Using Hackers' Own Methods & Tools to Defeat Persistent Adversaries

26 Pages·2014·1.24 MB·English

by  James A. Ishikawa

Using Hackers’ Own Methods & Tools
to Defeat Persistent Adversaries
Michael A. Davis, CTO
CounterTack
1
About Our Presenter
 Technology Expertise
– CounterTack: Manage technology vision to push
defenders ahead of the attackers
– External IT: Unifying business, security and IT
– Savid Technologies: Fastest Growing Security
Company in 2010 ranked by Inc.
Consulted for Global 1000 organizations
o
 Noted Author and Presenter
– Author: Hacking Exposed, Hacking Exposed:
Malware & Rootkits
– Author: Regular contributor to InformationWeek
and Dark Reading
Michael A. Davis – Speaker at conferences including RSA, Black Hat,
Chief Technology Officer ISSA, ISACA, InfosecWorld, SecureWorld,
DEFCON
CounterTack
2
Agenda
 Why Attackers are Winning
 Why You Aren’t Keeping Up
 What New Approaches Can Solve This Problem?
3
Example: Professional Interface
4
What is different?
Compromising the user
is always easier then
compromising the
technology!
7
Enterprise Concerns
2012 2013
52%
42%
39%
38%
34%
29%
27%
25%
22% 22%
Assessing Getting Preventing Enforcing Managing
risk adequate data security the
funding breaches policies complexity
Source: Information Week Data Survey, 2013
8
Complexity is everywhere
Services
FS Applications
Applications
Storage Security
Collaboration IDS AV/Spyware Anti-Spam
Content Filtering Identity Management
Business
intelligence/
Network & Systems
Analytical Management
applications
Vulnerability Assessment Regulatory Compliance
Management Vendors
Application
integration
Monitoring Firewalls
Dynamic Provisioning
Application
development Management
tools
Database
OS
Hardware Computer Network Storage
platform
Source: CA, 2009
What The Heck Can I Do?
Make Better Decisions