Skip to content

Protecting Against and Investigating Insider Threats

Antony Rucci

Antony Rucci explores protecting against and investigating insider threats at DEF CON 17, examining threat-intelligence and practical defenses.

Summary

Architecture and Background

Protecting Against and Investigating Insider Threats (A methodical, multi-pronged approach to protecting your organization) Antonio "Tony" Rucci Program Director, Technical Intelligence and Security Programs, Oak Ridge National Laboratory This presentation will focus on indicators of insider threats and how to detect them. I'll primarily focus on specific hiring practices to minimize risk to your organization.

Vulnerability Analysis

We'll take a deep dive look into open source searches you should be doing on the internet that may expose someone who could potentially be a liability to you and your company. I'll talk about the importance of security awareness training and education to thwart opportunistic individuals.

Exploitation and Demonstrations

And Finally, we'll wrap things up with some interesting, relevant case studies that illustrate the key indicators and what their status is today. Antonio "Tony" Rucci With more than 25 years of counterintelligence and security experience, Tony Rucci currently serves as the Program Director, Technical Intelligence and Security Programs, Global Initiatives Directorate (GID) at the Oak Ridge National Laboratory (ORNL), Department of Energy, Oak Ridge, Tennessee.

Remediation and Defensive Strategies

Prior to his employment with ORNL, Tony retired after serving 21 years as a United States Army Counterintelligence (CI) Warrant Officer / Special Agent, having served in a variety of leadership positions and conducted numerous counterintelligence, security and espionage investigations to protect our national interests, culminating with his final assignment as the Counterintelligence Operations Officer for the Director of Security, White House Military Office. Tony has attended several BH/Defcon events! For copies of the slides and additional materials please see the DEF CON 17 Archive here:

Related talks

Main Stage·42 min

Michael Ligh · Matthew Richard

Michael Ligh and Matthew Richard explores making fun of your malware at DEF CON 17, examining threat-intelligence and practical defenses.

threat-intelligencethreat-actorsgeopolitics+1

Main Stage·41 min

Matt Richard · Steven Adair

Matt Richard and Steven Adair explores 0-day gh0stnet at DEF CON 17, examining threat-intelligence and practical defenses.

threat-intelligencethreat-actorsgeopolitics+1