Explore a comprehensive conference talk on active defense strategies in cybersecurity. Delve into the concept of winning long-term security wars despite losing individual battles. Learn about critical asset identification, the importance of asset management, and creating your own defensive battlefields. Discover techniques for mapping your digital space, collecting and analyzing threat intelligence, and dealing with data overload. Examine the challenges of alert fatigue, incident response, and analyst workload. Understand the three types of threats and their relevance to your organization. Investigate automated response systems, containment analysis, and persistent threat mitigation. Gain insights into intelligent prioritization, leveraging external indicators, and learning from security incidents. Explore strategies for raising costs for attackers and achieving real, sustainable security in an ever-evolving threat landscape.
Losing Battles Winning Wars - Active Defense Rebooted