Using Threat Intelligence to - Champlain College Saint-Lambert · Using Threat Intelligence to...

Using Threat Intelligence to Secure IoT

Threat Hunting with Open Source

Steve Skoronski sskorons@checkpoint.com

• IoT is expanding rapidly, as is connectivity

• The stakes have never been higher

• The impact has never been so severe

IoT Security Market Overview

Spectre and Meltdown

Proof of Concept

Firmware Emulation - Firmadyne

Cyber Kill Chain from Lockheed Martin

Where to Start?

• Security Professionals and Administrators alike are drowning in data

• This means there is a lack of situational awareness

• It also means a long time to react, amplifying the security event impact on the business, reputation and brand perception

The Setup

Diagram credit to Corelight

IoT Development Kits

Stage 1: Collection - Data Inputs

• The reference infrastructure has many data collection points we can ingest to start getting a wider and deeper view;• Network Firewall – providing information on layer 2-7 data

crossing that network perimeter

• Ubiquiti’s Unifi Software Defined Controller for UAP-AC-Lite Wireless Access Point

• Syslog from simpler network devices / bro for devices that cannot log (IoT)

Stage 2 – Normalization

• Search and Reporting App very helpful to validate correct collection and format• Apps were used in conjunction with data inputs to view

from several perspectives, IE, Splunk Security Essentials

•Validation with proxy indicators – other correlation and reporting tools as a starting point for asking questions of the dataset

Threat Feeds

Transportation

Manufacturing

Smart cities

Smart buildings

Banking

Utilities

Healthcare

Telecom

Automotive

Energy

Smart homes

AI ADAPTIVE SECURITY CONTROLS

Introducing the Micro Gateway

Centralized Management

Easy Deployment / Zero Touch Provisioning

Integrated FW & VPN in a Micro Gateway

Wired & Wireless Support

Monitoring & Control via Mobile App

Protection Against Known and Unknown Threats

Enforce defined security policies

Accurately detect anomalous behavior

and identify threats in real time

Granular protocol understanding

Discover all IoT devices

Off to the Lab!

I appreciate your time!

Using Threat Intelligence to - Champlain College Saint-Lambert · Using Threat Intelligence to...

Documents

Transcript of Using Threat Intelligence to - Champlain College Saint-Lambert · Using Threat Intelligence to...

ADVANCED THREAT INTELLIGENCE - Bitdefender · Advanced Threat Intelligence Architecture Advanced Threat Intelligence resolves a long-standing blind spot for SOC managers and analysts,

Counter Threat Unit™ Threat Intelligence

State of Threat Intelligence Studyf6ce14d4647f05e937f4-4d6abce208e5e17c2085b466b98c2083.r3.cf1.rackcdn.c…Operationalizing Threat Intelligence .....11 2016 Threat Intelligence Agenda

HITRUST Cyber Threat Intelligence and Incident ... · HITRUST Cyber Threat Intelligence and Incident Coordination ... HITRUST Cyber Threat Intelligence and Incident Coordination Center

Certified Threat Intelligence Analyst - Koenig Solutions · Certified Threat Intelligence Analyst Course Outline Module 01: Introduction to Threat Intelligence Understanding Intelligence

MACHINE READABLE THREAT INTELLIGENCE - CRNi.crn.com/custom/LookingGlass_MRTI Feeds_Final_Nov_2016.pdf · machine readable threat intelligence collecting internet intelligence for

Shellshock Threat Intelligence Report

Building Successful Threat Intelligence Programs · Building Successful Threat Intelligence Programs Allan Thomson, LookingGlass CTO June 2017 ... “Threat Intelligence” –evidence-based

Cyber Threat Intelligence Training Series · 2020-03-27 · Cyber Threat Intelligence Training Series Course Introduction and Objective Cyber Threat Intelligence (CTI) Training Series

Threat intelligence platforms

Cyber Threat Intelligence Enterprise & Cyber … Threat Intelligence Enterprise & Cyber Security August 2017 Copyright Fujitsu Limited 2017 Global Impact Fujitsu Cyber Threat Intelligence

Cyber Threat Intelligence: Integrating the Intelligence Cycle · Cyber Threat Intelligence: Integrating the Intelligence Cycle Elias Fox and Michael Norkus, Cyber Threat Intelligence

Cyber Threat Intelligence Report

Crowd-Sourced Threat Intelligence

CYBER THREAT INTELLIGENCE - Microsoft...Cyber threat intelligence supports the following cyber security ... Optiv’s Cyber Threat Intelligence Workshop was developed to advise and

Measuring and visualizing cyber threat intelligence quality · Keywords Cyber threat intelligence · Threat intelligence sharing · Data quality · Threat intelligence formats ·

Threat Intelligence Briefing

Certified Threat Intelligence Analyst - EC-Council · Certified Threat Intelligence Analyst 1 Certified IA Threat Intelligence Analyst C T CERTIFIED THREAT ... It describes building

Threat monitor Threat Intelligence Report Q1 2020

Cyber Threat Intelligence Modeling Based on Heterogeneous ... · 2.1Cyber Threat Intelligence Cyber Threat Intelligence (CTI) extracted from security-related data is structured information