Machine Identity Security Summit 2024: Full Schedule

Consider this year’s agenda your roadmap to the identity-first future

10:00am EDT

Workshop #1: From Certificate Chaos to Control: Istio, Kubernetes and Venafi Unite

Tuesday October 1, 2024 10:00am - 4:00pm EDT

*Separate ticket required*

Dive into the dynamic world of Kubernetes service mesh with this interactive workshop. Designed for InfoSec aficionados, we're steering the PKI ship into uncharted waters with Istio. Does your service mesh feel like a cryptic puzzle? Is the complexity of certificate management in your Kubernetes service mesh slowing you down? No longer! Prepare to set sail across the Kubernetes service mesh, steering through the currents of TLS certificate management with Venafi’s trident of tools: cert-manager, istio-csr and Venafi Firefly. Navigate hands-on exercises and real-world scenarios for unparalleled control and security in your service mesh. Join us and become the captain of your Kubernetes expedition – because certificates shouldn’t be a headache. #KubernetesCaptains #VenafiVoyage

Speakers

Rafael Tanaka

Curriculum Engineer, Venafi

Rafael started his career in the tech industry later in life, after 5 years as a Linux Engineer at Venafi Jetstack Consult he was able to marry his passion for teaching and innovative technologies such as Kubernetes. He is always coming with different ideas on how to explain the wonders... Read More →

Tuesday October 1, 2024 10:00am - 4:00pm EDT
Cityside

Workshop

Topic Firefly, Cloud Native Security, Service Mesh

1:30pm EDT

Seeing the Forest for the Trees: Understanding Certificate Attack Surfaces and Risk

Wednesday October 2, 2024 1:30pm - 2:00pm EDT

Cityside

If you’re just looking at key strength, algorithms, and lifetimes, you’re only seeing part of the picture. Beyond weak cryptography, insecure key stores and certificate mismanagement, certificate can create a lucrative attack surface through their identity and the trust of that identity. This session will introduce the elements of a certificate's attack surface and how to gauge risk to better prioritize management and alerting around high value certificate targets.

Speakers

Karen Reinhardt

Principal Engineer, PKI, The Home Depot

Karen Reinhardt brings over 25 years of experience in cybersecurity into her role as Principal Engineer of PKI at The Home Depot. She started her Infosec careers in 1999 as a founding member of the Qwest Communications (CenturyLink) Information security team and since then, has served... Read More →

Wednesday October 2, 2024 1:30pm - 2:00pm EDT
Cityside

Breakout Session

Topic Threat Landscape, Machine Identity Security

2:15pm EDT

Securing Certificates Is Not Enough! We Need to Secure All Machine Identities, Including Secrets

Wednesday October 2, 2024 2:15pm - 2:45pm EDT

Cityside

We all know securing certificates and preventing outages is critical. But as organizations increasingly leverage digital technology to accelerate the business, does leadership recognize securing certificates is not enough? More than ever before, attackers are exploiting exposed secrets and machine identities to find weak points in compute environments. Don’t let it happen to you! In this session you'll learn why you need to secure your applications, secrets and cloud workloads.

Join us to learn how CyberArk’s battle-tested solution for secrets management reduces cyber risk for machine identities. Now security can “meet developers where they are” with flexible options, which help accelerate securing your organization’s digital technologies across cloud and hybrid environments.

Speakers

Chris Smith

Director, Machine Identity Solutions, CyberArk

Chris leads CyberArk’s product marketing initiatives focused on helping customers secure their machine identities and DevOps environments. He joined CyberArk in 2017. Prior roles include 9 years as a senior director at Gartner working with large enterprises, and earlier in his career... Read More →

Wednesday October 2, 2024 2:15pm - 2:45pm EDT
Cityside

Breakout Session

Topic Machine Identity Security

3:00pm EDT

Revolutionizing SSH Authentication With SSH Certificates

Wednesday October 2, 2024 3:00pm - 3:30pm EDT

Cityside

Are you considering adopting SSH certificates as a way to avoid some of the risks that come with standard SSH key pairs? For many organizations, that may be easier said than done. Join this session to explore the steps you need to take to migrate away from SSH keys and truly focus on implementing an effective SSH certificate solution. You’ll gain insights into real world applications and use cases with a focus on where you should prioritize. And you’ll walk away with an in-depth understanding of how you can manage and control your SSH environment with the right process.

Speakers

Gunnar Ernst

Information Security Senior Advisor, ElevanceHealth

Nearly a decade in experience with Information Security, specializing in various facets of the SSH environment (system administration, middleware administration and encryption).Graduated from Indiana University with a Bachelor’s degree in Informatics focusing on Cybersecurity.Truly... Read More →

Wednesday October 2, 2024 3:00pm - 3:30pm EDT
Cityside

Breakout Session

Topic Machine Identity Security, SSH Security

4:00pm EDT

Why Automation is Critical for Managing 90-day Certificates

Wednesday October 2, 2024 4:00pm - 4:30pm EDT

Cityside

Will 90-day certificates break your business? Automation is the only way forward. Staying on top of shorter, 90-day certificate lifespans just isn’t possible with manual management. Join this session to learn about the machine identity security challenges that are driving the need for automation today and how those efforts will smooth your transition to impending shorter certificate standards. You’ll hear real-life examples of what can go wrong without the right levels of automation and get advice on how to sidestep the consequences of manual certificate management now and into the future.

Speakers

Tunde Oni-Daniel

Head of Technology Operations and Engineering, OneMain Financial

Tunde Oni-Daniel is the Head of Technology Operations & Engineering and in that role, he is responsible for cybersecurity technology. He brings over 23 years of global security experience having run security architecture, privacy programs, enterprise risk management, technology integration... Read More →

Wednesday October 2, 2024 4:00pm - 4:30pm EDT
Cityside

Breakout Session

Topic Automation, TLS Certificate Lifecycle, Certificate Outages

4:45pm EDT

Panel: Afternoon Tea With Women in Cybersecurity

Wednesday October 2, 2024 4:45pm - 5:15pm EDT

Cityside

You don’t have to read the tea leaves to understand the multi-faceted value and contributions of women in cybersecurity. Join us for an afternoon Boston Tea Party -- complete with tea and sweets -- where we’ll explore how revolutionizing your organization’s gender diversity can enrich your security strategies, while countering the growing shortage of skilled cybersecurity experts. Our panel of outspoken advocates will share their personal successes in cybersecurity as well as advice on how to expand your team with women who are passionate about cybersecurity. You’ll also gain insights on how you can support the women already on your team and why the addition of women will make your team more successful.

Moderators

Melissa Keohane

Chief Legal & People Officer, Venafi

As chief legal and people officer, Melissa is responsible for all legal affairs for the company as well as the global people strategy that propels Venafi’s team performance and vibrant company culture. Melissa is deeply committed to sustaining Venafi’s special culture and building... Read More →

Speakers

Jane Domboski

Chief Information Security Officer (CISO), OneMain Financial

Jane Domboski currently serves as the Chief Information Security Officer (CISO) for OneMain Financial. Ms. Domboski is both an attorney and cybersecurity practitioner. She has served in both the public and private sectors. In the public sector, Ms. Domboski investigated cybercrime... Read More →

Tanya Gill

Director of Information Security, Diebold Nixdorf

Tanya Gill has a career in Information Technology and Information Security that spans 24 years, with the last 19 focused in Information and Cybersecurity. Tanya has been on the forefront of building several security programs, including people, processes and technology. She has worked... Read More →

Karen Reinhardt

Principal Engineer, PKI, The Home Depot

Holly Worley

Customer Success Manager, Venafi

Customer Success Manager at Venafi for Strategic Accounts

Wednesday October 2, 2024 4:45pm - 5:15pm EDT
Cityside

Breakout Session

Topic Machine Identity Security

9:00am EDT

Modernizing PKI to Prepare for Post-Quantum Cryptography

Thursday October 3, 2024 9:00am - 9:30am EDT

Cityside

To prepare for the era of post-quantum cryptography (PQC), Air France-KLM has faced the challenge of modernizing a legacy-laden and intricate Public Key Infrastructure (PKI) environment. This was not an easy task for two companies each with over 90 years of history with legacy systems. Join this presentation to learn the comprehensive efforts the airlines undertook to rationalize and update the PKI ecosystem. Explore where we focused enhancements in security, operational efficiency, and cost-effectiveness perspectives to prepare for PQC. And see how Air France-KLM has strategically improved its cryptographic infrastructure to meet future demands.

Speakers

Valentin Chatelard

Machine IAM Security Architect, Air France - KLM

I serve as a Technical Security Architect at Air France-KLM, specializing in machine identities (Machine-IAM). In this role, I ensure that IT and business projects align with the stringent security requirements set forth by the Air France-KLM CISO team.As the technical lead on security... Read More →

Thursday October 3, 2024 9:00am - 9:30am EDT
Cityside

Breakout Session

Topic Modern PKI, Post Quantum, Futureproofing

9:45am EDT

U.S. Customs and Border Protection's Approach to Self-Service and Device Automation

Thursday October 3, 2024 9:45am - 10:15am EDT

Cityside

Want a up-close look at a real-world case study on automating certificate management services in a highly distributed environment? Gain insights into the timeline it took US Customs & Border Protection to implement, the challenges they encountered, and their recommendations for successfully onboarding and training internal customers of the certificate service. Join this session to access lessons learned and best practice recommendations for aligning the certificate service to organizational hierarchy and policy controls followed by open discussion with the audience on topics such as automation and keystore configuration.

Speakers

Kunal Patel

Systems Engineer, US Customs & Border Protection

Experience in engineering/architecture of various systems ranging from middleware application engines 9websphere/weblogic/tomcat), web servers, linux administration, Identity Management to currently leading a team that implemented a complex Venafi environment at CBP for certificate... Read More →

Michael Ross

Information Technology Specialist, US Customs & Border Protection

Zack Stronko

Computer Systems Engineer/Architect, US Customs & Border Protection

10 years experience working in an IT landscape, including the past 4 years implementing Venafi TPP for certificate management capabilities.

Thursday October 3, 2024 9:45am - 10:15am EDT
Cityside

Breakout Session

Topic Automation, Self Service

10:45am EDT

Extending Automated Enterprise Machine Identity to the IBM Mainframe

Thursday October 3, 2024 10:45am - 11:15am EDT

Cityside

Many of the largest organizations in the world depend on IBM Mainframe computers for their core business processing functions. But mainframe teams in these organizations can be very hesitant to communicate with vendors outside of their trusted mainframe scope. The BMC team leverages our Venafi partnership, proven solution, and mainframe network to help organizations extend machine identity security to the mainframe. See how the joint solution helps organizations automate the tedious, time-consuming and error-prone job of managing certificates on the mainframe platform.

Speakers

Ken Chism

Director Worldwide Cybersecurity Sales, BMC Software

Ken received his Masters Degree in Cybersecurity in 2021 from Arizona State University, with undergrad studies in Management Information Systems at Drake University and the University of Arizona. Ken leads the world-wide Cybersecurity Sales team at BMC Software and is highly involved... Read More →

Sponsors

BMC Software, Inc

Thursday October 3, 2024 10:45am - 11:15am EDT
Cityside

Breakout Session

Topic Machine Identity Security, Ecosystem

11:30am EDT

Securing Machine Identities in the Quantum Computing Era

Thursday October 3, 2024 11:30am - 12:00pm EDT

Cityside

Are you prepared for the post-quantum era? Explore the evolving threat landscape and the role of post-quantum cryptography (PQC) in futureproofing machine identity security. We’ll demonstrate how our deep expertise in machine identity security and comprehensive professional services can help you speed adoption of PQC solutions. You’ll gain valuable insights into the urgency of addressing quantum threats and their potential impact on machine identities, the role of PQC algorithms, and how to gain the visibility, agility, and resilience you need for a quantum-safe future. You’ll also get a roadmap for adopting PQC through tailored services, readiness assessments, platform implementation, and ongoing services.

Speakers

Paul Horn

Chief Technology Officer, Accutive Security

Paul’s belief in the importance of cybersecurity education led him to achieve a CISSP certification and begin instructing cybersecurity professionals on best practices for cryptography and key management. In the years since, Paul has led the development and architecture for Accutive’s... Read More →

Sponsors

Accutive Security LLC

Thursday October 3, 2024 11:30am - 12:00pm EDT
Cityside

Breakout Session

Topic Machine Identity Security, Post Quantum, Futureproofing

1:30pm EDT

Crypto Agility: Practical Steps that Benefit Your Business Well Before Quantum

Thursday October 3, 2024 1:30pm - 2:00pm EDT

Cityside

Right now, quantum is the bogeyman. And while it’s still just an idea, it’s an idea that should inspire improvements to your crypto agility now while you are preparing for the ultimate quantum event. Join this session to learn practical steps that will not only prepare you for post-quantum cryptography but give you a leg up in addressing current challenges like the impending 90-day TLS certificate standard and CA distrust events. Learn about solutions that will deliver the discovery, automation and reporting you need now—and keep your business secure well into the future.

Speakers

Patrick Dunaway

Operations Manager, Optiv

Operations manager, managed PKI

Sponsors

Optiv

Thursday October 3, 2024 1:30pm - 2:00pm EDT
Cityside

Breakout Session