Keynote: The Future of Incident Response
summary
Argues incident response must scale around people not replace them, because full automation fails for novel, targeted attacks; three trends—outsourced/cloud infrastructure and uncontrolled devices, more sophisticated APT-style attackers, and growing government/regulatory pressure—make response essential. Uses economics (network effects, fixed vs marginal costs, switching costs, lemons market) and prospect theory to explain underinvestment, and prescribes tooling and processes that speed OODA loops, keep people in the loop, and counter the attacker advantage.
AI-written summary · about
chapters (15)
- 0:00Welcome and logistics
- 8:48Tracks and workshops
- 13:49Sponsors and funding
- 15:29Special events and fair
- 17:08Keynote introduction
- 18:41Trends in IT security
- 23:03Advanced threats
- 29:04Government influence
- 30:59Economics of security
- 35:15Market dynamics
- 39:42Information asymmetry
- 41:06Security psychology
- 45:46Response strategies
- 49:41OODA loops in IR
- 52:38Future of incident response
related talks
55mThe State of Incident Response
55mKeynote - The Future of Cybersecurity Needs You, Here is Why.
17mIncident Response @ Scale-Building a Next Generation SOC
44mPanel: Peak Performance Under Pressure: Building Cross-Functional Resilience in Incident Response
20mThe Future of Threat Detection and Response
51mReal World Stories of Incident Response and Threat Intelligence
40mIncident Response – How to Give the Advantage to the Hackers!
21mhow to reconcile high-performance hosting and innovation projects with IT security