BSidesMKE

A lot has been said about GenAI, but it’s hard to tell whether it’s a natural hype cycle or a bubble. This talk will talk about practical and future uses of AI that magnify the capabilities of those who use it. Less in a business way, and more in an individual way. It will give practical examples of how I integrate AI already in my daily life, and how I am working to expand that integration

Join me as we delve into the frequent hurdles encountered in security operations amid the dynamic cybersecurity landscape. We'll shed light on the persistent challenges faced by security professionals across various sectors, including corporate, government, and critical infrastructure. From navigating rapidly evolving threat landscapes to grappling with limited resources and the scarcity of skilled personnel, we'll explore the multifaceted issues at hand. Additionally, we'll address the complexities introduced by emerging technologies like artificial intelligence and the Internet of Things, which bring forth new security risks. I'll emphasize the importance of collaboration among stakeholders, the value of information sharing, and the development of effective incident response strategies. By recognizing and understanding these common challenges, we can better equip ourselves to protect our organizations and networks in an increasingly interconnected and vulnerable digital environment.

Your host for the day! Jo Jones is more excited to be running BSides than she was to meet Godzilla! Jo is looking to bring a new experience to Milwaukee, and she is excited to help others resist complacency and reach new heights in the professional lives.

While believability of an AI (Turing test) is important in many applications, the need for forensic truth is paramount in cybersecurity application. In this session, we will evaluate methods for training and tuning models that meet requirements of evidence handling, business analysis and legal and martial response. Data verification, sanitization, and vectorization will be reviewed in this session. Research for preventing AI "hallucinations" and treating data as evidence in inferences will also be covered.

Attack Surface Management (ASM) has traditionally focused on internal processes, assisting corporations in assessing the scope of their network assets and identifying potential attack vectors. However, this presentation delves deeper, shedding light on the multifaceted nature of cyber threats in both personal and corporate domains. It emphasizes the importance of understanding what's on the network and how attackers can navigate from seemingly innocuous entry points to full-scale network compromise.

Software Bill of Materials (SBOM) are showing up everywhere now. Government regulations, regulated industries, customer demands, management questions. But what do they actually do and do you REALLY need one? If you read any security news lately, it seems like everyone is talking about how an SBOM can solve whatever problem is going on. And it sounds like everyone else is YEARS into their SBOM journey. But many of us don’t even know what they are. The reality is nobody actually has SBOMs figured out, or even know what to do with them. SBOMs are still very new and come with some benefits as well as challenges. In this session we will look at what an SBOM is. Did you know there are different data formats and even different types of SBOMs? We will cover what we can do with them, and some of the coming tools and ideas around SBOMs. The future is already here – it’s just not very evenly distributed.

Defending against the latest threats requires timely, actionable intelligence. In an active sharing community that has members of varying maturity, resources, and team staffing, you need a way to collect, normalize, enrich, and vet the shared intelligence at scale. Most will have different intelligence requirements, so flexibility is demanded to tailor to the disparate use-cases and existing workflows they may have. This presentation shows how the Retail & Hospitality ISAC leverages MISP as a community instance for their members and incorporates other free and open-source software to address these topics and more! Presentation Importance: I'm making this presentation because I want to drive the importance of sharing threat intelligence, being a part of a sharing community, and especially on the use of free and open source software. Lots of organizations today are facing very similar threats. Having a platform to facilitate the sharing and dissemination of threat intelligence is vital to any sharing community and by leveraging free and open source software you don't need to break the bank to do so.