Cyber Defence

UNDERSTANDING YOUR CYBER ATTACK ADVERSARY. NO MORE BLIND DEFENCE.

Security is an uphill battle, especially when you're fighting a faceless cyber attack opponent. And what if you don't understand who your opponent is. And more importantly, what they're targeting within your organisation. Is it a widespread cyber attack, or are they explicitly targeting you? Do you know where to focus your security efforts, or are you simply applying blind defence and hoping for the best?

THREAT INTELLIGENCE = BUSINESS INTELLIGENCE.

There is a dichotomy within the information security industry. Technological solutions offer defence, yet attacks are still able to perpetrate organisations. At Performanta, we recognise that technology is only one part of the security solution. To understand the full cyber attack risk to your business, you need to take a step back from technology. By combining offensive and defensive security you gain visibility of your security posture, allowing you to be in control.

PERFORMANTA'S CYBER DEFENCE TEAM USE OUR DATA SCIENCE TO APPLY THE FOLLOWING FOUR PILLARS TO THE WORK WE DO IN UNDERSTANDING AND HUNTING THE ADVERSARY:

1) Threat analysis – we conduct offensive security research to always understand the current threat landscape; understanding how the adversary thinks, what they're doing and how they're doing it.

2) Threat intelligence – using our research, including threat hunting and investigating the adversary's tools, tactics and procedures to gain early warning indicators of attacks, we produce Insightful Threat Intelligence to understand attack trends specific to you and your industry.

3) Defence research – we analyse your security technology and map it to the kill chain to see where there are still risks within your organisation.

4) Frameworks – by using our unique frameworks, we are able to provide you with insight into your level of risk, which translates to actionable business intelligence.

THE KILL CHAIN. THE MISSING TRILOGY.

The kill chain underpins our whole methodology. We have created our own kill chain model based on industry-recognised models, but importantly, we have three additional and essential components that we see missing from other models. Firstly it's technology agnostic - so it is not biased to any vendors. Secondly it fuses together offence and defence approaches – mapping your defences to each part of the kill chain. Finally, it is cyclical and therefore applies comprehensively to all attack scenarios as attackers often follow up with another attack once a potential asset is compromised.

Security by the Numbers

23%

of all breaches are from phishing

44%

of breaches are from hackers

22%

involved social media