As organizations face increasingly sophisticated cyber threats, the need for efficient, scalable, and actionable security testing has never been greater. Automated Penetration Testing provides a modern approach to identifying vulnerabilities and assessing risks in real-time, helping security teams focus on threats that are not just vulnerable, but truly exploitable. Thompson Rivers University has taken a proactive stance on cybersecurity by adopting an advanced automated penetration testing system and integrating it into our processes.

This workshop expands beyond theory into a practical use case, providing attendees with an understanding of automated security testing within a post-secondary institution. Participants will:

  • ✅ Understand the key differences between traditional vulnerability scanners and automated penetration testing.
  • ✅ Explore real-world attack paths, including how attackers exploit misconfigurations, weak credentials, and privilege escalation opportunities.
  • ✅ Gain insights through a guided penetration test.
  • ✅ Examine static vs. dynamic security approaches and attack surface reduction techniques.
  • ✅ Compare tools: Pentera, Microsoft Defender for Endpoint, Microsoft Sentinel, Falcon Spotlight, and how they work cooperatively to provide a comprehensive defense strategy.
  • ✅ Engage in automated interactive penetration tests, prioritizing vulnerabilities based on actual exploitability rather than just severity scores.

This workshop is designed for cybersecurity professionals, IT managers, and security teams looking to enhance their offensive security capabilities. By the end, participants will have a deeper, practical understanding of how automated penetration testing strengthens organizational defenses and how to integrate these tools into a comprehensive cybersecurity strategy.

NOTE: Attendees agree to traffic light protocol RED due to the possible sensitivity of the information presented.

Audience: Cybersecurity Professionals, IT Managers, Security Analysts

Summit Speaker

John Cuzzola

Director, Information Security, Thompson Rivers University

John Cuzzola is the information security director for Thompson Rivers University (TRU), where he has also taught computer science courses as sessional faculty. John has co-authored 17 research papers and holds two patents as lead inventor. Before TRU, John was the information technology director for the Kamloops-Thompson School District. He holds a MSc. in Information Systems and security certifications of Certified Ethical Hacker (CEH) Master and COMPTIA PenTest+.

Technology Track