Justin Warner

Abstract: As security programs evolve to combat clever and persistent adversaries, they look for solutions to tip the scales of attacker and defender economics to provide the defender the advantage. They seek out cutting edge technology, focus on refining their battle tested processes, and create new disciplines within their teams to solve the problems. All the while, in an era with unprecedented ability for the private sector to gain insight into threat behavior, security programs move further from understanding the target of all their effort: threat actors.

This talk will demonstrate how intelligence analysts view intrusions/threats; discuss the challenges of bringing intelligence methods into your security program, and present a post-mortem analysis of a real-world operation against a threat actor to fully demonstrate how intelligence methodologies can aid security programs in combating threats.

Justin Warner is the Director of Applied Threat Research at Gigamon where he is responsible for leading threat intelligence, detection engineering, and security R&D. Justin is a US Air Force Academy graduate and started his career as a US Air Force Cyber Operations Officer supporting the US Intelligence Community at the National Security Agency (NSA) before transitioning to private sector. Prior to Gigamon, Justin spent three years as a red team lead where he conducted offensive operations against large multinational corporations and government entities giving him a deeper understanding of threat operations. In his “free time,” Justin volunteers doing disaster response work and spending time with his family in DC area.