PPT-Threat Environment to the State Network

David Morris CTO CyberSecurity Relationships Political Subdivisions Critical Infrastructure Tribal Government State Government Local Government Information Sharing Education Training. Sachin Deshmanya & Srinivas Matta. Defining APT. Evolution of . threat models. Intention . of such threats. How to gear up for such a threat. Agenda. What is APT. Advanced. Sophisticated.. Targeted.. Joyce Corell, NCSC Assistant Director for Supply Chain. National Defense Industrial Association. Global Supply Chain Summit. 09 December 2014. Director of National Intelligence. 2. Assessing Risk. 3. What action next? . The $$$$$$ Question. “history” = {s0,s1,s2……sn….}. Performance = . f. (history). Expected Performance= E(f(history)). Rational != Intentionally avoiding sensing. and prior knowledge. with Open Source tools. Cornerstones of Trust 2014. @. jaimeblasco. @. santiagobassett. Presenters. JAIME BLASCO. Director . AlienVault. Labs. Security Researcher . Malware Analyst. Incident Response. unpitied. sacrifice in a contemptible struggle.”. -Edmund Burke- 1770 Irish statesman and philosopher. 1. Unclassified . This year, in both content and organization, this statement illustrates how quickly and radically the world—and our threat environment—are changing. This environment is demanding reevaluations of the way we do business, expanding our analytic envelope, and altering the vocabulary of intelligence. . Mobile Threat . Prevention. [Protected] Non-confidential content. Agenda. Mobile Threats 101. The Check Point Advantage. Mobile Threat Prevention Competitive Landscape. [Protected] Non-confidential content.  . Sponsored by:. Presented by:. Curtis Johnson. LogRhythm Sales Engineer. The Expanding Cyber . Threat . Motive. Political. Ideological. Criminal. Damaging Data Breaches. 40 Million. Credit Cards Stolen. b. y. Ahmad Muhammad. What is an Insider Security Treat. ?. A threat posed by anyone with special or additional access to an organization's protected assets.. A malicious . insider. is an adversary who operates inside the trusted computing base, basically a trusted adversary.. Marin Frankovic. Datacenter. TSP. mafranko@microsoft.com. $3.5M. The average cost of a data breach to a company . The frequency and sophistication of cybersecurity attacks are getting worse.. Sobering statistics . McAfee Threat Intelligence Exchange. Security Obstacles Facing Organizations. 2. TARGETED ATTACKS. SILOED SECURITY ORGANIZATIONS. LACK OF VISIBILITY. Separate organizations . utilizing point products, from multiple vendors, operating in functional silos with no intelligence . Program. Donald Fulton. Counterintelligence Programs Manager. Facility Technology Services, Inc.. 1 August 2014 – DSS/NISPOM. Industrial Security Representatives. NISPOM Conforming Change . 2 pending. 2. Threat Definition. Traditional threat intelligence feeds raise alarms when known threats are detected in the future . Malware. Discovered. Your visibility to this vulnerability. Your Exposure. Vulnerability Weaponized. Program. Donald Fulton. Counterintelligence Programs Manager. Facility Technology Services, Inc.. 1 August 2014 – DSS/NISPOM. Industrial Security Representatives. NISPOM Conforming Change . 2 pending. Incident Response Management Processes Incident Response Management Processes Incident Response Management Processes Incident Response Management Processes Preparation Identification and Triage Escalation