Cyber twitter - any recommendations on readings that wrestle with assessing threat actor / operation sophistication akin to @BuchananBen's the legend of sophistication in cyber operations / @daveaitel's useful fundamental metrics for cyber power? Thanks in advance!
-
As usual, I'd image
@thegrugq would have something to suggest in that area.
I guess there is my black hat asia 2018 keynote where I defined a bunch of metrics to use when evaluating a cyber threat actor... well, more like a state’s cyber capabilities and such. I didn’t spend much time on it unfortunately, but I have been planning on a full talk on it
-
-
In the last couple years I’ve advanced my thinking quite a bit. There have been a number of innovations that throw a spanner in the works. It doesn’t change all of the metrics, but it alters some of the weighting to put on elements and adds a new factor to consider.
-
In particular I liked my definition for “speed” ... the measure of how many meetings are necessary before someone can hit Enter. The bureaucracy is a factor that seldom gets worked in, everyone is too busy slobbering over 0days.
- Još 3 druga odgovora
Novi razgovor -
Čini se da učitavanje traje već neko vrijeme.
Twitter je možda preopterećen ili ima kratkotrajnih poteškoća u radu. Pokušajte ponovno ili potražite dodatne informacije u odjeljku Status Twittera.