We’ve Got A Lot To Learn: Building threat models to support innovation and save the world

Presented at Wild West Hackin' Fest 2019, Oct. 24, 2019, 1 p.m. (50 minutes)

The thought of building a network rife with IoT devices and remotely-accessible critical control systems is enough to bring most infosec professionals to tears. When that same network promises to reduce urban potable water demands by 70% while still supporting commercial and residential irrigation, it is probably worth wiping away the tears and rolling up our sleeves. Innovation is all around us, working to protect natural resources, provide opportunities for better lives, and ideally doing it in a way that ensures the availability, confidentiality, and integrity of the networks supporting these efforts. Following a year-long, collaborative research project into network security in some of the most innovative areas of wastewater reclamation and treatment, this talk will focus on how to engage with and support industries with real needs for complex networks and with even more complex threat profiles. You will come away with an understanding of why asking questions and relying on experts outside of security is critical, learn how to identify and adapt industry-specific risk frameworks, and how to apply threat-based recommendations when the stakes are high and existing data is hard to come by.

Presenters:

  • Rebekah Brown
    Rebekah Brown has helped develop threat intelligence programs at the highest levels of government and has had some exciting experiences along the way. She is a former National Security Agency network warfare analyst, U.S. Cyber Command training and exercise lead, and crypto-linguist and Cyber Unit Operations Chief for the U.S. Marine Corps. She's even provided a briefing at the White House. But if you ask Rebekah what she's most proud of, she'll tell you it's the success of the students and co-workers she's mentored throughout her career. Rebekah started out in traditional military intelligence work, focused on Chinese cryptologic linguistics. She was then selected to cross-train as a network warfare analyst, which provided the opportunity to fuse her understanding of language and culture with network defense. "I loved the ability to combine different aspects of intelligence and apply it in ways that many people in the intelligence community were just beginning to understand," she says. Rebekah has since provided threat intelligence for all types of security programs ranging from national security operations to state and local governments and Fortune 500 companies. She currently is the threat intelligence lead for Rapid7, where she supports incident and analytical response and global services and provides product support. She is also a course instructor and student mentor at SANS, where she teaches FOR578: Cyber Threat Intelligence, a course she co-authored. She is also co-author along with SANS Instructor Scott Roberts of the book Intelligence Driven Incident Response.

Links:

Similar Presentations: