The Science of SOAR
mnemonic security podcast
04/11/22
•29m
About
Comments
Featured In
Is cybersecurity automation and orchestration actually complicating, instead of reducing, the human workload it is meant to relieve?
Joining us, to discuss this and more, we have Dr. Vasileios Mavroeidis, Cybersecurity scientist at the University of Oslo, specialising in security automation and cyber threat intelligence representation, inference, and sharing.
He explains how he defines cybersecurity automation, and what he sees as the opportunities but also the limitations when minimising human intervention in cybersecurity processes.
Robby and Vasileios also discuss the importance of open standards and open source tools in this domain, and how automation differs in OT environments.
Produced by Paul Jæger
Previous Episode
Control Validation & Cyber Insurance
March 28, 2022
•34m
Control Validation & Cyber Insurance
How can private-sector cyber insurers accurately understand and price risk?
To discuss this and the critical role insurance can play in risk mitigation strategy, we’re joined by Levi Gundert, Senior Vice President of Global Intelligence at the cybersecurity company Recorded Future.
Levi shares from his vast experience from the industry, from previous roles as VP of Cyber Threat Intelligence at Fidelity Investments, Technical Leader at Cisco Talos, Principal Analyst at Team Cymru and US Secret Service Special Agent within the Los Angeles Electronic Crimes Task Force (ECTF).
He’s joining the podcast to discuss his recent paper “A New Cyber Insurance Model: Continuous Control Validation”, analysing the current state of the cyber insurance market and providing a new framework for insurers to evaluate risk.
Recommended reading: https://www.recordedfuture.com/new-cyber-insurance-model-continuous-control-validation/
Produced by Paul Jæger
Next Episode
Conti leaks - The inside of the dark side
April 25, 2022
•37m
What can we actually learn about cybercrime and what really goes on inside of criminal organisations from the Conti leaks?
This episode we welcome Sergey Shykevich, who has more than a decade of experience within threat intelligence and defence. He’s currently leading the threat intelligence research group in Check Point, and Robby has invited him to share his findings after examining the data leaks from the predominantly Russian-based double extortion group Conti.
The large data leak included more than 400 000 messages and access to internal forums providing information about everything from offices, bonuses and recruitment, to organisational structure, information flow, and whether or not members are aware of the fact that they’re working for a crime syndicate.
Produced by Paul Jæger
If you like this episode you’ll love
Promoted