The Price is WRONG - An Analysis of Security Complexity
summary
Research of over 1,500 organizations and more than 5 trillion network flows shows security system complexity drives the largest dollar increase in breach cost, with SMEs running 20–25 security products and large firms 60+, and 62% of WAN traffic unencrypted. Analysis using MITRE ATT&CK surfaces repeated use of old CVEs, Mimikatz and Cobalt Strike; 85% of incidents trace to misconfiguration or unpatched tools; criminal markets sell domain admin access and ransomware-as-a-service, skewing detection metrics.
AI-written summary · about
chapters (22)
- 0:00Security complexity analysis
- 1:04Security complexity problem
- 3:54Single point of failure in breaches
- 8:12Attackers need to be right once myth
- 10:22Asymmetric fight against cybercriminals
- 11:06Modern infrastructure challenges
- 12:34Point solution culture dangers
- 14:19Fragmented security tools consequences
- 17:11Cost of security system complexity
- 20:47Ransomware and breach detection
- 22:34Human cost of security tools
- 24:00Knowing our own networks
- 25:45Network vulnerabilities research
- 31:25Missed ransomware attack case study
- 33:50Ransomware as a service
- 37:05Simplifying security capabilities
- 38:34Dark web criminal services
- 41:05Cybercriminal bypass services
- 43:34AI complexity in security
- 45:42Attackers and basic methods
- 47:09Ransomware group advice
- 48:12Reevaluating security complexity
related talks
46mBreaches Are Everywhere. What’s A Good Security Leader To Do?!
20mEvolving from patch management to risk mitigation
22mSecurity and Risks
22mCybersecurity: The Challenge of Our Decade
40mIs Your Organization’s Confidential Data Really Confidential?- 22mSecurity and Risks
41mThe Divine and Felonious Nature of Cyber Security
05mEnterprise security: A new hope