Looking for presentations from past meetings? Members can access them HERE on the ISSA.org web site.

Loading Events

« All Events

  • This event has passed.

March 2018 ISSA Chicago Chapter Meeting

March 1 @ 3:00 pm - 5:00 pm

Please join the ISSA Chicago Chapter for our monthly chapter meeting. This month’s featured speaker will be Mark Orlando, CTO, Raytheon Cyber. Complimentary valet parking is available. Hours ‘d oeuvres will be served. Cash bar available. ISSA Chicago Chapter members receive a complimentary drink if they register for the meeting as a member.


Proactive Security: Building a Threat Hunting Program
by Mark Orlando, CTO, Cyber Services, Raytheon

“Hunting” is one of the newest buzzwords in the security industry, but what does that mean and how does one build or obtain such a capability? This talk will separate the marketing from the reality, review the major types of hunting solutions in the current market, and outline solutions for building a cyber hunting capability from the ground up using real world tools and case studies.

Quick Abstract:
This session will examine common challenges and solutions for achieving a threat hunting capability using real-world case studies and lessons learned over a decade of operational experience.

Session Detail:
We have all heard the sales pitches from vendors and service providers extolling the virtues of proactive hunting, but what exactly is “hunting” in a defensive context? Is it supported by tools, processes, people, or some combination thereof? How is it different from a historically reactive defensive model? Can the capabilities of the last decade evolve to meet this new demand, or must we as a community and an industry develop new solutions?

In this presentation, we will address these questions and more in order to better define hunting and demonstrate what is required to achieve this capability. At a high level, the presentation will:

  • Review the evolution of cyber defense, and hunting specifically, from ad-hoc and reactive to the mature, proactive capabilities we aspire to today.
  • Without focusing on specific vendors, we will compare and contrast various kinds of “hunting” solutions available in the market.
  • Using real world case studies and actual threats, we will examine common operational scenarios and demonstrate both the value of proactive hunting and proven approaches to performing it. These will include screenshots and step-by-step examples of threat identification and response using hunting techniques.
  • We will discuss common risks and pitfalls in building or obtaining a proactive hunting capability.
  • We will identify optimal staffing, technology, and process components of a proactive hunting solution, tying together the background, service and product offerings, and scenario portions of the presentation.

Attendees will leave the session with a better understanding of exactly what proactive hunting is, a means of discerning between the many product and service offerings in today’s market, and a high-level roadmap for achieving some hunting capabilities in their own environments. The ultimate goal of the session is to educate practitioners, managers, and business owners alike and enable them to shift their defensive operations to a more proactive posture.

 

Details

Date:
March 1
Time:
3:00 pm - 5:00 pm
Event Category:
Website:
https://issamarch2018.eventbrite.com

Organizer

ISSA Chicago Chapter

Venue

Carlucci’s
6111 N. River Road
Rosemont, IL 60018
+ Google Map

Event Anti-Harassment Policy
The ISSA Chicago Chapter is dedicated to providing a harassment-free event experience for everyone, regardless of gender, sexual orientation, disability, gender identity, age, race, or religion. We do not tolerate harassment of event participants in any form. Sexual language and imagery is not appropriate for any event venue, including talks. Event participants violating these rules may be sanctioned or expelled from the event at the discretion of the event organizers/management.

Please follow this link to see the full text of our Anti-Harassment Policy.