New Jersey ISSA Chapter

Save The Date: VIRTUAL NJ ISSA Chapter Meeting on 12/15/2021
2021-12-15 16:00 - 18:00 (America/New_York)
New Jersey Chapter ISSA Meeting
Date: Wednesday, December 15th, 4:00pm – 6:00pm
Venue: Remote via Zoom (NJ ISSA Members will receive an email with Zoom instructions. Please use a contact form to request dial in details if you did not receive the email.)
3:55 – 4:00 Check In/Registration
4:00 – 4:15 NJ ISSA Chapter Updates
4:15 – 5:55 Pharma Drama: An Interactive Crisis Simulation of an Insider Threat
Jake Alosco and Jeffrey Wu, Immersive Labs
Abstract
Pharma is vulnerable. The sector, which bridges the healthcare–business divide and deals extensively with data and intellectual property (IP), is a tantalizing prospect for malicious actors. It is now one of the most targeted sectors, with over a fifth of companies suffering at least seven attacks.
Perhaps the greatest threat facing the pharma industry, however, lies inside the walls. That’s because insider threats are as much a public health issue as they are an economic one; they hamper a pharma company’s ability to remain competitive, and thus pose a risk to potential patients. IP may become inaccessible, which could affect drug production and lead to medicine running short.
This interactive webinar throws attendees into an emerging insider threat simulation taking place at a fictional pharmaceutical company. In this scenario, participants must use their decision-making skills to find the insider threat, manage the growing crisis, and prevent the loss of potentially billions of dollars.
During this session we will:

See the impact of the human element in crisis management and response
Gain a greater understanding of how decisions in a threat scenario have a business-wide impact
Discover how to strengthen your organization on both sides of “the boom”, so it’s as ready before the impact as it is after it

Speaker Bios
Jake Alosco is Senior Director of Channel Sales at Immersive Labs, working closely with partners to help business leaders drive Cyber Workforce Optimization within their organization. Prior to Immersive Labs, Jake held various channel specific roles for Contrast Security, Avecto, and Veracode.
Jeffrey Wu serves as an Enterprise Sales Engineer for Immersive Labs, helping organizations to optimize their cyber workforces to meet ever-evolving threats. Prior to Immersive Labs, Jeffrey held Engineering roles at VMware, Carbon Black, and United Electronic Industries. Jeffrey graduated from Tufts University with a BS in Electrical Engineering.
5:55 – 6:00 Closing Comments

Save The Date: VIRTUAL NJ ISSA Chapter Meeting on 9/29/2021
2021-09-29 16:00 - 18:00 (America/New_York)
New Jersey Chapter ISSA Meeting
Date: Wednesday, September 29th, 4:00pm – 6:00pm
Venue: Remote via Zoom (NJ ISSA Members will receive an email with Zoom instructions. Please use a contact form to request dial in details if you did not receive the email.)
3:55 – 4:00 Check In/Registration
4:00 – 4:15 NJ ISSA Chapter Updates
4:15 – 5:00 Presentation: The Past, Present and Future of Strong Authentication
Ashwin Rana, Chief Solutions Architect, Beyond Identity
Abstract
Authentication is a foundational element of every cybersecurity program. With more than 80% of data breaches and a large portion of ransomware incidents stemming from credential-based attacks (e.g., phishing, credential stuffing, RDP brute, etc.), it has become clear that passwords are a fatally flawed authentication method.
Speaker Bio
Ashwin has served as Chief Technical Architect at Zscaler, Director of Product Management at Nokia Networks, Senior Director of System Architecture and Product Management at AudioCodes, Inc., Director of Product Management at Netrake, among others. Ashwin received a bachelor’s degree in electrical and electronics engineering from Sardar Patel University and a master’s degree in electrical, electronics, and communications engineering from The University of Texas at Dallas.
5:00 – 5:15 Break
5:15 – 6:00 Group Discussion: Information Security Headlines
Information security incidents and media headlines are omnipresent. We will be reviewing a few interesting recent security headlines and discuss as a group – sharing collective insights, and approaches that organizations can take to respond to similar challenges we face around Cybersecurity today.
5:55 – 6:00 Closing Comments

Save The Date: VIRTUAL NJ ISSA Chapter Meeting on 3/31/2021
2021-03-31 16:00 - 18:00 (America/New_York)
New Jersey Chapter ISSA Meeting
Date: Wednesday, March 31st, 4:00pm – 6:00pm
Venue: Remote via Zoom (NJ ISSA Members will receive an email with Zoom instructions. Please use a contact form to request dial in details if you did not receive the email.)
Agenda:
3:55 – 4:00 Check In/Registration
4:00 – 4:15 NJ ISSA Chapter Updates
4:15 – 5:00 Presentation: Security Mistakes Everyone Makes: Improving work-from-home and home network security
Jeremy Druin, Education Director Kentucky ISSA Chapter
Abstract
Work from Home, School from Home, and just about Everything from Home is more popular than ever due to recent events. In this presentation, we will discuss practical steps to strengthen the security of home networks and personal devices.
Speaker Bio
Jeremy works as the Principal Security Architect for UPS where he created the application security, bug bounty and penetration testing programs. Jeremy is also the owner of Ellipsis Information Security where he provides security testing services and teaches secure application development and penetration testing courses.
As a Director of Education for the Kentucky ISSA chapter, Jeremy presents on various information security topics along with operating the “webpwnized” YouTube video channel. Additionally, Jeremy develops the open-source OWASP Mutillidae II training environment.
Jeremy has a Bachelors in Computer Science from Indiana University, a Graduate Certificate in Cybersecurity and Masters in Computer Science from the University of Louisville and is a GIAC-certified Web Application, Mobile and Network Security Penetration Tester..
5:00 – 5:15 Break
5:15 – 6:00 Presentation: Cloud Infrastructure Cyber Kill Chain – Threats & Countermeasures
Mike Raggo, Cloud Security Engineer, CloudKnox
Abstract
Attackers are maturing their TTPs to now exploit over-permissioned identities within AWS, Azure, and GCP; resulting in very prominent breaches. In this session we’ll define a new Cloud Infrastructure Cyber Kill Chain and explore these TTPs to expose unique methods of lateral movement, privilege escalation, role-chaining, and more. Real world examples and best practices countermeasures will also be covered.
Speaker Bio
Michael T. Raggo has over 20 years of security research experience. Over the years he has uncovered numerous vulnerabilities in products including Samsung, Checkpoint, and Netgear. His current research focuses on hybrid cloud security risks and threats. Michael is the author of “Mobile Data Loss: Threats & Countermeasures” and “Data Hiding” for Syngress Books, and contributing author for “Information Security the Complete Reference 2nd Edition”. His Data Hiding book is also included at the NSA’s National Cryptologic Museum at Ft. Meade. A former security trainer, Michael has briefed international defense agencies including the FBI, Pentagon, and Queensland Police; and is a former participating member of FSISAC/BITS and the PCI Council. He is also a frequent presenter at security conferences, including Black Hat, DEF CON, Gartner, RSA, DoD Cyber Crime, OWASP, HackCon Norway, and SANS. He was also awarded the Pentagon’s Certificate of Appreciation.
5:55 – 6:00 Closing Comments

Save The Date: VIRTUAL NJ ISSA Chapter Meeting on 12/16/2020
2020-12-16 16:00 - 18:00 (America/New_York)
New Jersey Chapter ISSA Meeting
Date: Wednesday, December 16th, 4:00pm – 6:00pm
Venue: Remote via Zoom (NJ ISSA Members will receive an email with Zoom instructions. Please use a contact form to request dial in details if you did not receive the email.)
Agenda:
3:55 – 4:00 Check In/Registration
4:00 – 4:15 NJ ISSA Chapter Updates
4:15 – 6:00 NJ ISSA Cyber Escape Room!
Facilitated and Sponsored by: Living Security
Join us for a unique training experience. Living Security is proud to be a facilitator of this Virtual CyberEscape Room. This is a great way to engage with colleagues in cybersecurity awareness training through online gamification! View the trailer here: https://vimeo.com/409829810
Event details below:
5:55 – 6:00 Closing Comments

Save The Date: VIRTUAL NJ ISSA Chapter Meeting on 09/30/2020
2020-09-30 16:00 - 18:00 (America/New_York)
New Jersey Chapter ISSA Meeting
Date: Wednesday, September 30th, 4:00pm – 6:00pm
Venue: Remote via Zoom (NJ ISSA Members will receive an email with Zoom instructions. Please use a contact form to request dial in details if you did not receive the email.)
Agenda:
4:00 – 4:15 NJ ISSA Chapter Updates
4:15 – 5:00 Presentation: Evolution of Network Security
Chris Morales, Head of Security Analytics
Abstract
“The machine learning gives us real-time context and insights about threat behaviors – where they are, what they’re doing and what’s affected.” – Deputy CISO at major Real Estate Firm
Attackers have a big advantage in circumventing signatures, reputation lists and other prevention security defenses. Malware can gain a foothold as endpoints and networks are left vulnerable, with no way for signatures to catch unmapped threats. Combining data science, machine learning and behavioral analysis, automated threat management detects malicious behaviors inside the network, regardless of the attacker’s attempt to evade signatures and whether it’s an insider or outsider threat. This session will focus on the evolution of network security and for a real-world attack storyboarding comparing signatures to behavioral analysis methods.
Speaker Bio
Chris Morales is Head of Security Analytics at Vectra, where he advises and designs incident response and threat management programs for Fortune 500 enterprise clients. He has nearly two decades of information security experience in an array of cybersecurity consulting, sales, and research roles. Christopher is a widely respected expert on cybersecurity issues and technologies and has researched, written and presented numerous information security architecture programs and processes.
5:00 – 5:15 Break
5:15 – 6:00 Presentation: Cyber Security Simulations
David Krygowski, CyberBit
Abstract
This session will focus on the use of software to be a realistic ‘flight simulator’ for their cyberwarfare adopted by SOC’s across the world. This contrasts significantly with regards to attending courses or tabletops. Cyber simulation is a tool to train and onboard security teams, assess candidates, and test playbooks and technologies in a safe and controllable environment, ensuring their security teams are prepared for simple minor attacks or complex critical attacks.
Cyber simulations can be a training tool to provide:

Train red, blue, purple teams
Assess new hires
Simple to use
Test configurations, products, and playbooks in a safe environment
Rich catalog of out of box simulated scenarios
Customizable & dynamic
Real security technologies like Splunk
Real network traffic
Real actual attacks

5:55 – 6:00 Closing Comments

NJ ISSA Chapter Meeting on 03/25/2020 - CANCELLED
2020-03-25 16:00 - 19:00 (America/New_York) | Deloitte Office, 100 Kimball Drive, Parsippany, New Jersey, 07054
We have come to the decision that due to the spread of COVID-19 the March 25th chapter meeting has been cancelled. Our next scheduled meeting is for June 24th.
=======================================================
New Jersey Chapter ISSA Meeting
Date: Wednesday, March 25th, 4:00pm – 7:00pm
Venue: Deloitte, 100 Kimball Drive, Parsippany NJ
Agenda:
3:30 – 4:00 Check In/Registration
4:00 – 4:15 NJ ISSA Chapter Updates
4:15 – 5:15 Presentation: Automate or Die – DevSecOps in the Age of Software Supply Chain Attacks
Irina Tishelman, Solution Architect, Sonatype
Abstract
As nimble organizations deliver new innovations, adversaries are also upping their game; something we’ve seen in recent high profile and devastating cyber attacks. Bad actors have the intent and ability to exploit security vulnerabilities in the software supply chain – and in some cases plant vulnerabilities themselves. They have increased scale through automation and improved breach success through precision targeting. If we don’t fight back by doing the same – automating security directly in the DevOps pipeline – then we’ll always be at the hackers’ mercy. This session will provide new research on the above, and details on how to get started.
Key takeaways:
• Real-world examples of how large and small companies are implementing DevSecOps practices in their own delivery pipelines, and increasing developer awareness to risks
• Key insights from the 2019 DevSecOps community report – including the top investments for automated security
• A walkthrough of how security principles have been automated into a CICD pipeline and what standards for implementation are beginning to follow suite
• Why DevSecOps is more than a buzzword, and why it’s vital to protecting your software supply chain
• How automating security of policies makes it harder to ignore.
5:00 – 5:15 Break
5:15 – 6:00 Group Discussion: Information Security Headlines
Information security incidents and media headlines are omnipresent. We will be reviewing a few interesting recent security headlines and discuss as a group – sharing collective insights, and approaches that organizations can take to respond to similar challenges we face around Cybersecurity today.
6:00 – 7:00 Cocktail Reception

NJ ISSA Chapter Meeting on 12/11/2019
2019-12-11 16:00 - 19:00 (America/New_York)
New Jersey Chapter ISSA Meeting
Date: Wednesday, December 11th, 4:00pm – 7:00pm
Venue: Deloitte, 100 Kimball Drive, Parsippany NJ
Agenda:
3:30 – 4:00 Check In/Registration
4:00 – 4:15 NJ ISSA Chapter Updates
4:15 – 5:00 Presentation: War Stories from the Cyber Front Lines
Ryan Wakeham, Sr Director, Strategic Solutions
Abstract
In this presentation, we will touch on the objectives of penetration testing as well some insights and general learnings. Once oriented, we will explore anecdotes – or war stories – from the NetSPI project archives. These stories will illustrate the breadth of vulnerabilities that are commonly found in systems, networks, and applications that NetSPI tests, as well the creative lengths to which NetSPI pentesters will go to identify these issues and ultimately help clients strengthen their security postures in the uncertain cyber landscape of the post-digital age..
Bio
Ryan is one of the longest tenured members of the NetSPI team managing varying aspects of the company in that time including leading our testing practice. Today he consults directly with clients and prospects on developing IT risk management and security program development solutions. He has years of computer security experience, thirteen of them with NetSPI. He holds a BA in Computer Science from Carleton College and an MS degree in Information Security from the Georgia Institute of Technology.
5:00 – 5:15 Break
5:15 – 6:00 Presentation: Securing the Post-Perimeter World: The biggest threat to your enterprise data is in your hand.
Keith Cowan, Sr Systems Engineer & Frank Arena, Sales Director
Abstract
In this presentation we will discuss why in our now Post-Perimeter World there is a need to move the protection that firewalls provide to the endpoint. More specifically, that any endpoint must be authenticated every time it connects to the enterprise, and should be continuously assessed while connecting to enterprise data.
Bio
Keith Cowan is a Sr Systems Engineer at Lookout. Keith brings over 20 years of Security Engineering and design expertise in a multitude of areas including Cloud Security, Mobile Security, Data Security. He has worked with both Cloud Infrastructure, IAAS, on both hardware and software platforms.
Frank Arena has 30 years IT experience with various Professional Certifications & Accreditations including Juniper Networks VSKO Certification and Cisco Security Sales Specialist Cisco Routing and Switching Sales Specialist. Frank also serves as an elected official in New Jersey where he serves as a Town Councilman in Westfield, NJ. Frank holds a Bachelor of Science in Business Administration, Economics and Marketing from Susquehanna University.
6:00 – 7:00 Cocktail Reception

NJ ISSA Chapter Meeting on 09/25/2019
2019-09-25 16:00 - 19:00 (America/New_York)
More information will be provided

2nd Annual NJ ISSA Golf event
2019-09-12 13:00 - 21:00 (America/New_York)
Annual NJ ISSA Cyber Security Golf Classic is exceptional event that brings together cyber security professionals (NJ ISSA members as well as non-members) for a spectacular day of golf and networking.
More information available here.

ISSA & ISC2 joint chapter meeting
2019-06-27 16:00 - 19:00 (America/New_York) | Deloitte Office, 100 Kimball Drive, Parsippany, New Jersey, 07054
3:30 – 4:00 Check In/Registration
4:00 – 5:00 Presentation: Continuous Vulnerability Management
Peter McMullen, Onapsis
Abstract
How to protect business-critical applications against internal misuse and external attacks to give organizations visibility into the ERP landscape, including threats and vulnerabilities. Further discussion on how to prioritize remediation efforts based on criticality and impact and reduce the attack surface by preventing and blocking misconfiguration or unauthorized changes. Peter will also be providing an overview of the common challenges customers face relative to security, compliance, and moving to S/4HANA.
Bio
Peter McMullen is VP Sales at Onapsis and has been a frequent sponsor of the NJ ISSA in the past at his previous companies, and he is also a member of the NJ ISSA. Peter joined Onapsis in January of 2019 and has been in the cyber security solutions market for 10 years exclusively. Prior to Onapsis, Peter held sales management roles at Anomali, Cyphort, and Juniper Networks via the acquisition of Altor Networks.
5:00 – 5:15 Break
5:15 – 6:00 Group Discussion: Information Security Headlines
Information security incidents and media headlines are omnipresent. We will be reviewing a few interesting recent security headlines and discuss as a group – sharing collective insights, and approaches that organizations can take to respond to similar challenges we face around Cybersecurity today.
6:00 – 7:00 Cocktail Reception

SECON 2019 Social Engineering Awareness Conference
2019-05-21 08:00 - 16:00 (America/New_York)
You are invited to SECON 2019 – Social Engineering Awareness Conference, organized by the ( ISC)2 New Jersey, ISACA New Jersey, and ISSA New Jersey with volunteers from OWASP, Women In AppSec, Women CyberSecurity Society (NY) Chapters.
The SECON promises to be well-attended by members of the information technology, information security, audit, academic, and business communities. This year’s conference will be limited to 300 quality attendees including 250 mid-level to senior managers and 50 students from technology and business.
For more information, click here.

NJ ISSA Chapter Meeting on 03/27/2019
2019-03-27 13:00 - 16:00 (Africa/Abidjan)
Exciting news! Our next chapter meeting will be held at the NJCCIC Regional Operations Intelligence Center. The New Jersey Cybersecurity and Communications Integration Cell (NJCCIC) is the State’s one-stop shop for cybersecurity information sharing, threat analysis, and incident reporting. Please visit their website, https://www.cyber.nj.gov/, for more information.
Please contact Arthur Hedge if you are planning on attending our meeting. You must provide your full name and the license plate of the vehicle that you will be using to get there. No on-site registration will be allowed.
New Jersey Chapter ISSA Meeting
Date: Wednesday, March 27, 2019
Time: 1:00pm – 4:00pm
Venue: NJCCIC, 2 Schwarzkopf Dr., Ewing Township, NJ 08628
Tentative Agenda
1:00 – 1:30pm Arrival (plan to arrive no later than 1:30)
1:30 – 2:00pm Introduction from Chapter Officers
2:00 – 3:00pm NJ CCIC Overview and Facility Tour
3:00 – 4:00pm Presentation

NJ ISSA Chapter Meeting on 12/12/2018
2018-12-12 16:00 - 19:00 (Africa/Abidjan)
3:45 – 4:15 Check In/Registration
4:15 – 5:00 Understanding and Breaking the Barriers to “Privileged Access Management”
Richard Conte, One Identity
Abstract
A discussion of the top reasons PAM fails, and a roadmap for the simplest way to PAM
Bio
Rich Conte is a Senior Solutions Architect with over 30 years of information technology and security expertise. This experience includes solutions architecture, application development, Identity and Access Management, Directory Infrastructure, Single Sign On, Privileged Access Management, and Identity Governance.
Today, as a Quest Software Security Solution Architect, Rich is helping customers’ address their biggest Identity Governance, Access Management, and Privileged Access Management challenges using a proactive, rather than a reactive, approach. Prior to joining Quest, Rich held similar rolls at Sun Microsystems and HP.
5:00 – 6:00 Enhancing Security in Microsoft Office 365 & at the Endpoint
Scott Messick, Senior Sales Engineer, ClearSwift
Melvin Montalvo, USA Enterprise Account Manager
Abstract
Many organizations across various verticals have either moved or are strongly considering a move to Office 365. Yet, these systems represent a substantial threat of data loss due to hackers, phishing and insider threats – and the threat landscape is continually evolving. This presentation will examine the current threat landscape and Secure Email Gateway’s ability to substantially enhance Office 365 security via an integrated approach. Traditional endpoint tools incorporate threat protection but regulations and business requirements have raised awareness to tighten the Endpoint by enhancing DLP controls. Today, advanced security and data loss prevention (DLP) features are needed to combat information borne threats across email as well as the endpoint.
Bio
Scott Messick is a Senior Sales Engineer with Clearswift based in New Jersey. In this role he works with the largest Clearswift customers and prospects across North and South America. Scott joined Clearswift after 12 years with Credit Agricole Corporate Investment Bank (CA-CIB). While with Credit Agricole, Scott was a Windows Technical Lead, a Windows Platform Engineer, a Windows Platform Group Manager and was promoted to Director prior to moving to Clearswift. Scott also served on the IT and IT Security Management Committees that oversaw all North and South America IT and IT Security infrastructure operations for the Bank.
Melvin Montalvo is a USA Enterprise Account Manager based in New Jersey. Melvin develops business relationships for Clearswift in regulated sectors across the country. Prior to Clearswift, Melvin started and built an MSP practice serving customers in the financial, healthcare, pharmaceutical and technology sectors delivering a host of cloud based applications and business continuity/disaster recovery solutions. He successfully sold the MSP business and has served on several committees, councils and peer groups discussing the latest technology threats and cultivating infrastructures for mid markets and enterprise organizations. Besides his own MSP practice, his corporate experience includes Bank of America & Robert Half International.
6:00 – 7:00 Cocktail Reception

NJ ISSA Chapter Meeting on 06/27/2018
2018-06-27 16:00 - 19:00 (Africa/Abidjan)
3:30 – 4:00 Check In/Registration
4:00 – 4:45 Moving to SOC 2.0 and an Intelligence-Led Security Operation
Michael Katz & Teddy Powers – Anomali
Abstract
Review of best practices in threat intelligence, automating collection and integration, and enabling security teams to analyze and respond to threats.
Bio
Teddy is a Senior Sales Engineer who has been with Anomali for over 3 years. He supports Anomali customers and partners in the NY Metro regions, and frequently speaks at conferences and trade show events.
4:45 – 5:15 Myths and Realities of the Deep and Dark Web
Mark Eaton & Frank Lulgjuraj – Solutions Architect
Abstract
Educational overview of the threats in the Dark Web and what companies can do to prepare and address including threat intelligence and cybersecurity platforms.
Bio
Mark and Frank are Solutions Artichtects at Flashpoint and specialize in delivering sophisticated technology and human-powered analysis enable enterprises and public-sector organizations globally to bolster cybersecurity, confront fraud, detect insider threats, enhance physical security, assess M&A opportunities, and address vendor risk and supply chain integrity.
5:15 – 6:00 Threat Hunting and Proactive Processed to Measure Probability of Compromise
Ondrej Krehel – CEO and Founder LIFARS
Abstract
This session will cover real strategic tactics and techniques to seek for malicious threat actors (example of APT10 will be presented) and model situations through leveraging unified threat intelligence solution on endpoints, network, and SIEM. Particular attention will be put on the early detection and effective elimination of false positives.
Bio
Ondrej Krehel is the Digital Forensic Lead, CEO & Founder of LIFARS LLC, an international Cybersecurity Intelligence, Digital Forensics, and Incident Response firm based in New York City.
6:00 – 7:00 Cocktail Reception

NJ ISSA Chapter Meeting on 04/25/2018
2018-04-25 16:00 - 19:00 (Africa/Abidjan) | Deloitte Office, 100 Kimball Drive, Parsippany, New Jersey, 07054
3:30 – 4:00 Check In/Registration
4:00 – 6:00 Presentation: How to think like a Hacker to beat a hacker
Phil Caturegli, Chief Hacking Officer/Partner – Netragard
Abstract
In our presentation we walk through 3 case studies of how we compromised different environments and what we did to harden the security. This informative presentation will provide real life examples of how environments can both be compromised and protected.
Bio
Philippe a partner at Netragard, which provides penetration testing, advisory and consulting services in the domain of information security. Philippe is a Pen-tester and Security researcher who has discovered and published several security vulnerabilities in leading products including Cisco, Symantec and Hewlett-Packard. Before founding Seralys, Philippe held a Senior Manager position within Deloitte Luxembourg Information & Technology Risk department and held several roles within the IT security department of a global pharmaceutical company in UK.
6:00 – 7:00 Cocktail Reception
