Seeking Indicators of BehaviorSam Curry of Cybereason on Making the Shift
For many cybercrime investigators, it's all about finding indicators of compromise - evidence a crime has been committed. Sam Curry of Cybereason describes the value of making a shift to cataloging indicators of behavior.
See Also: The Power of Actionable Threat Intel
In a video interview at Information Security Media Group's recent Cybersecurity Summit in New York, Curry discusses:
- Why tracking indicators of compromise is not enough;
- How to detect indicators of behavior;
- The tools and skills necessary for this shift.
Curry brings over 25 years of experience in security with a focus on deep technology and solving practitioner problems to his role as Cybereason's CSO. He was previously CTO and CSO at Arbor Networks, senior vice president of engineering and CISO at Microstrategy and held a number of significant senior roles at RSA, the Security Division of EMC. He has done work on national defense, public policy and establishing standards and protocols in security. He has also held a number of senior roles at McAfee and CA, founded two startups and is on three security organizations' boards.