Disrupting Incident Response – Shrinking Attack Detection Times From Weeks to Seconds

No ratings

Presented at CISODallas 2014 by

Allan Carey

Data breach reports continue to highlight the substantial lag between incident occurrence and detection, with response mechanisms often kicking in weeks after the initial compromise. As spear phishing becomes the attack vector of choice, organizations can level the playing field by crowd-sourcing attack detection to employees and providing IR teams the ability to react in real time. In this session, Rohyt Belani will make the case for cultivating a trusted informant network and outline how to provide these informants the tools to supply attack intelligence in an actionable format. He will also discuss approaches for developing response mechanisms to consume this intelligence and minimize damage.