Cybersecurity: What the U.S. Can Teach Europe

Article originally published in FCW magazine.


By Edwin Bentley (Senior Software Developer, Titania) 

About the Author

Edwin joined Titania in 2011 and has since become a key member of development team, having primary involvement in advancement of both the Nipper Studio and Paws Studio software. He has a keen interest in Information Security and the role that the industry will play in the future advancement of technologies.


Having attended two reputable information security conferences this year, one on each side of the Atlantic, a few observations emerged on the differences and similarities of opinion on cybersecurity issues in the U.S. and Europe.

Although similar questions were raised at both conferences, the response manner was notably different. Europe took a reactive stance by signaling problems and bringing them to the attention of government agencies and legislators. The U.S., however, had a top-down approach, with industry searching for viable solutions in response to already adopted government directives.

The first event was Infosecurity Europe. The 2014 edition was hosted in London and attended by more than 11,000 information security professionals. With a 20-year tradition, the event is considered a reference point for the cybersecurity industry to find out about the latest trends and tools and keep up-to-date with European laws and compliance policies.

This year, the discussion focused on big data, the accelerated increase in organized cybercrime, the need to stay ahead of threats and an honest admission from Europol that cybercrime is best mitigated or disrupted because law enforcement lacks the resources to prosecute all crime. Staying ahead of threats was high on the agenda. Finally, there were comments on security issues in the cloud, which just like the bring-your-own-device trend, needs to be accommodated in its own right from a protection point of view.

Similar points were made at FOSE. (Editor's note: FOSE is owned and produced by FCW's parent company, 1105 Media.) As an industry event, FOSE is recognized as an official source for voicing the latest concerns in government IT. Among the issues discussed at the conference, cybercrime and cyber terrorism figured high on the agenda for defense and policy.

Continuous Diagnostics and Mitigation

In terms of security tools and trends, automation and continuous monitoring were held in high regard at the U.S. conference. The conversation on the FOSE floor focused on the Department of Homeland Security's Continuous Diagnostics and Mitigation (CDM) program. It comes on the heels of the National Institute of Standards and Technology's Cybersecurity Framework and is part of achieving the last step of that directive: monitoring security on an ongoing basis with the use of automation tools.

Released as a best-practice guidance document, the framework was embraced by the federal sector. After the latest high-profile breaches in the retail industry, a wide range of other companies have started to look at the framework as a template for assessing security practices.

In order to understand why CDM is seen as the best solution by IT professionals, below are a few well-debated problems it answers:

• Top of the agenda for information security experts is how best to integrate security with business processes. Reducing user disruption and enabling business innovation will be more easily addressed with the introduction of automated security.
• Although CDM does not guarantee that its users will stay ahead of threats, it does offer a near-real-time state of security with risk-based assessments reported and analyzed at network speed to ensure ongoing awareness and protection.
• A challenge for chief information security officers and CIOs everywhere is the compliance versus security conundrum. CDM implies moving away from layer upon layer of compliance in favor of perpetual alertness and security.
• The other issue in compliance is log aggregation and reporting. Continuous monitoring would produce automated event logs that can be filed for audits or analyzed for patterns in forensic investigations.

Continuous monitoring does not promise to answer every cybersecurity problem, but it offers a practical way forward. The voluntary adoption within the U.S. business community reflects that its advantages have been recognized.

Cyber directives in Europe and U.K.

Source: fcw.com

Meanwhile, that shift in security perception has yet to happen in Europe. The latest European Union cyber directive -- Network and Information Security (NIS) -- has been taken with a pinch of salt by the industry, and some organizations fear that the stick of compliance will come down hard on their budgets while doing very little for the state of their security.

In a similar way to the NIST framework, the U.K. government released a Cyber Essentials Scheme as a best-practice guide for organizations. Operating in a less intrusive manner with smaller, more practical steps, the scheme has been received with cautious but definite approval by the business spectrum.

Although a promising start, neither the Cyber Essentials Scheme nor the NIS directive alone is sufficient to bring forward the visionary changes the industry needs. The European efforts are moving in the right direction, but compared to the older, more experienced industry in the U.S., they need further development. The Cyber Essentials Scheme might be too small, while NIS could be seen as too complicated and faces an uncertain fate amid changes to the European Parliament.

If the cybersecurity industry is to address the issues raised at Infosecurity Europe 2014 such as staying ahead of threats, mitigating cyber crime, transforming security into a business enabler and dissipating the predicament of compliance versus security, then Europe needs to continue to move in the right direction and could be inspired by the top-down approach to security in the U.S.

Infosec 2014 Highlights

A week after Infosec, we can look back and say it was a great show. Twenty years on, it still successfully delivers insights into the dynamic market of information security. With 340 companies, of which 80 were new exhibitors, special country pavilions for 24 international representatives and a great wealth of products, tools and services, there was plenty on offer. 

Source: @InfoSec_Joy

The discussions and panels were up to date with current changes to the economy, legislation and global trends in cybersecurity and experts, such as Peter Wood, Mikko Hypponen, Graham Cluley, Dr. Eric Cole, Rik Ferguson and James Lyne, attracted audiences with panel debates and thought-provoking updates on the industry. 

James Lyne (left) and Rik Ferguson (right) on a thought-provoking revelation Credits to @DanRaywood

      As cybercrime increases, cybersecurity will constitute a business driver in the future. 

Many speeches and presentations have brought fresh views for information security professionals, but the one we liked best was MP David Willetts’ keynote speech. The highlight of his keynote at Infosec has been the 2014 Cyber Security Breaches Survey launch. As he went through the highlights of the survey, he also reminded the audience of how the Cyber Growth Partnership "aims to increase the value of cyber security exports to £2bn a year by 2016". As cybercrime is a costly strain on UK business, cybersecurity can be a chance to boost the country’s economy. 

 Peter Wood moderates the debate. Source: scmagazineuk.com

  Meanwhile, Peter Wood, CEO at First Base Technologies, and a keen user of Nipper Studio, moderated a panel debate on "Security as a Business Enabler". The general consensus of the conversation was that while there's little evidence to support that information security actively brings in profits, global breaches have shown that they do drive away business. He also found time to drop by our stand for a quick catch up - Thank you, Peter!

   The Malvern Cyber Security Cluster is growing. 

   

      But for the cyber security companies trading from the “cyber valley”, there was good news as the Minister, David Willetts, congratulated the  7 winners of a total of £500 000 in investments for R&D from the Technology Strategy Board. 

      It was rewarding to see that the Malvern Cyber Security Cluster is taking centre-stage at an event such as Infosec Europe. D-RisQ Ltd, Montvieux Limited, PixelPin, C2B2, Infinite Precision Ltd, Babble IT Systems Ltd, Westgate Cyber Security Ltd deserve congratulations for their innovation and techniques in the cyber security industry. 

 Titania's software and updates proved attractive to visitors once again. 

Titania went to Infosec with great products, a relentless team, champagne and a lot of chocolate. We came back with fresh questions to answer, plenty of compliments and (sadly!) no more chocolate. 

    

Mark & Peter (Hedgehog Security) & Steve Penny (middle)

We saw an increased interest in compliance and security auditing this year, as well as answering a lot of questions on our upcoming product - TEC. We met lots of friends on the Malvern Cyber Cluster stand as we took turns to attend to the booth – Advent Security, Borwell, DeepSecure, UK Cyber Security Association, Sutcliffe & Co., Hedgehog Security.

 

At the end we bumped into Pen Test Partners when we went out for some well-deserved burgers. To our surprise the burgers did not come from their ad-hoc kitchen – apparently their “cooking” skills were a tad more sophisticated.  

Pentest's Kitchen... Cooking up some AV Source: pentestpartners.com

Finally, back in the office, our team celebrated with a bottle of champagne...

The team (from left to right): Neil, Charlotte, Ian, Nicola, Kelly, Nigel, Andy

Top 10 at Infosec 2014: Talks

There has been a rumour that Infosec is fading out, its long-standing tradition residing in the cliché that everyone goes because everyone else does. There have also been questions raised over the quality of its talks. Whilst not forgetting that Infosec is one of the few relevant shows of its industry that remains free, here’s a review of some of the talks that will take place at this year’s edition. We’ll let you decide for yourself if Infosec deserves its reputation, or if it is indeed going out of fashion.

 1. Defeating corporate antivirus: Live demonstration of how A/V can be bypassed, using readily available tools and real-time information

Who: Ken Munro, Partner at Pen Test Partners

When:  Wednesday 30 April 2014 16.40 - 17.05

Where: Technical Theatre

Ken Munro will explain how analysis and security research tools available online are harvested, modified and then used against an organisation's firewall. The talk is delivered with a live demo of over 40 anti-virus products which will show which products have responded and which have failed to detect threats from public virus databases.

2. Security as an enabler: Supporting enterprise innovation and transformation

Who: Moderator - Peter Wood, Security Advisory Group at ISACA London Chapter

          Panellist - Lee Barney, Head of Information Security at Home Retail Group

          Panellist - David Cass, SVP CISO at Elsevier

          Panellist - Michael Colao, Head of security at Axa UK

          Panellist - Andy Jones, CISO at Maersk Line

When: Tuesday 29 April 2014 10.45 - 11.45

Where: Keynote Theatre

This panel talk addresses a very current issue for the cyber community – information security being perceived as the business inhibitor, the innovation-stiffler, the risk-averse, in a word the mother-of-all-evils within the corporate agenda. The debate looks to challenge the negative perceptions surrounding information security and compliance as well as searching for solutions to better educate, engage and integrate these topics with the business decision-making process.  

3. Too small to succeed? The problems ethics of threat intelligence sharing

Who: Barmak Meftah, CEO at AlienVault

When: Tuesday 29 April 2014 10.00 - 10.25

Where: Business Strategy Theatre

The cybercrime scene has evolved to a functioning network of capable hackers who share and benefit from crowd-sourcing of information, tools and advice. Meanwhile, the business world is still torn between the benefits of sharing and the ethics of exposing vulnerabilities. This presentation flips the coin on both sides and addresses a sore spot for both information security as well as the board room. 

4. Into the breach: Lessons learnt from targeted attacks

Who: Ryan Kazanciyan, Technical Director at Mandiant

          David Damato, Director at Mandiant

When: Wednesday 30 April 2014 15.20 - 15.45

Where: Technical Theatre

Mandiant attempts a discussion drawing on the experience of past attacks, highlighting the reasons for which these attacks continue to happen, finding the blind spots of cyber security and ways to better deploy existent resources in tackling these issues, as opposed to buying more gadgets, or waiting for miraculous solutions. They also look at the pros and cons of "threat intelligence" and they take a chance on predicting the evolution of state-sponsored threat and targeted attacks in the near future. 

5. Hall of Fame interview

Who: Dr. Eric Cole, Chief Scientist at Secure Anchor Consulting
          Drew Amorosi, Deputy Editor at Infosec Magazine
When: Thursday 01 May 2014 10.00 - 10.35
Where: Keynote Theatre

The Infosecurity Hall of Fame celebrates the achievements of Infosec practitioners with long-term contributions to the advancement of information security, revolutionary ideas and inspiring innovations. This year, Dr. Eric Cole the founder of Secure Anchor Consulting and a fellow of the SANS institute was introduced to the Hall of Fame which now counts an impressive array of infosec personalities. Dr. Cole holds 20 patents, has authored several books and is part of the Commission on Cyber Security for the 44th President as well as a few other advisory boards. 

6. What's new in cybercrime? Keeping up with the cybercriminal

Who: Moderator - Eleanor Dallaway, Editor & Associate Publisher at Infosec Magazine
         Panellist - Michael J. Driscoll, Assistant Legal Attache, FBI
         Panellist - Lee Miles, Deputy Head of National Cyber Crime Unit, National Crime Agency
         Panellist - Graham Cluely, Independent Security Analyst
When: Wednesday 30 April 2014 12.00 - 13.00
Where: Keynote Theatre

With the high-speed developments in cyber crime there is an increasing need to look at the drivers and motivations of cyber attacks, understand their business models and assess the risks and the best ways to manage and mitigate them, and finally, identify the real threat to the organisation; be it a state sponsored attack, organised cyber crime, hacktivism or the inside threat. 

7. Privacy & Compliance Think Tank: Utilising compliance as an information security asset

Who: Moderator - Vicki Gavin, Compliance Director at The Economist
          Panellist - Len Svitenko, Head EU IT Compliance at Staples Europe
          Panellist - Stewart Room, Partner at Field Fisher Waterhouse
          Panellist - Mike Jolley, Head of Information Risk Management at Yorkshire Building Society Group
          Panellist - Stephan Geering, Chief Privacy Office EMEA at Citibank
When: Thursday 01 May 2014 12.35 - 13.30
Where: Keynote Theatre

With  compliance becoming more of a burden, this discussion examines how what has now become an exercise of ticking the boxes could be returned to its original roots - an asset in ensuring the security of the organisation. The panellists will look at the new standards of several industries, discuss transition measure between the old and new procedures, as well as guidance in preparing for the upcoming EU General Data Protection Regulation and the Network and Information Security Directive. 

8. EU General Data Protection Legislation: Status update and key action points for organisations

Who: David Smith, Deputy Commissioner at the Information Commissioner's Office
          Drew Amorosi, Deputy Editor at Infosecurity Magazine
When: Wednesday 30 April 2014 17.00 - 17.30
Where: Keynote Theatre

This session will bring updates on the latest developments concerning the EU General Data Protection Legislation and the measures required to ensure your organisation remains compliant. 


9. The idiot's guide to destroying a global 500 company... for £500

Who: Kevin Kennedy, Senior Director at Juniper Networks
When: Tuesday 29 April 2014 11.45 - 12.45
Where: Information Security Exchange Theatre

Kevin Kennedy delivers a presentation which demonstrates that it only takes a PayPal account for a legitimate business to crash. He also teaches different approaches to change the economics of hacking and practical advice to protect the organisation from the latest threats. 

10. The new model of security

Who: Adam Philpott, Director EMEAR Security at Cisco
          Terry Greer-King, Director UK&I Security at Cisco
When: Wednesday 30 April 2014 14.15 - 15.15
Where: Information Security Exchange Theatre

Cisco directors offer insights into the forecasting new models of security, given the disruptive age of technology and implicitly of security. A challenging view over security assumptions and fresh perspectives to understand that concepts such as the Internet of Everything will undeniably change the future of security forever.

This is only a handful of debates and presentations from over 100 sessions available for free. From our perspective it looks like these topics reflect the concerns - practical as well as theoretical - of the information security professional. Does this make Infosec the place where opinion leaders voice thoughts and debate fresh approaches? Or is it that after almost 20 years the Earl's Court cyber expo became a compulsory attendance for the industry? Let us know your opinion in the comments below, on Twitter @TitaniaLimited, or in person at stand G25.

Top 10 at Infosec 2014: Exhibitors

Source: en.nsfocus.com

Infosec Europe has arrived once again at Earl’s Court London. Armed with your Passport to Prizes and a map of the show, all the while keeping a keen eye on the #infosec14 Twitter feed, you may find yourself slightly lost in the sea of security vendors and marketing shows. So here's a guide of 10 exhibitors based less on the size of the marketing budget and more on the calibre of their solutions, to get you started and help you navigate your way through three days of infosec debauchery:

1. Titania

Stand G25

Tweets @TitaniaLimited

Titania are developers of security and compliance auditing software for a huge range of devices; as one of our customers described us as "where the Cisco manuals live". This year we are proud to announce the latest features of our network auditing tool Nipper Studio 2.3 with compliance auditing for PCI DSS and updated vulnerability analysis, in line with the latest NIST NVD requirements. We will be delivering presentations on compliance auditing and configuration analysis and unveiling our brand new product. Drop by to see how we are promoting Stress Free Cyber Security and grab a surprise goody bag and some chocolate to keep you going throughout the show. 

2. IT Governance
Stand F103
Tweets @ITGovernance

IT Governance is a provider of books, tools training and consultancy in matters of risk management, compliance and information security. This year, at Infosec they are are offering a free Compliance Surgery with a 15 minute expert to help sift through ISO 27001, PCI DSS compliance, ITIL / ISO20000 IT service management compliance, NHS N3 / IG toolkit submissions and European directives among others. For any busy infosec professional this sounds like a quick and efficient way to catch up with current affairs and updates in the world of security and compliance. 

3. Malvern Cyber Security Cluster
Stand C85
Tweets @MalvernCyber

Malvern Cyber Security Cluster is a partnership that promotes cyber security SMEs centered around Malvern in Worcestershire, a town that is being recognised by Government and industry as a national hub for cyber security. At their stand you won’t find one, but a dozen of small cyber focused companies which bring fresh ideas to the table, along with affordable price tags. Among the companies exhibiting at the Malvern Cyber stand there will be Advent IM, DataSure, Borwell, Encription Limited, Ascentor and many others. Titania will be present too, across the three days of the show. 

4. SecurEnvoy
Stand H10
Tweets @securenvoy

SecurEnvoy is an innovative company and global leader of tokenless two-factor authentication. At the height of heated debates over the efficiency of password authentication, they promise a keynote speech analysing 2FA solutions available on the market and a discussion on security aspects relating to seed records, the algorithms used to create passcodes for user identification. 

5. Tripwire
Stand G108
Tweets @TripwireInc

Tripwire comes to Infosec Europe with a pretty innovative approach and promises to zombify you. Well, at least on paper, but that’s not all they're offering. The session One Big Threat to Cyber Security: IT Geeks Can’t Talk to Management resonates the concerns of every information security specialist when considering effective communication with the C-suite.

6. Thales

Stand F30

Tweets @Thalesesecurity

Thales, a leading provider of cyber security and data encryption, announces the launch of the Encryption in the Cloud study which will look at budgets, corporate ownership, the role of encryption in cloud computing, as well as the Global Encryption Trends survey, now running in its ninth year and conducted in 8 different countries.

7. Digital Shadows

Stand L92

Tweets @digitalshadows

Digital Shadows is a one of the new exhibitors and a cyber intelligence company which monitors and secures digital footprints for cloud environments, mobile devices and social media platforms. They will showcase their new SearchLight Client Portal. 

8. Seculert

Stand M85

Tweets @seculert

Seculert, the guys who discovered Shamoon (the virus which brought down 30 000 Saudi Aramco computers, back in 2012) are exhibiting for the first time at Infosec and offer registration for on-demand demos in detecting the undetected, searching for malware beyond your premises and checking suspicious executables. 

9. FireMon

Stand J70

Tweets @FireMon

FireMon is an enterprise security management provider which promises a week full of demos, a pub reception and a presentation on the beauty of automation in cyber security, by explaining how it brings a greater agility to the job without posing a threat to job security, nor the danger of oversimplifying complex problems. 

10. Watchful

Stand E42

Tweets @watchfulsw

Watchful is showcasing RightsWatch data-centric security suite with a nimble ability to classify information dynamically using Office 365, without user involvement and then leveraging Azure RMS to protect that information. Their approach to securing data in today’s hyper-connected landscape is securing the information that matters most. They’re also giving away an iPad a day.

Four Years of InfoSec

Infosec Europe is turning 19 this year, but for Titania this is only the 4^th year. Here is the story of how we grew up alongside one of the most recognised shows in the information security industry. 

First Year - 2011

In our first year it was all about getting our tool – Nipper Studio – launched (an enhancement of the original tool Nipper) and into the hands of the people who needed it: pentesters. Titania came with an army of three and within a 2 x 2 stand space we demo'ed for three days.

Nipper Studio Launch

We launched Nipper Studio and we came bearing gifts…

Second Year - 2012

In our second year of Infosec we had tripled in staff numbers and doubled our product portfolio. This time 6 of our best people were there and ready to show off two products. We were also looking to find people interested in trying the ‘release candidate’ version of newest Paws Studio compliance software. 

Stress Free Cyber Security

We made an important addition to our product family – Paws Studio. The Titania team also grew bigger and we decided to help take the stress out of cyber security by giving away some stress balls and chocolate.

Alen Damadzic the author of Paws Studio, our compliance and auditing tool,  demonstrating the use of stress balls at our stand. 

Berislav Kucan @bkucan here with the Titania Team, having a chat about his work at HelpNet Security. Later that year he completed an independent review of our Nipper Studio software. 

The stars of our expo – Nipper Studio & Paws Studio

Third Year – 2013

Last year we had 7 people, and just as well, because we barely had a moment to catch a breath. In between spinning the wheel of fortune, talking to people, showcasing the products and catching up with old friends from the industry, we had our hands full. 

At the last show we also had some very popular umbrellas. In the spirit of the Great British Cyber Security theme, what can be more appropriate than an umbrella in London? 

Great British Cyber Security

Our prize wheel gave visitors a chance to win free audits, an assortment of Union Jack themed prizes, such as mugs, piggy banks, umbrellas and t-shirts. We also had Nipper Studio and Paws Studio in full swing. Our team was counting 13 members and had a bigger stand so we could welcome even more people.  

Great British Cyber Security

Fourth Year - 2014

This year we have even more surprises. Everything's got bigger, the team, the company, the stand and the giveaways. You'll have to come and see us to find out what's new in terms of auditing, compliance and the best cyber security for your organisation. There will be new features to trial on Nipper Studio and a very important announcement that you don't want to miss. 

Stress Free Cyber Security

Without spoiling the surprise, we can assure you that Ian Whiting will be there to give demonstrations of each of our products for the entire three days. At the end of each presentation there will be a Q & A session and a surprise goody bag for all those who want them. We also have a demo area for those of you who want to try the software yourselves and we have an excellent team who has already represented us successfully in Vienna, Las Vegas and Washington at cyber conferences and exhibitions this year.

If you want to know where to find us, we will be on G25, right next to Juniper Networks, Outpost24, Trend Micro, Splunk and SecurEnvoy:

Titania (center) stand G25

Malvern Cyber Security Cluster

You can also find us at Stand C85 as part of the Malvern Cyber Security Cluster, along other members of the cyber valley. The partnership is a collaborative effort of cyber security SMEs in the Worcestershire area to raise awareness, encourage the development of cyber skills and address common issues for SMEs in the industry.

On each day of the event, members of the Cluster will be present to talk you through the variety of innovative products and solutions and share best practices on the common topic that brings us all together at Infosec: information security. Among the companies you'll see at the stand are: Titania, DataSure,  Borwell, Advent IM, Hedgehog Security, Encription Limited, Ascentor, NCSC (National Cyber Skills Centre), IASME (Information Assurance for SMEs), Sutcliffe & Co and others. 

Malvern Cyber Security Cluster (center) stand C85

Exhibition Review: Infosecurity Europe

by Nicola Whiting (COO, Titania)

About the Author

Nicola Whiting is Titania’s Chief Operations Officer and has a solid reputation for increasing revenues and profitability within technology based SME environments. She joined the team in 2011 and has overseen a period of intense growth and change. Now Nicola’s focus is on extending the organizational capabilities and workforce skills, in order to continue to embrace innovation.

Infosecurity Europe is an annual show which takes place every April at Earls Court in London (2014’s show is later than normal and the scheduled dates are 29 April - 01 May).

Figure 1. Outside Earls Court during Infosecurity Europe. Photograph provided by Reed Exhibitions (Oct. 2013)

Titania will be exhibiting for its fourth year and we would recommend Infosecurity Europe as a key show for both independent and corporate Penetrations Testers. Not only will it give you a good overview of the tools your customers are using to manage their systems, but you will also gain invaluable information on the latest business critical issues and hot topics.

You can register for FREE entry and there’s plenty of value in attending:

The security professionals “intelligence boot camp”

Seminars are delivered at all levels and include industry focussed topics in both business and technical areas. The keynote theatre is a great place to update on global trending topics and you’ll find both high level guest speakers and strategic end-user panel discussions.

Hot topics for 2013 included application security, business continuity and digital forensics, encryption, managing the human factor, compliance, identity access management, network infrastructure and secure transactions. Whatever current problems are keeping your customers awake at night, you can be sure that the seminars, workshops and keynote theatre will leave you armed with both the issues at hand AND the industry’s best practice advice.

Hundreds of key vendors, thousands of products and services

Infosecurity Europe is on a growth streak and had over 13,000 visitors last year (ABC audited). 

Figure 2. Inside Infosecurity Europe: Photograph provided by Reed Exhibitions (Oct. 2013)

Visitors range from SME’s to large multinationals and from diverse market sectors.

It’s no surprise that leading security vendors choose InfoSec to showcase their latest and greatest innovations.

In a fast paced industry it’s important that, as a security professional, you are able to review your security choice, method and message against the current security marketplace.

Are you getting best value, is there a leaner more efficient way of achieving your current requirements, are you still “ahead of the curve”?

If you’re happy with your current choices it’s also a great opportunity to get an update on the latest features from your current product vendors AND iron out any niggling operability questions! In 2013 there were over 350 key security vendors at Infosecurity Europe, so there’s no better opportunity to see what’s on offer and build some new business contacts.

Multiple Networking Opportunities

Through the exhibition, seminars and workshops, you’ll have the opportunity to network with peers from other sectors, often gaining new and fresh insights into common threat areas.

Many of Titania’s customers are Penetration Testers (who use Nipper Studio to improve their ROI on configuration reviews). Their first-hand experience is that InfoSec is a great B2B opportunity and not to be missed.

If you make it to Infosecurity Europe this year, stop by our stand (G25). We’d love to hear what you think of the show and would be happy to show you our latest products and updates!