Telling Fairy Tales to the Board: Turn Attack Graphs into Business Stories
summary
Attack graphs get reduced to one-line business cases: map an attack path to an unacceptable loss, a concrete hazard, and a matching initiative. Examples: an internet-facing Ubuntu with Apache Commons Text RCE plus credentials in shell history exposes customer emails; NGINX RCE plus exposed AWS keys yields admin access; compromised bastion with Trojan.Linux.Agent.EIS and leaked SSH keys exposes S3 PII. Use initiatives like software vulnerability management, identity entitlements management, or wipe and redeploy and prioritize fixes (78% of paths start with known vulnerabilities).
AI-written summary · about
chapters (7)
- 0:00Start
- 8:20Red Riding Hood Awareness Initiative
- 15:05Software Vulnerability Management Initiative
- 19:56Cloud Identity Entitlements Management Initiative
- 23:57Malware Cleanup Incident
- 27:34PII Identification Initiative
- 30:54System Support Initiative
related talks
26mBreaking the Attack Graph: How to Leverage Graphs to Strengthen Security in a Domain Environment
05mDefenders Think in Lists. Attackers Think in Graphs.
28mHow to Tell the Right Cyber-Story to Executives and Board Members
20mAttack of the Graph: Visual Tools for Cyber Analysis
14mThreat Modeling for O11y: From Blind Spots to Actionable Insight
38mLight in the Labyrinth: Breach Path Analysis for Anyone
33mDecoding Cyber Threats: A Practical Guide to Using Attack Trees
19mStorytelling as an Incident Management Skill