APTs: Filtering Out the Marketing Hype to See the Real Threat

IT SECURITY & COMPLIANCE AUTOMATION

Today’s Speakers

Matt Olney

Senior Research Engineer

Sourcefire

Tim Zonca

Product Marketing Manager for Tripwire Log Center

Tripwire, Inc.

Matthew OlneySenior Research EngineerSourcefire’s Vulnerability Research TeamTwitter: @kpyke

“APT: There are people smarter than you, they have more resources than you, and they are coming for you. Good luck with that."

It is no longer enough to simply out-run everyone else. You are on your own versus an adversary you’ll never see.

AssignmentGather

Intelligence

Select Targets

Profile Targets

Execute Attacks

Establish Foothold

(C2)

ExtractData

Continue gathering data within the organization

The attacker holds a major information advantage

…but that makes the small advantages we do have that much more important.

7

9

Different demands an explanation

Real-Time vs. Near-Real Time

Q&A

Matthew OlneySenior Research EngineerSourcefire’s Vulnerability Research TeamTwitter: @kpyke

Two roads diverged in a yellow wood……and unfortunately, you must travel

both.

The Reality of Defense

Not you

The Reality of Defense Scales

Definitely not you

The Bad Guys

IT SECURITY & COMPLIANCE AUTOMATION

Answers For Your Questions