Advanced Persistent Security
Ira Winkler
BSides Tampa 2018

Abstract: Any attack against significant organizations is labeled "Sophisticated" by default. The reality is that most of these attacks, such as Target, the OPM, and the DNC, result from inadequate security programs. This presentation reviews recent notable incidents to highlight the root vulnerabilities. The reality is that the vulnerabilities compromised were basic, and as opposed to the attackers being "Advanced", they are more "Adaptive". These attacks are then compared to defensive information warfare principles of protection, detection, and reaction. I then utilize those principles to define an adaptive security strategy to prevent incidents, but more importantly to detect and respond to such incidents before loss can be realized.

Bio: Ira Winkler, CISSP is President of Secure Mentem and author of Advanced Persistent Security. He is considered one of the world,s most influential security professionals, and has been named a "Modern Day James Bond" by the media. He did this by performing espionage simulations, where he physically and technically "broke into" some of the largest companies in the World and investigating crimes against them, and telling them how to cost effectively protect their information and computer infrastructure. He continues to perform these espionage simulations, as well as assisting organizations in developing cost effective security programs. Ira also won the Hall of Fame award from the Information Systems Security Association, as well as several other prestigious industry awards. Most recently, CSO Magazine named Ira a CSO Compass Award winner as The Awareness Crusader.

Back to BSides Tampa 2018 video list