Name
Breakout Session 2 | The Attacker's Dilemma: Using the network to reveal advanced threats
Date & Time
Tuesday, February 27, 2024, 11:30 AM - 12:00 PM
Speakers
Description
In the past few years, ransomware campaigns have evolved from relatively simple, opportunistic crimes to advanced, extortionate threats—including threats of physical violence. This evolution is, unfortunately, a story of innovation. Crime groups have realized that bigger payments can be extracted if they operate strategically. In turn, security teams must also innovate. Not by building or monitoring a newer, harder perimeter around their environments to keep attackers out, but by deploying immutable security measures inside the network to catch them in the act. This post-compromise 'midgame' is an overlooked opportunity in the industry, until now.
Join us for this 30-minute talk where we will:
- Examine the evolution of ransomware over the past several years, and show why common approaches based only on defensive strategies, or that rely on backups, are no longer sufficient on their own.
- Define network visibility tools, show how they work, and explain what makes them different from perimeter defenses, including the unique advantages they provide.
- Break down the chain of attack for real threat events, minute-by-minute, and discuss how NDR can reveal otherwise undetectable defensive opportunities.
Session Type
Keynote