Ep 8 | 6.7.21

Cybersecurity First Principles: intrusion kill chains.

Show Notes

This is part three in a series that Rick Howard, CyberWire’s Chief Analyst, is doing about building an infosec program from the ground up using a set of first principles. This episode, he talks about why intrusion kill chains are the perfect companion strategy to the passive zero trust strategy he talked about last week. The key takeaway here is that we should be trying to defeat the humans behind the campaigns collectively, not simply the tools they use independently with no context about what they are trying to accomplish.

Resources:

“Compressing the Kill Chain” By Adam J. Hebert. 1 March 2003
“Defense-In-Depth Against Computer Viruses” by Fred Cohen, Computers and Security, Volume 11, Issue 6, pp.563-579, ISSN 0167-4048, October 1992
"Intelligence-Driven Computer Network Defense Informed by Analysis of Adversary Campaigns and Intrusion Kill Chains” by Eric Hutchins, Michael Cloppert, Rohan Amin, Lockheed Martin Corporation, 2010
“Trends In Computer Virus Research” by Fred Cohen, VXHeaven, sponsored by ASP, 1991

CSO Perspectives (public)

Podcast Info

HOST(S):

Rick Howard is the CSO of N2K and the Chief Analyst, and Senior Fellow at the N2K Cyber, formerly CyberWire. His past lives include CSO at Palo Alto Networks, CISO at TASC, the GM at Verisign/iDefense, the Counterpane SOC Director, and the Commander of the Army's Computer Emergency Response Team (CERT). Rick served 25 years in the Army, taught computer science at West Point, edited two books and just published his own book, "Cybersecurity First Principles: A Reboot of Strategy and Tactics" and he is regularly joined at the N2K Cyber's Hash Table by a collection of industry experts.

Schedule: Mondays (in season)

Credits: Edited by John Petrik and executive produced by Peter Kilpe. Our theme song is by Blue Dot Sessions, remixed by the insanely talented Elliott Peltzman, who also does the show's mixing, sound, and original score

Creator: CyberWire, Inc.