Skip to main content
UploadLanguage (EN)Support
BusinessMobileSocial MediaMarketingTechnologyArt & PhotosCareerDesignEducationPresentations & Public SpeakingGovernment & NonprofitHealthcareInternetLawLeadership & ManagementAutomotiveEngineeringSoftwareRecruiting & HRRetailSalesServicesScienceSmall Business & EntrepreneurshipFoodEnvironmentEconomy & FinanceData & AnalyticsInvestor RelationsSportsSpiritualNews & PoliticsTravelSelf ImprovementReal EstateEntertainment & HumorHealth & MedicineDevices & HardwareLifestyle
EC-Council, profile picture
Uploaded byEC-Council
PPTX, PDF1,450 views

EVOLVE to demand. demand to evolve by Igor Volovich

The document discusses the evolution of cybersecurity challenges, emphasizing that traditional reactive defense models are inadequate against the increasing volume of sophisticated cyber threats. It highlights the need for a shift towards proactive detection and disruption of cybercrime economic models, while acknowledging the inevitability of breaches. The content calls for collaboration within the cybersecurity industry to innovate solutions and enhance defenses against evolving malware strains.

Technology◦
Related topics:
Cyber-Security• IT Security•
Download to read offline
EVOLVE TO DEMAND. DEMAND TO EVOLVE. IGOR VOLOVICH, CEO, ROMAD CYBER | FORMER CISO, SCHNEIDER ELECTRIC AMERICAS
PROGRAM NOTE X 25 CISO, VP Global InfoSec
IS IT GETTING BETTER? DBIR 2016 “IT staff continue to struggle with detection and response. Indeed, internal breach discovery detected fewer incidents than did fraud detection, third parties, and law enforcement.” - Tripwire
OR DO YOU FEEL THE SAME? New malware strains per year
WILL IT MAKE IT EASIER ON YOU NOW?
YOU GOT SOMEONE TO BLAME “How I learned to stop worrying and accept the breach.” - Modern CISO “Compromise is inevitable. Consider yourself breached.” - Industry experts “Prevention is no longer an option. Focus on detection and response.” - Cyber vendors
ARE WE MAKING PROGRESS? DETECT PREVENT RESPOND 1980 1990 2000 2010
IF WE HAD REAL ANSWERS… New malware strains per yearTotal known malware strains % of total new malware by days observed (6 months) 45% of new strains active <24hrs • Attackers exploit inherent flaws in reactive defense models • Commoditization of attack tradecraft drives threat volume • Cybercrime remains lucrative, accessible, relatively risk- free
EVOLVING TO DISRUPT “We must work to raise the cost for the adversary and disrupt cybercrime economic models.” James Trainor, Jr. Assistant Director, Cyber Division, FBI DETECT PREVENT RESPOND DISRUPT $ CYBERCRIME VALUE CHAIN
MAKING MONEY WITH MALWARE Exploit kit developed Malware family developed Malware kit published 1 2 3 ● ● ● ∞ NO DEFENSE AGAINST NEW MALWARE VARIANTS Vulnerability discovered Exposure window opens Active malware distribution begins Derivative variants produced = $ SIGNATURES DISTRIBUTED EXPLOITATION CYCLE RESTARTS 1 2 3 $ - Time-to-detection gap Months Seconds/Minutes Hours/Days General detection coverage First detection coverage
TURNING THE TABLES Exploit developed Malware family developed Malware kit published 1 2 3 ● ● ● ∞ Vulnerability discovered Derivative variants produced Skill & Cost Accessibility Cybercrime Economics Traditional defender focus Treat the problem, not the symptom. Hit them where it hurts.
STACKS OF BANDAIDS AREN’T ENOUGH • Incremental legacy solutions cannot cope • Attacker motivation remains strong, risk negligible • Reactive models have outlived themselves • It’s too dangerous to go alone, bring friends • Must disrupt cybercrime economics – but how? • Law-enforcement attribution-based models don’t scale
NEXT-GEN ? ? Behavioral Sustainable Reliable ScalableAutonomous Disruptive Proactive
EVOLVE TO DEMAND, DEMAND TO EVOLVE PRODUCTS SOLUTIONS FEATURES CAPABILITIES EFFICIENCIES OUTCOMES DEFENDING DISRUPTING REACTIVE PREDICTIVE
BE THE CHANGE YOU SEEK “Ask not what our cyber industry can do for you – ask what you can do for our cyber industry.” -Not JFK THANK YOU