the dark web’s deep threat intelligence secrets · vulnerability on the web. o days to months, 7...

12
3/14/19 1 The Dark Web’s Deep Threat Intelligence Secrets

Upload: others

Post on 06-Jul-2020

2 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: The Dark Web’s Deep Threat Intelligence Secrets · vulnerability on the web. O Days to Months, 7 Median Initial assessment of the vulnerability is made available via NISrs NVD

3/14/19

1

The Dark Web’s Deep Threat Intelligence Secrets

Page 2: The Dark Web’s Deep Threat Intelligence Secrets · vulnerability on the web. O Days to Months, 7 Median Initial assessment of the vulnerability is made available via NISrs NVD

3/14/19

2

Page 3: The Dark Web’s Deep Threat Intelligence Secrets · vulnerability on the web. O Days to Months, 7 Median Initial assessment of the vulnerability is made available via NISrs NVD

3/14/19

3

Underground cybercrime

communities

Page 4: The Dark Web’s Deep Threat Intelligence Secrets · vulnerability on the web. O Days to Months, 7 Median Initial assessment of the vulnerability is made available via NISrs NVD

3/14/19

4

Surface Web

Deep Web

Dark Web

Page 5: The Dark Web’s Deep Threat Intelligence Secrets · vulnerability on the web. O Days to Months, 7 Median Initial assessment of the vulnerability is made available via NISrs NVD

3/14/19

5

Page 6: The Dark Web’s Deep Threat Intelligence Secrets · vulnerability on the web. O Days to Months, 7 Median Initial assessment of the vulnerability is made available via NISrs NVD

3/14/19

6

USE CASE 1

Are you being talked

about on Dark Web?

Only amateurs attack machines; professionals target people

Bruce Schneier

Page 7: The Dark Web’s Deep Threat Intelligence Secrets · vulnerability on the web. O Days to Months, 7 Median Initial assessment of the vulnerability is made available via NISrs NVD

3/14/19

7

Page 8: The Dark Web’s Deep Threat Intelligence Secrets · vulnerability on the web. O Days to Months, 7 Median Initial assessment of the vulnerability is made available via NISrs NVD

3/14/19

8

USE CASE 2

What vulnerabilities

should you patch?

Page 9: The Dark Web’s Deep Threat Intelligence Secrets · vulnerability on the web. O Days to Months, 7 Median Initial assessment of the vulnerability is made available via NISrs NVD

3/14/19

9

75%Of CVEs publicly reported online (including dark web sources) before being published to the NIST’s centralized National Vulnerability Database.

6%Of CVEs are first mentioned on dark web.

CVE Timeline: Equifax Breach

Page 10: The Dark Web’s Deep Threat Intelligence Secrets · vulnerability on the web. O Days to Months, 7 Median Initial assessment of the vulnerability is made available via NISrs NVD

3/14/19

10

Page 11: The Dark Web’s Deep Threat Intelligence Secrets · vulnerability on the web. O Days to Months, 7 Median Initial assessment of the vulnerability is made available via NISrs NVD

3/14/19

11

Educate yourself and your stakeholders on what the dark web is

(and isn’t!).

Swathes of what you will find down there will not relate directly

to your security at all. Find efficient ways to monitor for what

does.

Page 12: The Dark Web’s Deep Threat Intelligence Secrets · vulnerability on the web. O Days to Months, 7 Median Initial assessment of the vulnerability is made available via NISrs NVD

3/14/19

12

Free Cyber DailyTrending Threat Insights Delivered Daily

www.recordedfuture.com/intel

Recorded Future