Responding to Cyber Attack at Machine Speed

Responding to Cyber Attack at Machine Speed

Cyber-attacks are increasing in terms of sophistication, speed and dynamics. Advanced cyber actors (and even script kiddies) are utilizing automation with adaptive tradecraft and these trends are likely to continue. To combat this we need to facilitate interoperability and integration by standardizing interfaces & protocols allowing more flexible and interoperable cyber defense components. OpenC2 is being created to standardize machine-to-machine command & control (C2) to enable cyber defense system interoperability at machine speeds. The author believes that there is an economic driver for adoption even prior to automated defense, ie that having a standard interface to perform security command & control avoids the vendor lock-in that results from today’s proprietary interfaces. The talk will begin with the problem openC2 is trying to solve, provide a review of openC2 and its use cases, and give the current status on standardization.

Presented by