Lance James -  Advanced Persistent Marketing: Demystifying APT's and Cyber Attacks
Channel: HACK NYC
Date: 09/03/2015

Lance James -  Advanced Persistent Marketing: Demystifying APT's and Cyber Attacks at NYC Cyber Security meetup at KPMG LLP NYC - Feb 18 2015
http://www.meetup.com/OWASP-NYC/events/219640856/

Abstract:  Since the phrase “advanced persistent threat” (APT) was coined nearly ten years ago, it has been the subject of extensive discussion and debate in the IT security community, and terabytes-worth of media buzz. The spotlight on APTs has been critical in bringing the reality of today’s threats to light, but the surrounding hype has sometimes generated more fear than it has practical approaches to solving the actual problems. There is a broad tendency for security programs and regulations to be shaped by the most recent cyber incidents, focused mainly on the tactics and procedures of the attackers. While understanding attacker methodology is critical, it doesn’t necessarily enable pre-emptive response. 

This presentation will begin with a detailed look at threat actor motivations as the basis for pre-emptive capabilities. It will present a taxonomy of the underground ecosystem, provide an overview of tactics and procedures behind today’s APTs, and highlight current “advanced” threat trends. Against this groundwork, several important practical issues will be discussed: 
• What aspects of APTs and other advanced attacks are really new? 
• How are advanced cybercrime groups and other actors leveraging this evolving ecosystem? 
• What are the limits of security monitoring? Do we need new tools and technologies, or better blocking-and-tackling using what we’ve got? 
• What benefits can we expect from intelligence automation versus human intelligence? 

Attendees will take from the session a refreshing view of the landscape, and be reminded that effective response to advanced threats does not necessarily require an ever-expanding security budget, and the adversaries are not always as advanced as we fear. 

Speaker:  Lance James

Bio:  http://linkedin.com/in/securescience/en

EVENT ORGANIZER
OWASP NYC Chapter - https://www.owasp.org/index.php/NYC

VIDEO SPONSOR:
Internet Society NY Chapter - http://isoc-ny.org

ABOUT OWASP:
The Open Web Application Security Project (OWASP) is a 501(c)(3) worldwide not-for-profit charitable organization focused on improving the security of software. Our mission is to make software security visible, so that individuals and organizations worldwide can make informed decisions about true software security risks.
https://www.owasp.org/