Yet, most CSIRTs continue to fall short in keeping the adversary - even the unsophisticated attacker - out of the enterprise. Why is this?
In this talk from Shmoocon 2013, Carson Zimmerman offers some observations on what it takes to do Computer Network Defense well in the modern IT enterprise. He presents ten fundamental qualities of an effective CSIRT that cut across elements of people, process, and technology.
Carson Zimmerman is a Lead Cyber Security Engineer with The MITRE Corporation. He has ten years of experience working with large Computer Security Incident Response Teams (CSIRTs) to better defend against the adversary.
Zimmerman has held roles in the CSIRT ranging from tier 1 analyst to senior architect. He received a BS in Computer Engineering from Purdue University in 2002 and an MS in Information Systems from George Mason University in 2007.
By subscribing to our early morning news update, you will receive a daily digest of the latest security news published on Help Net Security.
With over 500 issues so far, reading our newsletter every Monday morning will keep you up-to-date with security risks out there.