Archive for category: Security Practitioners

You are here: / Security Practitioners

Richard Bejtlich Talks Business Security Strategy, US Security Policy

A video posting form Dark reading titled “Richard Bejtlich Talks Business Security Strategy, US Security Policy”  by Richard Bejtlich

Chief security strategist of FireEye talks at the Dark Reading News Desk at Black Hat about what should really be driving your security department’s strategy. Plus he discusses law enforcement agencies’ efforts to put backdoors in encryption solutions and how the government is responding to technology’s improved abilities to provide attribution for cybercrime.

to see the video click here:

Why Did A Security Firm Mysteriously Ditch a ‘Privacy’ Product?

A posting from Forbes by Yael Grauer titled “Why Did A Security Firm Mysteriously Ditch a ‘Privacy’ Product?” :

 

Two weeks after Ben Caudill announced that he’d built a $200 hardware proxy which allows Internet users to mask their location, the Rhino Labs owner shut down his project. His much anticipated August appearance at DEF CON, the annual hacker convention in Las Vegas where he planned on selling the device at cost, was cancelled as well.

“People are always going to speculate despite what I say and don’t say,” Caudill told me when I asked him about the theory that he cancelled the project and talk for media attention. Although he repeatedly declined to offer details on the circumstances surrounding the cancellation, he pointed out that not all press is good press, and that the company had invested time and resources into the project. “The actual result of cancelling was for more negative than going through with it would have been,” he added, pointing out that a lot of time and energy and material costs were put into the project, which he worked on with a small team for about a year.

 

to read more click here:

Cloud & The Security Skills Gap

An informative video on cloud and the security skill gap  from Darkreading.com

 

F5 Network security evangelist David Holmes offers concrete advice about how cloud outsourcing can help companies with a talent shortfall solve three enterprise security problems: application security, penetration testing, and bug bounties.

To look at the video click here:

 

3 Steps To Keep Down Security’s False-Positive Workload

A posting from Dark reading  on Steps To Keep Down Security’s False-Positive Workload:

Security needs to be better automated, but while detecting attackers is great, all too often automation means that security teams are left with chasing down a list of security events that turn out not to be an attack but unexpected system, network, or user behavior.

These “false positives” are the bane of most machine-learning systems: valid e-mail messages blocked by anti-spam systems, unexploitable software defects flagged by software analysis systems, and normal application traffic identified as potentially malicious by an intrusion detection system. First-generation security information and event management (SIEM) systems, for example, would often deliver lists of potential “offenses” to security teams, leading to a lot of work in wild goose chases, says Jay Bretzmann, market segment manager for security intelligence at IBM Security Systems.

To read more click here: 

MANDIANT NAMES RICHARD BEJTLICH CHIEF SECURITY OFFICER, SECURITY SERVICES ARCHITECT

From a MANDIANT Press Release:

 

Bejtlich, one of the most influential voices on incident response and computer forensics, joins MANDIANT from General Electric where he served as Director of Incident Response and leader of GE’s Computer Incident Response Team.

 

Alexandria, Va., March 17, 2011 – MANDIANT, the leader in incident response and computer forensics solutions and services for government, defense and enterprise organizations, today announced that Richard Bejtlich will join the MANDIANT executive management team as Chief Security Officer and Security Services Architect, effective April 1.

Bejtlich joins MANDIANT after four years at General Electric, where he served as Director of Incident Response and led GE’s Computer Incident Response Team (CIRT).

“MANDIANT is rapidly expanding its high-end threat detection and response managed service offering, and is focused on building global security operation centers to address the proliferation of targeted attacks,” said MANDIANT President and Chief Operating Officer Travis Reese. “We are excited to have Richard join our executive team to architect additional offerings and focus on protecting our own enterprise.”

Richard Bejtlich

Prior to GE, Bejtlich operated TaoSecurity LLC as an independent consultant, protected national security interests for ManTech Corporation’s Computer Forensics and Intrusion Analysis division, investigated intrusions as part of Foundstone’s incident response team, and monitored client networks for Ball Corporation.

“A priority for MANDIANT in 2011 is to expand the team and the capabilities we use to defend our customers and our company,” Bejtlich said. “Organizations across the globe depend on MANDIANT to protect their information from an array of digital threats. I welcome the challenge posed by my new role, and the opportunity to join this distinguished group.”

Bejtlich began his digital security career as a military intelligence officer at the Air Force Computer EmergencyResponse Team (AFCERT), Air Force Information Warfare Center (AFIWC), and Air Intelligence Agency (AIA).  A graduate of Harvard University and the United States Air Force Academy, Bejtlich is the author of both The Tao of Network Security Monitoring and Extrusion Detection, and co-author of Real Digital Forensics. He also writes for his blog taosecurity.blogspot.com and teaches for Black Hat.

About MANDIANT

MANDIANT is the information security industry’s leading provider of incident response and computer forensics solutions and services. Headquartered in Alexandria, Va., with offices in New York, Los Angeles and San Francisco, MANDIANT provides products, professional services and education to Fortune 500 companies, financial institutions, government agencies, domestic and foreign police departments, and leading U.S. law firms. MANDIANT comprises one of the industry’s largest incident response and forensics forces. The authors of nine books, and quoted frequently by leading media organizations, MANDIANT security consultants and engineers hold top government security clearances and certifications and advanced degrees from some of the most prestigious computer science universities. To learn more about MANDIANT visit www.mandiant.com, read M-Unition, the company blog: http://blog.mandiant.com, follow on Twitter @MANDIANT or on Facebook at www.facebook.com/mandiantcorp.

 

###

 

Contacts:

Anne M. Mroczynski

Senior Director of Marketing, MANDIANT

703.224.2926

anne.mroczynski@mandiant.com

 

Jim Engineer

e-Rainmaker PR for MANDIANT

630.728.1387

jim.engineer@e-rainmaker.com