Latest / CYBR.Signal / Cybersecurity Trends

Transcript

Cybersecurity Trends · CYBR.Signal

• 0:00
  SPEAKER_00: And hello, everybody.
• 0:01
  SPEAKER_00: Happy Cyber Sunday.
• 0:02
  SPEAKER_00: Hope you're doing well.
• 0:03
  SPEAKER_00: So in the past, I have talked about actually, I think it was last Cyber Sunday.
• 0:08
  SPEAKER_00: I talked about how you shouldn't be afraid of a product or a technology putting it into your environment.
• 0:17
  SPEAKER_00: Specifically, was kind of talking about AI, but there's there's other ones that you can think about.
• 0:23
  SPEAKER_00: A lot of people put a lot of FUD, you know, fear, uncertainty, and doubt about that from a cybersecurity perspective, especially AI these days.
• 0:32
  SPEAKER_00: But what you shouldn't be afraid of is trying to use it in your program or use it in your organization.
• 0:38
  SPEAKER_00: Just you just have to make sure you're securing it and doing some of those basic things.
• 0:42
  SPEAKER_00: And I talked about how some of that new technology is actually enabling cybersecurity in a lot of ways.
• 0:49
  SPEAKER_00: So talked about that.
• 0:50
  SPEAKER_00: And then what I also talked about way back in the day was around how you can tell whether a product may be a good fit for your environment.
• 0:58
  SPEAKER_00: What I talked about when a new product comes out, it needs to be solving an existing problem, generally needs to be doing that in an innovative way, and it needs to be not difficult to implement.
• 1:11
  SPEAKER_00: Because if it's doing those other two things, but you can't get it in your environment very easily and it causes a lot of problems, it's probably not going to get adopted.
• 1:19
  SPEAKER_00: So those were very specific to product things.
• 1:22
  SPEAKER_00: What I want to talk about now is whether a concept in cybersecurity, something that is coming out, be you know, like an analyst firm or something, comes out with a larger concept.
• 1:32
  SPEAKER_00: Think zero trust, whether that is a trend or whether that are just kind of a flash of the pan or something that you ought to really consider.
• 1:43
  SPEAKER_00: So I'm gonna say something a little weird here, and forgive me, vendors, I feel like I have to apologize to you a lot.
• 1:50
  SPEAKER_00: I don't mean this negatively, but it's it's gonna sound weird in a lot of people's cybersecurity leadership and decision makers' minds.
• 1:58
  SPEAKER_00: If a vendor is trying to take that concept and here's the negative word, co-opt it to use to sell their product, in a weird way, that may show that it is a valid concept that is more than just a trend or a flash in the pan.
• 2:18
  SPEAKER_00: I mentioned zero trust.
• 2:20
  SPEAKER_00: So let's think about zero trust.
• 2:21
  SPEAKER_00: Zero trust is absolutely a valid concept, something you can use in your environment.
• 2:28
  SPEAKER_00: Not necessarily an easy thing to implement across the board, but what it is not, and I've heard multiple multiple cybersecurity leaders say this, and just people that are, you know, kind of strong voices in the industry, zero trust is not a product.
• 2:46
  SPEAKER_00: It is a concept.
• 2:49
  SPEAKER_00: It's not a trend in the way that you might think of it as you know, kind of flash in the pan.
• 2:56
  SPEAKER_00: It is an actual good concept that you can implement in your environment.
• 2:59
  SPEAKER_00: But there are a lot, a lot, a lot of vendors who try to use that to create a or to create some sales for their product saying we do zero trust.
• 3:11
  SPEAKER_00: And that in my mind is like, oh, wait a minute.
• 3:14
  SPEAKER_00: Okay, if I've got 20 vendors out here talking about the same concept, then somebody has done something in there to say either a lot of people are looking at this, or maybe they've actually done some research to see that this is something that is valid and we can use it in our marketing.
• 3:30
  SPEAKER_00: I'd say the same thing uh with the MITRE attack framework.
• 3:34
  SPEAKER_00: So when MITRE Attack came out, a lot of people immediately recognize the um the viability of that and how it made a difference and how you could find uh indicators of compromise in your environment and the techniques and the way the attackers uh came at different environments, different industries, that kind of thing.
• 3:56
  SPEAKER_00: Very good stuff.
• 3:57
  SPEAKER_00: Very um helped a lot helps a lot of people look for indicators of compromise and look for compromising attackers in their environments.
• 4:06
  SPEAKER_00: That being said, a lot of vendors use it as a concept and as a marketing ploy, if you will, to sell their product.
• 4:17
  SPEAKER_00: Hey, we cover all of these, or we've got 98% coverage on MITREATC framework or whatever.
• 4:23
  SPEAKER_00: And that's not necessarily what MITREATEC's built for.
• 4:25
  SPEAKER_00: There's been some uh articles about that lately.
• 4:29
  SPEAKER_00: It it's but it's leading, lending some credibility to the concept of MITREATAC being valuable to you.
• 4:37
  SPEAKER_00: So there's a lot of other things to think about when it comes to figuring out whether a concept, a new concept that comes out is a flash in the pan or if it's an actual viable trend that you should look at in your environment.
• 4:49
  SPEAKER_00: But I thought I would just kind of give this one point of view that if a lot of vendors are using it, co-opting it to sell their product and put it in marketing, might be something you give it at least a look at.
• 5:02
  SPEAKER_00: Again, I'll go in later in another Cyber Sunday about other things you should think about, but just something I've been thinking about.
• 5:09
  SPEAKER_00: Let me know what you think.
• 5:10
  SPEAKER_00: Again, vendors, sorry, I'm really not meaning to insult you.
• 5:14
  SPEAKER_00: It's just it's an interesting concept when I was thinking about it.
• 5:17
  SPEAKER_00: So, all right, see you next time.