Bits of Security
Datadog invites you to participate in our multi-day security conference. We'll explore security across a variety of defensive topics. Learn from industry leaders in key areas like supply chain, vulnerability assessment, and appsec.
The past year introduced a plethora of challenges for security practitioners. While the range of cyber attacks has been vast, these attacks have been confronted with creative defense tactics and techniques. Join Datadog for a practitioner-focused event where we will examine the “Art of Defense,” which will include a range of topics from social problems to engineering challenges around supply chain attacks.
Attendees will receive practitioner level guidance across a variety of security topics and walk away with actionable insights that can be applied within their own organizations. They will also have the opportunity to attend talks led by security industry experts as well as Datadog’s internal security team. To wrap up the event, attendees can participate in a hands-on Capture-the-Flag workshop held on day three. Don’t miss this opportunity to learn more about Datadog’s security approaches and how to strengthen your organization’s defense tactics and techniques.
March 30 - 11:15 a.m. EDT
Security talks from technologists at Twitter, Fastly, Snyk.io, Expel.io, PedidosYa
March 31 - 11:30 a.m. EDT
Datadog on Security and Compliance
April 1 - 11:00 a.m. EDT
Datadog x Hack The Box: Capture the Flag
Laura Thomson
Vice President of Engineering
Fastly
Laura Thomson is Vice President of Engineering at Fastly, where she leads the Platform Engineering team. She is also a member of the Board of Trustees of the Internet Society. Previously, she spent more than a decade at Mozilla, leading engineering and operations teams, and was on the board of Let's Encrypt. Laura has spoken at many conferences world wide over the last twenty years and is the author of best-selling software development books.
Liran Tal
Director of Developer Advocacy
Snyk.io
Liran Tal is an application security activist and long-time proponent of open-source software. He is a member of the Node.js security working group, an OWASP project lead, and author of Essential Node.js Security and O'Reilly's serverless Security. At Snyk, he leads the developer advocacy team, and his main mission is to empower developers with better dev-first security.
Kelly Kaoudis
Sr. Software Engineer
Twitter
Kelly Kaoudis is a senior software engineer living in Boulder, CO. Rather than finishing a PhD in network security, Kaoudis joined Twitter in 2016, where she currently works on the Application Security team. In her free time, she enjoys skiing, gardening, and aikido.
Santiago Rosenblatt
Head of Information Security - Application Security
PedidosYa
Santiago Rosenblatt is a passionate, 24-year old entrepreneur. At the age of 6, Rosenblatt started hacking, and he still loves building interesting and useful solutions for everyday problems. Professionally, he has performed as both a Software Engineer and a Cloud Engineer, and he is currently the founder and CEO of Strike.sh (to be released August 2021: the “Uber of cybersecurity”) as well as the Head of Application Security at PedidosYa. This year he will complete his Computer Engineering degree where he has pursued studies at several universities, including University of Oxford.
In his free time, Rosenblatt enjoys hanging out with family and friends, participating in sports, playing music, reading, traveling, volunteering, or hacking. Fun Fact: he has found vulnerabilities in Netflix, PayPal, Astropay, Spotify, PedidosYa, CandyCrush, SongPop and Trivia Crack among many others.
Peter Silberman
CTO
Expel.io
Peter Silberman, Chief Technology Officer (CTO) at Expel, splits his time between two different initiatives. He is involved with ensuring that Expel has a robust detection and response strategy for all of its technical partners and integrations, and he helps Expel push the envelope with new ways to improve analyst experience and efficiency. He works to achieve these two initiatives while also driving new service capabilities built on top of those integrations. According to Silberman, Expel’s exceptional team of engineers get to do all the code writing (the fun stuff!) whereas he gets to write docs and draw pictures for others (the not-as-fun-as-coding-but-still-necessary stuff).
Dan Whalen
Principal Detection & Response Engineer
Expel.io
Dan Whalen is a Principal Detection & Response Engineer at Expel.io. In his various roles over the years, he’s been exposed to a ton of different environments, unusual attacks, and challenging security problems. Lately, he's been focused on helping organizations detect and respond to security threats in their cloud infrastructure.
Hack The Box
Hack The Box (HTB) is the fastest growing hacking playground and cybersecurity community in the world. HTB has grown to over 500,000 members in less than four years. The platform allows individuals, businesses, and universities to level up their skills in the most practical and gamified way possible. Over 400 constantly updated virtual labs, real-time hacking games, and the newly announced HTB Academy compile the wide product portfolio of the company that is on a mission to upscale the cybersecurity capabilities of every professional and organization in the world. Cyber training gamified, hack your way in at https://www.hackthebox.eu/login
Emilio Escobar
Chief Information Security Officer
Datadog
With two decades of experience in Information Security and Compliance, Emilio Escobar has worked at large enterprises, medium-sized companies, and governmental organizations. Previously, Emilio served as the VP of Information Security for Hulu, where he played a pivotal role in setting up key security functions. Prior to that, Emilio worked for PlayStation, where he built and ran the software security teams. Emilio’s unique approach to security and compliance has always prioritized partnerships and people—hiring the right talent to build the processes, procedures, and technologies that unite Security, Engineering, and Operations teams. Emilio holds a BS in Computer Science from the University of Puerto Rico.
Andrew Krug
Technical Evangelist
Datadog
Andrew Krug is a Security Engineer specializing in Cloud Security and Identity and Access Management. Krug also works as a Cloud Security consultant and started the ThreatResponse project, a toolkit for Amazon Web Services first responders. Krug has been a speaker at Black Hat USA, DerbyCon, and BSides PDX.
Kirk Kaiser
Technical Evangelism Team Lead
Datadog
Kirk Kaiser is the Evangelism Team Lead at Datadog, where he works to help developers become more effective. He's also the author of Make Art with Python, a book teaching Python through creative programming.
Prior to Datadog, Kirk wrote the backend infrastructure for two apps in the Top 100 apps in the App Store, won an award for a site built for GE, helped design an IoT lighting control system, and ran the infrastructure for a large eCommerce company.
Andrew Spangler
Information Security Team Lead for Governance, Risk, and Compliance
Datadog
Andrew Spangler is the Information Security Team Lead for Governance, Risk, and Compliance (GRC) at Datadog. GRC is responsible for the design, integration, and continuous improvement of security, risk, and compliance programs at Datadog. Andrew also enjoys cooking, and is working on perfecting his charcoal BBQ game.
Tuesday, March 30
Wednesday, March 31
Thursday, April 1
Hell Is Other People’s Code: Supply Chain Security (and what it means for you)
Laura Thomson
Vice President of Engineering
Fastly
Millions of lines of other people’s code runs in your environment. Today, a new vulnerability is reported in a third party library. Are you affected? What systems are at risk? How would you even know the answers to these questions? In this talk I’ll discuss why supply chain security matters, how problems occur, and how you can improve your visibility into and response to these risks.
Stranger Danger: Finding Security Vulnerabilities Before They Find You!
Liran Tal
Director of Developer Advocacy
Snyk.io
Open source modules on the NPM ecosystem are undoubtedly awesome. However, they also represent an undeniable and massive risk, since you’reintroducing someone else’s code into your system, often with little or no scrutiny. The wrong package can introduce critical vulnerabilities into your application, exposing your application and your user's data. This talk will use a sample application, Goof, which uses various vulnerable dependencies, which we will exploit as an attacker would. For each issue, we'll explain why it happened, show its impact, and—most importantly—learn how to avoid or fix it.
Fraud Detection using Datadog and Sherlock
Santiago Rosenblatt
Head of Information Security,
Application Security
PedidosYa
From day one, most organizations,especially the big ones, are targeted with a broad range of attacks. These range from information exfiltration attempts to fraud. Although a great majority of them can be addressed with the help of a Web Application Firewall, there are some that require more extensive tooling.
Join me as I show you how we use Sherlock and Datadog to block 30,000+ fraudulent users per week in seconds. We will also discuss other applications and how you can implement similar solutions.
"db.topics.insertOne({name:"Database observability for security purposes"})"
Peter Silberman
CTO
Expel.io
Dan Whalen
Principal Detection & Response Engineer
Expel.io
Is your database the elephant in the SOC? In this talk, we'll dive into an oft-ignored topic: database security monitoring. Using MongoDB Atlas as an example, we'll wipe the cobwebs off ‘ye olde' architecture diagram and brainstorm together about what a great monitoring strategy looks like. You'll leave this talk with a handful of detection opportunities based on data you likely already have at your disposal.
Datadog on Security and Compliance
Kirk Kaiser
Evangelism Team Lead
Datadog
Andrew Spangler
Information Security Team Lead for SRC
Datadog
At Datadog, customer trust and data security are of the utmost importance.
As a high growth company, navigating the tradeoffs of security and development agility are especially critical. Our customers expect us to continually improve our platform, while providing a compliant, secure environment for their most critical data. Balance is key to rolling out features rapidly and keeping systems secure.
In this episode of “Datadog on,” join Kirk Kaiser and Andrew Spangler, Team Lead for Information Security, as they talk about how Datadog approaches compliance in a multi-cloud, multi-region, and multi-security level environment.
They’ll discuss how Andrew and his team encourage organization compliance collaboration across teams, while still giving space for teams to get their work done. They’ll also touch upon some tools enabling automated security and compliance, and discuss strategies and organizational challenges that apply to multi-cloud.
Application Security at Scale
Kelly Kaoudis
Sr. Software Engineer
Twitter
At Twitter, the Application Security team’s mission is to make developing secure-by-default software the easy path. Lately, we’ve been modernizing Twitter’s approach to OWASP Top 10-listed web application security risks like XSS and CSRF. This work involves scaling older mitigations, which were not initially built to protect entire distributed systems, to Twitter's scale. This talk will cover some of the challenges we encountered when adapting our work to bigger distributed systems, and how we integrated within existing Twitter-wide security systems, simplified adoption for engineers, and improved visibility of our work within Twitter.
Registration for this event is closed.
By attending this event I acknowledge that I may be exposed to information which the Exhibitor, Datadog, Inc., considers confidential and wishes to limit the disclosure of. I hereby agree to keep such information confidential and to not disclose such information to any third parties. I further represent that I am not employed by a competitor of the Exhibitor and am not attending this Event with the intent to access any such confidential information or gain a competitive advantage for my employer. I hereby give permission to the Exhibitor to use my image, likeness, appearance, voice, and any written or spoken testimonials given by me in connection with the marketing and promotion of this Event and/or any Datadog products or Events.