~/talk

Prevention as a Business Strategy

Talkat OWASP AppSec California 2018 · on Wednesday, 2018-01-31· at 10:30· Garden Terrace Room· [security, machine-learning]
name:Corey Whi
links:none on file
slides:none on file

Claims that prevention beats detect-and-respond, using AI/ML and big data to stop attacks before execution; ransomware specifics include BitPaymer hiding payloads in alternate data streams, PowerShell-based delivery, Mimikatz credential harvesting, and C2-driven staged execution that can delete backups. Metrics cited: ~4,000 ransomware attacks per day, a new attack every 14 seconds, average 150 days to detect compromise, 330 incidents handled last year and one law-firm payout near $900k. Recommended controls: endpoint block, script control, patching, and egress filtering.

AI-written summary · about

  1. 0:00Introduction
  2. 3:00BitPayMer
  3. 7:25Ransomware Example
  4. 10:17Ransomware Incident Response
  5. 12:07Incident Response Costs
  6. 12:37Entry Point
  7. 13:17Lack of a Backup Plan
  8. 15:22Legacy Software
  9. 17:52Ransomware Families
  10. 20:42PowerShell
  11. 22:57Prevention Strategy
~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.