London

Our IT and security world is undergoing a profound transformation and there is no question that we all must now embrace the Cloud if we want to regain control of our networks. Philippe will retrace the journey Qualys undertook in the cloud as early as 1999 and highlight the founding principles that are helping Qualys transform security and make our computing world safer — one cloud app at a time.

While digital transformation gave us the opportunity to build security in, it represents a new challenge in a world where public cloud platforms and an avalanche of new IT security such as container security technology are forcing enterprises to rethink both their IT infrastructure, applications and security. Sumedh will discuss the ways that Qualys’ Cloud Platform, with its new global IT asset inventory capabilities, is rapidly becoming a keystone that unifies IT, Security and compliance across on-premises, hybrid clouds, endpoints, mobile devices, OT and IoT environments.

This talk will demonstrate the new features in Enterprise TruRisk Platform 10.0, and introduce the new Patch Management app. Enterprise TruRisk Platform 10.0 introduces a new customizable Vulnerability Management Dashboard for faster pivoting through vulnerability data, Custom Remote Detections for developing your own signatures, and Unified Dashboarding for mixing and matching widgets from multiple apps into a single view. Our new Patch Management app now lets you detect missing patches on a system and patch your entire environment with just a few clicks, using existing Qualys Cloud Agents. Learn how vulnerability data is leveraged by Patch Management in security patch detections, allowing you to quickly target and patch a CVE without the need to track down the specific security bulletins.

This talk demonstrates how threat actors are rapidly weaponizing known vulnerabilities to target, exploit, and take over organization’s network for financial motivations, customer account and intellectual property theft, and sabotage. Learn how to using Qualys Indication of Compromise and other Cloud Apps to address mutant, dormant, and fileless malware; and best practices for streamlining Threat Hunting and Incident Response by instantly identifying compromised and suspicious devices across endpoints and networks.

Users are increasingly adopting multicloud for their hybrid IT strategies to drive digital transformation, and securing clouds requires shared security responsibility. This session will introduce the inherent threats and solutions needed to secure your cloud stack, from workloads to infrastructure. This demonstrate how to gain visibility of your public clouds, secure workloads from both internal and perimeter vulnerabilities, and set up continuous security monitoring of cloud resources to avoid issues such as data leaks and cryptomining attacks through your cloud infrastructure. Also learn best practices from real-world examples of customers transparently orchestrating security into their practices and DevOps pipelines.

Containers are the most sought after development tool for microservices. Their simplicity and portability allow DevOps to create true agile builds within development cycles. However, this new kind of environment brings a new set of security threats at every phase of this cycle—from unvalidated software entering the environment to running containers drifting and breaking immutable behaviors. This talk outlines how to build security into every phase. Learn about detecting anomalies and preventing security breaches in an extremely agile runtime environment, enabling you to efficiently manage security at the speed and scale of DevOps.

One of the main drivers in adopting cloud services is quick and easy deployment of web applications and APIs that support your business. But attackers view them as ripe targets because they handle sensitive data and are often developed without security in mind. Any web application could be a foothold into your organization and lead to a data breach if a latent vulnerability such as SQL injection or remote code execution were successfully exploited. Using Qualys Web Application Scanning (WAS) continues to be an effective way to identify app-layer vulnerabilities quickly and reliably across different environments and integrates with Qualys Web Application Firewall to provide an easy and effective way to protect known and unknown apps. This session will describe new capabilities in Qualys WAS and WAF such as better scan coverage and vulnerability detection, improved usability, automated scanning in CI/CD pipelines, new WAF container solution and much more. This talk will also dive into the WAS and WAF roadmaps for 2019, including some exciting changes coming to the UI and API security capability.

A safe browsing experience is good for business, driving HTTPS adoption to the extent that browsers now mark web pages NOT using TLS and certificates as “Not Secure”. In order to stay ahead of risk amidst the rise of DevOps and public clouds, organizations must automate visibility and tracking of their certificate deployments. Qualys CertView allows them to do so by centralizing visibility and lifecycle management of certificates as well as TLS configuration assessments into their overall continuous view of security and compliance state, and by enabling customers to rapidly see and remediate expired or vulnerable certificates. Learn how CertView can help you prevent downtime and outages, audit and compliance failures, mitigate risks associated with expired or vulnerable certificates and simplify the process of renewing, revoking and acquiring certificates into just a few clicks.

With so many overlapping and vague compliance requirements, selecting appropriate technical and procedural controls continues to be a challenge for organizations of all sizes in every industry. On the other side, there's always a race to make sure our environment is free from vulnerability, configuration and overall security issues, through robust cybersecurity procedures. Learn how innovations in the compliance family of apps can help you overcome common compliance challenges, simplify the control selection process and overall continuous compliance monitoring. You will see a preview of new automation to simplify control selection & assessment, continuous visibility into mandated requirements, and find new ways to get more data into the Qualys platform for a complete view of your compliance landscape.