2014 breach stats are out, they are not pretty. Regardless of the advances in perimeter, client, and SIEM technologies, the breaches are piling up. Tools still track the “known” threats, Infosec business metrics focus on operational efficiencies and efficacy. Wheres the gauge for actual threat level in the network? What if we could measure the overall RISK of a network? Applying behavioral analysis to network traffic to identify credible threats provides causally significant metrics, metrics that can be analyzed for where and how the business should spend resources to best address its’ specific threat profile, as well as evaluating the ROI of policies, procedures, and tools. This change is not without risk. Moving our information security mindset away from “identified attack” and toward “threatening behavior” can be difficult for any organization. Still, it seems a change is due, and this one has the potential to make a difference. Join me to discuss the benefits and challenges of turning network security on its head. Discussions will be vendor agnostic.