RSA Conference Preview: Disrupting the Progression of a Cyber Attack

Tripwire’s CTO Dwayne Melançon along with BH Consulting’s Brian Honan will lead a session at this year’s RSA Conference discussion strategies to disrupt the progress of a real-time cyber attack.
Before medieval marauders had any hope of capturing the castle, they first had to overcome a series of obstacles designed to keep them from reaching their goal. By analyzing your adversary steps, you are in a better position to segment, analyze and mitigate an attack. In addition, firms can build a fortress of proactive defense controls and provide the time to react decisively.
The session will be held Thursday, February 27, 2014 from 12:00pm – 12:20pm PST in Room 3002 (copy to my calendar).

“Cyberattacks are a fact of life and every CISO needs to accept that at some stage in their career they will have to deal with the consequences of such an attack. When a breach occurs it is vital that an organization can minimize the impact an attacker can cause. It can take time to identify how the attacker(s) breached your network defenses, however this does not mean you need stand helplessly by while the attack continues unabated,” Honan said.
“Using various techniques such as honeypots, honey accounts, and even restricting network bandwidth can frustrate the attacker’s range of movement within your network and reduce the impact they may have on your corporate resources. Disruption techniques can also provide you with the opportunity to gather more data and evidence on the attacker which can be used future criminal prosecution. Our talk will explore some of the tools and techniques you can use to disrupt and frustrate a cyber-attack and enable defenders regain home advantage,” Honan continued.
Brian Honan is recognized as an industry expert on information security providing consulting services to clients in various industry segments. Honan’s work also includes advising various Government security agencies and the European Commission on matters relating to information security.
In 2008 he founded the Irish Reporting and Information Security Service (IRISS www.iriss.ie) which is Ireland’s first CERT (Computer Emergency Response Team). He has addressed a number of major conferences on information security, is author of the book “ISO 27001 in a Windows Environment”, and has published a number of technical papers and has been technical editor and reviewer of a number of industry recognized publications. He is also the European editor for the SANS Institute’s weekly SANS NewsBites.
Melançon owns a critical role in driving and evangelizing Tripwire’s overall product strategy and is responsible for leading the company’s long term product strategy to meet the evolving data security needs of global enterprises.
He has spearheaded numerous initiatives during his tenure, including executive responsibility for business development, professional services and support, information systems and marketing. Melançon has over 25 years of security software experience holds ITIL and CISA certifications, and is a frequent speaker at national and regional industry events.