12
3/14/19 1 The Dark Web’s Deep Threat Intelligence Secrets

The Dark Web’s Deep Threat Intelligence Secrets · 3/14/19 9 75% Of CVEs publicly reported online (including dark web sources) before being published to the NIST’s centralized

  • Upload
    others

  • View
    1

  • Download
    0

Embed Size (px)

Citation preview

Page 1: The Dark Web’s Deep Threat Intelligence Secrets · 3/14/19 9 75% Of CVEs publicly reported online (including dark web sources) before being published to the NIST’s centralized

3/14/19

1

The Dark Web’s Deep Threat Intelligence Secrets

Page 2: The Dark Web’s Deep Threat Intelligence Secrets · 3/14/19 9 75% Of CVEs publicly reported online (including dark web sources) before being published to the NIST’s centralized

3/14/19

2

Page 3: The Dark Web’s Deep Threat Intelligence Secrets · 3/14/19 9 75% Of CVEs publicly reported online (including dark web sources) before being published to the NIST’s centralized

3/14/19

3

Underground cybercrime

communities

Page 4: The Dark Web’s Deep Threat Intelligence Secrets · 3/14/19 9 75% Of CVEs publicly reported online (including dark web sources) before being published to the NIST’s centralized

3/14/19

4

Surface Web

Deep Web

Dark Web

Page 5: The Dark Web’s Deep Threat Intelligence Secrets · 3/14/19 9 75% Of CVEs publicly reported online (including dark web sources) before being published to the NIST’s centralized

3/14/19

5

Page 6: The Dark Web’s Deep Threat Intelligence Secrets · 3/14/19 9 75% Of CVEs publicly reported online (including dark web sources) before being published to the NIST’s centralized

3/14/19

6

USE CASE 1

Are you being talked

about on Dark Web?

Only amateurs attack machines; professionals target people

Bruce Schneier

Page 7: The Dark Web’s Deep Threat Intelligence Secrets · 3/14/19 9 75% Of CVEs publicly reported online (including dark web sources) before being published to the NIST’s centralized

3/14/19

7

Page 8: The Dark Web’s Deep Threat Intelligence Secrets · 3/14/19 9 75% Of CVEs publicly reported online (including dark web sources) before being published to the NIST’s centralized

3/14/19

8

USE CASE 2

What vulnerabilities

should you patch?

Page 9: The Dark Web’s Deep Threat Intelligence Secrets · 3/14/19 9 75% Of CVEs publicly reported online (including dark web sources) before being published to the NIST’s centralized

3/14/19

9

75%Of CVEs publicly reported online (including dark web sources) before being published to the NIST’s centralized National Vulnerability Database.

6%Of CVEs are first mentioned on dark web.

CVE Timeline: Equifax Breach

Page 10: The Dark Web’s Deep Threat Intelligence Secrets · 3/14/19 9 75% Of CVEs publicly reported online (including dark web sources) before being published to the NIST’s centralized

3/14/19

10

Page 11: The Dark Web’s Deep Threat Intelligence Secrets · 3/14/19 9 75% Of CVEs publicly reported online (including dark web sources) before being published to the NIST’s centralized

3/14/19

11

Educate yourself and your stakeholders on what the dark web is

(and isn’t!).

Swathes of what you will find down there will not relate directly

to your security at all. Find efficient ways to monitor for what

does.

Page 12: The Dark Web’s Deep Threat Intelligence Secrets · 3/14/19 9 75% Of CVEs publicly reported online (including dark web sources) before being published to the NIST’s centralized

3/14/19

12

Free Cyber DailyTrending Threat Insights Delivered Daily

www.recordedfuture.com/intel

Recorded Future