Name: Anatomy of a Serverless Injection Attack - Step by Step
Start: 2018-11-07T16:00:00Z
End: 2018-11-07T16:00:32.000Z
Location: BrightTALK
Rating: 4

Check Point Software Technologies Ltd. (www.checkpoint.com) is a leading AI-powered, cloud-delivered cyber security platform provider protecting over 100,000 organizations worldwide. Check Point leverages the power of AI everywhere to enhance cyber security efficiency and accuracy through its Infinity Platform, with industry-leading catch rates enabling proactive threat anticipation and smarter, faster response times. The comprehensive platform includes cloud-delivered technologies consisting of Check Point Harmony to secure the workspace, Check Point CloudGuard to secure the cloud, Check Point Quantum to secure the network, and Check Point Infinity Core Services for collaborative security operations and services.

Have external facing applications and/or APIs deployed in Azure?  Already using or want to start using Azure Virtual WAN?  And you want to secure those applications/APIs with CloudGuard Network Security?  Or just curious?

If you answered yes to any of the above, you have come to the right place!  In this Under the Hood session we will walk you step-by-step on how to:

- Deploy Azure Virtual WAN
- Deploy and integrate CloudGuard Network Security natively with Azure Virtual WAN
- Configure the brand new ingress support
- Demonstrate how CloudGuard Network Security protects your external applications and APIs.

Under the Hood: Securing Ingress Traffic with Azure Virtual WAN and CloudGuard Network Security

How Check Point is changing the game in Web Application Firewall & API Security: Unlike signature-based WAF tools, CloudGuard WAF leverages machine-learning and contextual AI to provide a high level of protection against known and unknown threats for both web applications and APIs. It has successfully blocked all of the biggest zero-day threats in recent years ( such as Log4j and MOVEit ) and generates virtually no false positives, saving security teams valuable time and resources. 
This webinar will cover the challenges facing modern WAF Solutions. Explore how Check Point's solution rises to meet those challenges and the benefits it provides, including its ease of deployment, automation, simplified security operations, streamline incident response, and more. You will also see CloudGuard WAF and API security demo in action.
This webinar will cover the challenges facing modern WAF Solutions. Explore how Check Point's solution rises to meet those challenges and the benefits it provides, including its ease of deployment, automation, simplified security operations, streamline incident response, and more. You will also see CloudGuard WAF and API security demo in action.

DO NOT Renew your WAF without watching THIS!!

Implementing effective security strategies within the software development lifecycle (SDLC) pipeline is essential for minimizing emergency fixes and ensuring robust, reliable software delivery. By leveraging the principles of DevSecOps, organizations can integrate security practices throughout their development processes, significantly reducing the time spent on firefighting unexpected security incidents.
In this webinar, we will discuss how to ensure that cloud security is maintained without compromising the speed and agility of DevOps practices. Gain real-time security insights from our experts, as they explain how to incorporate code security into Check Point’s CloudGuard Cloud-Native Application Protection Platform (CNAPP), across all stages of the SDLC pipeline.  Join us as we discuss:
- Preventing security drift
- Continuous monitoring and automated remediation
- Software resilience and CD integration
- Bridging the gap between development and security teams

In collaboration with CheckMates, this session is designed for Check Point customers, security leaders and professionals looking to incorporate a holistic and fully integrated approach to securing their cloud environments.

Code Security Strategies for Minimizing Emergency Fixes

Join this webinar session inspired by real-world customer experiences, where we will showcase the latest advancements in our CloudGuard products and future roadmap. 

Discover how to maximize the value of CloudGuard for your organization. Learn strategies to tackle emerging security challenges leveraging the platform, and engage in meaningful discussions about cybersecurity priorities, trends, and innovations. In collaboration with CheckMates, this session is designed to enhance your knowledge and adaptability in the ever-evolving cybersecurity landscape.

In addition, we'll delve into Check Point's journey from a rule-based Web Application Firewall (WAF) to an AI-driven prevention strategy and offer valuable insights into the critical role of API discovery.

Key topics to be discussed include:

Streamlining operations and strengthening defense mechanisms against evolving threats.
Correlating toxic activity combinations to proactively identify and address sophisticated security issues.
Automating routine tasks and fostering collaboration between development, security, and operations teams.
Tracking permissions across clouds for both human and non-human entities, enforcing the Principle of Least Access.
Scanning for vulnerabilities throughout your pipeline and detecting exposed secrets in code and workloads. 
Enhancing web application and API security with an AI-based preventative approach.

Maximize your CloudGuard investment by registering now to secure your spot.

What's New in CloudGuard - Priorities, Trends and Roadmap Innovations

Join Yael Cinamon, Product Manager Lead at Check Point, as she demonstrates the seamless integration of endpoint protection solutions into Infinity Playblocks. Discover how this cloud-based automation and response platform enhances collaborative prevention and operational efficiency. Watch a real case study featuring Microsoft Defender and see how Infinity Playblocks simplifies security processes, integrates with leading endpoint solutions, and automates incident response.

Security Automation Integrates with 3rd Party Endpoint Protection Solutions for Collaborative Prevention

Many security operations teams are facing great challenges including increased threat landscape, SOC teams running 24x7x365, headcount and skill shortages – all often lead for missed critical attacks until it’s too late. This session presents Check Point Infinity #XDR/XPR product as the leading prevention-first security operations platform - empowering SOC teams to boost prevention with greater efficiency. Learn how Infinity XDR/XPR prevents advanced threats across all vectors with fewer resources by leveraging the power of innovative ThreatCloud, AI, and machine learning technologies for rapid detection, investigation, and automated response. View our XDR/XPR demo where we dive deep into all its capabilities and features, and learn how the solution gives you complete visibility and efficient operational abilities on the entire IT infrastructure from one pane of glass.

To learn more visit: https://www.checkpoint.com/infinity/xdr-xpr/

Prevention-First Extended Prevention & Response (Check Point Infinity XDR/XPR)

Join the discussion as we delve into the world of rising Cloud DDoS threats and explore effective protection strategies. In this session, we will examine the evolving landscape of the latest attack campaigns and shed light on the emergence of new and disruptive cloud DDoS attacks. We will uncover the limitations traditional solutions have in combating these threats and highlight the critical elements needed to ensure comprehensive protection. 

Whether you're an IT professional, security expert, or decision-maker, this webinar will provide valuable insights to help you safeguard your organization against the ever-evolving landscape of Cloud DDoS threats. Don't miss this opportunity to stay informed and secure in the face of today's cyber challenges. Register now!

Is Your Business Ready for the Next Wave of Cloud DDoS Threats?

As organizations transition from virtual machines (VMs) to containers and serverless architectures, ensuring robust security across these evolving environments becomes crucial. Traditional security measures often fall short in addressing the unique challenges posed by modern cloud-native applications.

In this webinar, we’ll explore how Cloud Workload Protection Platforms (CWPP) and Cloud Native Application Protection Platforms (CNAPP) can secure your migration journey, providing comprehensive visibility and protection across your entire cloud landscape.

Join us to discover best practices, real-world examples, and actionable insights on leveraging CWPP and CNAPP to safeguard your workloads, no matter where they are in your cloud transformation journey.

Cloud Masters - Leveraging CWPP and CNAPP to Safeguard your Workloads

La inteligencia artificial (IA) y la automatización ofrecen una gran promesa para ayudar a los equipos de operaciones de seguridad a mejorar la seguridad y reducir gastos en general. Sin embargo, también pueden agregar complejidad y riesgo, mientras los líderes de seguridad luchan con cómo diseñar e implementar proyectos.

Guía del CISO para la Innovación en TDIR con XDR, IA y Automatización

As CISOs seek consolidation, security needs to be dynamic and address distributed hybrid IT environments.

Empowering organizations to meet tomorrow’s security needs with confidence, the Check Point Infinity Platform offers a Hybrid Mesh Firewall with unified management across:

• Cloud native firewalls
• On-premises firewalls
• Virtual firewalls
• As-a-service firewalls

Watch the webinar to learn how enterprises can futureproof their cyber security, including:

• Why have hybrid mesh firewall platforms emerged?
• What are executive-level benefits of adopting a hybrid mesh framework?
• How does the Check Point Infinity Platform embody this architecture?
• Why is Infinity the best choice for hybrid mesh deployments?

Adopting a Hybrid Mesh Framework with the Infinity Platform

Join this webinar, as we discuss how CSPM customers can supercharge security efforts and utilize a CNAPP approach in the following ways:
Assess requirements, define objectives, and plan for a CSPM deployment
Extend CSPM capabilities with the Check Point CloudGuard solution set
Enhance risk management, boosting correlation and detection
Onboard all cloud environments and accounts onto one platform
Customize and create security policies and rule sets
Automate and enforce security policies
Prioritize compliance needs and prepare for upcoming audits

Our customer success team is committed to measuring and supporting your security investment.

Maximizing ROI with Streamlined CSPM

Are you using CloudGuard Network Security? Yes?  Are you aware of the ways CloudGuard Controller can simplify your life?  Did you know it is free with Check Point Security Management?

Dynamic environments such as public and on-premises data centers and clouds present a large challenge to security professionals.  The number of subnets, virtual machines, and IP addresses change quickly.

In this Under the Hood session presented together with CheckMates, Check Point Cloud Solutions Architect(and expert) Dan Morris will show you how CloudGuard Controller can be integrated with many of Check Point CloudGuard Network Security's public and private vendors that allows organizations to:

Dynamically learn about objects and attributes in data centers, such as changes in subnets, Security Groups, Virtual Machines, IP addresses, and Tags
Use those objects directly in your Security Policy without requiring a policy installation
Streamline operations and reduce the amount of overhead(and potentially errors and downtime) caused by 'ClickOps'

Under the Hood:  CloudGuard Controller Unleashed

Are you using Cisco ACI or are you planning a Cisco ACI deployment?
Do you want to design security into your deployment, or perhaps improve your existing security?
How best to extend your security posture to Cisco ACI and perhaps hybrid-clouds?

Join Jon Paine, Infinity Global Services Architect and Elier Cruz, Enterprise Security Architect (both at Check Point), in this webinar with CheckMates, and learn about:
- Cisco ACI networking features and functionality, THEN and NOW (including Single, Multipod, and Multisite architectures)
- Security architecture and Check Point integration design principles
- Requirements and design considerations for a secure Cisco ACI deployment

Under the Hood: Best practices for Cisco ACI security

Join us for a thought-provoking conversation with Brian McHenry, Check Point's Global Head of Cloud Security Engineering, as he delves into the topics of web application and API security. Discover how Check Point has transitioned from rule-based WAF to an AI-based prevention approach, and gain valuable insights into the significance of API discovery. Additionally, we will introduce our newest SaaS solution, which incorporates our most powerful features to date.

Introducing Check Point’s New Paradigm for Web Application & API Security

Geo-political tensions are driving a new wave of hacktivism that targets political and non-political global organizations. Hacktivists are employing disruptive DDoS tsunami attacks that are harder to detect and mitigate, thanks to AI. Check Point and Radware have partnered to create a unique integration between DDoS Protector and Infinity Playblocks that enables users to instantly expand Tsunami DDoS attack prevention and mitigation across their network, to multiple locations, without the need to deploy additional hardware. Join us to learn about the shift in the global threat landscape, the rise of new, state-backed threat actors, and how to defend against new forms of Tsunami DDoS attacks.

This webinar is intended for audiences in the Americas. To register for a webinar in a different time zone, please see below:
Europe, Middle East, & Africa (June 11, 2024 9 AM GMT): https://www.brighttalk.com/webcast/16731/615221
Asia-Pacific (June 11, 2024 11 AM SGT): https://www.brighttalk.com/webcast/16731/615228

This event is a proud collaboration with CheckMates, the Cyber Security Community that brings Check Point users, experts, and R&D together for freewheeling discussions about Check Point.

Defend Against Sophisticated New DDoS Tsunami Attacks

Discover the power of extending your CloudGuard solution into a more comprehensive CNAPP deployment. Join this webinar with CheckMates community, intended for our network security and (CSPM) CNAPP customers and learn how to:

1. Streamline operations and bolster defense mechanisms against evolving threats.
2. Correlate toxic combinations of activities in order to preemptively identify and address the most sophisticated security issues.
3. Automate routine tasks and foster collaboration between development, security, and operations teams.
4. Track permissions across clouds of human and non-human entities, and enforce the Principle of Least Access. 
5. Scan for vulnerabilities across your pipeline and find exposed secrets in the code and workloads.

Learn how to enable current features that are already available to you.  This customer-driven session will be led by Jamie Bordewyk, Head of Cloud Customer Success and Giovanni Verrienti, Technical Account Manager. 

Let's unlock the full potential of your CloudGuard investment together, register now to secure your spot.

How to Maximize the Deployment of Your CNAPP for Better Security Outcomes

AI and automation offer great promise to help security operations teams to improve security and reduce overhead. However, they can also add complexity and risk, while security leaders struggle with how to design and implement projects. In this webinar, Eric Parizo, Omdia Managing Principal Analyst and lead analyst for Omdia's Enterprise Cybersecurity Operations (SecOps) Intelligence Service, will share his latest research on how emerging AI and automation capabilities can benefit security operations, as well as offer market observations and best practices for CISOs and SOC managers seeking to employ these capabilities in a safe and effective manner. 
 
Webinar attendees will learn: 
o How AI and automation can improve security, while dramatically reducing time and effort 
o How XDR, when combined with AI and automation, can be a force multiplier for TDIR programs
o The benefits of a comprehensive, cross-layered approach that consolidates entire security stack

This event is a proud collaboration with CheckMates, the Cyber Security Community that brings Check Point users, experts, and R&D together for freewheeling discussions about Check Point.

CISO Guide to TDIR Innovation with XDR, AI and Automation

Are you using Microsoft Azure Virtual WAN or considering using it? 
If so, what is the best way to secure your Virtual WAN deployments?

Join this business-level webinar by Check Point and Microsoft, together with CheckMates, to learn more about:
 - Azure Virtual WAN and how it can benefit your cloud strategy
 - Check Point's industry-leading Azure Virtual WAN security solution, which enhances and complements Azure security
 - Five customer use cases when evaluating different security solutions
 - Next steps

Evaluating Azure Virtual WAN security: Five customer use cases

The OWASP Serverless top 10 project has launched. The upcoming report will evaluate the Top 10 for serverless environments, explaining and demonstrating the differences in attack vectors, defense techniques, and business impact.

Join us for this webinar to learn about what might be the biggest change...& the most concerning – injection attacks. Protego’s Head of Security Research will show you what a serverless injection attack really looks like using code regularly found in the wild.

Key Takeaways:
--See a Slack bot serverless injection attack in action
--View serverless attacks from attacker’s & defender’s points of view
--Learn about the goal of the ongoing OWASP Serverless top 10 project

Anatomy of a Serverless Injection Attack - Step by Step

serverless

OWASP

Application Development

Security Awareness

Secure Cloud

Cyber Attacks

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

The application development community features top thought leadership focusing on optimal practices in software development, SDLC methodology, mobile app development and application development platforms and tools. Join top software engineers and coders as they cover emerging trends in everything from enterprise app development to developing for mobile platforms such as Android and iOS.

Join thousands of engaged IT professionals in the application management community on BrightTALK. Interact with your peers in relevant webinars and videos on the latest trends and best practices for application lifecycle management, application performance management and application development.

Application Management

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Anatomy of a Serverless Injection Attack - Step by Step

Presented by

About this talk

More from this channel