(upbeat music)
>> Hello, everyone and welcome
to this special CUBE conversation here in our studios
in Palo Alto, California.
I'm John Furrier, the co-founder of SiliconANGLE Media
and cohost of theCUBE,
with a special preview of CyberConnect 2017,
a global security conference presented by Centrify,
it's an industry-independent event.
I'm here with the CEO and Founder of Centrify, Tom Kemp.
Tom, thanks for joining me on this preview
of CyberConnect 2017.
>> It's great to be here again.
>> So, you guys, obviously,
as a company are no longer struggling,
you're clearly clearing the runway on growth.
Congratulations on the success.
This event will be broadcasting live on theCUBE
as folks should know on the site.
CyberConnect 2017 is a different kind of event,
it's really the first of its kind where
it's an industry gathering, not just a Black Hat,
I mean, RSA's got Black Hat
and they try to weave a little business in.
This is all about leadership in the industry.
Is that right? >> Yeah, absolutely.
You know, there's really a dearth
of business-focused discussions
with C-Level people discussing the issues around security.
And so, what we found was,
was that most of the conversations
were about the hackers, you know,
the methodology of goin' in and hacking in.
And, that doesn't really help the business people,
they have to understand what are the higher level strategies
that should be deployed
to make their organizations more secure.
So, we kind of wanted to up-level the conversation
regarding security and help C-Level people, board people,
figure out what they should be doing.
>> And, we've obviously been reporting at SiliconANGLE,
obviously, the latest and greatest on hacks.
You know, you've seen everything from cyber threats,
where are real hacking,
to nuanced things like the rushing dissidents campaign
on Facebook around voter impressions.
And we saw that in the hearings in the senate
where Facebook got really grilled by, you know,
"Is it a real threat," no, but it is a threat
in the sense that they're putting opinion-shaping.
So, there's a broad range of business issues,
some are highly-nuanced,
some are very specific business values,
you're out of business if you get hacked.
So, how do you see that,
because is that the discussion point?
Is it more policy, all of the above,
what is the overall conversations going to be like
at CyberConnect 2017?
>> Yeah, I think it's, look, the reality is,
is that breaches before were
about potentially stealing your data.
But, now it's an impact on your brand.
Like, what if the Russians were doing that
to Pepsi or Coca-Cola, et cetera?
They could just completely setup a lot of negative sentiment
about you, so there's a lot of different ways
to impact organizations as well.
And so, what we're doing at CyberConnect is,
putting forth CIOs
of Aetna, US Bank, and having them describe what they do.
I mean, think about a major healthcare company, Aetna,
US Bank, the list goes on, you know, Blue Cross Blue Shield.
And we're having the major CSOs
of these large organizations tell their peers
what they're doing to protect their company,
their brands, et cetera.
>> Well, I want to get back to the business impact
in a second, but some notable key notes here.
Securing a Nation Amid Change, A Roadmap to Freedom,
from Retired General Keith Alexander,
Former Director of the NSA
and Chief of the U.S. Cyber Command.
Why is he there, what's the focus for his talk?
>> Well, you can't ignore the government aspect.
Well, first of all, government is a huge target
and we obviously saw that with the election,
we saw that with the hack
of the Office of Personnel Management, et cetera.
And so, you know, nation states are going after governments
as well as criminal organizations,
so General Alexander can talk about what he did
to protect us as citizens and our government.
But, he also has a great insight in terms of
what hackers are doing to go after critical infrastructure.
>> John: He's got some experience thinking about it,
so he's going to bring that thinking in?
>> Absolutely, and he's going to give us an update
on the latest vectors of attacks that are happening,
and give us some insight on what he experienced trying
to protect the United States but also trying
to protect our businesses and infrastructure.
So, we wanted to have him kick things off
to give, you know, what more, the NSA,
the ex-NSA head telling us what's going on.
>> And you got amazing guests here, again the CSO from Aetna,
the Chief Security Officer from Cisco,
The Global Value Chain, you got US Bank.
You got Amazon Web Services here talking
about the Best Practice of Running Workloads
on an Amazon Service Cloud.
So, you got the gamut of industry,
as well as some government people
who have experienced dealing with this
from a practitioners standpoint?
What's the convoluence of that,
what's the trends that are coming out of those?
What can people expect to hear
and look forward to watching the videos for?
>> You know, I think it's going to be some of the trends
that you guys talk about.
It's like, how can you leverage AI and machine learning
to help better protect your organization as well?
So, that's going to be one huge trend.
I think the other trend, and that's why we have the folks
from Amazon, is in a world
in which we're increasingly using mobile and Cloud
and leaving the perimeter, you know,
in a world where there's no perimeter,
how can you secure your users, your data, et cetera?
So, I think the focus of the conference
is going to be very much on leveraging modern
and new technologies, AI, machine learning,
discussing concepts like Zero Trust.
And then, also, figuring out and helping people
really get some good ideas as they make the move to Cloud,
how can they secure themselves, make themselves,
more secure than when they had
the traditional perimeter set up?
>> I mean, given the security landscape,
you and I discussed this in and around the industry,
go back seven years, "Oh, Cloud's un-secure,"
now Cloud seems to be more secure then on perim
because of the work that Amazon, for instance,
they upped their game significantly in security,
haven't they?
>> Absolutely, and you know, it's interesting,
it's, I mean, you see it first hand,
Google comes out with announcements, Microsoft, Oracle,
et cetera, and security is a key issue.
And they're trying to provide a more secure platform
to get people comfortable moving with the Cloud.
At the same time, there's vendors such as Centrify,
that's there's value-add that we can provide
and one area that we specifically provide is in the area
of identity and controlling who can access what, as well.
So, yeah, it completely reshapes how you do security,
and the vendors are contributing.
What's so important that the solutions
that we had before are being completely disruptive
and they need to be completely adopted
for the new Cloud world.
>> I know it's your first event,
you guys are underwriting this, it's presented by Centrify,
it's not sponsored by, it's not your show.
Although you're doing a lot of heavy lifting
in supporting this, but your vision
for this CyberConnect is really more
of a gathering amongst industry folks.
We're certainly glad to be a part of it,
thanks for inviting us, we're glad to be there.
But, this is not a Centrify-only thing,
explain the presented by Centrify vis-a-vis
CyberConnect.
>> So, and we've also put forth another organization
that we've worked with.
It's an organization called ICIT,
the Institute for Critical Information Technology.
And, what they are, is they're a think tank.
And they are very much about how can we support
and secure the infrastructure of the United States, as well?
We didn't want this to be a vendor fest,
we wanted to be able to have all parties,
no matter what technologies they use,
to be able to come together and get value of this.
It benefits Centrify because it raises awareness
and visibility for us, but even more important,
that we wanted to give back to the community
and offer something unique and different.
That this is not just another vendor fest show, et cetera,
this is something where it's a bringing together
of really smart people that are on the front-lines
of securing their organizations.
And we just felt that so much value could be driven from it.
Because, all the other shows are always about
how you can hack and ATM and all that stuff,
and that's great, that's great for a hacker
but that doesn't really help business people.
>> Or vendors trying to sell something, right?
>> Exactly.
>> Another platform to measure something?
>> Yeah, exactly.
>> This is more of a laid-back approach.
Well, I think that's great leadership,
I want to give you some props for that.
Knowing that you guys are very, as you say,
community-centric.
Now you mentioned community, this is about giving back
and that's certainly going to be helpful.
But, security has always been kind of a community thing,
but now you're starting to see the business
and industry community coming together.
What's your vision for the security community
at this CSO level?
What's needed, what's your vision?
>> I think what's needed is better sharing
of best practices,
and really, more collaboration
because the same attacks that are going to happen for,
say one healthcare organization,
the hackers are going to use the same means
and methods, as well.
And so, if you get the CSOs in the room together
and hear what the others are experiencing,
it's just going to make them more better.
So, the first thing, is to open up the communication.
The second thing is, is that could we figure out a way,
from a platform or a technology perspective,
to share that information and share that knowledge?
But, the first step is to get the people in the room
to hear from their peers of what's going on.
And, frankly, government at one point was supposed
to be doing it, it's not really doing it,
so, I think an event like this could really help
in that regard.
>> Well, and also, I would just point out the growth
in GovCloud and following some of the stuff going on
at Amazon, as an example, had been skyrocketing.
So, you're starting to see industry
and government coming together?
>> Yeah.
>> And now you got a global landscape,
you know, this is interesting times
and I want to get your reaction to some of the things
that have been said here on theCUBE
but also, out in the marketplace where, you know,
it used to be state-actor game, not state on state.
And then, if they revealed their cards,
then they're out in the open.
But now, the states are sponsoring, through open source,
and also, in these public domains,
whether it's a WikiLeaks or whatever,
you're starting to see actors being subsidized or sponsored.
And so that opens up the democratization capability
for people to organize and attack the United States.
And companies.
>> Oh, absolutely, and you could right now,
they have a help desk, and it's like ordering a service.
"Oh, you want 500 bots going after this?"
>> John: Smear a journalist for $10k.
>> (laughing) Exactly, it's like as a service.
Hacking as a service, they have help desk, et cetera.
And, the interesting thing is. >> It's a business model.
>> It's a business model, you're absolutely right.
The people, it's all pay to play, right?
And, just the number of resources being devoted
and dedicated, and we're talking about thousands
of people in Russia, thousands of people in North Korea,
and thousands of people in China.
And, what came out just recently,
is now that they're shifting their target to individuals,
and so, now you may have an individual that there may
be a person just dedicated to them in China, or Russia
or North Korea, trying to hack into them as well.
So, it's getting really scary.
>> It's almost too hard for one company with brute force,
this is where the collective intelligence
of the community really plays a big difference
on the best practices because when you thought you had
one model nailed, not just tech, but business model,
it might shift.
So, it seems like a moving train.
>> Yeah, and we're having Mist show up,
and so we're getting the government.
But, I really think that there does need to be,
kind of, more of an open-sourcing of knowledge
and information to help better fine tune
the machine learning that's needed and required
to prevent these type of breaches.
>> So, what can we expect?
Obviously, this is a preview to the show,
we'll be there Monday broadcasting live all day.
What can people expect of the event, content-wise,
what are your favorites?
>> Well, I mean, first of all, just the people
that we have there.
We're going to get the two CCOs from two
of the biggest healthcare companies,
we're going to get the former head of the NSA,
we're going to get the CSO of US Bank, I mean,
we're talking the biggest financial services organizations.
We're going to have the biggest healthcare organizations.
We're going to have the people doing cyber.
>> John: MasterCard's there.
>> Yeah, MasterCard, we have the German government there
as well, so we've got government, both U.S.
as well as European.
We've got all the big people in terms of,
that have to secure the largest banks,
the largest healthcare, et cetera.
And then, we also have, as you talked about,
obviously Centrify's going to be there,
but we're going to have AWS,
and we're going to have some other folks from some
of the top vendors in the industry as well.
So, it's going to be a great mixture of government,
business, as well as vendors.
Participating and contributing
and talking about these problems.
>> So, it's an inaugural event? >> Yes.
>> So, you're looking for some success,
we'll see how it goes, we'll be there.
What can you expect, are you going to do this every year?
Twice a year, what's the thoughts on the even itself?
>> It's been amazing, the response.
So, we just thought we were going to have 400 people,
we sold out, we're getting close to 600 people.
And now, we're going to have over 1,000 people
that are going to be doing the live streaming.
There's just a huge, pent-up demand for this, as well.
So, we actually had to shut down registration
and said sold out a week or two ago.
And, so far, it looks really good, let's see how it goes.
It looks like we can easily double this.
We're already thinking about next year,
we'll see how the event goes.
If you just look at the line-up, look at the interest,
or whatever, there's a pent-up demand
to better secure government and enterprises.
>> And leadership, like you guys are taking this as an issue,
plus, others coming together.
We're certainly super glad to be a part of the community,
and we look forward to the coverage.
This is really, kind of, what the industry needs.
>> Absolutely.
>> All right, Tom Kemp, the CEO and Founder of Centrify,
really fast growing start up,
doing an event for the community.
Very strong approach, I love the posture,
I think that's the way to go than these vendor shows.
You know how I feel about that.
It's all about the community, this is a community.
I mean, look at the Bitcoin, the Blockchain,
know you're customer isn't into money laundering.
It's an identity game.
>> Yeah, absolutely.
>> Now, by the way, quick, is there going
to be any Blockchain action there?
>> Oh, I don't know about that, I don't think so.
>> Next year. (laughing) >> Next year, exactly.
>> It's certainly coming, Blockchain security,
as well as a lot of great topics.
Check out CyberConnect 2017.
If you can't make it to New York, they're sold out,
theCUBE.net is where you can watch it live.
And, of course, we'll have all the video coverage
on demand, on theCUBE.net, as well.
So, we'll have all the sessions and some great stuff.
Tom Kemp, CEO.
I'm John Furrier from theCUBE, here in Palo Alto,
thanks for watching.
(upbeat music)