Attacker Economics and How to Beat the Adversary at Their Own Game

Last year saw the growth of ransomware trends — from supply chain attacks, double extortion, and ransomware-as-a-service (RaaS), organizations were seemingly under constant attack. The escalation of these types of attacks were predominantly driven by the cost-benefit of limited attacker investment, in both time and resources, versus the significant financial opportunity. Furthermore, these attackers are becoming more innovative, automated, and sophisticated in their attacks, reducing their costs even further. How CISOs prepare and respond to these types of attacks can flip this cost-dynamic, making it more expensive and less lucrative for the attackers, and reducing damage for the CISO’s organization. In this session, Derek Krein, SafeBreach Security Services Director, will discuss: • The motivations and return-on-investment of cyber attacks • How CISOs may be inadvertently 'opening the door' to an attack • How CISOs can level the playing field or flip the cost dynamic against an attacker • How CISOs should respond when they have been attacked via ransomware and infiltrated