What the Headlines Don’t Tell You About Exploited Supply Lines
summary
Examines data from hundreds of real-world multi-party security incidents to identify risk factors that cause supply chain attacks to propagate to downstream business partners. Uses empirical analysis to quantify how exploited supply lines affect thousands of connected organizations, focusing on measurable drivers of propagation rather than headline cases.
AI-written summary · about
chapters (12)
- 0:00RSɅConference2022 San Francisco & Digital | June 6-9
- 3:59Introducing ripples
- 9:27Ripples through time
- 10:43The rise of tsunamis
- 14:51Firm-level view
- 16:32Largest number of records involved over time
- 19:11Balance of costs
- 21:05Comparing to single party events
- 22:51Threat actor categories in Tsunamis
- 25:59Bringing insight with ATT&CK - 2019-2021 events
- 29:03Industry level time to discovery
- 30:21What does this mean for you?
related talks
16mThe Rise of Supply Chain Attacks
26mCyber Resilience: Understanding Supply Chain Risks
25mSupply Chain Attacks
15mSupply chain security for dummies
51mThe Enemy Within: Modern Supply Chain Attacks
25mTechnological Exhibitionism: Fewer Supply Chain Attacks
39mSoftware Supply Chain Security
50mThe World in Crisis: Prepare for Extreme Events via Supply Chain Resilience