AttackIQ

Guest: Kumar Chandramoulie, Vice President, Cyberdefense, Data, and Threat Management at AmerisourceBergen

Kumar Chandramoulie is no stranger to challenge. As Vice President, Cyberdefense, Data, and Threat Management at AmerisourceBergen, Chandramoulie is responsible for planning his firm’s approach to cybersecurity risk management across its global operations. This is a vital mission: AmerisourceBergen provides pharmaceutical products, value-driving services, and business solutions that improve access to care. Global manufacturers depend on AmerisourceBergen for services that drive commercial success for their products. Tens of thousands of healthcare providers, veterinary practices, and livestock producers trust AmerisourceBergen as their partner in the pharmaceutical supply chain. Data underpins the entire process, and Kumar is responsible for securing the firm’s networks across multiple borders, businesses, and platforms.

He uses MITRE ATT&CK and AttackIQ to achieve operational effectiveness and help his team do the best job they can. In this episode, Jonathan and Kumar discuss his approach to cybersecurity and how MITRE ATT&CK and AttackIQ help him secure AmerisourceBergen’s data. They talk about Kumar’s process of building a cybersecurity system, why MITRE ATT&CK is so useful for AmerisourceBergen’s security effectiveness, and how performance data helps AmerisourceBergen leadership understand their cybersecurity.

For more about how AmerisourceBergen uses MITRE ATT&CK and AttackIQ, you can dive into this case study here: https://attackiq.com/wp-content/uploads/2020/10/cs-amerisourcebergen.pdf

Click here to read the transcript: https://www.attackiq.com/podcasts/kumar-chandramoulie-of-amerisourcebergen-on-cybersecurity-risk-and-effectiveness/

Guest: Julia Voo, Cyber Fellow at the Belfer Center, Harvard University

Julia Voo once auditioned for a part in Harry Potter because she wanted to go to Hogwarts. But it was much cooler to be a British foreign service officer in Beijing after Brexit covering China’s approach to cybersecurity policy and artificial intelligence from a trade perspective. Now, she’s crushing it on China and cyber policy at Harvard’s Belfer Center, where she serves as a Fellow, and has just led a global team in a comprehensive review of global cyber powers.

In this episode, Jonathan talks with Julia about how an innocuous one-off conversation kicked off the National Cyber Power Index (NCPI), the nature of cyber power in international relations, and the future of U.S.-China relations. Jonathan’s son also makes a brief cameo.

So who are the top ten most “cyber powerful” countries? And why is the Netherlands number 6? The National Cyber Power Index provides an overall measurement of a country’s aptitude as a cyber power – far more than just offensive and defensive capabilities. It gives a new look at international cyberpower, who wields it the most, and how it can best be leveraged in foreign affairs.

Click here to read the transcript: https://www.attackiq.com/podcasts/julia-voo-and-the-national-cyber-power-index/#transcript

Guests: Maria Barsallo Lynch, Siobhan Gorman, and Robby Mook of Harvard’s Belfer Center for Science and International Affairs.

Mis/Disinformation and the 2020 Presidential Election.

In this episode of Think Bad Do Good, join cybersecurity and public affairs experts Robby Mook, Siobhan Gorman, and Maria Barsallo Lynch of Harvard’s Defending Digital Democracy project as they discuss the coming presidential election and how state and local government officials and American citizens can take steps to assure its integrity.

Over the last four years these individuals have played significant leadership roles in the United States in helping the states learn about and prepare for cyberspace operations and disinformation operations alike, and last week the Harvard team released The Election Influence Operations Playbook, Part 1, to help election officials manage the threat of disinformation operations to the election.

Defending Digital Democracy was founded in the aftermath of the 2016 election by a group of bipartisan policy, technology, and political leaders to help defend the country’s democratic processes in cyberspace. Since then the Harvard team has produced over half a dozen playbooks and landmark research projects and engaged state, local, and federal government organizations as they address cybersecurity risks to the U.S. democratic process.

Click here to read the transcript: https://www.attackiq.com/podcasts/the-belfer-centers-defending-digital-democracy-project/#transcript

Guest: Jose Barajas, Director, Global Sales Engineering at AttackIQ

Join Jonathan Reiber and Jose Barajas for Episode 4 of “Think Bad, Do Good” diving into the first adversary emulation plan developed at the Center for Threat Informed Defense. The target of this plan is none other than cybercrime group FIN6.

Click here to read the transcript: https://www.attackiq.com/wp-content/uploads/2020/09/tbdg-eps4-transcript.pdf

FIN6’s operations have been recorded since 2015. Their modus operandi includes stealing payment card data and then selling it on underground marketplaces. FIN6 is notorious for aggressively targeting and compromising point of sale (PoS) systems in the hospitality and retail sectors. As of last year, their operations have extended to compromising E-Commerce merchants, via placing malware on checkout pages. And like many active threat actors today they are evolving to utilize more advanced methods. But with this emulation plan developed at the Center for Informed Defense (or CTID), organizations within these at-risk industries can begin mounting effective threat-informed preemptive measures against FIN6.

This emulation plan also represents a historic event: the first project that the CTID has released. This organization consists of representatives from the world’s leading cybersecurity companies researching threats (like those posed by FIN6) and developing the tools to counter them.

But how can cybersecurity teams actually take advantage of this new emulation plan for FIN6 and knowledge? Jose and Jonathan explain the process and benefits an emulation plan tailored to a specific threat actor provides. The goal: to help align your defenses with the latest of CTID research built upon MITRE ATT&CK.

Guest: Ben Opel, Director for Customer Success, AttackIQ

Join Jonathan Reiber and Ben Opel for a discussion of threat-informed defense lessons learned from their time serving in the Department of Defense in episode 3 of Think Bad, Do Good. Reiber and Opel reflect on lessons from their two separate but related career trajectories in the Defense Department, Reiber writing the DoD's cyber defense strategies and working in the Office of the Secretary of Defense from the creation of U.S. Cyber Command, Opel joining the U.S. Marine Corps and serving as a cyberspace operator, and defending key terrain and running purple team operations, after graduating from the United States Naval Academy. Both reflect on the current state of operations today from the perspectives of their past experiences.

Jonathan Reiber is Senior Director for Cybersecurity Strategy and Policy at AttackIQ. In this position, he focuses on strategic communications, thought leadership, and content development for the firm. During President Barack Obama’s administration, he served as Chief Strategy Officer for Cyber Policy and Speechwriter in the Office of the U.S. Secretary of Defense. His writing has appeared and been highlighted by Foreign Policy, Lawfare, The Atlantic Monthly, DefenseOne, The San Jose Mercury News, and Literary Hub, among others. An affiliate at UC Berkeley's Center for Long-Term Cybersecurity, he is the author of two book-length Berkeley monographs, A Public, Private War, and Asian Cybersecurity Futures. He is a graduate of Middlebury College and The Fletcher School of Law and Diplomacy. You can follow him on Twitter at @jonathanreiber

Ben Opel is a Director for Customer Success at AttackIQ, where he advises customers on cybersecurity capabilities and operations, and also serves as a Purple Team instructor at AttackIQ Academy. A former officer in the U.S. Marine Corps, he led, trained, and integrated Marines in defensive cyberspace operations in support of U.S. national security objectives. He is a graduate of the U.S. Naval Academy.

Guests: Adam Isles, Principal, Chertoff Group; Kurt Alaybeyoglu, Senior Associate, Chertoff Group

Less fear, uncertainty, and doubt. How can you optimize your cybersecurity investments to achieve maximum effectiveness? Listen to two of the world’s leading practitioners of cybersecurity and hear about their experiences managing major incidents from the top of DHS and operating in the U.S. Air Force’s cyber warfare wing on episode two of the AttackIQ Think Bad, Do Good podcast.

Click here to read the transcript: https://www.attackiq.com/podcasts/how-to-achieve-cybersecurity-effectiveness/#transcript

Guest Speaker: Jose Barajas, Technical Director, AttackIQ

Welcome to the first episode of AttackIQ's Think Bad, Do Good. In this episode we discuss APT29, threat informed defense, and how to take on a "purple" team approach. With Jose Barajas, Technical Director at AttackIQ, Ben Opel, AttackIQ Academy Purple Team Instructor, and Jonathan Reiber, Senior Director for Cybersecurity Strategy and Policy at AttackIQ.

*Note: this is an imperfect pilot episode for the series, and we'll sort out our audio and video recording methods for the next episode.

What do an Emmy-winning Simpsons writer and TED Talk speaker have to do with the practice of cybersecurity? They may not be certified in Purple Teaming, but they've both had to deal with pressure-cooker environments, challenge perceptions, and deliver innovative solutions time after time. Join this fun and witty session with Carolyn Omine and Toby Shapshak to learn the answers to questions like: Where does real innovation come from? How do you foster creativity in your team? What's it like to write for the Simpons Dog, Santa's Little Helper? You'll leave with a smile on your face and inspiration to challenge the status quo!

Speakers:

Carolyn Omine - The Simpsons

Toby Shapshak - Stuff

AttackIQ Purple Hats: https://www.purplehats.org/

AttackIQ Academy: https://academy.attackiq.com/

AttackIQ: https://attackiq.com/

#AttackIQ #PurpleHatsConf

For years in cybersecurity, security teams lacked clarity about adversary tactics, techniques, and procedures and as a result, defenders stumbled in the dark as they tried in vain to defend their data. The result resembled swiss cheese: everyone from the financial sector to the U.S. military to healthcare companies were pummeled by cybercriminals and nation-states alike. In 2015, this changed with the publication of the MITRE ATT&CK framework. ATT&CK is a periodic table of adversary behaviors and threat intelligence; it gives defenders all over the world a single repository to drive-up security effectiveness by focusing on known threats. Now the ATT&CK team is training the world on how to make the framework operational. In this session, please join Chriss Knisley, General Manager of MITRE ATT&CK Defender™(MAD), and Steve Luke, Director of Content for MITRE ATT&CK Defender, as they talk about the evolution of MITRE ATT&CK and MITRE ATT&CK Defender's – “MAD” – certification. Produced by MITRE’s own ATT&CK experts, MAD certified defenders learn directly from the masters to apply ATT&CK across disciplines for threat-informed defense operations.

Speakers:

Chriss Knisley - MITRE ATT&CK Defender

Steve Luke - MITRE ATT&CK Defender

Jonathan Reiber - AttackIQ

AttackIQ Purple Hats: https://www.purplehats.org/

AttackIQ Academy: https://academy.attackiq.com/

AttackIQ: https://attackiq.com/

As medical devices become more digitally interconnected and interoperable, they can improve the care patients receive and create efficiencies in the health care system. However, medical devices, like computer systems, can be vulnerable to security breaches, potentially impacting the safety and effectiveness of the device. What is the role of the US FDA in cybersecurity? Hear from one of the US FDA's leading experts, Dr. Suzanne Schwartz, Director, Office of Strategic Partnerships & Technology Innovation, Center for Devices & Radiological Health. She'll share how the US FDA is working to protect public health by fostering collaboration, preparing for cyber intrusions, reducing medical device vulnerabilities, mitigating potential impacts on patients, and enabling timely restoration of devices and systems.

Speakers:

Suzanne Schwartz - FDA

Carl Wright - AttackIQ

AttackIQ Purple Hats: https://www.purplehats.org/

AttackIQ Academy: https://academy.attackiq.com/

AttackIQ: https://attackiq.com/