Jason Pappalexis

Research Director, NSS Labs


Research Director Jason Pappalexis has more than 15 years of experience in the security industry, holding roles with leading antivirus and cloud-based security vendors, as well as with the US government. He has also provided extensive HTTP/SMTP capacity testing and security guidance for Fortune 500 companies. His research at NSS Labs has focused on perimeter security, continuous forensic analytics, breach detection, virtualization, and systems management.

Jason’s recent papers cover an adaptive approach to security, the need to evolve incident response, the challenges of securing data in the cloud, and the complexities of feature consolidation. He presented his NSS paper „Adaptive Security for Business Continuity” at RSA 2015 in San Francisco.

Jason graduated with a master’s degree and honors in mechanical engineering, with a focus on computational fluid dynamics (applied mathematics). He is a Certified Information Systems Security Professional (CISSP) and a Certified Security Compliance Specialist (CSCS).

Speaker skills:

  • Technologie sieciowe 95% 95%
  • Cyber Security 99% 99%


Pokaz LIVE: Lowering Cyber Risk - An Interactive Demonstration on how to Reduce Exposure to Weaponized Exploits

The amount of security information that must be processed and actioned on a daily basis is overwhelming to most security teams.  More importantly, how can all of this data help you understand an organization’s risk as it relates to your specific environment?  This presentation will provide a detailed overview of how you can leverage live exploit testing to continuously understand your current security posture and exposure to active weaponized exploits.

NSS Labs has developed a 24/7 monitoring service that provides unprecedented visibility into the weaponized exploits that can bypass your defenses and compromise your network.  It captures exploits and their intended targets from active cyber attack campaigns, and continuously tests those exploits against security products.  Learn how to reduce cyber risk and improve security ROI.