Security

Conference schedule

Day 1: September 15, 2020

• Replay

  WELCOME: Day 1 welcome by IBM Academy of Technology President
  

  Speakers: Richard Hopkins

  Day 1 welcome by IBM Academy of Technology President

  Enter this session

• Replay

  KEYNOTE: Architecting for Reliability Presentation - 031
  

  Speakers: Ingo Averdunk

  This presentation describes key architectural patterns available to implement reliability into a software component or service. With the skill and experience in these techniques, the engineering professional can have a meaningful conversation with product owners on implementing reliability targets for a given service.

  Enter this session

• Replay

  Multicloud Encryption built for a Resilience - B - 051
  

  Speakers: Mark Buckwell

  Encryption and key management is one of the most challenging areas to get right without interfering with the resilience and operation of systems. This session discusses the design considerations for building a resilient solution for hybrid cloud.

  Enter this session

• Replay

  KEYNOTE: Resiliency and Business Update Panel Discussion - 144
  

  Speakers: Allen DownsAndrea SaylesBJ Klingenberg

  AMERICAS FRIENDLY:
  **Resiliency and Business Update Panel Discussion**
  
  Andrea to give a perspective on Business and Operational Resiliency – especially in light of the COVID-19 Pandemic, and she will host a panel to discuss the market/client view of Business and Operational Resiliency, as well as the current state of accelerated cyber security attacks given the vulnerabilities caused by COVID-19. She will also give a view of what the IBM company is doing for Business Continuity Management (BCM) and how we are keeping our employees and clients safe in this highly volatile environment. Her guests on the panel will be:
  
  Allen Downs, VP, Global Sales, Business Resiliency Services
  
  BJ Klingenberg, CTO, Business Resiliency Services
  

  Enter this session

• Replay

  PANEL: Consumer and Travel & Transportation - P02
  

  Speakers: Chad Andrews (moderator)J Gregory Land (GREG)Jane CheungLauren IsbellNikiforos ChatzopoulosSashank Rao Yaragudipati

  AMERICAS FRIENDLY:
  PREVAIL2020 brings to you an amazing panel discussion featuring a number of industry experts from IBV and Industry Academy who speak about how businesses and industries are changing during pandemic and what will take precedence post pandemic. Our panellists are coming from Consumer and Travel & Transportation industries. Do not miss on this spectacular opportunity to hear from our experts.
  

  Enter this session

Day 2: September 16, 2020

• Replay

  KEYNOTE: SRE in IBM Cloud - 128
  

  Speakers: Ralph Bateman

  SRE is a term now used widely across our industry. But what does it mean and how can you do it? Ever wanted to know how to achieve high availability, but fast and frequent deployment to production. How can you enable Development squads to deploy to production as often as they want without risking outages? Learn how AIOps and Chatbots can help save you time and effort in a highly availably production system. This session will cover all these topics and more.

  Enter this session

• Replay

  Threat modelling Process in Software Development - 024
  

  Speakers: Samvedna Jha

  Threat modelling is not a new process to industry. But as other processes this also needs reminder and revisit by many of us. With Agile becoming an integral part process of software development the focus has shifted to continuous delivery. Threat modelling process helps to pause and look into corner cases of the product. Asset identification, trust level of users and overall communication in and out of product is the need of the hour. Threat model comes as a rescue to identify the vulnerabilities of product. It helps to seed security thoughts during the design of product. Doing product vulnerability analysis in such early stage of development helps us achieve security in design. The proposed session will share sample threat models from legacy software and cloud application. How in different product type we need to think about how to create threat model and keep it up-to-date for future releases.

  Enter this session

• Replay

  Security of the Internet of Things - 036
  

  Speakers: Rima Bose

  Mobile devices, wearables and industrial internet of things will grow tremendously in next five years. This growth will be fueled by 5G, which will revolutionize the way we live and work. Despite these advantages of 5G, security experts are wary that 5G together with internet of things (IoT) will increase the attack surface, bringing new types of cyber vulnerabilities into our lives.

  Enter this session

• Replay

  Security planning to transform business operations on Cloud - Postpandemic - B - 056
  

  Speakers: Sabitri Chakraborty

  TThis session will provide pointers on the strategic planning vectors for managing the cybersecurity threat landscape as businesses migrate to Cloud to drive operational efficiency in the post pandemic world.

  Enter this session

• Replay

  WELCOME: Day 2 welcome by IBM Academy of Technology President
  

  Speakers: Richard Hopkins

  Day 2 welcome by IBM Academy of Technology President

  Enter this session

• Replay

  Applying zero trust in an hybrid cloud environment: one principle at dual speed - B - 020
  

  Speakers: Stefaan Van Daele

  Most organizations have their workloads (data and applications) distributed between an on premise infrastructure and different variants of cloud computing (IaaS, Paas, SaaS). Now when an organization would like to apply the zero trust principles in an holistic way they are confronted with different capabilities and different constraints in both environments. In this session I would like to highlight both the opportunities as well the challenges that organizations are faced with when they start to apply the zero trust principles as part of their overall security governance. Cloud providers have in general the zero trust principles already built in but where to start in the data center and how to cope with security at dual speed?

  Enter this session

• Replay

  Security best practices for a container platform - B - 021
  

  Speakers: Jerome Tarte

  Security is a key requirement in IT. If Cloud container platform changes the way to develop, deploy and operate applications, the need of security is still valid. The architecture that are deployed should be compliant with security rules and compliance requirements. During the session, we will visit what are the best practices to secure a cloud container platform, based on IBM Cloud Paks and Openshift. The advices and best practices are based on lessons learned from real client projects. By following these best practices, your container platform will become more secure.

  Enter this session

• Replay

  KEYNOTE: Performance Engineering: The IBM Garage Perspective - 145
  

  Speakers: Stacy Joines

  Hybrid Cloud brings not only new technology, but also a new culture to traditional IT. This culture change is most famous for its embrace of techniques like Design Thinking, Agile development, and pair programming. This presentation discusses how Hybrid Cloud technology and culture reaches into the space of performance and scalability. We’ll discuss considerations and lessons from real-world experiences to engage the scalability and power of the Hybrid Cloud. The presentation will also cover how one team, the IBM Garage, is working to incorporate operational success factors like Scalability and Security into the very fabric of the new development culture.

  Enter this session

• Replay

  KEYNOTE: Resilience through security on the cloud - 143
  

  Speakers: Chris Dotson

  How does security affect resilience? For example, are your cloud security measures implemented in a way that can respond to changing demand quickly, and do your security measures make your environment more resistant to disruption from different types of attacks? In this session, we'll discuss the essentials of cloud security -- such as threats, vulnerabilities, risks, and preventive and detective controls, and how different security measures can both positively and negatively impact resilience.

  Enter this session

• Replay

  Methods and Techniques for Securing Enterprise Applications deployed on IBM Cloud Paks - B - 041 -
  

  Speakers: Surya DuggiralaYanni Zhang

  This session will discuss security mechanisms supported by IBM Cloud Paks to harden cloud platforms and applications like network security, Identity and access management, application security, end point security. This session also discusses how to characterize security performance and how to reduce the overhead balancing both security and performance needs of applications

  Enter this session

• Replay

  PANEL: Banking & Financial Markets and Healthcare & Life Science - P01
  

  Speakers: Anil JainDhiraj KunwarHeather Fraser (moderator)Jianying HuPaolo Sironi

  AMERICAS FRIENDLY:
  PREVAIL2020 brings to you an amazing panel discussion featuring a number of industry experts from IBV and Industry Academy who speak about how businesses and industries are changing during pandemic and what will take precedence post pandemic. Our panellists are coming from Banking & Financial Markets and Health & Life Sciences industries. Do not miss on this spectacular opportunity to hear from our experts.
  

  Enter this session

• Replay

  DevSecOps - Approaching devops through the lens of security - B - 114
  

  Speakers: Ahmed AbdelazizAndrea CrawfordHemankita PerabathiniHollis Chui

  Discussion on DevSecOps, what it means and some of the best practices in the modern Cloud Native world.

  Enter this session

Day 3: September 17, 2020

• Replay

  Making a secure transition to IBM public cloud - 080
  

  Speakers: Gillian Yu

  This talk will share experience and practices about how we protect the whole DSWC portfolio on IBM public cloud from different aspects: Architecture Design, Application, Container, Data(SQL and noSQL databases), Operation(DevSecOps), Cloud platform, Network etc. After this presentation the audience will learn how to build a cybersecurity model on public cloud and get some real, on-the-ground experiences/practices. These experiences will defintely benefit other IBM portfolios as well as our clients.

  Enter this session

• Replay

  WELCOME: Day 3 welcome by IBM Academy of Technology President
  

  Speakers: Richard Hopkins

  Day 3 welcome by IBM Academy of Technology President

  Enter this session

• Replay

  KEYNOTE: Double Trouble: how Operations Risk Insights mitigates the pandemic and global cyclone threats - 141
  

  Speakers: Chet KarwatowskiRahul NaharThomas Ward

  Double Trouble: how Operations Risk Insights mitigates the pandemic and global cyclone threats for IBMers and Non-profit Disaster Relief Agencies

  Enter this session

• Replay

  Our Journey to Continuous Compliance - B - 058
  

  Speakers: Andreas WespiChris GiblinDave RyanGrant MillerMonica ManniPascal Vetsch

  In this talk we present methods, tools, and processes that we have developed for the continuous compliance of the IBM GCDO Cognitive Enterprise Data Platform (CEDP). The presentation covers not only the newly developed tooling but also its management and the related compliance processes.

  Enter this session

• Replay

  KEYNOTE: AI for Performance Engineering - 017
  

  Speakers: Sam Lightstone

  AI is disrupting system performance. In this session CTO and IBM Fellow Sam Lightstone will highlight some of the emerging AI technologies that are creating knew opportunities for performance engineering. From Machine Learning to Deep Learning to Neuromorphic computing, learn how performance engineering is entering a new era beyond the fundamentals of throughput and latency of compute, storage and network. Profound changes are occurring as every layer of the stack is increasingly infused with AI.

  Enter this session

• Replay

  KEYNOTE: AI for IT Operations Management - 127
  

  Speakers: Rama Akkiraju

  Recent advancements in Cloud computing, which makes compute available for rent, Natural Language Processing via pre-trained language models such as Bi-directional Encoder Representations from Transformers (BERT) for language understanding, and Machine Learning via interpretable machine learning models are all making it possible to infuse AI into traditional business processes by tapping into semi-structured and unstructured data that was not effectively tapped into before. In this talk, I will discuss the opportunity to infuse AI into IT operations management. I will demonstrate how AI enables us to mine application and infrastructure logs, tickets, and IT Operations managers’ collaboration chat conversations in addition to metrics that are traditionally analyzed to better diagnose, repair and resolve problems. In addition, I’ll discuss how we can proactively avoid issues from happening by improving the quality of the software development lifecycle artifacts via feed-forward and feedback loops.

  Enter this session

• Replay

  Implementing Policy-Based Access Control in a hybrid cloud datalake - B - 122
  

  Speakers: Andreas WespiChris GiblinGrant MillerIlya Hardzeenka

  This presentation will cover the evolution of access management for a complex and distributed set of cloud resources while building IBM’s internal data platform. We will discuss the advantages and disadvantages we encountered along the way, the best practice patterns we have found, and a recommendation on how to follow.

  Enter this session

Day 4: September 18, 2020

• Replay

  Trust, No Trust or Zero Trust – Myths Demystifying - 025
  

  Speakers: Vandana Verma

  This talk will explore the concept of zero trust and will try to demystify zero trust models. The talk will focus on implementation and deployment scenarios of zero trust for organizations. How should the business prepare for the transition, what are the architectural requirements and what policies are required to be implemented?

  Enter this session

• Replay

  Cloud Security - 037
  

  Speakers: Rima Bose

  Cloud Security

  Enter this session

• Replay

  Essence of IOT Security testing - Firmware & Embedded Web Applications - 111
  

  Speakers: Geethu AravindSaha Mukesh

  • Network Security Assessment • Application Security assessment • IoT Devices security assessment • Secure code review • Configuration Review • Security Assessment of Mobile Applications • Malware Analysis

  Enter this session