cis 2015- #fail no more, the rise of the self defending enterprise- nishant kaushik

34
#FAIL No More THE RISE OF THE SELF DEFENDING ENTERPRISE Nishant Kaushik @NishantK

Upload: cloudidsummit

Post on 29-Jul-2015

108 views

Category:

Technology


0 download

TRANSCRIPT

#FAIL No More THE RISE OF THE SELF DEFENDING ENTERPRISE

Nishant Kaushik @NishantK

#FAIL

#FAIL 13 M

87 M

212 M

255 M

Num

ber

of

Rec

ords

Exp

osed

Retail Businesses

Financial & Insurance Services

Federal Networks

Educational Institutions

Source: Privacy Rights Clearinghouse & the Associated Press

Securosis Data Breach

Triangle

Source: https://securosis.com/blog/the-data-breach-triangle

Data

Exploit Egress

2003 500 Million 2010 12.5 Billion 2014 20 Billion 2020 50 Billion

75 Billion 100 Bajillion! N

umbe

r of

sm

art

devi

ces

conn

ecte

d to

the

int

erne

t

‘Reimagining the Hoover Dam’ by Yheu-Shen Chua eVolo Magazine’s 2011 Skyscraper Competition

“”

People, as well, are broken.

Quinn Norton Everything Is Broken

The Self-Defending Enterprise

IT Managed èèè End-User Managed

Session Authentication èèè Continuous Authentication

Privilege Lockdown èèè Data Protection

Single Factor Authentication èèè Multi-Factor Authentication

Surveys & Prayers èèè App Discovery + API Firewall

Manual Configuration èèè Configuration Monitoring

Incident Monitoring èèè Behavioral Monitoring

Securosis Data Breach

Triangle

Data

Exploit Egress

Continuous Authentication & Dynamic Authorization

Configuration Monitoring & Vulnerability Assessment

Classification and Watermarking Encryption

Monitoring with Behavioral Context

App Discovery & API Firewall

Men running in a chariot race at the Piha Surf Club carnival, [ca 1938] [https://www.flickr.com/photos/nationallibrarynz_commons/4939013239/]

Oh, oh, and I almost forgot. Ahh, I'm also gonna need you to go ahead and share that TPS Report with Bob and Bob

I’m sorry, Bill. I’m afraid I can’t do that.

Thank You

Nishant Kaushik @NishantK