CONFidence 2014: Brian Wohlwinder: Asymmetric Defense “Using your home-field advantage”

Post on 09-May-2015

280 views 1 download

description

This presentation will focus on leveraging knowledge of your own environment to defend yourself. Consciously identifying and building protections around key assets and information that an adversary would target, allows for the most effective protection for the enterprise. We will discuss several attack/defense scenarios, the associated systems and infrastructure involved and key areas to protect. We’ll also show how effort invested to enumerate critical assets can allow the defender to quickly prioritize actions for the greatest effect.

transcript

Asymmetric Defense: Using Your Home Field Advantage

May 28, 2014

Brian Wohlwinder

ASYMMETRIC DEFENSE

Home Field Advantage

Using your Home Field Advantage

• Understand and define your environment

• Study your opposition

• Proactive Defense

Your Environment

Team– Tactical skills– Strategically focused

Knowledge– System of systems

Plan– Response actions

Event Relativity

White Noise

Informative

Indicative

Who is your opponent?

Threat to target mapping– Depends on what you have…– patient, determined and smart

Focus efforts– Try to protect everything and you protect nothing

Monitor what is leaving your network– Easier said than done

Proactive Defense

Proactive defense– The fun part

Go hunting

Do this smartly

Using your Home Field Advantage

Understand your environment

Study your opposition

Proactive Defense

Own it

Become a rock star!

…it really is that easy.

THANK YOU.

Brian Wohlwinder

Senior Threat Researcher

Brian.Wohlwinder@FidelisSecurity.com

General Dynamics Fidelis Cybersecurity Solutions

www.FidelisSecurity.com www.ThreatGeek.com