The Case for Integral Attack Path Analysis

Mark Bouchard, AimPoint Group Founder and Principal Analyst and Ron Gula, Tenable CEO
Taking Vulnerability Management to the Next Level:
The Case for Integral Attack Path Analysis

Are your high-value servers and the data they contain really safe from attack, even with multiple countermeasures in place? Given today’s highly motivated attackers and the increasingly sophisticated threats they are generating it is not surprising that patching, firewalls, intrusion prevention systems and other commonly deployed defenses are no longer sufficient. Unfortunately, all it takes is a single, seemingly unimportant system to provide skilled attackers with a beachhead they can use to work their way through and around your defenses. Tenable’s next-generation vulnerability management, with integrated attack path analysis capabilities provides the answer, delivering the tools, insights, and intelligence organizations need to identify and close off otherwise overlooked attack paths – while simplifying infrastructure and streamlining operations in the process.

Join AimPoint Group Founder and Principal Analyst Mark Bouchard and Tenable CEO Ron Gula and learn:

• Why traditional vulnerability management fails to measure up
• What’s needed to efficiently identify and close common attack paths
• Processes, tips and techniques for conducting attack path analysis
• The benefits that can be derived from a next-generation vulnerability management solution with integral attack path analysis capabilities
Jun 19 2012
63 mins
The Case for Integral Attack Path Analysis
More from this community:

IT Governance, Risk and Compliance

  • Live and recorded (3304)
  • Upcoming (60)
  • Date
  • Rating
  • Views
  • A new category of threat is emerging – a threat designed to evade traditional signature-based technologies such as Anti-Virus and Intrusion Detection. Attempting to meet the challenge is a new class of technology, “Advanced Malware Protection” or “AMP,” which is an industry term for technology designed to continuously monitor for, offload and detonate files in a sandbox - safely away from the main environment - to observe and detect malicious objects.

    If a security device produces an alert in the forest, who’s there to hear it?

    The challenge is these next generation advanced malware detection solutions produce so much detail about the suspicious activity that most organizations do not have the resources to thoroughly investigate/analyze. The best technology means nothing if you don’t have the right expertise to react to the alert, quickly decipher complex reports, investigate the threat, and determine the right response. And meanwhile, the threat actors aren’t standing still – they’re developing measures to circumvent controls in some traditional sandbox environments.

    You will learn:
    1.How the threat is evolving and how actors are employing evasive practices to overcome traditional and even some more sophisticated security defenses
    2.Why next generation sandboxing and full-system emulation are the keys to combatting evasive malware threats
    3.The expertise needed to accurately identify and diagnose the threat once the alert is received
    4.How to ensure your organization has the ability to respond effectively to the incident and close all the backdoors a threat actor may have opened
  • 2014 could have easily been called, “The year of the biggest security breaches since the beginning of forever.” But given current security practices and technologies, many of the breaches could have been prevented. So why weren’t they?

    Many of the affected companies fell into a very common trap, thinking that if a company goes to the trouble to be legally compliant then it will be effectively “secure.” Unfortunately, as with many kinds of regulations, legal compliance really represents the absolute least amount of effort required. If companies want to give themselves the best chance to avoid the very severe consequences that come with a major breach, there are five practices they need to put in place now.

    Join Adrian Sanabria, Senior Security Analyst at 451 Research, and Amrit Williams, CTO of CloudPassage, on this webinar to learn
    · Possible gaps left by the compliance-first approach to security
    · How to limit vulnerabilities across traditional, virtual and cloud infrastructures
    · Five best practices to avoid a major security breach in 2015
  • The bring-your-own-device (BYOD) movement has been a huge boon for businesses that put a premium on productivity. File sync and share solutions have emerged to help employees work from anywhere, at any time, on any device. In this BrightTALK exclusive, eFolder explores the top seven features that business should consider when adopting a file sync and share solution. Learn what is required for a file sync and share solution to improve collaboration, maximize productivity, and ensure security.
  • Join Tom Kellermann, Chief Cyber Security Officer for Trend Micro, in an informative webinar specifically tailored for corporate executives and directors who are ready to take the reins of a real and effective plan to secure their organization, their data, and their careers against targeted attacks.

    During this live webinar, you’ll learn:
    • How to identify, classify, and protect your valuable data assets
    • How to assess your organization’s vulnerability to attack
    • How to measure and mitigate cyber risks cost-effectively
  • Cutting down on the time taken to complete complex document review cycles allows the modern lawyer to operate at the pace required by their industry.

    Join our webinar to learn top tips for shortening these review cycles without losing document integrity and risking corruption. We’ll also cover what technologies are available to provide a quick and accurate way to improve document review efficiency.
  • FireEye recently released a new report that documents how and why governments around the world are turning to the cyber domain as a cost-effective way to spy on other countries, steal technology, and even wage war.

    Whether it’s sensitive military, diplomatic, or economic information, governments depend on the integrity of their data. If that data falls into the wrong hands, the consequences could be severe.

    In the wake of two apparent state- and government-sponsored attacks, APT1 and APT28, government agencies must understand why they are in attackers’ crosshairs, what attackers might be seeking, and how they can protect themselves.

    Join us for a dynamic discussion with subject matter experts where you will learn:

    •What makes your government-related organization an appealing target – whether you’re a political opponent, business, agency or vendor
    •Why it’s important to determine who could be planning an attack, their motives, and how they might carry out their goals
    •How to assess your level of preparedness and how to protect yourself if you are not ready for this new era of cyber warfare
  • From unobtrusive advanced malware detection technologies to automated threat response and actionable mobile-friendly dashboard – manage security from any device, any time, ESET will present new solutions for securing your endpoints and new ways to manage them.
  • Organizations are having to cover more ground than ever when it comes to security. Yet businesses often lack the in-house skills and resources, so security leaders are turning to MSSPs to help bear the burden to ensure every area of risk is adequately attended to.

    Join us for an interactive discussion with guest speaker, Forrester Research VP and Principal Analyst, Ed Ferrara, to learn how MSS is changing the conversation for businesses to achieve security goals. Help drive the conversation by submitting a question for Ed in advance so we can tackle your biggest security concerns such as:

    • Overcoming the skills shortage
    • Where to focus the budget – spending trends across industries
    • The value of security – pitching it as an investment not a cost to business leaders
    • Improving business outcomes – leveraging MSSPs as a tactical arm to optimize IT security, efficiency and value
  • A recent analyst study found that 88% of organizations are “doing Project and Portfolio Management (PPM).” This finding could lead many to believe all is well with this critical business process so essential to strategic success. This is hardly the case as studies also show PPM is still generally immature in enterprises today. The lack of maturity is largely due to the fact that most organizations are addressing only a subset of PPM capabilities. So though almost every organization can lay claim to doing PPM, few are actually doing PPM for all its worth. Many of these organizations will continue to miss out on the incredible possibility and promise of this essential business capability until they grasp and appreciate the full scope and potential of PPM.

    One of the greatest barriers to realizing the full potential of PPM is an enterprise-wide awareness of the span of PPM and the likely gap that must be overcome to achieve it. There is a plethora of great PPM insight contained in the numerous books, methodologies, and frameworks available today, but using this volume of information to get everyone on the same page is a daunting challenge. The key is to use a simple approach and model to quickly establish a common understanding of this critical business discipline and to easily foster the conversations and discussions to drive the endeavor to raise PPM proficiency.

    This brief webcast will present a PPM model that is easy to remember, easy to communicate, and proven to quickly illuminate the gap between existing immature PPM processes and the full scope and potential of comprehensive Project and Portfolio Management.
  • Portfolio planning activities have struggled to gain respect in most businesses. Lack of enterprise-wide orchestration arises from a lack of effective involvement and intimate business knowledge – not simply of operations and processes, but of business imperatives, obstacles and desired outcomes. And the information systems aspects continue to be planned in splendid isolation from the business, causing IT people to mistakenly celebrate victory when a new IT system goes live. However a project only really starts when the IT goes live, and so the planning needs to be fully integrated. This can only be accomplished first by building strong relationships with business peers that will result in measurable value creation. The next step is to implement a sophisticated PPM system that can handle the extreme complexity of orchestrating all the business and related technology portfolio of initiatives, capable of optimizing the plans (and the outcomes) as the business environment changes.

    To achieve this, a new PPM model needs to be created to look at portfolio management in a holistic way, enterprise-wide. Planners need a capability that will generate multiple scenarios and real-time decision support. This dimensionality and complexity is well beyond the capacity of the human brain. By implementing such a tool, IT would be positioned as a critical partner with the business – not just in implementing mainstream information systems, but also in helping the business with a much better way to plan and manage all of its key initiatives effectively

    This session focuses on how enterprise leaders and divisional leaders and IT leaders should be working in harmony to orchestrate great business outcomes, rather than looking after their parochial interests.
  • Channel
  • Channel profile
  • Healthcare’s Unique Vulnerability Management Challenges Recorded: Nov 14 2013 56 mins
    This webcast will explore the unique and very challenging landscape that healthcare provider organizations face managing system vulnerabilities.

    Along with the common vulnerability management challenges associated with operating a large enterprise, healthcare organizations face risks and vulnerabilities from a wide array of medical devices, a proliferation of mobile devices (both managed and non-managed) and electronic medical record (EMR) systems that are often hosted in the cloud.

    During this session, our panel will discuss:

    - The impact of evolving industry security standards and regulation on vulnerability management

    - What safeguards are being implemented to mitigate risk

    - Containing risk, while enabling operational agility to adopt new technologies

    - Your questions and comments

    Panelists:

    - Larry Brandolph, CISO, Temple University

    - Dr. Bryan Cline, VP, CSF Development and Implementation, and CISO for the Health Information Trust Alliance (HITRUST)

    - Joel Garmon, CISO, Wake Forest Baptist Medical Center

    - Brad Sanford, CISO, Emory University and Emory Healthcare

    - Marcus Ranum, CSO, Tenable Network Security

    - Craig Shumard, Principal, Shumard and Associates, LLC, Emeritus CISO, Cigna
  • Communicating Vulnerabilities to Management: Making the Rubber Meet the Road Recorded: Nov 12 2013 62 mins
    Is your organization’s security vulnerability information getting to the right people? Security vulnerability identification without resolution is frustrating and dangerous to your organization.

    Please join Paul, Jack, and Renaud Deraison (Tenable’s Chief Research Officer and the creator of Nessus) for the final webcast in the “Vulnerabilities Exposed” series where we will discuss how to detect and prioritize vulnerabilities, and then communicate them to the responsible parties for resolution.

    Tenable will arm you with new ways to keep the vulnerability information flowing, in the right directions and to the right people.

    • Find the vulnerabilities that matter
    • Prioritize patches for the greatest impact
    • Communicate problems to get, and keep, them fixed
  • Reduce Security and Compliance Gaps with Continuous Security Monitoring Recorded: Nov 7 2013 63 mins
    Organizations are moving from “Periodic” scanning to “Continuous Monitoring” to protect their information assets from advanced threats and exposure from new technologies such as mobile and virtual systems. But, don’t assume that Continuous Monitoring just means more frequent scanning.

    Join Mike Rothman, President of Securosis, and Jack Daniel, Tenable Product Manager, as they discuss how to choose the right technology and focus on the key vulnerability management processes to create a proactive risk-based security and compliance management program.
  • BYOD-Bring Your Own Devastation-Taking On the Mobile Threat-"Vulns Exposed" Recorded: Oct 22 2013 58 mins
    What is the security status of your organization's BYOD environment?

    Join Paul Asadoorian and Jack Daniel for the third webcast in the “Vulnerabilities Exposed” series where they’ll discuss BYOD as one of today’s fastest growing security challenges and present Tenable solutions to help your organization stay ahead of mobile threats.

    Learn how to find and secure your BYOD and corporate mobile devices:

    • Detailed BYOD/mobile device snapshots: find iOS, Android-based, and Windows phone devices connected to your corporate network and their vulnerabilities
    • Full mobile asset discovery: continuously detect transient mobile devices, both managed and unmanaged, and their vulnerabilities
    • Unified mobile device management: powerful dashboards, reporting, alerting, and data sharing for organization-wide management of mobile device risk and compliance
  • How will Software Security Evolve? - Geeking Out with Marcus Ranum Recorded: Oct 17 2013 60 mins
    Software security remains the "elephant in the room" of computing. The obvious answer is that it's a hard problem. But more subtle answers are rooted in how the software industry is structured.

    In this webcast, Gary McGraw and Marcus Ranum will engage in a conversation about how the industry might eventually evolve.
  • Addressing the Security Challenges of Virtualization - "Vulnerabilities Exposed" Recorded: Sep 24 2013 59 mins
    How secure is your virtual environment? Attend the second webcast in the "Vulnerabilities Exposed" webcast series where we'll discuss virtual machine (VM) sprawl, virtual “Whack-a-Mole,” and how your virtualization layer is equivalent to physical access.

    Paul and Jack will explain how to inventory, scan, and harden your virtual infrastructure and present Tenable solutions. Tenable customer, Russell Butturini, will discuss his experiences using Tenable products in the virtual environment at his company.

    Learn how to find and secure your VMs:

    • 7 steps to virtual security nirvana: our process to systematically secure your virtualized environment
    • Found another one!: use active scanning and real-time monitoring to find all your VMs
    • Patch and system hardening made easy: reduce overhead when hardening your virtual environment
    • Communication is key: prioritize risk and distribute the information to the people who can get the problems fixed
  • BYOD and Clouds: "The Perfect Storm" (Part 2) - A Politics of Security Webcast Recorded: Sep 19 2013 56 mins
    Part 2 of this series will focus on the risks and safeguards related to cloud storage repositories and mobile application security in an ‘any device/any channel’ engagement model.
  • Why Choose Tenable over Qualys? Recorded: Sep 5 2013 63 mins
    This webcast highlights the key capabilities of Tenable's vulnerability management solution and the benefits it provides over Qualys.
  • Reducing Your Patch Cycle to Less Than 5 Days - "Vulnerabilities Exposed" Series Recorded: Aug 27 2013 64 mins
    Is a 90-day patch cycle the best your organization can achieve? Join Paul Asadoorian and Jack Daniel for the first webcast in the “Vulnerabilities Exposed” series where they’ll dive deep into the challenges of vulnerability management and present creative solutions to help you fully leverage your vulnerability management process and reduce your patch cycle.

    Learn four ways to dramatically reduce your patch cycle:

    • More is less: complete vulnerability discovery with consolidated remediation means you patch fewer systems to fix more problems
    • Faster is better: real-time monitoring allows you to patch as you go
    • Work smarter, not harder: automated patch management system validation reduces discrepancies between IT security and network operations
    • No one likes surprises: identify deteriorating process trends before they become problematic
  • BYOD and Clouds: "The Perfect Storm" (Part 1) - A Politics of Security Webcast Recorded: Jul 18 2013 55 mins
    This two part webcast series examines how BYOD deployments along with cloud computing are collectively impacting security risks, how various organizations are updating their security processes to account for these technologies, and what safeguards are being implemented to mitigate risks as they are deployed.
  • Vulnerability Management nach BSI IT-Grundschutz Recorded: Jul 16 2013 29 mins
    In diesem Webinar von Tenable Network Security erfahren Sie wie Sie fortlaufend Windows-spezifische Massnahmen & Controls aus dem Massnahmenkatalogen überprüfen und auswerten können und wie Sie nach IT Grundschutz einen Nessus Audit durchführen. Report Auswertung und wie Remediation schnell in die Wege geleitet werden kann werden auch besprochen, oder wie Sie durch kontinuierliches Monitoring IT Grundschutz Compliance-Auflagen erfüllen können.

    Participant dial-in option.

    International Dial-In+44 (0) 1452 555566
    Germany 06922224918
    Austria 019286568
    Switzerland 0565800007

    Please quote the following conference ID: 14321710
  • Implementing an Effective Vulnerability Management Program Recorded: Jul 16 2013 44 mins
    Brian Honan presents this webinar on how to develop an effective Vulnerability Management program and what to consider when incorporating it into a wider security strategy. A best practice guide on how to identify your most critical assets, protect your data and reduce the breach to detection gap.
  • Increase Security Effectiveness with the 20 Critical Security Controls Recorded: Jun 19 2013 34 mins
    Automating the 20 Critical Security Controls has demonstrated reduction in risk by over 90%. Tenable is the first vendor to offer an integrated real-time risk management solution to help organizations easily implement these controls.
  • Geeking Out with Marcus Ranum - Malware Response Recorded: Jun 4 2013 60 mins
    Within the past five years, we have seen an escalating strategic use of malware and its negative impact on organizations. The TTPs (tactics, techniques, and procedures) of various threat actors have caused not only a demand for incident response capabilities, but also the need for in-house reverse engineering and malware response skills to aid incident response and forensic activities.

    Please join Marcus Ranum and special guest, Joel Yonts, on Tuesday, June 4 at 2PM EST for an interactive conversation on malware response programs and their importance and role in today’s enterprise security operations.

    Topics covered:
    •Strategy and objectives for developing a malware response process
    •How to build a malware analysis team
    •What tools to employ for malware response, and other related topics
  • Managing Vulnerabilities in Virtualized and Cloud-based Deployments Recorded: May 30 2013 60 mins
    Technologies such as virtualization and cloud-delivered services offer organizations the benefits of hardware consolidation and rapid provisioning and deployment. However, they also bring security and compliance challenges that break traditional vulnerability management solutions by allowing un-scanned and unpatched systems to become active in any part of the organization. A new model that offers real-time identification and assessment of these technologies is required to mitigate the risks. Find out more about it in this webcast…
  • Cyber Threats News and APT Defenses - A Politics of Security Webcast Recorded: May 23 2013 57 mins
    There has been a lot of press lately on the escalating cyber threats especially from China. A panel of security experts and practitioners will discuss focus on how this press coverage has changed how organizations think about these cyber threats and what countermeasures they need or plan to implement to address escalating crimes, espionage, or warfare cyber risks.
  • Is your Network Infrastructure Adequately Protected? Recorded: May 15 2013 63 mins
    Network devices including firewalls and routers are the gatekeepers to “endpoint” resources and are increasingly using complex software components. These devices are often remotely accessible and whose configuration changes regularly, making them susceptible to vulnerabilities and misconfigurations. To add to this, network and security teams are often separate parts of an organization often leading to incomplete understanding of vulnerable infrastructure. In this webcast, we examine how to identify vulnerable devices and communicate them across multiple teams and ultimately fortify these devices from configuration and security issues.
  • Increase Security Effectiveness with the 20 Critical Security Controls Recorded: May 1 2013 64 mins
    Automating the 20 Critical Security Controls has demonstrated reduction in risk by over 90%. Tenable is the first vendor to offer an integrated real-time risk management solution to help organizations easily implement these controls.
  • How Will CDM Impact Your Organization? Recorded: Apr 10 2013 59 mins
    DHS' CDM program combines the valuable lessons learned from the existing implementation of FISMA mandates, the strides made by the Cyberscope program, and the proven results of the State Department’s iPOST program. During this webinar, we will discuss:

    - Current challenges in enterprise continuous monitoring
    - How to move your program from periodic system state analysis to real-time monitoring
    - A glimpse into the future: DHS CDM and it's affect on security and regulatory compliance
  • Geeking Out with Marcus Ranum - Take 2 Recorded: Apr 3 2013 60 mins
    Defining "normal" is one of the hardest things we do in security (the other is trying to get people to write perfect code!), but there are a few tricks that work. In this second session, Marcus Ranum and Ron Dilley will be talking about detection algorithms and the problem of defining "normal" network activity.
Industry-expert insights on overcoming critical security challenges
Tenable Network Security brings you critical, timely insights and advice on how to protect your IT infrastructure from the latest threats and ensure compliance and clean audits, while effectively understanding and communicating risk. With guests including renowned technical experts and specialists, senior executives, and industry leaders, you’ll gain multiple perspectives on how to address IT security challenges — along with the practical, hands-on advice you need to stay ahead of threats.

Embed in website or blog

Successfully added emails: 0
Remove all
  • Title: The Case for Integral Attack Path Analysis
  • Live at: Jun 19 2012 5:00 pm
  • Presented by: Mark Bouchard, AimPoint Group Founder and Principal Analyst and Ron Gula, Tenable CEO
  • From:
Your email has been sent.
or close
You must be logged in to email this