If You Missed Suits and Spooks NY, Here It Is On Video

O'Reilly Media, the publisher of my book Inside Cyber Warfare, has produced a video compilation of our Suits and Spooks event. I'm proud to say that this is the first non-O'Reilly conference that they have produced for sale and it looks great. It doesn't include every speaker because some of the talks were under Chatham House rules, but here are the speakers that are included:

• The Top 50 Non-state Hacker Groups in the World - Christopher Ahlberg (CEO of RecordedFuture)
• Out of the Mountains: A Future of Feral Cities, Urban Systems Under Stress, and Increasing Overlaps Between the Real and Virtual Worlds - David Kilcullen (CEO of Caerus Associates)
• Emerging Bad Actors in the Virtual and Physical Worlds (Jeffrey Carr, Moderator with Dr. David Kilcullen, Jonathan Hutson, Thomas Dzieran, Aaron Weisburd, Peter Mattis, and John Scott-Railton)
• How to Survive a Surveillance-friendly Environment - Mike Janke (Co-founder, CEO of Silent Circle)
• Should Defensive Strategies be Specific to the Threat Actor or Generalized for all Threat Actors? (Jeffrey Carr, Moderator with Pierre-Marc Bureau (ESET), Derek Manky (Fortinet), Roel Schouwenberg (Kaspersky), Chris Coleman (LookingGlass), Brian Carrier (Basis Technology))
• Real-time Depiction of the Global Cyber Threat Landscape - Chris Coleman
• Icefog: Mercenary Hackers Who Focus on Supply Chain Attacks in Asia - Roel Schouwenberg
• Joseph Kony, the LRA and Elephant Poaching in Africa - Jonathan Hutson

The complete series is only $149. Here's where to order. We're going to be offering this again for Suits and Spooks DC so please let me know what you think.

Add to Cart View detail

Assumption of Breach: The New Security Paradigm

I was recently invited to participate in a closed Congressionally-mandated meeting of a dozen or more intelligence and technology experts to discuss what the research and development priorities of the U.S. Intelligence Community should be for the next 10 years. While a lot of ideas were tossed about and shot down, one of a handful that rose to the surface was the need to re-think our security paradigm from the long-standing one of trying to keep bad guys out of our networks to assuming that they're already inside. This is known in government circles as "Assumption of Breach". Debora Plunkett of the NSA's Information Assurance Directorate has said as much back in December, 2010. Price Waterhouse Coopers has been an advocate of that strategy as well. New startups are basing their entire business model on an Assumption of Breach focus. Such a strategy involves multiple new tactics but two are key: enhanced threat intelligence and how to prevent critical data from leaving your network.

My next book for O'Reilly Media "Assumption of Breach - the New Security Paradigm" will explore how we arrived at this point, the latest thinking from the U.S. Intelligence Community on this topic via interviews with former and current officials, and provide strategic advice on how companies should establish a ranking system similar to how the U.S. government classifies documents (Top Secret, Secret, Confidential, FOUO) and place appropriate security controls on their data.

Hopefully, the book will be completed and available for sale by the end of this year although the final decision on that is up to O'Reilly Media. If you'd like to stay up-to-date on how the book is progressing, when pre-orders are available, etc., just follow me on Twitter.

Add to Cart View detail

The Next Edition of "Inside Cyber Warfare" - Coming Soon*

I'm very happy to report that my publisher, O'Reilly Media, has approved an updated second edition of my book "Inside Cyber Warfare: Mapping the Cyber Underworld". I'll be spending the next three months writing three new chapters and updating four of the original ones. New content will include research in the following areas:

• A detailed examination of cyberwarfare commands by nation state, including organization and capabilities
• An operational profile of Anonymous focusing on its campaigns, strategy and tactics
• The Peoples Republic of China's use of technology transfer of IP, both overt and covert.
• The Russian Federation's heavy investment in Facebook and other social media through its politically connected Internet entrepreneurs
• Plus guest essayists and a few other surprises

I'll be using this blog to keep everyone updated as to the book's progress so be sure to subscribe.

* I modified the title of this post because while I'm hopeful that the new edition will be out this December, it's really too soon to announce a date. 

Add to Cart View detail