Defend Forward: Moving Toward Coordinated Active Cyber Response

on YouTube ↗01h 00m

" summary

Defend forward means pushing disruption earlier by combining government authorities and private telemetry from ISAOs/ISAOs-style groups, not unchecked “hack‑back.” Examples cited: SolarWinds and the Colonial Pipeline ransomware spur the 2021 executive order; the Talon guidance and honeypot/beacon techniques surface as practical tools; proposals include certified private responders and a Safety Act‑style shield paired with clear attribution and proportionality rules to avoid CFAA liability and collateral damage.

AI-written summary · about

" chapters (40)

1. 0:00Introduction
2. 0:37Defend Forward
3. 3:10Randy Sabetti
4. 5:30Paul Barron
5. 6:45Bear analogy
6. 7:30National strategy to secure cyberspace
7. 8:15Commission on Cyber Security
8. 9:00Cyberspace Policy Review
9. 9:45Information Sharing
10. 10:40Joint Collaboration
11. 11:15Defend Forward Strategy
12. 13:00Defend Forward Concept
13. 13:45What does imposing costs mean
14. 14:15Its not financial
15. 15:15What is holding the private sector back
16. 16:05Perception
17. 18:10Government Information
18. 19:25Imposing Costs
19. 21:40The Private Sector
20. 23:40Acquisition of actionable intelligence
21. 24:35Active Defense vs Active Cyber Response
22. 26:55Private Sector Active Cyber Defense
23. 29:20Key Considerations
24. 37:20Liability Protection
25. 38:13Liability Limitations
26. 38:52Trust Mechanisms
27. 39:42PublicPrivate Partnership
28. 40:12Attribution Difficulties
29. 40:50Collateral Damage
30. 41:08Coordination
31. 42:40Ongoing Assessment Certification
32. 43:14Liability Limitation
33. 43:40Types of Liability
34. 44:41Safety Act
35. 46:28Active Defense
36. 47:34Cloud
37. 48:26Honey Pots
38. 49:00Andrew
39. 49:18Kimberly
40. 55:39Bill

" related talks

• 50mStop Being Sitting Cyber Ducks! Adversary Engagement: the New Cyber-DefenseMary Yang, Dan Brett, Patrick Gould · RSAC 2022
• 21mCyber Vigilante or Self Defense?Bruce Heiman · RSA Conference 2014
• 52mDefense At Hyperscale: Technologies and Policies for a Defensible CyberspaceJason Healey · Black Hat USA 2016
• 52mDefense at Hyperscale: Technologies and Policies for a Defensible CyberspaceJason Healey · Black Hat USA 2016
• 41mSecurity is Part Of The DNA Of A Defense OrganizationHans Folmer · OWASP AppSec Research (AppSecEU) 2015
• 42mThe CCEL and the Thin Line Between Cyber Defence and Pre-emption…Andrea Monti · CODE BLUE 2025
• 29mFighting Back Without Hacking Back: Why “Risk Management” Isn’t Enough In The Era of Cyber WarTom Millar · FIRST Conference 2026 (FIRSTCON26)
• 18mCombatting Evolving Cyber Threats: Leading with DisruptionLisa Monaco, Chris Krebs · RSA Conference 2023