Live from RSA USA 2014: Talking Threat Analytics with David Bianco and Mike Reeves

During the recent RSA USA 2014 conference, FireEye Chief Security Strategist Richard Bejtlich sat down with David Bianco and Mike Reeves, two members of the FireEye threat analytics platform team. The trio discussed the Threat Analytics Platform (TAP), a new service from FireEye that blends real-time threat intelligence with data from existing SIEM and log-collection tools. By better leveraging the security alerts and event data they’re already generating data, TAP subscribers can identify threats and speed up incident response.

Whereas most intelligent analysis tools take months — if not years — to provide value, David Bianco notes that TAP can provide “extra context for events. You can find an entire story of an attack inside your systems instantly.”

Listen to the full podcast live from RSA USA 2014 here and check back soon for our next featured interview:
Richard Bejtlich Interviews David Bianco and Mike Reeves on TAP

Live from RSA USA 2014: Talking Security with Martin Brown, Chief Security Portfolio Architect at BT Security Enterprise

The excitement and buzz at the RSA Conference has everyone talking security and we are no exception. In fact, during the conference, we are gathering up industry leaders and influencers and asking them to provide their perspectives on the biggest issues in cybersecurity in 2014 for our podcast series hosted by FireEye Chief Security Strategist, Richard Bejtlich.

On the first day of the conference, Richard sat down with Martin Brown, Chief Security Portfolio Architect at BT. Richard and Martin discussed the state of the security industry, new threats on the horizon, and what role next generation security products play within these advanced cyber threats.

Brown explains how anti-virus alone is not enough for organizations and that there needs to be a blend of conventional and non-conventional solutions with skills and process to deal with targeted attacks. He uses the analogy of the footprints in the sand. Detecting the footprints, analyzing the shoe size, determining the weight of the person all can be determined with traditional products. But if you look out to sea you notice the “ripples in the water.” These rings are developing from the center point. Traditional tools can’t determine what caused the ripple effects, but newer technologies, like FireEye, can rewind time and look back to see what originally caused the ripple effect.

Listen to the full podcast and make sure to check back soon for our next featured interview:
Richard Bejtlich Interviews Martin Brown, Chief Security Portfolio Architect at BT Security Enterprise

RSA 2014: New Thinking to Narrow the Security Gap

Attacking the gap and preparing for the new frontiers in security is our focus for the 2014 RSA Conference. Around the show floor, in our booth, and in the conference tracks, you’ll hear from FireEye experts on how to address this new frontier. We’ll have updates on the latest threats from our research teams as well as live demonstrations of our new FireEye Security Platform. Find us at our booth and make sure to catch our research team presenting throughout the conference:

  • Kevin Mandia, SVP and COO for FireEye, Inc., will be presenting on the New Frontiers in Security on Tuesday, February 25 at 2:40 PM. Listen in as Kevin joins a group of industry experts to discuss how organizations must rethink their security approach in this Security Mash-Up panel session.
  • Also on Tuesday, February 25 at 1:20 PM, FireEye’s Zheng Bu Vice President, FireEye Research Labs will present Twilight of Legacy AV Models - A Different Long Tail Story. Malware has a very short lifetime. But how short is it? The findings may surprise you and while large portions of malware objects only appear once, the lifetime of malware forms a very fat-head long-tail chart. The anti-virus industry presents a reactive model, and it performs very badly on the fat-head. In this session Bu will present the study, the challenge and a possible mitigation plan.
  • On Wednesday, February 26 at 12 PM, Amanda Stewart, Malware Research Engineer at FireEye, will dig into techniques to sneak malware past Anti-Virus scanners. APT developers used this technique in a highly-targeted attack against a Fortune 50 company last year. Learn more during this must-see technical session, DLL Side-Loading: A Thorn in the Side of the Anti-Virus (AV) Industry.
  • One year after the well-known APT 1 Report, Kevin Mandia will discuss the fallout from exposing China’s espionage effort during the State of the Hack: One Year after the APT1 Report technical session. While there will be other sessions at RSA 2014 around the industry changing APT1 report, come hear directly from the source on the latest approaches attackers are using to compromise organizations and what organizations should be doing to narrow their security gap. Kevin will be speaking on Thursday, February 27 at 3:55 PM.

Don’t forget to stop by our booth located at North Expo #2813 to learn more about the newly expanded FireEye Security Platform, which integrates expertise from Mandiant and is designed to give customers one solution to go from threat alert to remediation. We’ll have live demonstrations of all the new FireEye products. In the mean time, be sure to follow @FireEye for the latest threat research and updates from the company.