Outsmarting cyber villains on a shoestring budget - Roshan Harneker | BSides Cape Town 2023
Channel: BSides Cape Town
Date: 2023-12-18

This presentation covers the most common cyber threats affecting South Africa and how to combat them by building your own cyber threat intelligence platform on a budget.

This presentation focuses on practical steps to help you get started with building your own cyber threat intel programme for your organisation - importantly - on a budget!

The start of the presentation looks at the cybercrime crisis we face in SA and includes stats and info about the most prevalent threats noted and the "why" behind why these malicious acts are carried out. The next slides discuss strategies to combat the threats mentioned.

The next section is the main body of the presentation - the Macgyver section if you will (since I will speak about using what is already available in people's respective organisations to build a CTI programme), and starts by providing a technical and non-technical definition of CTI, followed by different types of threat intel and what those entail. The slides then discuss how to create a budget-conscious CTI programme (the building blocks), open-source CTI tools of the trade, documented peer-reviewed research discussing the differences between paid-for and free CTI feeds, etc. Since not all feeds are of the same quality, the next slides discuss how to rate the reliability of the source data (threat feeds) and credibility of the information these feeds provide. A well-known HUMINT method to rate and determine data credibility using the NATO Admiralty Code system is then discussed.

The presentation ends with key takeaways, with time for questions.

Filmed at BSides Cape Town 2023
AV Sponsored by BITM Cyber Security