3 ms·
"5 creative malicious actors can out perform 5,000 Cyber analysts + Security orchestration, automation, and response (SOAR) programs - it's not even a compariso
by 0xBDB 3y ago
"5 creative malicious actors can out perform 5,000 Cyber analysts + Security orchestration, automation, and response (SOAR) programs - it's not even a comparison."
Hi. I'm a Principal Security Consultant, former Red Teamer and Red Team Manager.
I completely sympathize with your position but I do think it's a resource issue. A really good defense (one that can detect and react quickly) only has to win once, just like the attackers. Sure, it'll take a while to clean up the mess afterwards, but one detection is the beginning of the end if it's a good one.
You need talented senior people who are good at working together on a purple basis to build the defense to that point. Lots of people say the cybersecurity skills gap isn't real, but at that level, it is. Even Fortune 500s struggle to meet that maturity level, let alone smaller orgs.
Is it realistic to try to lift smaller orgs above that security poverty line? I dunno. I'm sort of agnostic on the future of AI, but if that works out, I think the current pain will ease significantly.