AttackIQ

Public cloud providers have built native security controls into their cloud offerings so customers can easily defend their data in the cloud, but organizations still need a means to test and optimize their cloud security effectiveness. Join leaders from major cybersecurity providers in a discussion about trends in threat-informed defense in cloud security operations.

Speakers:

Victor Monga, VMware

Chad Skipper, VMware

AttackIQ Purple Hats: www.purplehats.org/

AttackIQ Academy: academy.attackiq.com/

AttackIQ: attackiq.com/

How do you build an evidence-based cybersecurity program? To learn how to improve your cybersecurity performance, come listen to leading cybersecurity strategists discuss how to measure program success, what data is important to collect, and other aspects of using evidence-based cybersecurity management to achieve better business outcomes. Vicente Aceituno Canal, Chief Information Security Officer of Lottoland, and Christopher Frenz, Information Security Officer and AVP of IT Security at Mount Sinai South Nassau.

Speakers:

Vicente Aceituno Canal, Lottoland

Christopher Frenz, Mount Sinai South Nassau

Keith Wilson. AttackIQ

AttackIQ Purple Hats: www.purplehats.org/

AttackIQ Academy: academy.attackiq.com/

AttackIQ: attackiq.com/

What are the key challenges in cybersecurity and cyberspace operations today, and how can the U.S. government best respond? Listen to two of the United States’ most important thinkers and leaders in cybersecurity and technology, Jen Easterly, Director of the U.S. Cybersecurity and Infrastructure Security Agency (CISA) in conversation with Dr. Richard Danzig, Senior Fellow at Johns Hopkins Applied Research Laboratory and former U.S. Secretary of the Navy.

Speakers:

Jen Easterly, Director of the U.S. Cybersecurity and Infrastructure Security Agency (CISA)

Dr. Richard J. Danzig, Senior Fellow at the Johns Hopkins Applied Physics Laboratory, a Trustee of the RAND Corporation, and former U.S. Secretary of the Navy

AttackIQ Purple Hats: www.purplehats.org/

AttackIQ Academy: academy.attackiq.com/

AttackIQ: attackiq.com/

In an increasingly complex world, security teams struggle over how best to improve their program performance. Even after decades of investment in the best technologies and teams, intruders keep breaking past and having an impact. Why? Just like a World Cup soccer team, security teams need to train and prepare for their opponents. Today, they don’t do so enough. There is a path for elevating cybersecurity performance, however, and it begins by focusing on what we know. Practically, we know adversaries use the same time-honored tactics, techniques, and procedures, over and over, to achieve their strategic objectives. That’s why the MITRE ATT&CK framework is so useful as a period table of known behaviors. It is why we believe in a purple team defensive construct. And it is why we gather at the Purple Hats Conference: to prepare for the challenges we face, to share lessons derived from wisdom and experience, and to make the world a safer place. Join AttackIQ CEO Brett Galloway in exploring these and other issues in his opening address.

Speaker: Brett Galloway, AttackIQ

AttackIQ Purple Hats: www.purplehats.org/

AttackIQ Academy: academy.attackiq.com/

AttackIQ: attackiq.com/

Welcome to the 2nd annual, award-winning virtual Purple Hats Conference — the industry destination for cybersecurity practitioners to collaborate, share ideas, and learn how to evolve from a reactive to proactive threat-informed defense! Founded by AttackIQ, Purple Hats provides free access to globally recognized experts, technical content, and innovative techniques for improving your security posture and building a stronger, more collaborative team.

AttackIQ Purple Hats: www.purplehats.org/

AttackIQ Academy: academy.attackiq.com/

AttackIQ: attackiq.com/

Guest: Christopher Frenz, Information Security Officer and AVP of IT Security at Mount Sinai South Nassau

In this episode, Christopher and Jonathan discuss the zero trust security model and look at how to achieve an evidence-based security program by adopting a threat-informed defense in the hospital sector. Hospitals and healthcare organizations are under siege in cyberspace following an increase in ransomware attacks and the broader pressures of the coronavirus pandemic. After decades of work in cybersecurity, Christopher understands how continuous testing and the MITRE ATT&CK framework can help organizations get ahead. “A lot of the metrics used today are not fine grained enough,” he says. “Looking at MITRE ATT&CK, the different tactics and techniques that can be used against us provides an effective way to identify what we need to be protecting, and what we need to be detecting. We use this as a basis for testing and evaluating the security that is in place within our organizations.” He takes a scientific approach to security by measuring the efficacy of the controls through real-time testing and uses data to improve his organization’s overall security posture.

Tune in and listen to one of the cybersecurity industry’s leading advocates of a threat-informed defense. For more on this subject, check out Christopher’s recent article in Healthcare IT News:https://www.healthcareitnews.com/blog/achieving-evidence-based-security-threat-informed-defense

Click here to read the transcript: https://www.attackiq.com/podcasts/adopting-a-threat-informed-defense-christopher-frenz/#transcript

Guest: Ken Towne, Adversary Emulation Engineer, and Adam Moore, Head of Adversary Research and Development, AttackIQ

In the face of Russian aggression and with the risk of potential cyberattacks increasing, it’s time to make sure that your cyberdefense shields work. Join Ken Towne, Adversary Emulation Engineer, and Adam Moore, Head of Adversary Research and Development, as they talk with host Jonathan Reiber about threat behaviors that are being observed at this moment, how organizations can improve their cybersecurity readiness, and steps teams can take to validate their defenses against Russia-based attackers using a new attack graph in the AttackIQ Security Optimization Platform.

Click here to read the transcript: https://www.attackiq.com/podcasts/preparing-for-russian-state-sponsored-cyberthreats/#transcript

Guest: Ted Harrington, Author of Amazon’s best seller Hackable

In episode 10 of Think Bad, Do Good, Jonathan speaks with Ted Harrington, best-selling author of the book Hackable: How to Do Application Security Right, about the way attackers think, readiness and resilience, and how to live a purposeful career in leadership and public service.

About Hackable: How to Do Application Security Right

If you don’t fix your security vulnerabilities, attackers will exploit them. It’s simply a matter of who finds them first. If you fail to prove that your software is secure, your sales are at risk too.

Whether you’re a technology executive, developer, or security professional, you are responsible for securing your application. However, you may be uncertain about what works, what doesn’t, how hackers exploit applications, or how much to spend. Or maybe you think you do know, but don’t realize what you’re doing wrong.

To defend against attackers, you must think like them. As a leader of ethical hackers, Ted Harrington helps the world’s foremost companies secure their technology. Hackable teaches you exactly how. You’ll learn how to eradicate security vulnerabilities, establish a threat model, and build security into the development process. You’ll build better, more secure products. You’ll gain a competitive edge, earn trust, and win sales.

Additional Resources:

Ted at Purple Hats Conference, Healthcare Under Siege: https://www.youtube.com/watch?v=UjK_eyn1k00

Get Hackable: How to Do Application Security Right on Amazon:https://www.amazon.com/gp/product/B08MFTQ7Q4/ref=dbs_a_def_rwt_bibl_vppi_i0

Click here to read the transcript: https://www.attackiq.com/podcasts/ransomware-security-readiness-and-resilience/#transcript

Guest: Jose Barajas, Director of Global Sales Engineering, AttackIQ

In episode 8 of Think Bad, Do Good, Jose Barajas and Jonathan Reiber discuss MITRE Engenuity’s Center for Threat-Informed Defense and AttackIQ’s emulation plan for menuPass. This plan will enable defenders to replicate tactics and techniques used by menuPass, a cyber threat actor that has been active since 2006 and whose goals are aligned with the People’s Republic of China’s Five Year plan. Members of the group have, according to MITRE ATT&CK, worked in association with the Chinese Ministry of State Security’s (MSS).

What has been their impact? menuPass is responsible for global intellectual property theft in at least 12 countries. The group has targeted companies within the healthcare, defense, aerospace, and government sectors, with emphasis since 2014 on Japanese victims. As MITRE ATT&CK describes the group’s behavior, “menuPass leveraged its unauthorized access to these managed service providers’ networks to pivot into subscriber networks and steal information from organizations in banking and finance, telecommunications, healthcare, manufacturing, consulting, biotechnology, automotive, and energy.”

In this podcast, you will see and hear about how AttackIQ incorporates MITRE Engenuity’s Center for Threat-Informed Defense’s emulation plan into the Security Optimization Platform to automate the tactics, techniques and procedures used by menuPass. This allows AttackIQ customers to run the emulation plan against their existing and planned security controls to validate their effectiveness and improve their performance against the group. The Security Optimization Platform then provides detailed gap analysis and remediation reports.

Click here to read the transcript: https://www.attackiq.com/podcasts/what-to-know-how-to-prevent-menupass/#transcript

Guest: Pete Luban, Head of Information Security and IT Risk at Dimensional Fund Advisors

Chief information security officers and security leaders all over the globe struggle with complexity. Complex socio-political risk; complex risk management organizations; and complex technologies. In Episode 8 of Think Bad, Do Good, we talk with one of the world’s leading cybersecurity operators not just about how you can decrease complexity and strengthen your security program, but how you can become a more effective leader for your organization.

Pete Luban knows the issues well. He is the head of the cybersecurity program for Dimensional Fund Advisors (DFA), an investment management service that operates with over $550 billion in assets under management. Headquartered in Austin, Texas, the 38-year-old company has over 1,700 employees and, in the words of Peter Luban, is “run by a group of computational geniuses.” As a global distributed firm with significant financial assets, it faces similarly significant cyberthreats to its assets and personnel.

For managing these risks, Pete calls the MITRE ATT&CK framework the “mother brain” for security effectiveness. Why? Since he started using ATT&CK, he has seen a fundamental increase in effectiveness in protecting his company, but also in how he communicates to his board. ATT&CK and AttackIQ give him a single tool to see threats and threat behaviors. “That is a giant value add use case that follows the life cycle of information or misinformation from beginning to end and gives me a tool by which to validate, no pun intended, that what we do is worth what the company spends on it, right? That’s a simple use case that is insanely valuable.”

Listen to this episode to learn more about what keeps Pete up at night, what Pete would like to see more broadly adopted in his community to increase communication and effectiveness, and how COVID has transformed cybersecurity for companies everywhere.

Click here to read the transcript: https://www.attackiq.com/podcasts/pete-luban-of-dimensional-fund-advisors-on-mitre-attck-and-security-optimization/#transcript