Network defenders industry-wide are struggling to keep pace in an age of increasingly diffuse threats ranging from ransomware to active network intruders. Too often well-meaning organizations design their security program based around vendor promises coupled with a dangerous set-it-and-forget-it mentality. On the opposite side of the spectrum, many organizations question whether security is attainable at all, particularly those who’ve experienced an intrusion in their network. This presentation posits that the most effective security programs are those designed with an attacker’s mentality, hereafter referred to as a combat mindset. The authors will define characteristics associated with best of industry network security programs based on a combination of both established and emerging security theories, practices, and technologies. Each individual prescription’s value is underscored by the real-world experience of both network defender and offensive security professionals alike, a rarity in this academic field. The intended result is an effective network security program consisting not just of secure architectural design and layer controls but also well-postured for network monitoring, threat detection, incident response, and continuous learning via deliberate testing.

Michael has over 20 years of Information Technology experience, including 12 years of computer programming and eight years of direct network security experience. He spent four of those years as a senior team member with the US Air Force’s Red Team, and another four providing network security expertise across multiple sectors, including government, legal, medical, financial, industrial, and others. Michael has a Bachelor’s of Science in Cybersecurity and holds Security+ and Offensive Security Certified Professional (OSCP) certifications. Mike Behrmann currently serves as Team Lead for NetWorks Group’s real-time Security Monitoring Service. Prior to joining private industry, Mike worked in the US Department of Defense for nearly 7 years in a variety of operational and analytic work roles. Mike currently holds multiple SANS professional certifications and earned a Master of Public & International Affairs degree from the University of Pittsburgh and a Master of Science in Information Assurance degree from Capitol Technology University, a NSA/DHS National Center of Academic Excellence.

Back to Converge 2017 video list