How Threat Intelligence Sharing and Automation Wins the War against Attackers
summary
Industry mean time to detect a breach is 197 days to detect and mean time to contain is 69 days, and manual handoffs cost about 12 days lost to manual processes per incident. Demonstrates concrete automation: ingest vulnerability scanner output, correlate with CMDB, auto-create change requests, trigger patch windows and rescans; incident enrichment that runs IP/file reputational lookups, sandbox detonations and EDR queries; phishing flows that auto-delete mail, kick off scans and update firewalls. Advocates anonymous circle of trust sharing so timely indicators-in-the-wild trigger proactive searches and reprioritized patching to block exploited vulnerabilities.
AI-written summary · about
chapters (31)
- 0:00Introduction
- 9:05Security Automation Market
- 9:59Threat Detection Automation
- 12:36Vulnerability Scanner Data
- 13:16Automating Vulnerability Prioritization
- 13:49Asset Management Database
- 14:46Set the Rules
- 15:32Scan Data
- 16:43Deploy Patch
- 17:21Automation Workflow
- 17:43Security Incident Response
- 19:18Research and Automation
- 21:56High Profile Vulnerability Planning
- 22:58Vulnerability Scanner
- 24:39Shellshock Example
- 25:51Security Analyst Workflow
- 28:14Data Enrichment Activities
- 29:32Phishing Attacks
- 30:35Phishing Attack Example
- 31:40More Automation
- 32:47Threat Intel Sharing
- 33:22Operationalizing Threat Intel
- 33:54Duplicative Information
- 34:39Is it real
- 34:58Circle of Trust
- 36:11Anonymous
- 37:48Timely
- 39:26Automation
- 41:21Prioritize vulnerability patching
- 43:34Hiring talent
- 47:29Questions
related talks
24mNo More Time: Closing the Gap with Attackers
20mCatch Attackers Before They Strike with AI-powered Threat Intelligence
56mOutpacing Attackers: How Data-Driven Insights Speed Up Vulnerability Remediation
39mThe AI Arms Race in Vulnerability Management, Who’s Winning?
21mhow to reconcile high-performance hosting and innovation projects with IT security
34mSecDevSecOpsSec
33mFrom Boardrooms to Polling Places: Securing Critical Infrastructure in 2024
43mThe Art of Vulnerability Management - Practical Application of Cyber Triage