The Art of Threat-Informed Sharing: Real-life Use Cases from NSA
summary
NSA Cybersecurity Collaboration Center describes operationalizing intelligence into action with 800 collaboration channels and sharing to about 1,000 partners leading to roughly 35,000 analytical exchanges last year. Examples include finding PLC firmware flaws and coordinating a four month response so vendors produced patches while partners deployed network signatures, and uncovering a Citrix ADC zero day that led to detection guidance and a December 13, 2022 patch. Programs run protective DNS weekly blocklists (about 70 million blocks so far), attack surface management, and CTI for SMBs.
AI-written summary · about
chapters (8)
- 0:00NSA's cybersecurity collaboration
- 1:03Evolution of info sharing
- 3:51Three pillars of collaboration
- 7:22Defending critical infrastructure
- 12:35Protecting defense industrial base
- 20:29Cybersecurity services for small to medium businesses
- 27:48Key lessons learned
- 33:01Q&A
related talks
51mFrom Public-Private Partnerships to Operational Collaboration
49mHow Threat Intelligence Sharing and Automation Wins the War against Attackers
26mScaling cyber threat intelligence sharing with the AUS Cyber Security Center
32mIntelligence Sharing for Critical Infrastructure Resiliency
27mStandard Classification: Connecting the Dots: How Threat Intelligence Protect...
43mCyber Threat Intelligence (Experts recommendations to enhance your security posture)
51mKeynote: Cybersecurity Partnership, Technology and Trust
01h 27mOpen-source Tools and CSIRT Success Stories