About The Speaker

The research delves into the pressing issue of securing organizational data, particularly in light of the limitations of existing enterprise tools. It introduces two approaches for enhancing data security and preventing breaches, with a focus on Identity Governance & Administration (IGA) tools. Unlike traditional IGA tools, which mainly concentrate on access provisioning and compliance, the proposed solution prioritizes early privilege escalation detection and proactive breach prevention. It employs a flexible YAML DSL for customization, addressing common issues such as limited support for custom applications and protocol dependencies. The research emphasizes continuous scanning for Personally Identifiable Information (PII) data and explores cost-effective methods and best practices. The innovative approach aims to grant users complete control over their security findings, with versatility across various assets and applications, including major cloud providers. The tools discussed in the research are hawk-eye (completely open-source) and Xposed for finding Privilege Escalations, with plans to make the latter open-source soon.