Schedule :: Rochester Security Summit

Schedule

Day 1 - October 14 (Wednesday)

Start
End
 
7:30 am
8:30 am
Registration
7:30 am - 8:30 am
8:00 am
8:30 am
Breakfast
8:00 am - 8:30 am
8:30 am
9:40 am
Opening Remarks & Keynote
Colin Ahern
8:30 am - 9:40 am
Grand Lilac Ballroom
9:40 am
10:00 am
Sponsor Visitation Break
9:40 am - 10:00 am
 
 
Track 1
Track 2
Track 3
Track 4
Other Events
 
 
Grand Lilac Ballroom
Highland A/B
Highland D/E
Cascade A-C
Highland C
Come & Go
Aqueduct A/B
Aqueduct C/D
10:00 am
10:50 am
Punk Rock AI: The Work/Life OS Digital Assistant Big Tech Won't Build for You
JP Bourget
10:00 am-10:50 am
Track 1 - Grand Lilac Ballroom
Defending at Machine Speed Without Losing Human Judgment
Daniel Megalo
10:00 am-10:50 am
Track 2 - Highland A/B
The Vendor Has Your Domain Admin: Why Third-Party Risk Programs Are Looking the Wrong Way
Brandon Finton
10:00 am-10:50 am
Track 3 - Highland D/E
Beyond the Hype: Practical AI Use Cases for Modern GRC Teams
Deke Johnson
10:00 am-10:50 am
Track 4 - Cascade A-C
Capture the Flag Competition by MetaCTF

Compete solo or in groups of up to four

Come & Go

Registration: 9:40 am
Start: 10:00 am
End: Thursday 3pm

10:00 am-10:50 am
Other Events - Hightland C - Come & Go
Building Red Teaming into AI Operations: Development, Validation, and Beyond
Mark Ostrowski
10:00 am-10:50 am
Sponsor Track - Aqueduct A/B
Zero Standing Privilege for Machines: A Runtime Framework for Agentic AI
Brian McHenry
10:00 am-10:50 am
Sponsor Track - Aqueduct C/D
11:00 am
11:50 am
Build It, Break It, Learn From It: Designing Bespoke CTF and Malware Analysis Labs for Your Organization
Aaron Walker, Ph. D.
11:00 am-11:50 am
Track 1 - Grand Lilac Ballroom
Running an Effective Vulnerability Management Program
Rich Ingersoll
11:00 am-11:50 am
Track 2 - Highland A/B
One Control Set to Rule Them All
Patrick Rost
11:00 am-11:50 am
Track 3 - Highland D/E
Real-Time Telemetry Analytics for Cybersecurity: Detecting Anomalies in High-Speed Data Streams
Janhavi Dhariya
11:00 am-11:50 am
Track 4 - Cascade A-C
AI and DLP: How Fortinet's Data Loss Prevention Solutions Can Secure Your Private Data from AI Leakage
Mark Rosenecker
11:00 am-11:50 am
Sponsor Track - Aqueduct A/B
11:00 am-11:50 am
Sponsor Track - Aqueduct C/D
12:00 pm
1:00 pm
Lunch
12:00 pm - 1:00 pm
Empire Hall (2nd Floor)
1:00 pm
1:50 pm
Securing Shadow AI: Practical Controls for AI Risk, Data Exposure, and Vendor Oversight
Lawana Jones
1:00 pm-1:50 pm
Track 1 - Grand Lilac Ballroom
Cybersecurity Outlook 2026... We’re All in Trouble!
Steve Stasiukonis
1:00 pm-1:50 pm
Track 2 - Highland A/B
Verified Lies: Exposing Verification Theater Before the Fraud Matures
Andre Piazza
1:00 pm-1:50 pm
Track 3 - Highland D/E
Small Team, Big Security: How to Punch Above Your Weight
Ryan McCoy & Paul Scott
1:00 pm-1:50 pm
Track 4 - Cascade A-C
Lockpick Village by Toool

Hands-on lockpicking workshop

Come & Go

Start: 12:30 pm
End: 3:45 pm
1:00 pm-1:50 pm
Other Events - Hightland C - Come & Go
Security Strategy for the Agentic Enterprise
Silas Glines
1:00 pm-1:50 pm
Sponsor Track - Aqueduct A/B
Generative AI The Magical Mystery Tour
Bob West
1:00 pm-1:50 pm
Sponsor Track - Aqueduct C/D
2:00 pm
2:50 pm
AI-Augmented Web App Pentesting: Lessons from the Field
Mike Lisi
2:00 pm-2:50 pm
Track 1 - Grand Lilac Ballroom
Don't Go Alone: Take this Threat Intel!
Thomas Richards
2:00 pm-2:50 pm
Track 2 - Highland A/B
Anatomy of an API Key: Mapping the Sprawl of Non-Human Identities in Modern SaaS
Chaim Sanders
2:00 pm-2:50 pm
Track 3 - Highland D/E
Federated Learning for the Real World: Privacy, Security, and Cost, Without the Trade-offs
Dmitrii Korobeinikov, AJ Barea & Dr. Leon Reznik
2:00 pm-2:50 pm
Track 4 - Cascade A-C
Alleviating the AI Anxiety: Concrete Use Cases for Secure AI Architecture
Chris Aiwanse - ePlus and TBD, Cisco
2:00 pm-2:50 pm
Sponsor Track - Aqueduct A/B
Driving AI Security in the Modern Networking Era
Al Pardhan
2:00 pm-2:50 pm
Sponsor Track - Aqueduct C/D
3:00 pm
3:45 pm
Sponsor Visitation Break
3:00 pm - 3:45 pm
3:45 pm
4:45 pm
Keynote
Brian Krebs
3:45 pm - 4:45 pm
Grand Lilac Ballroom
4:45 pm
5:45 pm
Happy Hour
4:45 pm - 5:45 pm

Day 2 - October 15 (Thursday)

Start
End
 
7:30 am
8:30 am
Registration
7:30 am - 8:30 am
8:00 am
8:30 am
Breakfast
8:00 am - 8:30 am
8:30 am
9:40 am
Keynote
James Brodsky
8:30 am - 9:40 am
Grand Lilac Ballroom
9:40 am
10:00 am
Sponsor Visitation Break
9:40 am - 10:00 am
 
 
Track 1
Track 2
Track 3
Track 4
Other Events
 
 
Grand Lilac Ballroom
Highland A/B
Highland D/E
Cascade A-C
Highland C
Come & Go
Aqueduct A/B
Aqueduct C/D
10:00 am
10:50 am
AI Security Without the Noise: How to Evaluate Third‐Party AI Tools Without Flooding Your SOC
Joe Cicero
10:00 am-10:50 am
Track 1 - Grand Lilac Ballroom
Extending Shared Threat Models with the Application Attack Matrix
J. Fridley
10:00 am-10:50 am
Track 2 - Highland A/B
Fast Cars Need Good Brakes: Why Speed and Innovation Should Welcome the Safety of GRC
Eric Anderson
10:00 am-10:50 am
Track 3 - Highland D/E
Designing Around Risk: Building a Stateless Healthcare Data Transformation Platform
Lisa Smith
10:00 am-10:50 am
Track 4 - Cascade A-C
CTF Competition by MetaCTF (Continued)

Come & Go

End: 3pm
Top 3 prizes awarded EOD
10:00 am-10:50 am
Other Events - Hightland C - Come & Go
AI beyond the hype: Strategies for real operational impact
Edgar Ortiz
10:00 am-10:50 am
Sponsor Track - Aqueduct A/B
Examining Real-World Use Cases of the Emerging Threats in the AI Layer of IT Along with Mitigating Techniques
Dan Brady
10:00 am-10:50 am
Sponsor Track - Aqueduct C/D
11:00 am
11:50 am
Title: AI and Cybersecurity: Dual Use, Widening Gaps in Capabilities, and Protecting NYS
Meghan E. Cook
11:00 am-11:50 am
Track 1 - Grand Lilac Ballroom
A Standard For Investigative Playbooks
Matthew Gracie
11:00 am-11:50 am
Track 2 - Highland A/B
Consolidated but Captive? The Hidden Cost of Security Platformization
Chris Aiwanse
11:00 am-11:50 am
Track 3 - Highland D/E
Real-Time Telemetry Obscurize: Malware for Defense and Counter Offense
Aaron Beardslee
11:00 am-11:50 am
Track 4 - Cascade A-C
11:00 am-11:50 am
Sponsor Track - Aqueduct A/B
Data Security is AI Security
Justin Wilkins
11:00 am-11:50 am
Sponsor Track - Aqueduct C/D
12:00 pm
1:00 pm
Lunch
12:00 pm - 1:00 pm
Empire Hall (2nd Floor)
1:00 pm
1:50 pm
The Good News: One Prompt Took My AI Security Scores to 70%. The Bad News: The Other 30%. I Need a Minute
Scott Bly
1:00 pm-1:50 pm
Track 1 - Grand Lilac Ballroom
SecReviewAgent: Context-Aware Security Review for Infrastructure as Code
Naga Krishna Reddy Muppidi
1:00 pm-1:50 pm
Track 2 - Highland A/B
Your AI Made Me Do It: Logging, Attribution, and the Enterprise Audit Gap
Greg Stachura
1:00 pm-1:50 pm
Track 3 - Highland D/E
Beyond the AI Hype: Rule-Based Neural Networks for Threat Detection
Antoine Nikolaos Valadon
1:00 pm-1:50 pm
Track 4 - Cascade A-C
Lockpick Village by Toool

Hands-on lockpicking workshop

Come & Go

Start: 12:30 pm
End: 3:00 pm
1:00 pm-1:50 pm
Other Events - Hightland C - Come & Go
How the Demand for Agentic AI is Breaking Traditional Cybersecurity Oversight Presenter
Jonathan Borgesen
1:00 pm-1:50 pm
Sponsor Track - Aqueduct A/B
The Fatal Flaw in AI-First Security Agents
Tim MalcomVetter
1:00 pm-1:50 pm
Sponsor Track - Aqueduct C/D
2:00 pm
2:50 pm
AI Security Myths We Can Finally Stop Repeating
Cris Thomas
2:00 pm-2:50 pm
Track 1 - Grand Lilac Ballroom
So, You Want to Be a Forensicator...
Dr. Catherine J. Ullman
2:00 pm-2:50 pm
Track 2 - Highland A/B
Biometric Assured Identity
Kevin Surace
2:00 pm-2:50 pm
Track 3 - Highland D/E
Don't Wait for Impact: Mission Readiness with Response and Recovery Planning
Carlo Toma & Ethan Rosenblum
2:00 pm-2:50 pm
Track 4 - Cascade A-C
2:00 pm-2:50 pm
Sponsor Track - Aqueduct A/B
2:00 pm-2:50 pm
Sponsor Track - Aqueduct C/D
2:50 pm
3:00 pm
Snack Break
2:50 pm - 3:00 pm
3:00 pm
4:00 pm
Keynote
Thomas Barillari & Edward Sakocius
3:00 pm - 4:00 pm
Grand Lilac Ballroom
4:00 pm
4:30 pm
Closing Remarks, and Raffles
4:00 pm - 4:30 pm
Grand Lilac Ballroom

Legend

🟪
AI & Emerging Technologies
Explore the latest advancements and security implications of artificial intelligence and emerging tech.
🔷
Security Operations & Threat Intel
Actionable insights for defending networks, threats hunting, and managing vulnerabilities.
🟠
GRC, Identity, Leadership & AppSec
Strategies for governance, risk management, secure coding, and effective security leadership.
⭐
Emerging Speakers
Welcoming new voices into the security community. Hear new perspectives from emerging professionals sharing fresh insights, innovative research, and approaches to today’s challenges.