Collaborate Disseminate
Over the next five years, the threat intelligence market is predicted to grow more than 18% a year and reach nearly $9 billion by 2022. This growth is largely fueled by a fact we’ve all come to live with: we can’t block every attack.
read more
… Continue reading Cutting Through the Confusion on Threat Intelligence Feeds and Platforms
The holidays are now behind us and we’re getting back to our routines. As we do, we start putting to use all the gifts we’ve received from family, friends, colleagues and neighbors. Each year I’m impressed by the people who always seem to nail it and f… Continue reading Gifts and Data – Personalization Brings Meaning
2018 Should Not Be Another Year Where Attackers Continue to Exploit the Known
read more
Continue reading How to Make Adversaries Work Harder, While We Work Smarter, in 2018
By Starting With the Threat You Can Easily Prioritize Vulnerabilities and “Embrace the Grey”
read more
Continue reading Start with the Threat to Prioritize Patching
Applying the OODA Loop to Cybersecurity Will Help Accelerate the Process of Translating Threat Data Into Action
read more
Continue reading The Sometimes Forgotten Foundation for the OODA Loop – the Human
In the world of big data there’s something I refer to as “the Goldilocks effect” and it’s particularly problematic when it comes to cyber threat data. Too much data and you’re looking for a needle in a haystack. Too little data and you’re not getting a broad enough picture of the potential threat activity that’s happening globally and locally. Ultimately Goldilocks found the chair, the bowl of porridge and the bed that were “just right” for her.
Automating Steps in the Security Process is Critical to Defeat Today’s Relentless and Complex Attacks
Continue reading The “Dirty” Secret Everyone Should Know About Automation
“What if only a machine could defeat another machine?”
Continue reading The “Imitation Game” – The Need for Human Intelligence in Threat Operations
Six years ago the US National Institute of Standards and Technology (NIST) put forth a framework for information security continuous monitoring (ISCM), defined as maintaining ongoing awareness of information security, vulnerabilities and threats to sup… Continue reading To Manage Risk Understand Adversaries, Not Just Activity in Your Environment
In my last article I shared five steps you can take to turn threat intelligence into a threat operations program, putting yourself in a better position to reduce risk – now and in the future.