2023 Visibility and Attack Surface Survey Results
SANS Principal Instructor Doc Blackburn and SANS Certified Instructor Mark Williams share insights and analysis from on our 2023 Visibility and Attack Surface Survey.Doc Blackburn Principal Instructor, SANSMark Williams Certified Instructor, SANS
Survey Says: Your Remediation Process Needs to be Streamlined
Almost all attackers surveyed reported going after vulnerabilities within 7 days of discovery. At the same time, defenders are struggling to meet vulnerability remediation timeframes of 30 days, or more with current processes. This is consistent with defender survey results citing that most defensive programs do not automate tasks like measurement and evaluation. In this 15-minute session, Brinqa Director of Product Marketing Alex Babar we will discuss:
• Why risk-based vulnerability prioritization is essential to ensuring the appropriate SLAs are applied to vulnerabilities
• Key aspects of the remediation process where automation can save time and reduce human error • Best practices for continuously tracking and reporting on remediation progressAlex Babar Director of Product Marketing, Brinqa
Visibility of the Attack Surface is the First Step to Protecting Networks
Today’s networks are a mix of on-premises, cloud, remote and IoT/OT resources and could all be attack surfaces used by bad actors to infiltrate networks. Visibility into the attack surface – knowing what’s connected to the network and which points are exposed to the Internet, is the first step to protecting your network.
As per the survey, attack surfaces that bad actors use most successfully are visible IP addresses form the Internet and webservers, email and DNS servers. This 15-minute session will include:
• Network tools that help provide visibility for an ever growing attack surface
• How to use DNS, DHCP, and IPAM to improve overall securitySrikrupa Srivatsan Director of Product Marketing, Infoblox
Doc and Mark will lead a conversation with sponsor representatives and answer questions from attendees.