Defenders Think in Lists. Attackers Think in Graphs.
Talkat Cloud Native Security Day Europe 2020 · on Monday, 2020-08-17· at 17:35· InXpo, https://onlinexperiences.com/Launch/Event.htm?ShowKey=99259·
summary
Claim: defenders rely on long checklists of findings while attackers follow exploitable paths through infrastructure, so remediation misses context. Example environment: thousands of nodes Kubernetes clusters and a vendor with 2,000 enterprise customers. Attack path: vulnerable app → discovery (API/egress) → lateral movement → privilege escalation → exfiltration. Solution built is an automated graph that combines network connectivity analysis with weakness/configuration data, surfaces risky paths and top priorities, and guides remediation before crown jewels are reached.
AI-written summary · about
related talks
45mDefenders Struggle as the Adversary Continues to Break Away
26mBreaking the Attack Graph: How to Leverage Graphs to Strengthen Security in a Domain Environment
38mLight in the Labyrinth: Breach Path Analysis for Anyone
50mTelling Fairy Tales to the Board: Turn Attack Graphs into Business Stories
40mFighting Where They Aren't: How Attackers Avoid Endpoints in Modern Attacks
33mDecoding Cyber Threats: A Practical Guide to Using Attack Trees
29mAttack Defense Graph Analysis for Supporting SOC and CSIRT Operations
28mAdversarial Intelligence: Redefining Application Security Through the Eyes of an Attacker