Incident Response: Security After Compromise presented at AppSecUSA 2012

by Richard Bejtlich,

Tags: Security

Summary : Too often security and IT professionals believe that once a system is compromised, security has failed. In the world of Incident Response, security is just beginning. In this talk Richard Bejtlich will share thoughts on how to make incident response work for the benefit of an intrusion victim. He will talk about key ideas that show an organization can suffer compromise yet not suffer real damage, despite the worst intentions of the adversary.