CYBER SECURITY FOR NATIONAL DIGITAL PLATFORMS: CREATING A SUSTAINABLE DIGITAL FUTURE
- CHAIRED BY:
● Leadership from Ministry of Information and Communications
- TIME:
07:30 – 12:00
Thursday, June 23rd 2022
KEYNOTE SESSION
CONFERENCE SESSION 1
CONFERENCE SESSION 2
CONFERENCE SESSION 3
CYBER SECURITY FOR NATIONAL DIGITAL PLATFORMS: CREATING A SUSTAINABLE DIGITAL FUTURE
INFORMATION SECURITY FOR DIGITAL GOVERNMENT: GOALS AND CHALLENGES
ENTERPRISE DATA SECURITY IN A DIGITAL ERA
HARNESSING THE POWER OF EXPONENTIAL TECHNOLOGIES AGAINST THE EMERGING CYBERTHREATS
● Leadership from Ministry of Information and Communications
| 13:00 | DELEGATE REGISTRATION |
| 13:25 | VIP INTRODUCTION |
| 13:30 | OPENING REMARKS Colonel Dr. Nguyen Ngoc Cuong, Deputy Director, Department of Cyber Security and High-tech Crime Prevention, Ministry of Public Security |
| 13:40 | NOVEL CYBER EVASION TECHNIQUES - NOVEL ZERO TRUST MODEL Mr. Valerian Rossigneux, Director, Sales Engineering, Crowdstrike
In this session, Val will first highlight key findings in CrowdStrike’s 2022 Global Threat Report and how enterprise risk is coalescing around three critical areas: endpoints and cloud workloads, identity and data. Novel cyber evasion techniques – Novel zero trust model For security teams on the front lines and those of us in the business of stopping cyberattacks and breaches, 2021 provided no rest for the weary. In the face of massive disruption brought about by the COVID driven social, economic and technological shifts of 2020, adversaries refined their tradecraft to become even more sophisticated and brazen. In this session, Val will first highlight key findings in CrowdStrike’s 2022 Global Threat Report and how enterprise risk is coalescing around three critical areas: endpoints and cloud workloads, identity and data. This is followed by a focus into how critical it is for organisations to adopt a Zero Trust model to securely enable data to be accessible from anywhere anytime. |
| 14:00 | SCALING SECURITY FOR REMOTE WORKING IN THE HYPER-CONNECTED AGE Mr. Dinh Trong Du, Senior Technical Engineer, Samsung Vina Electronics Co.,ltd
Nowadays, mobile technology is being applied by enterprises in their activities. Many services are now not only stopping at the "design for mobile devices" (Mobile First) approach but even moving to Mobile Only: Only providing services through mobile applications without traditional PC platform support. ![]() Mr. Dinh Trong DuSenior Technical Engineer SAMSUNG VINA ELECTRONICS CO.,LTD | BIOGRAPHYExpert in security solutions and mobility management. Consulting solutions on Samsung Knox, helping businesses / organizations prevent sensitive information from being leaked during the use of smartphones, tablets, block all intrusions from malicious software. Help manage devices centrally, configure mobile devices into personal and work spaces, and synchronize device administration policies for organizations, improving user efficiency. Provide in-depth technical knowledge and organize training courses on Samsung solutions for other customers and partners in Vietnam | TOPICEnterprise Data Security in Mobility Management | ABSTRACTNowadays, mobile technology is being applied by enterprises in their activities. Many services are now not only stopping at the “design for mobile devices” (Mobile First) approach but even moving to Mobile Only: Only providing services through mobile applications without traditional PC platform support. The gap in functionality between mobile devices and traditional computers is narrowing and is no longer even clearly felt. |
| 14:20 | CYBERSECURITY: PROTECTING THE SECURITY & INTEGRITY OF DIGITAL COMMERCE Mr. Joe Cunningham, Regional Risk Officer, Visa Asia Pacific
Visa’s research shows that 2/3 of consumers in Southeast Asia increased their online and mobile banking services over the pandemic. Joe Cunningham is the Regional Risk Officer (RRO) for Visa in Asia Pacific. With dual reporting to Visa’s Chief Risk Officer and the Asia Pacific Regional President, the RRO sits on the Asia Pacific Leadership team with accountability for Risk Services in the region and for strategic risk management for the Visa business. Risk management is a critical capability of the Visa business and is a key dimension upon which Visa competes. Visa’s risk capabilities comprise a set of highly sophisticated products and services we offer clients and other stakeholders; and global programs to accelerate electronic commerce, prevent fraud, protect the Visa brand, and the security & integrity of the Visa payments ecosystem. Joe joined Visa Inc in 2008 based at our San Francisco Global HQ, starting in our Global Technology organization with responsibility for all future-focused aspects of Visa’s technology agenda. Originally tasked with defining Visa’s long-term technology strategy, his role expanded to include leading Visa’s long-term technology innovation & research programs, and international standards definition in all aspects of chip, contactless & mobile payment. From 2009 to 2015 Joe represented Visa on the Executive Committee of EMVCo, the global payments industry organization responsible for ensuring interoperability and security of chip-based products: including contact, contactless and mobile-NFC payments. In 2014 he took on the AP RRO role. Joe grew up in the Republic of Ireland, and has previously worked in the UK, New Zealand, Australia, and the Unites States. He holds an MBA from the Melbourne Business School with a specialty in Innovation Strategy and is an honors graduate in Applied Mathematics and Computing. He lives in Singapore with his wife Michelle and two young children. Cybersecurity: Protecting the Security & Integrity of Digital Commerce Thanks to the pandemic, the nature of digital commerce has radically changed. With more people online and as stores remain shuttered, eCommerce surged at an exponential rate. Visa’s research shows that 2/3 of consumers in Southeast Asia increased their online and mobile banking services over the pandemic. 70% of these consumers have attempted to go fully cashless. The pandemic accelerated digitization – and rapidly. This breakthrough has profound implications for risk management and payment security. |
| 14:40 | BUILDING A SELF-DEFENSE NETWORK FOR ENTERPRISE IN DIGITAL TRANSFORMATION AGE Mr. Pham Quynh Thang, General Director, Allied Telesis Vietnam Co.,Ltd
Nowadays, cybersecurity attacks are more and more serious and popular, with bigger scales, causing unpredictable damages to Enterprises. Nowadays, cybersecurity attacks are more and more serious and popular, with bigger scales, causing unpredictable damages to Enterprises. It is really critical for enterprises to build an optimal security system which helps them to protect from all cybersecurity threads. Those cybersecurity attacks from many directions and levels also force Enterprises to install various kinds of security applications. But this will cause high complication and risks for operation and management. Besides, those attacks are more focusing on edge network, where installed with vulnerable IoT devices without security tools. It means security on edge network should be paid more attention. In order to solve all above issues, Allied Telesis has applied Software Defined Network and AI technologies to launch an optimal solution – that is AMF-Security: Allied Telesis Self Defending network. |
| 15:00 | TEA BREAK |
| 15:20 | HOW TO MANAGE THE ATTACK SURFACES OF INTERNET-FACING ASSETS & SYSTEMS Mr. Le Duc Anh, Business Development Manager, Group-IB
External infrastructure continues to be the root cause of the majority of cyber security incidents. Overlooked infrastructure, legacy systems and shadow IT all contribute to the risk profile of your customers. ![]() Mr. Le Duc AnhBusiness Development Manager Group-IB | BIOGRAPHYDuc Anh is the Business Development Manager of Group-IB in charge of the Vietnam market. Based in Hanoi, Duc Anh spearheads the development and promotion of Group-IB’s products and services to clients and establish a strong partner ecosystem. He has more than 15 years of experience in consulting and recommending cybersecurity solutions for customers across many verticals. Prior to Group-IB, Duc Anh was the Technical Manager of Fortinet Vietnam SE Team. He was responsible for pre-sales activities for the whole of Vietnam, including consulting security solutions for customers, providing training to partners and speaking at security events for both partners and customers. | TOPICHow to manage the attack surfaces of Internet-facing assets & systems | ABSTRACTExternal infrastructure continues to be the root cause of the majority of cyber security incidents. Overlooked infrastructure, legacy systems and shadow IT all contribute to the risk profile of your customers.
Group-IB’s newest product, Attack Surface Management, is a fully cloud-based, agentless solution that’s designed to help you discover, assess and manage your external attack surfaces. Attack Surface Management provides complete visibility into external- facing assets, identifying those that may be potential attack vectors and optimizing mitigation and remediation efforts through integration, task management and easy-to-use UI. |
| 15:40 | THE MANY FACES OF PRIVILEGED ACCESS MANAGEMENT (PAM): 5 REASONS TO INVEST IN NEXT-GEN PAM Mr. Hollis Valencia, Head of Presales, Southeast Asia, Quest Technology Systems Singapore Pte Ltd
Attend this session with Hollis Valencia, Head of Presales – Southeast Asia, to get some insight and a high-level overview of how PAM has evolved and the five ways it can optimize business operations and security. ![]() Mr. Hollis ValenciaHead of Presales, Southeast Asia Quest Technology Systems Singapore Pte Ltd | BIOGRAPHYHollis is a veteran IT professional with demonstrated history of database management and application performance monitoring support, implementation, as well as cybersecurity solutions on privileged access management. With over 19 years of industry experience and 14 of which with Quest and One Identity, he is an expert in enterprise software installation, upgrades, technical operations, service delivery, solution architecture. Helping customers manage, monitor, and move their hybrid database environments and complex infrastructure. Forging and strengthening their cybersecurity fences with privileged access management solutions. Having worn hats of an ERP administrator, multi-platform DBA, technical support lead and currently as the head of Presales for the Southeast Asia region, he has a strong comprehensive understanding on how a unified identity security approach to cybersecurity help customers address their most pressing issues and pain points.
| TOPIC
The Many Faces of Privileged Access Management (PAM): 5 Reasons to Invest in Next-Gen PAM | ABSTRACTPrivileged access management (PAM) is one of the fastest growing areas of cybersecurity. As virtually every high-profile breach involves compromised privileged accounts and administrative access, it’s no surprise that securing those credentials and associated access is at the top of every CISO’s priority list. Attend this session with Hollis Valencia, Head of Presales – Southeast Asia, to get some insight and a high-level overview of how PAM has evolved and the five ways it can optimize business operations and security. |
| 16:00 | OPTIMIZING INFORMATION SECURITY INVESTMENT FOR ENTERPRISE Mr. Vu The Hai, SOC Manager, VSEC
![]() Mr. Vu The HaiSOC Manager, VSEC . | BIOGRAPHYOver 9 years of experience in the Information Security field, Mr. Vu The Hai has taken multiple important and critical technical positions in large MSPs and corporations, such as CMC Cyber Security, Viettel Cyber Security, VinITIS, etc.
Currently, he is the man responsible for theo SOC at VSEC. With …20 experts of SOC, he is building and offering the quality SOC service that meets both international standards, as well as customer expectations, for Vietnamese businesses and corporations.
| TOPIC
Optimizing Information Security Investment for Enterprise | ABSTRACT– Organizational Challenges: Building Information Security Management System |
| 16:20 | PANEL DISCUSSION |
Moderator: Mr. Le Cong Phu, Vice Director, Viet Nam Cybersecurity Emergency Response Teams/Coordination Center (VNCERT/CC) Panelists:
|
|
| 17:20 | CLOSING REMARKS Representative from Authority of Information Security, Ministry of Information and Communications |
| 17:30 | END OF CONFERENCE SESSION 2 |
| 13:00 | DELEGATE REGISTRATION |
| 13:25 | VIP INTRODUCTION |
| 13:30 | OPENING REMARKS Major General Tong Viet Trung, Deputy Commander, Cyberspace Operations Command (Command 86), Ministry of National Defence ![]() MAJOR GENERAL TONG VIET TRUNGDeputy Commander, Cyberspace Operations Command (Command 86) Ministry of National Defence | BIOGRAPHYCareer path 1980-1986: Studied at Military Information University, Ulianop, Soviet Unions |
| 13:40 | DETECTION AND RESPONSE - THE NECESSARY INGREDIENTS TO ROBUST PROTECTIONS Mr. Vu Le, Security Solutions Engineer, Sophos
Now we face active adversaries, attackers who combine malware with live hands-on-keyboard hacking in order to get around your defenses in real time, to respond to your blocks. Experienced Security Solutions Engineer with an experience of several years of working in the information technology and services industry. Skilled in Security, Network Administration, Cloud Information Security and other related products Detection and Response – The Necessary Ingredients to Robust Protections Today’s threat environment has been plagued by the growing volume, sophistication, and speed of cyber-attacks. No longer do adversaries write their code, release it then sit back and wait. Now we face active adversaries, attackers who combine malware with live hands-on-keyboard hacking in order to get around your defenses in real time, to respond to your blocks. This means as defenders we need to be able to respond to them in real-time too. Come and see how Sophos Detection & Response can help. |
| 14:00 | MEETING THE IDENTITY AND ACCESS CHALLENGES IN A MULTI-CLOUD WORLD Ms. Aditi Jain, Principal Product Manager, ARCON TechSolutions Pvt. Ltd.
Organizations are fast adopting a cloud-first approach in order to enhance their IT operational effectiveness and efficiency. However, in pursuit of this, the risk surface is getting increased. With a BTech in Computer Engineering, Aditi Jain is a self-described technology enthusiast. She has had a long tenure in the Information Technology and security industry, which has given her diverse experience in the execution and management of Application Security projects. Aditi currently works as a Principal Product Manager with ARCON, where she is in charge of the Privileged Access Management, User Behaviour Analytics, Security Compliance Management solutions and many more solutions. Meeting The Identity and Access Challenges in a Multi-Cloud World Organizations are fast adopting a cloud-first approach in order to enhance their IT operational effectiveness and efficiency. However, in pursuit of this, the risk surface is getting increased. As organizations adopt a multi-cloud approach, more and more digital identities are being created. End-users using these digital identities access cloud resources literally from anywhere. In this backdrop, the threats of credential abuse and data breach increases significantly when identity and access management practices are not robust enough to manage the cloud resources. |
| 14:20 | JOURNEY TO ZERO TRUST SECURITY WITH MODERN PAM Mr. Lau Yan Qing, Sales Engineer, Delinea
Privileged access management is critical for any organization that wants to build zero-trust security. Just-in-time PAM helps your organization give the right access to the right users at the right time. Journey to Zero Trust Security with Modern PAM |
| 14:40 | DEVSECOPS - THE KEY FOR APPLICATION SECURITY IN THE DIGITAL TRANSFORMATION DevSecOps – the Key for Application Security in the Digital Transformation Today, the trend of digital transformation is an urgent requirement, forcing organizations to develop and use new application to solve new and big problems and security for applications will ensure sustainability of digital transformation. DevSecOps helps organizations to build an application security procedure combined effectively with DevOps procedure. Synopsys with leading technology and services, helping the organization deployed and applied DevSecOps easily, effectively and ensure comprehensive and continuous security for applications. |
| 15:00 | TEA BREAK |
| 15:20 | PRINCIPLES OF INCIDENT RESPONSE Mr. Nguyen Le Thanh, Vice President, VNG
Mr. Nguyen Trung Tin, CEO, Polaris Infosec
Defenders must be constantly vigilant in their efforts to protect their organization’s environment. Through practice, the defenders can be sharpened by red and purple team exercises. This presentation will explore a couple case studies where exercise improved the organization’s security posture. ![]() Mr. Nguyen Le ThanhVice President, VNG . | BIOGRAPHYMr. Nguyen Le Thanh is a well-known security expert with 26 years of experience in large-scale online applications, blockchain technology, firmware, chipset, and micro-architecture. Mr. Thanh previously worked as a CPU Security Architect at Intel Corporation and was responsible for the security of Intel’s next-generation technologies, such as Atom Mobile & SoC platforms, vPro & Management Engine, Ivybridge, and Haswell micro-architecture.
Mr. Thanh has presented at various international research conferences, including Blackhat USA, Hack In The Box, Deepsec, or Pacsec and he has been a member of the review board at several conferences and events worldwide, namely HITB Security Conference, Qihoo 360 World CTF, Syscan HCM, and Defcon AIVillage. He has helped organize the very first Capture The Flag events in Asia for HITB Security Conference since 2006. Mr. Thanh currently serves as Vice President of Information Technology at VNG Corporation, Non-Executive Chairman at Verichains and Polaris Infosec. In 2013, Mr. Thanh was recognized as one of the recipients of the 9th ASEAN CIO-CSO Award. | TOPIC
Principles of Incident Response | ABSTRACT
![]() Mr. Nguyen Trung TinCEO Polaris Infosec | BIOGRAPHYNguyen Trung Tin is a Vietnamese-American co-founder of Polaris Infosec. Prior to his work within private cybersecurity, he was an infantry officer in the US Marine Corps and a Special Agent within the Federal Bureau of Investigation (FBI). Tin is GIAC GSEC, GCIH, and GCFA certified.
| TOPIC
Principles of Incident Response | ABSTRACTThe presentation will cover general principles that companies must consider for cyber incident response and the reasons why, benefits, and impacts. Several case studies will also be conducted and related back to principles covered. |
| 15:40 | CYBER AND PHYSICAL SECURITY CONVERGENCE: CHALLENGES, CASE STUDIES AND SOLUTIONS Mr. Vu Do Khanh, Executive Advisor, PLATFORMBASE
The application of Internet of Things (IoT) and Industrial Internet of Things (IIoT) devices in manufacturing and public services has blurred the line between cybersecurity and physical security... ![]() Mr Vu Do KhanhExecutive Advisor PLATFORMBASE | BIOGRAPHYMr. Vu Do Khanh is the Executive Advisor and Trade Representative for PLATFORMBASE in Vietnam. He has many years of experience working for and advising governmental organizations, international organizations, and multinational corporations. Notable organizations are: UK Cabinet Office, UK Department for Digital, Culture, Media & Sport, International Monetary Fund, Mitsubishi UFJ Financial Group, and Samsung C&T. With a diverse background in policy, finance and technology, he understands the difficulties and challenges that organizations and enterprises often face in the process of digital transformation and information security safeguarding. Coming to Vietnam Security Summit 2022, Mr. Khanh will share his stories and case studies about the roles of physical security and cybersecurity in enterprises and international organizations. Mr. Khanh graduated with Distinction from the Master of Public Policy program at the University of Oxford, United Kingdom. He is also the author of many research projects on applications of technology in policy and business management. | TOPIC
Cyber and Physical Security Convergence: Challenges, Case Studies and Solutions | ABSTRACTThe application of Internet of Things (IoT) and Industrial Internet of Things (IIoT) devices in manufacturing and public services has blurred the line between cybersecurity and physical security. Combining cybersecurity with physical security is an inevitable trend to respond to the increasing threats from hybrid attacks on enterprises’ network and production infrastructures
|
| 16:00 | SABSA AND THE ANCIENT ART OF ENTERPRISE SECURITY ARCHITECTURE Mr. Robert Laurie, Enterprise Security Architect, David Lynas Consulting
How can an organisation defend itself against a dedicated attacker with greater resources and a larger army than their own? This presentation will show how business-focussed enterprise-wide security strategy and planning, using the SABSA framework, provides a highly effective approach to cyber security. ![]() Mr. Robert LaurieEnterprise Security Architect David Lynas Consulting | BIOGRAPHYRob combines 17 years’ experience in the IT & security fields with a passion and talent for Enterprise Security Architecture. Rob is adept at delivering real-world solutions for international clients, as well as providing high-quality security education as part of the SABSA instructor team. Recently, Rob has been focused on performing virtual CISO-as-a-Service roles for clients. Also serving as a Committee Member of the ASIA Perth Branch, Rob combines his delivery role with a role in the leadership group for DLC’s expansion into Asia. | TOPIC
SABSA and the Ancient Art of Enterprise Security Architecture | ABSTRACTSun Tzu, a famous military general from 512-506 BCE, postulated that the opportunity to defeat an enemy is provided by the enemy themselves.
|
| 16:20 | PANEL DISCUSSION |
Moderator:Major General Tong Viet Trung, Deputy Commander, Cyberspace Operations Command (Command 86), Ministry of National Defence Panelists:
|
|
| 17:20 | CLOSING REMARKS Major General Tong Viet Trung, Deputy Commander, Cyberspace Operations Command (Command 86), Ministry of National Defence |
| 17:30 | END OF CONFERENCE SESSION 3 |