Navigating the Threat Matrix: The New Frontier in Ethical Hacking

Abstract: In today’s digital world, security professionals face increasingly sophisticated threats that demand extensive research and knowledge about various threats and vulnerabilities and the tools and techniques required to exploit them. The MITRE ATT&CK framework is a knowledge base of adversary strategies based on real-life observations that is globally accessible. Ethical hackers use this framework to model threats and develop effective cybersecurity methodologies. The current webinar delves into understanding the importance of the MITRE ATT&CK framework and how it acts as a cornerstone in the arsenal of ethical hackers. This webinar also explores how ethical hackers can leverage the ATT&CK framework to effectively model threats for penetration testing. Join us as we delve into the intricacies of navigating the threat matrix with the MITRE ATT&CK framework, which empowers cybersecurity professionals to stay ahead of threat actors and develop a robust security posture.
Key Takeaways: 

• Understanding the structure and purpose of the ATT&CK framework
• Real-world applications and practical usage of ATT&CK in ethical hacking scenarios
• Threat modeling based on ATT&CK to anticipate and analyze adversary tactics
• Role of MITRE in developing a proactive defense strategy
• Role of ATT&CK in analyzing the evolving landscape of novel ethical hacking approach.

Speaker:
Sergey Chubarov, Security Expert
Bio: Sergey Chubarov is a Security and Cloud Expert and Instructor with more than 15 years of experience in Microsoft Technologies.  His day-to-day job is to help companies securely embrace cloud technologies. He has certifications and recognitions such as Microsoft MVP: Security, OSCP, OSEP, eCPPT, eCPTX, Microsoft Certified Trainer, MCT Regional Lead, EC-Council’s C|EH, C|PENT, L|PT, C|CSE, C|EI, CREST C|PSA, C|RT and more.  Sergey often speaks at local and international conferences like Global Azure, DEF CON, Black Hat Europe, Wild West Hackin’ Fest, Security BSides, Workplace Ninja, Midwest Management Summit, Hack in the Box, etc.