Name
E4. Adversary-Based Threat Modeling and Risk Analysis
Track
Security Management
Date
Thursday, June 10, 2021
Time
10:00 AM - 11:00 AM
Description

Adversary intelligence will give your security team the capability to understand who your adversaries are, how they plan and operate, and what their motivations, goals, resources, and constraints look like. Using adversary intelligence to help inform how you plan and operate, make decisions, and prioritize in your security program will result in a more evidence-based, defensible, accurate, and efficient security program (versus traditional threat models or compliance and regulatory frameworks). In this talk, we’ll cover how to (1) analyze adversary intelligence and use it to inform new controls, strategies, and policies in your security program, (2) use adversary intelligence to model adversary behavior, prioritize defenses, and analyze risks, and (3) research and compile adversary dossiers, playbooks, and cost models. Leaders, engineers, and practitioners performing their regular security tasks with adversary intelligence ensures that they are (1) reducing the successful execution of adversary playbooks and (2) defending against real adversary operations (instead of defending against a list of risks discovered by red teams and penetration testers).

Learner Objectives

"