Based on the security incidents in which application security was invaded in recent years, this paper explores the potential threats to today's application system security and supply chain vulnarability. In addition to the currently well-known security threats, this session specifically explores threats that may not be considered in "application security testing" and "software supply chain security". We will also discuss the technical and management process aspects, and how to complete necessary security checks in S-SDLC and automated CI/CD processes. And add these TTP into your Threat Modeling knowledge.

Modern industrial networks leverage internet connectivity to boost productivity, but the benefits of digital transformation also come with an increased attack surface. The rise of industrial control system (ICS) cybersecurity incidents has significantly undermined the perceived effectiveness of "isolation" as a universal solution. However, due to the inherent limitations of operational technology (OT) environments, they cannot adopt the multi-layered defense mechanisms of IT systems, highlighting the difficulty of protecting OT systems from cyberattacks.

This session will take the perspective of an industrial network security company, using visualization as a starting point to construct a comprehensive industrial security ecosystem. In addition to covering OT assets, it will also encompass IT and IoT devices, as well as equipment within Building Management Systems (BMS). This approach addresses the increasingly discussed topic of Cyber-Physical System (CPS) security in recent years.

In 2025, AI will emerge as the central pillar of cybersecurity, yet its rapid advancement also brings heightened risks such as deepfake technology and quantum attacks, posing unprecedented challenges for enterprises. This discussion will explore critical cybersecurity trends and demonstrate how Palo Alto Networks' unified platform, powered by AI-driven security solutions, can transform passive defense into proactive resilience. Learn how to build a trusted AI security strategy to navigate the complexities of evolving cyber threats and maintain a competitive edge in the dynamic digital landscape.