May 2024
Everything I found interesting about machines behaving intelligently during May 2024
Things to Consider When Choosing a Website Developer for your Website | FODUU
Choosing the right website developer is crucial for your business. This article covers essential factors to consider, including experience, portfolio, technical skills, communication, pricing, reputation & reviews, cost and budget considerations and post-launch support. Make an informed decision to ensure your website meets your business goals.
OpenID AuthZEN Interop Read Out - Authorization
During Identiverse 2024 and EIC 2024, members of the OpenID AuthZEN WG got together and demoed their authorization endpoints conforming to the AuthZEN API
Driving Business Innovation: Latest Generative AI Advancements & Success Story
Are you ready to revolutionize how you handle data? Join us for a webinar where we’ll bring you up to speed with the latest advancements in Generative AI technology and discover how leveraging FME with tools from giants like Google Gemini, Amazon, and Microsoft OpenAI can supercharge your workflow efficiency.
During the hour, we’ll take you through:
Guest Speaker Segment with Hannah Barrington: Dive into the world of dynamic real estate marketing with Hannah, the Marketing Manager at Workspace Group. Hear firsthand how their team generates engaging descriptions for thousands of office units by integrating diverse data sources—from PDF floorplans to web pages—using FME transformers, like OpenAIVisionConnector and AnthropicVisionConnector. This use case will show you how GenAI can streamline content creation for marketing across the board.
Ollama Use Case: Learn how Scenario Specialist Dmitri Bagh has utilized Ollama within FME to input data, create custom models, and enhance security protocols. This segment will include demos to illustrate the full capabilities of FME in AI-driven processes.
Custom AI Models: Discover how to leverage FME to build personalized AI models using your data. Whether it’s populating a model with local data for added security or integrating public AI tools, find out how FME facilitates a versatile and secure approach to AI.
We’ll wrap up with a live Q&A session where you can engage with our experts on your specific use cases, and learn more about optimizing your data workflows with AI.
This webinar is ideal for professionals seeking to harness the power of AI within their data management systems while ensuring high levels of customization and security. Whether you're a novice or an expert, gain actionable insights and strategies to elevate your data processes. Join us to see how FME and AI can revolutionize how you work with data!
Unlock the Future of Search with MongoDB Atlas_ Vector Search Unleashed.pdf
Discover how MongoDB Atlas and vector search technology can revolutionize your application's search capabilities. This comprehensive presentation covers:
* What is Vector Search?
* Importance and benefits of vector search
* Practical use cases across various industries
* Step-by-step implementation guide
* Live demos with code snippets
* Enhancing LLM capabilities with vector search
* Best practices and optimization strategies
Perfect for developers, AI enthusiasts, and tech leaders. Learn how to leverage MongoDB Atlas to deliver highly relevant, context-aware search results, transforming your data retrieval process. Stay ahead in tech innovation and maximize the potential of your applications.
#MongoDB #VectorSearch #AI #SemanticSearch #TechInnovation #DataScience #LLM #MachineLearning #SearchTechnology
Artificial Intelligence for XMLDevelopment
In the rapidly evolving landscape of technologies, XML continues to play a vital role in structuring, storing, and transporting data across diverse systems. The recent advancements in artificial intelligence (AI) present new methodologies for enhancing XML development workflows, introducing efficiency, automation, and intelligent capabilities. This presentation will outline the scope and perspective of utilizing AI in XML development. The potential benefits and the possible pitfalls will be highlighted, providing a balanced view of the subject.
We will explore the capabilities of AI in understanding XML markup languages and autonomously creating structured XML content. Additionally, we will examine the capacity of AI to enrich plain text with appropriate XML markup. Practical examples and methodological guidelines will be provided to elucidate how AI can be effectively prompted to interpret and generate accurate XML markup.
Further emphasis will be placed on the role of AI in developing XSLT, or schemas such as XSD and Schematron. We will address the techniques and strategies adopted to create prompts for generating code, explaining code, or refactoring the code, and the results achieved.
The discussion will extend to how AI can be used to transform XML content. In particular, the focus will be on the use of AI XPath extension functions in XSLT, Schematron, Schematron Quick Fixes, or for XML content refactoring.
The presentation aims to deliver a comprehensive overview of AI usage in XML development, providing attendees with the necessary knowledge to make informed decisions. Whether you’re at the early stages of adopting AI or considering integrating it in advanced XML development, this presentation will cover all levels of expertise.
By highlighting the potential advantages and challenges of integrating AI with XML development tools and languages, the presentation seeks to inspire thoughtful conversation around the future of XML development. We’ll not only delve into the technical aspects of AI-powered XML development but also discuss practical implications and possible future directions.
AI-Powered Food Delivery Transforming App Development in Saudi Arabia.pdf
In this blog post, we'll delve into the intersection of AI and app development in Saudi Arabia, focusing on the food delivery sector. We'll explore how AI is revolutionizing the way Saudi consumers order food, how restaurants manage their operations, and how delivery partners navigate the bustling streets of cities like Riyadh, Jeddah, and Dammam. Through real-world case studies, we'll showcase how leading Saudi food delivery apps are leveraging AI to redefine convenience, personalization, and efficiency.
How to Get CNIC Information System with Paksim Ga.pptx
Pakdata Cf is a groundbreaking system designed to streamline and facilitate access to CNIC information. This innovative platform leverages advanced technology to provide users with efficient and secure access to their CNIC details.
Climate Impact of Software Testing at Nordic Testing Days
My slides at Nordic Testing Days 6.6.2024
Climate impact / sustainability of software testing discussed on the talk. ICT and testing must carry their part of global responsibility to help with the climat warming. We can minimize the carbon footprint but we can also have a carbon handprint, a positive impact on the climate. Quality characteristics can be added with sustainability, and then measured continuously. Test environments can be used less, and in smaller scale and on demand. Test techniques can be used in optimizing or minimizing number of tests. Test automation can be used to speed up testing.
Programming Foundation Models with DSPy - Meetup Slides
Prompting language models is hard, while programming language models is easy. In this talk, I will discuss the state-of-the-art framework DSPy for programming foundation models with its powerful optimizers and runtime constraint system.
Microsoft - Power Platform_G.Aspiotis.pdf
Revolutionizing Application Development
with AI-powered low-code, presentation by George Aspiotis, Sr. Partner Development Manager, Microsoft
Generating privacy-protected synthetic data using Secludy and Milvus
During this demo, the founders of Secludy will demonstrate how their system utilizes Milvus to store and manipulate embeddings for generating privacy-protected synthetic data. Their approach not only maintains the confidentiality of the original data but also enhances the utility and scalability of LLMs under privacy constraints. Attendees, including machine learning engineers, data scientists, and data managers, will witness first-hand how Secludy's integration with Milvus empowers organizations to harness the power of LLMs securely and efficiently.
GraphRAG for Life Science to increase LLM accuracy
GraphRAG for life science domain, where you retriever information from biomedical knowledge graphs using LLMs to increase the accuracy and performance of generated answers
HCL Notes und Domino Lizenzkostenreduzierung in der Welt von DLAU
Webinar Recording: https://www.panagenda.com/webinars/hcl-notes-und-domino-lizenzkostenreduzierung-in-der-welt-von-dlau/
DLAU und die Lizenzen nach dem CCB- und CCX-Modell sind für viele in der HCL-Community seit letztem Jahr ein heißes Thema. Als Notes- oder Domino-Kunde haben Sie vielleicht mit unerwartet hohen Benutzerzahlen und Lizenzgebühren zu kämpfen. Sie fragen sich vielleicht, wie diese neue Art der Lizenzierung funktioniert und welchen Nutzen sie Ihnen bringt. Vor allem wollen Sie sicherlich Ihr Budget einhalten und Kosten sparen, wo immer möglich. Das verstehen wir und wir möchten Ihnen dabei helfen!
Wir erklären Ihnen, wie Sie häufige Konfigurationsprobleme lösen können, die dazu führen können, dass mehr Benutzer gezählt werden als nötig, und wie Sie überflüssige oder ungenutzte Konten identifizieren und entfernen können, um Geld zu sparen. Es gibt auch einige Ansätze, die zu unnötigen Ausgaben führen können, z. B. wenn ein Personendokument anstelle eines Mail-Ins für geteilte Mailboxen verwendet wird. Wir zeigen Ihnen solche Fälle und deren Lösungen. Und natürlich erklären wir Ihnen das neue Lizenzmodell.
Nehmen Sie an diesem Webinar teil, bei dem HCL-Ambassador Marc Thomas und Gastredner Franz Walder Ihnen diese neue Welt näherbringen. Es vermittelt Ihnen die Tools und das Know-how, um den Überblick zu bewahren. Sie werden in der Lage sein, Ihre Kosten durch eine optimierte Domino-Konfiguration zu reduzieren und auch in Zukunft gering zu halten.
Diese Themen werden behandelt
- Reduzierung der Lizenzkosten durch Auffinden und Beheben von Fehlkonfigurationen und überflüssigen Konten
- Wie funktionieren CCB- und CCX-Lizenzen wirklich?
- Verstehen des DLAU-Tools und wie man es am besten nutzt
- Tipps für häufige Problembereiche, wie z. B. Team-Postfächer, Funktions-/Testbenutzer usw.
- Praxisbeispiele und Best Practices zum sofortigen Umsetzen
Recently uploaded (20)
Essentials of Automations: The Art of Triggers and Actions in FME
Essentials of Automations: The Art of Triggers and Actions in FME
Monitoring and Managing Anomaly Detection on OpenShift.pdf
Monitoring and Managing Anomaly Detection on OpenShift.pdf
CAKE: Sharing Slices of Confidential Data on Blockchain
CAKE: Sharing Slices of Confidential Data on Blockchain
20240605 QFM017 Machine Intelligence Reading List May 2024
20240605 QFM017 Machine Intelligence Reading List May 2024
Things to Consider When Choosing a Website Developer for your Website | FODUU
Things to Consider When Choosing a Website Developer for your Website | FODUU
Driving Business Innovation: Latest Generative AI Advancements & Success Story
Driving Business Innovation: Latest Generative AI Advancements & Success Story
Unlock the Future of Search with MongoDB Atlas_ Vector Search Unleashed.pdf
Unlock the Future of Search with MongoDB Atlas_ Vector Search Unleashed.pdf
AI-Powered Food Delivery Transforming App Development in Saudi Arabia.pdf
AI-Powered Food Delivery Transforming App Development in Saudi Arabia.pdf
How to Get CNIC Information System with Paksim Ga.pptx
How to Get CNIC Information System with Paksim Ga.pptx
Climate Impact of Software Testing at Nordic Testing Days
Climate Impact of Software Testing at Nordic Testing Days
Programming Foundation Models with DSPy - Meetup Slides
Programming Foundation Models with DSPy - Meetup Slides
Generating privacy-protected synthetic data using Secludy and Milvus
Generating privacy-protected synthetic data using Secludy and Milvus
GraphRAG for Life Science to increase LLM accuracy
GraphRAG for Life Science to increase LLM accuracy
HCL Notes und Domino Lizenzkostenreduzierung in der Welt von DLAU
HCL Notes und Domino Lizenzkostenreduzierung in der Welt von DLAU
James A. Marsteller
- 1. TeraGrid Security Incident Handling James A. Marsteller, CISSP TG Security Working Group Lead Information Security Officer – Pittsburgh Supercomputing Center TAGPMA ‘Grid Day’ Noverber 5 th 2008 La Plata, Argentina