Unplanned change is the enemy of security and availability. Whether it comes from an advanced adversary, a malicious insider or a trusted employee, understanding change in your IT environment can help you identify the difference between a simple modification and a malicious attack. Travis Smith, Principal Security Researcher at Tripwire, demonstrates real-world attacks, analyzes how attackers commonly gain access to improperly configured systems, and shows the impact data breaches can have on an organization. You will get a breakdown of the Center for Internet Security’s (CIS) Critical Security Controls, which when implemented, can reduce your risk of cyber attack by up to 85% by: • Continuously inventorying all hardware/software assets • Establishing standard secure configurations • Running automated vulnerability scanning tools • Minimizing anomalous behavior with better administrative privileges

22. MEGASCAN
required to reassess
Traditional
Assessment
 Continuous Configuration, Detection &
Response
 The Goal is Security, not Audit
 Lower Costs, Greater Efficiency
 Increased Availability, Detect and Respond
 Measurable, Sustainable, Reliable
Continuous Diagnostics and Mitigation
Manual
Configuration
Assessment

40. C:WindowsInfUsbstor.pnf
C:WindowsInfUsbstor.inf

45. Net.exe start > services.txt

47. •Baselining Systems Tells You What You Currently Have
•Files, Registry, Database Configurations, Network Devices, Active Directory, Critical Infrastructure
Know Your Current System
State
•Security Policies Can Define Your Desired State
•Industry Standard Hardening, Compliance, Self-Created
Know your Desired System
State
•Compare Your State To Desired and Correct Differences
•Assessment, Deviations, Variance, Remediation, Automation
Know How To Transition From
Current To Desired State
•Agent and Agentless Change Detection
•Scheduled Scanning & Real Time
Know When Your Desired
State Changes
•Deep Change Inspection
•Who, What, When, Where, Detailed Content, Change Management Processes
Know Why & Who made
Changes
•Sources Of Truth
•Change Windows, Patch Reconciliation, BAU, CMDB Reconciliation, Threat Intel
Know If Changes Are Good or
Bad
•Inspect, Take Action, Report
•Historical Changes, Auto-Remediate, Audit Ready, Change Dashboards
Know How To Respond, Alert
and Share

48. tripwire.com | @TripwireInc