Diana Initiative 2025-Roxie Davis-Cyber Werewolves: Emulating the Enemy Before the Full Moon Rises
Provides diana Initiative 2025-Roxie Davis-Cyber Werewolves: Emulating the Enemy Before the Full Moon Rises and evaluates key implications for security practitioners.
Summary
Overview: Roxie Davis presents at the Diana Initiative on "Cyber Werewolves," using the social deduction game metaphor to improve threat intelligence delivery to operational security teams.
Key Topics: 1987 werewolf/villager research on deception detection; mapping APT actors to werewolf roles; intelligence levels from strategic to tactical; and making intelligence actionable for SOC and IR teams.
Technical Details: Davis argues intelligence reports must be immediately actionable for operational teams rather than requiring analysts to extract relevant details. She compares ineffective intelligence to villagers ignoring werewolf warnings.
Takeaways: Threat intelligence fails when operational teams cannot immediately act on it. Intelligence producers should deliver tactical, ready-to-use findings rather than raw data requiring further analysis.
Related talks
The Diana Initiative 2025·35 min
Diana Initiative 2025-Farah Hawa-From Mindless Scrolling to Meaningful Discovery: Finding Security..
Discusses diana Initiative 2025-Farah Hawa-From Mindless Scrolling to Meaningful Discovery: Finding Security and evaluates key implications for security practitioners.
The Diana Initiative 2025·42 min
Demonstrates diana Initiative 2025-HD Moore, Nicole Schwartz-Forging Strong Cyber Communities in Uncertain Times and evaluates key implications for security practitioners.
The Diana Initiative 2025·43 min
Investigates diana Initiative 2025-Harriet Farlow-Will the Terminator imprison practitioners, or will threat actors and evaluates key implications for security practitioners.