1. InfoconDB
  2. DeepSec
  3. DeepSec 2018 „I like to mov &6974,%bx“
  4. Information, Threat Intelligence, and Human Factors

Information, Threat Intelligence, and Human Factors

Presented at DeepSec 2018 „I like to mov &6974,%bx“, Unknown date/time (Unknown duration)

• There's a huge difference between threat data, information, and intelligence. Understanding the difference is essential to getting the most out of your cybersecurity efforts. • In the progression from data to information to intelligence, the volume of outputs reduces while the value of those outputs increases. • Threat intelligence platforms produce data and information, which human analysts can use to produce actionable (operational) threat intelligence and to share that intelligence. • A computer can never produce threat intelligence, but humans are unsuited to the task of collecting and processing huge volumes of threat data. • Action must always be the end goal. Threat intelligence is useless unless it can be used to improve cybersecurity.

Presenters:

  • John Bryk - Downstream Natural Gas Information Sharing and Analysis Center (DNG-ISAC, North America)
    John Bryk retired as a colonel from the United States Air Force after a 30-year career, with early assignments that included launching the Space Shuttle and unmanned rockets. As a senior officer, he served as a military diplomat at U.S. embassies in Canada, and in Central and Western Europe, including Berlin. Colonel Bryk deployed to Southwest Asia on three combat tours and was awarded the Bronze Star Medal for service in Afghanistan. Prior to retirement he was attached to the Defense Intelligence Agency, where he later continued to serve as a civilian until joining the private sector in 2015. As the threat intelligence analyst for the Downstream Natural Gas-ISAC, John focuses on the protection of North America's natural gas critical cyber and physical infrastructure. His blog, Infrastructure Cyber Defender, appears online in CSO Magazine, where he shares a personal take on current cyber and physical issues. John holds an MBA, an MS in Cybersecurity, and an MA in Business and Organizational Security. He maintains a certification as a Counterintelligence Threat Analyst, is an international cybersecurity speaker, and serves on the Governing Board of the McAfee Institute.

Links:

Similar Presentations: