Скачать или смотреть CSS2015: Session 12 PaloAlto - Cyber Threat Alliance

Education Session 12 - Cyber Threat Alliance - Cyber Threat Alliance: State of the Alliance Update
Speaker: Vishaal Hariprasad, Threat Intelligence Architect in Unit 42, Palo Alto Networks

Description: The volume of new cyber threats continues to increase rapidly on a daily basis. Defenders are often inundated with the amount of new samples, infrastructure, and threat actor groups that appear or morph nearly every second of every day. Attempting to cope with the massive amount of new cyber threat data alone is an insurmountable task.

The Cyber Threat Alliance was formed by a core group of security vendors: Fortinet, McAfee, Palo Alto Networks, and Symantec. The alliance consists of practitioners from these organizations that have chosen to work together in good faith to share threat information for the purpose of improving defenses against advanced cyber adversaries across member organizations and/or their customers. Together the alliance seeks to share cyber threat information in order to collectively enhance our defensive intelligence capabilities and posture.

The alliance is currently building out an internal STIX compliant framework based on the FS-ISAC model with a goal to directly share and provide significant contributions to the FS-ISAC in the near future.

Join one of the alliance founding members’, Palo Alto Networks, for this session where we will present the current status of the alliance, review the fundamentals of cyber threat intelligence information sharing and technologies, information sharing best practices, and the future innovations and alliance roadmap.

This presentation will include a review of information sharing topics to include a detailed look at how the alliance approaches and utilizes:

• STIX – Structured Threat Information

• TAXII - Threat Information Exchange

• CybOX – Cyber Observable Expression

• Norman Sample Sharing Framework

Expected Outcome: Attendees will have an opportuntiy to learn about new inforation sharing standards and methodologies for making sense of all of the information being shared in the security community today.

Intended Audience: CISO, ISO, Inteligence Directors, SOC Operators, Security Researcher, Law Enforcement


This video was filmed at the Sept 28 & 29, 2015 Cyber Security Symposium in Sacramento, CA


If you would like information on any future PSP Forums, please visit our event site at www.pspinfo.us

Contact Information:
Russ Hicks, President
Public Sector Partners, Inc.
[email protected]