Latest Security Trends - Blackhat, Defcon, and B-Sides Wrap Up

<p>Blackhat, Defcon and B-Sides wrap-up</p><p>How are we advancing security?</p><p>As the annual conferences have come to a wrap there are some exciting trends to come out of the industry's most exciting annual conferences. Some of the key take-aways align directly with the vision and products of ThreatStream so we would like to take time to share our thoughts and overview of the latest trends and research emerging from the conferences.</p><p>First trend:</p><p><strong>Threat Intelligence is the future of security defense.</strong></p><p>With over 25 talks focused directly on Threat Intelligence and more specifically MRTI (Machine Readable Threat Intelligence), Thanks Gartner for creating distinguishing descriptions for the non-human stuff! ;ThreatStream has been the clear leader in this space and with all the talk about STIX/TAXII and automation of IOC -&gt; SIEM -&gt; DFIR -&gt; WIN, we don't know a better solution than Optic to start operationalizing your Threat Intelligence into MRTI and integrate with SIEM. I think the most interesting talks this year are about how to measure data-quality, how threat intelligence feeds are continually becoming commoditzed and overlapping which calls for a platform centric approach to getting value and distinguishing signal from noise.</p><p>Trend 2:</p><p><strong>Machine Learning to save the day.</strong></p><p>ML is one of those funny things that even I considered another empty buzzword that security companies jumped on to sell more product. Well... that was before we actually had working ML models in our product! I'm now a complete believer and have seen the outstanding benefits of applying ML to threat intelligence. I will say it now: This is the future of cyber security defense.</p><p>There were several interesting talks about ML, applied to Raw data in SIEM 2.0, my favorite research/project around this is Cisco and HortonWork's OpenSOC. Very interesting path and exactly where the market needs to move in-terms of adopting a robust solution for real-time correlation and long-term reporting and indicator hunting leveraging the latest scalable data tech (hive/spark/elk). <a href="http://www.slideshare.net/JamesSirota/cisco-opensoc" target="_blank">http://www.slideshare.net/JamesSirota/cisco-opensoc</a></p><p>If there is one interesting technology trend happening in security today it's the emergence of machine learning and how it will contribute to automation and enablement of the modern security analyst.</p><p>Trend 3:</p><p><strong>Honeypots become a Enterprise defense!</strong></p><p>Sadly we released MHN our groundbreaking enteprise honeypot management tool just a bit late to get in a talk at BH or Defcon but there were already several amazing talks about the benefits of Honeypots as an enterprise defensive tool especially running on internal rfc-1918 space looking for attack pivotting behaviour. If you have not seen some of the latest work around honeypots, check out the awesome open-source project "MHN" we released recently: <a href="http://threatstream.github.io/mhn/" target="_blank">http://threatstream.github.io/mhn/</a></p><p><br/> If you were not able to attend, all material and videos from Blackhat are already available online!</p><p>Blackhat Video and Materials:<br/> <a href="https://www.blackhat.com/us-14/archives.html" target="_blank">https://www.blackhat.com/us-14/archives.html</a><br/> <a href="http://www.irongeek.com/i.php?page=videos/bsideslasvegas2014/mainlist" target="_blank">http://www.irongeek.com/i.php?page=videos/bsideslasvegas2014/mainlist</a></p><p>BsidesLV Video:<br/> <a href="http://www.irongeek.com/i.php?page=videos/bsideslasvegas2014/mainlist" target="_blank">http://www.irongeek.com/i.php?page=videos/bsideslasvegas2014/mainlist</a></p><p>Slides from Defcon 22:<br/> <a href="http://eventifier.com/event/defcon2214/slides?page=1" target="_blank">http://eventifier.com/event/defcon2214/slides?page=1</a></p>