Find, Fix, Finish ... Tracking the Real Bad Guys in Cyberspace

1. @NTXISSA #NTXISSACSC3
Find, Fix, Finish…Tracking the Real
Bad Guys in Cyberspace
Dr. Chase Cunningham
Director Cyber Threat Research and Innovation
Armor Inc.
1 October 2015

2. @NTXISSA #NTXISSACSC3
Who’s This Dude?
NTX ISSA Cyber Security Conference – October 2-3, 2015 2
Dr Chase
Cunningham
Experience
• Accenture Technology Labs – Led the development and design efforts
for the Labs Security Analytics focus and the Incident Response
planning and analytic teams
• National Security Agency – Led and operated in areas such as the
National Threat Operations Centre, Security Operations Centre, and
Remote Operations Centre.
• Telecommunication Systems Inc. – Wrote and developed the
DOD/NSA curriculum for computer network exploitation operations and
the conduct of operations guideline for red team operations in
collaborative environments
• Pensacola State College – Adjunct faculty instructor for information
security and cyber operations and planning curriculums
• Neustar Inc. – Designed and implemented the threat operations
research and analysis team for team Neusentry. Participated in the
Conficker Working group and Operation Ghost Click in conjunction with
US State Department, FBI, and US Secret Service.
• Decisive Analytics Corp – Led the research and development team
that focused on the application of advanced machine learning tools and
techniques for cyber security operations with the US Navy and Missile
Intelligence and Space Centre MISC
Education and Certifications
• PhD Colorado Technical University
• M.S. Colorado Technical University
• B.A. American Military University
• GIAC Certified Hacking Forensic Investigator (CHFI)
• Multiple Other Certs
• Published Cyber Security Author
• Founder FireHost Threat Resistance Unit
(TRU)
• PhD Computer Science (Security and
Insider Threat)
• CIW, ATAB, LPT, ECSA, CEH, CISA,
OFSEC,
Network +, Security +, etc….
• Author of Cynja, kids in cyberspace….

3. @NTXISSA #NTXISSACSC3
Hollywood/Media Cyber Threats
NTX ISSA Cyber Security Conference – October 2-3, 2015 3

4. @NTXISSA #NTXISSACSC3
Reality
Cyber Threats
NTX ISSA Cyber Security Conference – October 2-3, 2015 4

5. @NTXISSA #NTXISSACSC3
Reality
Cyber Threats
NTX ISSA Cyber Security Conference – October 2-3, 2015 5

6. @NTXISSA #NTXISSACSC3
They Have Tech Support…And It’s
Good…
NTX ISSA Cyber Security Conference – October 2-3, 2015 6

7. @NTXISSA #NTXISSACSC3
They Have Wiki’s…It’s Easy
NTX ISSA Cyber Security Conference – October 2-3, 2015 7

8. @NTXISSA #NTXISSACSC3
Pay Attention…
NTX ISSA Cyber Security Conference – October 2-3, 2015 8

9. @NTXISSA #NTXISSACSC3
Indicators, What Indicators?
9

10. @NTXISSA #NTXISSACSC3
Indicators, What Indicators?
Oh…Those Indicators…
10

11. @NTXISSA #NTXISSACSC3
Getting Warm…
11

12. @NTXISSA #NTXISSACSC3
Warmer…
12

13. @NTXISSA #NTXISSACSC3

14. @NTXISSA #NTXISSACSC3

15. @NTXISSA #NTXISSACSC3
I Got You Sucka…
15

16. @NTXISSA #NTXISSACSC3
Knight…or Blacksmith…?
16
Blacksmith… Knight…
There is a Slight
Difference…

17. @NTXISSA #NTXISSACSC3
Dang…
17

18. @NTXISSA #NTXISSACSC3@NTXISSA #NTXISSACSC3
The Collin College Engineering Department
Collin College Student Chapter of the North Texas ISSA
North Texas ISSA (Information Systems Security Association)
NTX ISSA Cyber Security Conference – October 2-3, 2015 18
Thank you