Identity Centric Security (ITDR, Fraud Prevention)

Combined Session
Wednesday, May 07, 2025 15:35—16:35
Location: B 09
Log in to download presentations

Let the Robots Help: Runtime Security for Workloads, Services, and APIs [Introductory]

15:35—15:55

When workloads are ephemeral and jobs can span multiple cloud environments, a new way of thinking needs to be developed. The dynamic world of virtual cloud services presents unique challenges that traditional security approaches don't fully address.

The SPIFFE project addresses bootstrapping trust in such an environment, and the Workload Identity in Multi System Environments (or, WIMSE) group at the IETF has been chartered to develop new standards in this important space.

We will walk through why these steps are vital and how we can use new tools to address our security both today and into the future.

Justin Richer

Founder

Bespoke Engineering LLC

Justin Richer is a security architect, software engineer, standards editor, and systems designer with over two decades of industry experience. He is the lead author of OAuth2 In Action and...

ITDR lessons learned [Introductory]

15:55—16:15

Watch the video

Identity based attacks are becoming one of the biggest attack vectors against many enterprises. Identity threat detection and response offers a way to identify and stop the attackers.

In this talk Martin Sandren will present lessons learned around how to structure your ITDR program, discusses attacker speedbumps and finally how to implement the R in ITDR.

Martin Sandren

IAM Product Lead

IKEA

Martin Sandren is a security architect and delivery lead with over eighteen years of experience of various information security related roles. Primarily focused on security architecture and digital...

ITDR: A call for action [Intermediate]

16:15—16:35

Watch the video

ITDR is a comprehensive security discipline that encompasses tools, processes, a knowledge base, and best practices aimed at safeguarding user identities and identity systems. ITDR transcends the mere adoption of a product or technology; it requires a synergistic approach involving experts in Identity, Cybersecurity, and Forensics, collaborating to implement the key capabilities and processes that are crucial for mitigating, detecting, and responding swiftly to identity threats.

In this presentation, we will explore the identity threat landscape and illustrate through our ITDR framework why a holistic effort is imperative for mitigating business risks associated with identity threats.

Join us as we explore the critical importance of a unified strategy in combating identity threats and safeguarding organizational assets.

Rogério A Rondini

Senior Manager

PwC

Rogério is a Digital Identity leader and Principal Identity & Solution Architect at PwC Netherlands, boasting over 25 years of experience in IT, including 15 years focused on Digital...

Agenda