Name: COVID-19 상황에서 Magecart와 웹 스키밍 공격 이해하기
Start: 2020-06-10T06:00:00Z
End: 2020-06-10T06:00:29.000Z
Location: BrightTALK
Rating: 0

Leading companies worldwide choose Akamai to build, deliver, and secure their digital experiences — helping billions of people live, work, and play every day. Akamai Connected Cloud, a massively distributed edge and cloud platform, puts apps and experiences closer to users and keeps threats farther away. Learn more about Akamai’s cloud computing, security, and content delivery solutions.

In this episode of "If Your APIs Could Talk," we explore the Workflow Automation feature of Akamai API Security. This feature dramatically improves efficiency and productivity by simplifying the creation of multi-action workflows. It uses a user-friendly visual editor, customizable workflow samples, and over 300 pre-built connectors. In this session, you'll learn how to automate complex event response processes and synchronize incident-related data with third-party services like ServiceNow, JIRA, and Azure DevOps. We'll also provide examples of common workflow use cases, including: 

- Incident creation in ITSM solutions 
- Notifications to security and business teams 
- Data customization 
- Bi-directional sync with ticketing systems 
- Preventive workflows to block suspicious traffic 

Whether you're an existing user or considering Akamai API Security, this episode will provide valuable insights into using Workflow Automation to streamline your security operations.

Ep. 10 – Workflow Automation Deep Dive

According to IDC, worldwide spending on cloud computing is projected to surpass $1.35 trillion by 2027. As these costs continue to rise, corporate CIOs and CFOs are collaborating to assess the use of cloud technologies in their business growth strategies. As Akamai discovered through Project Cirrus, it is possible to realize savings by undertaking a comprehensive cloud services reassessment and applying core principles to optimize cloud services. Join us for an upcoming webinar where we will discuss how Akamai leveraged distributed cloud computing to:

• Lower cloud costs by 40% in one year
• Improve performance by over 40% faster queries
• Facilitate transition from cloud-friendly to cloud-native

During the discussion, Akamai leaders will help attendees better understand their cloud utilization and start to gain control over cloud spending, while improving performance and agility.

The Cloud Spend Conundrum: Gain Control of Ballooning Cloud Costs

In this "If Your APIs Could Talk" episode, we'll explore the Akamai API Security Native Connector feature. This new integration, built directly into our API Security solution, enables companies to send a copy of their Akamai Connected Cloud traffic to our API Security solution for analysis with just a few clicks. Enabling this integration provides complete visibility into your APIs across environments managed by Akamai, allowing for the detection of vulnerabilities and the ability to rapidly act on runtime incidents. The session will include a demonstration of the connector's seamless deployment, a technical explanation of how it works, and a spotlight on its operational benefits.

Ep. 9 - Akamai API Security Native Connector Deep Dive

Demonstrating compliance with data protection regulations has traditionally required significant effort and resources to mitigate mostly familiar risks. However, the digital landscape is evolving rapidly, introducing threats that many enterprise compliance programs don't fully address. Even regulatory bodies themselves can't always keep pace and provide explicit guidelines covering every aspect necessary to prevent breaches.

This is the case with API protection. Every time a customer, partner, or vendor engages with your business digitally, there’s an API behind the scenes facilitating a rapid exchange of information that often includes sensitive data. Understanding and mitigating API threats is essential as APIs become increasingly integral to our technological infrastructure. This webinar will equip you with an understanding of API risks, effective strategies to safeguard your systems, and the direct implications of APIs on your compliance initiatives.

This webinar is ideal for IT professionals, security analysts, compliance officers, and anyone involved in API development and management who is looking to enhance their understanding of API security and compliance.

Speakers:
- Tony Lauro, Director, Security Technology and Strategy, Akamai
- Stas Neyman, Director, Product Marketing, Akamai

API Security and Compliance: Requirements for Data Protection

In this episode of “If Your APIs Could Talk”, we will uncover intricate strategies used by cyber attackers through a real-life API breach, focusing on the vulnerabilities that were exploited to manipulate a major retailer's loyalty program. Discover the significant impact of these attacks and the measures you can take to reinforce defenses and avoid similar intrusions. This episode will help you learn more about the constantly changing landscape of API security and ways to safeguard your organization against advanced API threats.

Ep. 8 - Anatomy of an API Attack: Insights from a Real-Life Breach

Have you checked your cloud spend lately? Chances are, it’s higher than you expected - or want or even need. For too many, the promise of cloud agility and flexibility has come at an unexpectedly high price.

 Tune into this webinar to hear Akamai’s CIO Kate Prouty share with IDC’s Adam Reeves the critical lessons Akamai learned on their Cloud journey.  You’ll hear how with the right tools, executive level support, diligence, and a modern platform as a service approach, you can bring your cloud costs and sprawl under control.

3 Lessons in Cloud Management That Saved $100M

If you've been wanting to double down on your API security strategy, now is the perfect time. Learn how you can locate legacy and undocumented APIs, monitor traffic to eliminate vulnerabilities, and prevent attacks in real-time. We'll show you how to integrate robust security tests, uncover data policy violations, and build security into your API development process.

With Akamai API Security's new flexible deployment options, extended intelligence across API traffic locations, and expanded suite of integrations as part of our acquisition of Noname security, you can protect your API environment across any platform.

Don't miss this chance to enhance your API security and take advantage of Akamai's new, advanced API protections for your organization.

Ep. 7 - Doubling Down on API Security

APIs are too often rushed into production without proper testing. This creates conflict between the economic demand for new business services and the security requirements to protect these new services. Plus, developers and DevOps teams are the ones who often perform API security testing since it is very technical and has a steep learning curve. 

Join this webinar to learn how testing your APIs doesn’t have to be a roadblock to your organization. With the right mindset and tools, you can reduce the cost of fixing security vulnerabilities, continue to deliver new functionality at breakneck speeds, and improve the security posture of your APIs.

Ep. 6 - Monitor Right & Shift Left: Reshaping API security with Advanced Testing

As companies increasingly adopt Zero Trust security to swiftly counter threats, meet compliance requirements and support business innovation, the urgency to accelerate Zero Trust projects grows.   

The new Akamai Guardicore Platform is designed to help organizations achieve these priorities by leveraging AI to streamline and enhance security management.

Join us to discover the breakthrough capabilities of the Akamai Guardicore Platform and participate in an interactive Q&A session. 

Here’s what we’ll cover: 

-Unified Management through a Single Console: Streamline your cybersecurity with our single-console approach for comprehensive visibility and seamless north/south and east/west policy enforcement across all environments.

-Efficient Zero Trust Deployment with a Single Agent: Learn about our efficient single-agent or agentless options for deploying Zero Trust that minimizes system impact while maximizing coverage.

-AI-Driven Operational Excellence: Experience how AI powers our platform, enhancing everything from network log analysis to asset labeling and vulnerability assessments.

-Adherence to Zero Trust Principles: See how the Akamai Guardicore Platform embeds strict Zero Trust principles, integrating advanced features like multi-factor Segmentation and DNS firewalls for robust monitoring and control.

-10-Minute Live Demonstration

Accelerating Zero Trust with AI, simplicity and speed

The cloud infrastructure of today cannot meet the requirements of tomorrow's applications.

New applications using AI and mixed reality require new approaches to provide more responsive applications and to protect privacy. Existing applications are becoming more personalised and customised. Customer experience needs to be seamless and reactive in the moments that matter.

Join us as we discuss how we're building a globally distributed cloud to meet the needs of your customers, partners, and your organization.

The disruption of Cloud Computing in the era of AI

*Please note; by attending this webinar, you agree to receiving follow-up email communications from Optus

1 in 5 enterprise mobility devices are targeted by malware and phishing each year*

Today, mobile devices are critical to business operations, which makes enterprise mobile security more important than ever. 

Join us for an exclusive live webinar, brought to you by Optus in partnership with Akamai Technologies, specifically designed for enterprise mobile fleet and IT administrators, security and risk advisors, and managers wanting more visibility and control of enterprise mobile data usage. 

Date/Time: Wednesday 28 August, 2024 | 11am – 11.45am AEST

In this must-attend session, our panel of industry experts will delve into the current mobile security landscape, shedding light on:
● Top mobile security threats and vulnerabilities
● Critical enterprise security gaps and how to address them
● Proven strategies for implementing robust mobile security solutions

Learn how to:
● Avoid costly infrastructure, hardware, or software installations on mobile devices
● Create custom security and data usage policies in near real-time 
● Quickly provision security solutions with minimal disruption to users

This webinar is a not-to-be-missed opportunity to gain valuable insights and practical strategies to secure your enterprise’s mobile devices, enable seamless hybrid working to maintain employee productivity, and deliver greater compliance and control of mobile data usage.
Reserve your spot today and ensure your enterprise stays ahead in mobile security!

Speakers:
●  Ben Vella - VP, Enterprise & Mid-Market, Optus
●  Reuben Koh - Director, Security Technology & Strategy APJ, Akamai
●  Caroline Smith - ANZ Partner Account Executive, Akamai
●  Steven King - Senior Technical Product Manager, Optus

*Source: 2022 Global Mobile Threat Report by Zimperium

Top 3 mobile security threats enterprises face and how to combat them

Join us for an in-depth exploration of API security threats, a major concern for the commerce industry in the APAC region. This session will focus on securing your APIs and understanding your vulnerabilities.

We will explore the tactics cybercriminals use to exploit API vulnerabilities and the specific challenges faced by businesses in this region. This session will provide crucial insights into:

Understanding Vulnerabilities: Identify and understand API security weaknesses in the APAC commerce industry, illustrated by regional case studies and data.
Identifying Negative Impacts: Learn the side effects of web scraping on your site's performance and business operations.
Proactive Security Posture: Build a forward-thinking security framework to anticipate future threats and ensure resilience and security

Protecting APAC Commerce: A Strategic Approach to API Security

Edge computing is a method to process your data locally, close to users and devices, which saves bandwidth, reduces latency, and delivers high-speed digital experiences. What’s not to love? This is why increasing numbers of organizations across the globe are starting to explore this latest innovative approach to cloud computing.

Of particular interest to edge computing pioneers are edge-native applications, which you specially design to take advantage of edge computing capabilities and to push experiences and data closer to your users, regardless of where they are located across the globe. But how do you get started? This is the focus of Episode 3: Your Journey to Edge Native, the third installment in our new three-part video series, Building in the Cloud: How to Optimize Cost and Performance.

What to expect in Episode 3:
• Gain a good grounding in the concepts and benefits of edge computing and edge-native applications.
• Receive an introduction to innovative technologies, including HarperDB, which can help you enable edge-native capabilities.

Why watch Episode 3?
• Learn how to apply an edge-native approach to cloud computing to realize low-latency data replication and global-scale services delivery.
• Find out the reasons why now is a great time for you to start exploring edge computing and edge-native applications.
• Discover real-world examples of how and why organizations are adopting edge-native applications.

Available soon to watch on demand:
All three episodes of our video series Building in the Cloud: How to Optimize Cost and Performance
• Episode 1: Deliver Low-Latency Applications and Reduce Costs
• Episode 2: Use Observability to Optimize Costs
• Episode 3: Your Journey to Edge Native

Your Journey to Edge Native

Viewership is unpredictable. Capacity planning and cost estimates are hard. Workloads are increasingly complex. And optimizing performance in a multi-cloud environment is never-ending.
 
For streaming services, that translates into a cost-effective, reliable, and trusted platform on which developers can build, deploy, and secure applications and workloads everywhere your viewers connect online, no matter which device they use to stream. The end result is low latency, increased speed to market, and better performance of your applications. Learn how Akamai Cloud Computing comes with low-cost, predictable pricing, and award-winning developer support.
 
The partnership with Ateme will bring benefits to Akamai customers in the form of end-to-end superior quality video-delivery solutions, enabling more choices; easy adoption and deployment in your digital transformation journey.
 
In this webinar, media owners will learn and discover ways to boost viewership and subscriber engagement, while unifying delivery, and enhancing quality

 • Cost Optimisation
 • Low Latency
 • The ease of adoption
 • Flexible Deployment

Discover how Akamai and Ateme lower the barrier to entry to cloud computing in the Media and Entertainment industry

Observability, or the ability to monitor and measure what’s happening inside your cloud computing architecture in real time, is vital information for every organization. These insights can help you understand how to improve user experiences for your customers, enabling you to increase customer satisfaction, loyalty, and retention.

Examining the different flavors of observability is the focus of Episode 2: Use Observability to Optimize Costs, the second installment in a new three-part video series, Building in the Cloud: How to Optimize Cost and Performance.

What to expect in Episode 2:
• Find out about the benefits of having full visibility into your cloud computing infrastructure.
• Explore how observability solutions can help you to anticipate content demand, and to avoid painful data trade-offs.

Why watch Episode 2?
• Discover how to optimize your global delivery, while safeguarding your customer experiences.
• Learn how to use observability to help lower your cloud costs.
• Compare and contrast the different types of observability tools, including managed observability services versus more “build your own” observability options.

Speakers:
• Ben Cole, Executive Editor, TechTarget (Host)
• Stuart Wakeling, Channel Executive, Hydrolix
• Nathan Hoffman, Enterprise Cloud Architect, Akamai
• Tony Falco, VP of Product Marketing, Hydrolix

Coming next:
• Building in the Cloud: How to Optimize Cost and Performance, Episode 3: Your Journey to Edge Native

Use Observability to Optimize Costs

Join us for a webinar with Znet Technologies, our only authorized distributor of Linode in India. Discover how their integration with Akamai enhances synergies to streamline MSP operations and boost efficiency. Additionally, you will learn:

-Get access to the latest trends in cloud technology and their impact on your organization's budget.
-Discover tips and tested techniques to boost your cloud infrastructure’s efficiency and performance.
-Explore cost-effective solutions and tools available to streamline your IT expenses.
-Gain valuable insights from real-world case studies and success stories.

Unveiling the Power of Cloud - Agnostic Architecture with Akamai

Despite enterprises’ best efforts, cyber criminals continue to succeed in breaching and ransomware attacks by capitalizing on human error. And security controls like EDR/XDR continue to be insufficient in combating these attacks.

Join this session to learn about a novel approach to Defense in Depth model which includes microsegmentation to better protect your workloads, from legacy systems, to virtualized and cloud instances. 

You will learn: 

Common pitfalls of traditional endpoint security solutions
The novel Defense in Depth approach
Why microsegmentation needs to be prioritized over security controls like EDR/XDR, both modern and traditional

Why EDRs still can’t stop ransomware or breaches

Despite the complexity of algorithms and advanced security protocols, API security often fails to consider the sophisticated intersection of AI and API security. We will bridge this gap in our upcoming episode, ""Rise of AI Assisted API Attacks,"" by highlighting how emerging AI technologies can be harnessed to enhance protection against these modern threats.

This session will guide attendees through the latest trends in AI-driven attacks, how attackers are using AI to attack APIs, and tips and tricks from our Threat hunting team on how they use automation to combat these fast-growing threats.

Ep. 5 - Rise of AI Assisted API Attacks

대부분의 국가가 COVID-19로 인해 봉쇄조치(Lockdown)를 취하면서 인터넷 의존도가 그 어느 때보다 높아졌습니다. 공격자들은 온라인 트랜잭션의 급격한 증가를 눈여겨보고 있습니다.

웹 스키밍 건수는 3월 대비 증가했고 이커머스 등 감염된 웹사이트에 그 어느 때보다 많이 노출되어 있습니다. 앞으로 몇 달 간 온라인 서비스 사용량이 늘어나면서 웹 스키밍 공격 역시 증가할 수 있습니다.

웨비나의 내용은 다음과 같습니다.
사이버 위협 - COVID-19 사태가 진행되는 동안 발생한 변화
웹 스키밍 및 Magecart 공격으로 인한 위협 증가
써드파티 스크립트의 증가에 따른 웹 스키밍 공격의 위험성 
웹 스키밍 공격 사례 및 기법
웹 스크밍 공격 방어를 위한 기존 방법의 한계
웹 스키밍 공격에 대한 새로운 방어 방법
 
발표자는 Akamai Technologies의 이계경 이사입니다

COVID-19 상황에서 Magecart와 웹 스키밍 공격 이해하기

Magecart

Covid-19

Web Skimming

Cyber Attacks

Cyber Security

Cloud Security

Malware

Threat Detection

Threat Defence

Third Party Scripts

Cloud computing has exploded over the past few years, delivering a previously unimagined level of workplace mobility and flexibility. The cloud computing community on BrightTALK is made up of thousands of engaged professionals learning from the latest cloud computing research and resources. Join the community to expand your cloud computing knowledge and have your questions answered in live sessions with industry experts and vendor representatives.

Cloud Computing

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

Network infrastructure professionals understand that a reliable and secure infrastructure is crucial to enabling business execution. Join the network infrastructure community to interact with thousands of IT professionals. Browse hundreds of on-demand and live webinars and videos to learn about the latest trends in network computing, SDN, WAN optimization and more.

Network Infrastructure

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

COVID-19 상황에서 Magecart와 웹 스키밍 공격 이해하기

Presented by

About this talk

More from this channel