From Attacks to Action - Building a Usable Threat Model to Drive Defensive Choices

Explore a comprehensive approach to translating threat intelligence into actionable defensive strategies in this 27-minute Black Hat conference talk. Delve into the challenges of the current "Golden Age of Threat" and learn how the non-profit Council on CyberSecurity has developed a community-driven method to address these issues. Discover the evolution of their process, from informal brainstorming to a structured workflow incorporating multiple authoritative threat sources. Understand how this approach aligns with various Risk Management Frameworks, including the NIST Cybersecurity Framework. Gain insights on extracting value from vast amounts of threat information, leveraging expert knowledge, and implementing crucial defensive actions to enhance cybersecurity resilience.

From Attacks to Action - Building a Usable Threat Model to Drive Defensive Choices