By the Book: How to Thwart CyberattacksCyber Threat Alliance's Michael Daniel on Disrupting Attacker's Business Model
The Cyber Threat Alliance is developing playbooks that will show organizations how to thwart cyberattacks.
See Also: 2022 Unit 42 Incident Response Report
Cyber Threat Alliance President Michael Daniel says the playbooks will "map out how the bad guys are actually doing their business" by exposing their business models and processes and publishing "that information in a way that will enable cybersecurity vendors, individual companies, governments to ... look at the steps the bad guys have to go through and begin to disrupt those business models."
In a video interview at Information Security Media Group's recent Breach Prevention Summit in Washington, Daniel also discusses:
- The Cyber Threat Alliance's centralized cyberthreat information sharing platform in which vendor members can incorporate the threat data into their products' defensive software;
- The different motivations of criminal and nation-state attackers; and
- Lessons from recent ransomware attacks.
As Cyber Threat Alliance president, Daniel oversees the information sharing and analysis organization formed by a group of security vendors to improve defenses against advanced cyber adversaries who threaten its members and their customers. Before being named alliance president in February, Daniel served as cybersecurity coordinator and special assistant to the president for the last 4½ years of Barack Obama's presidency. He also worked in various positions in the White House Office of Management and Budget from 1995 to 2012, including as intelligence branch chief.