The Internet is Small: Own Your Attack Surface Before Somebody Else
summary
Research shows internet-wide scans drop from ~weeks to 45 minutes in 2013 and to minutes today, letting attackers find targets almost instantly after exploit publication. Fortune 500 firms average a serious exposure every 12 hours, with RDP accounting for about one third, over 75% of exposures in public cloud, and only the top 1–2% matching attacker pace; recommends measuring Mean Time to Inventory and automating discovery and remediation.
AI-written summary · about
chapters (10)
- 0:00Introduction
- 0:40The Internet is Small
- 1:10Network Science
- 2:18Attacker Perspective
- 3:41Range of sophistication
- 4:39Attackers vs defenders
- 5:33Known vs unknown assets
- 7:46Security needing an outofbody experience
- 12:35Serious incidents
- 12:46Cloud environments
related talks
58mNothing to Risk but Risk Itself: Expanding Vulnerability Risk with Internet-Scale Data
30mCountering Persistent Threat Actors in APAC and Globally
50mInsights into New Supply Chain and Cloud-Identity Attacks
50mAvoiding cloud security anti-patterns the right way
20mEvolving from patch management to risk mitigation
33mFrom Boardrooms to Polling Places: Securing Critical Infrastructure in 2024
55mNavigating Top Cyber Risks And Regulatory Requirements
24mNo More Time: Closing the Gap with Attackers