Protecting Organizations from Security Breaches by Persistent Threats, with Examples from RSA

No ratings

Presented at phdays 2013 by

Michel Oosterhof

Each enterprise is serious about protecting its resources, brand and intellectual property. Despite this, incidents happen because attackers also have huge resources to develop the means and methods of attack. The author of the report knows this first hand, because RSA is constantly under the gun attacks. As part of the report, the speaker would like to share his experience and expertise in the prevention, detection and minimize the effects of high profile APT-attacks on corporate and government infrastructure. Based on some use cases (Lockheed Martin and others) he will talk about Cyber Kill Chain concept, discuss typical patterns of attack and methods of reducing the risks associated with industrial espionage and cyber attacks. Also the speaker shares some cases and techniques based on his own experience on running internal EMC CIRC (Critical Incident Response Center). Michel Oosterhof (CISSP, CISM, CISA, GCIH), is a Senior Systems Engineer with RSA, The Security Division of EMC. He specializes in security analytics and network security monitoring, specifically RSA Security Analytics (formerly RSA NetWitness), and works with a wide variety of customers across Northern and Eastern Europe. His main areas of expertise include security information and event management, network security monitoring, network forensics and incident response. Before joining RSA, he worked for more than ten years at IBM, in various security roles at the Outsourcing, Global Services and Software departments.Michel Oosterhof Michel Oosterhof