Presentation is loading. Please wait.

Presentation is loading. Please wait.

The Philosophy of Cyber Security Operations

Similar presentations


Presentation on theme: "The Philosophy of Cyber Security Operations"— Presentation transcript:

1 The Philosophy of Cyber Security Operations
What it means to research How to research How to find evil What is the reason for existing? (borrow from previous preso) The theoretical basis of cyber security operations And what exactly is a threat hunter anyway!?!?!?!

2 What it means to Research
We do a bunch of Googling… like… a BUNCH Spend 2 hours every work day on new threats or honing understanding Always be reading, acting, studying All shared information is backed-up and referential And what exactly is a threat hunter anyway!?!?!?!

3 How to Research The scientific method is the best approach, but can be fudged a bit An unsupported theory, that can then be backed up with other hard evidence is ok Multiple variables is allowed for pairing down information, not decision making Remember that Rorschach applies to visualized data (when you don’t have a theory) The legal forms of evidence help you understand where to spend your time And what exactly is a threat hunter anyway!?!?!?!  (Logos above) Continuum of respectable (Pathos above) to non-respectable research (Ethos above) 

4 How to find Evil Remember that bad guys usually aren’t sneaky, just effective First think of what you do every day, now don’t look at that Think about gaps in your ability to find evil. Then get visibility Learn how to fail, and then learn how to fail faster And what exactly is a threat hunter anyway!?!?!?!

5 Mini Analysis Part 6 What Path should you choose?
How would you make that choice? And what exactly is a threat hunter anyway!?!?!?!

6 Understand why Cyber Security Exists
Hackers like pwnage everyone else doesn’t Policing the internet = bad People want assurances People basically want trust

7 The theoretical basis of Cyber Security Threat Operations
So if the definition of Threat Hunting is: The systematic attempt to identify malicious behavior that cannot currently be identified by a defensive tool or employed tactic. Which brings us back to Anagnorisis and Peripeteia. “from Ignorance to knowledge” Our love of threat hunting is in both the need and pursuit of knowledge where none exists Then that means that Threat Hunting’s purpose is the philosophy of the unknown And Philosophy means “the love of wisdom” or more accurate for today “the study of a subject” Why should care about what I have to say. - Socrates


Download ppt "The Philosophy of Cyber Security Operations"

Similar presentations


Ads by Google