Link by Link: Crafting the Attribution Chain
summary
Covers methods for developing an organizational methodology and response plans for adversarial campaigns, focusing on using high-fidelity threat intelligence, geointelligence, and other disparate intelligence sources to assemble an attribution chain. Names RSA FirstWatch and RSA NetWitness as the speaker’s affiliations and situates the techniques in the context of attribution-building rather than definitive attribution.
AI-written summary · about
chapters (10)
- 0:00Introduction
- 0:40Overview
- 2:25Cyber Attacks
- 3:27Decision Making Under Uncertainty
- 4:52What is Attribution
- 6:45Definitions
- 7:43Proclivities
- 8:50Types of attribution
- 9:29Establishing attribution
- 11:13Advantage
related talks
20mThe Art of Attribution: Identifying and Pursuing your Cyber Adversaries
43mPanel: Cyber Operations, Doctrine, And Geo-Politics
50mFrom Attribution to Accountability: Upholding International Rules Online
05mConceptualizing attribution and why it matters
45mSlaying Dragons Together...
29mThrough the Eyes of the Adversary: How to Build a Threat Intel Program
40mTotal Security: Investigative Perspectives from Public to Private Sector
34mMITRE Attack Flow: Laying Foundations for Predictive Intelligence