A Their Story conversation with Sean Martin, Marco Ciappelli, and Philippe Humeau, CEO at CrowdSec
Suppose you still believe the narrative of a hooded figure with ski gloves and a crowbar attacking a company network. In that case, this may be hard to digest: Cybercrime is a business. Cybercriminals are well organized.
They share data; sell information; rent, lease, and trade tools; and market their business.
It's time to source the crowd of cyber defenders to counter this advantage.
Many organizations are spending millions, if not billions, of dollars standing up multi-layered endpoint, network, and perimeter protection systems, multi-layered cloud security solutions, and privilege-oriented identity management systems, as well as real-time security operations centers - and much, much more.
And let's not forget that the security team needs to do all of this while allowing the users to get their job done and, in the best-case scenario, not having to worry about any of this. The Cybercriminal environment doesn't have to worry about this — actually, they will try to take advantage of it. All their investments go straight into understanding their target. What technology is used to run the business, what are their weaknesses, and how can they get in and out with as much value as possible without the possibility of being caught. Cybercriminals use threat intelligence to attack. This is what they can focus on, and they use it to their advantage, each and every day.
CrowdSec is joining the good guys on this battlefield and understands that by acting together and sharing important, relevant pieces of information, we can successfully counteract organized cybercrime. CrowdSec's CTI-driven IPS objective is to automate cybersecurity threat intelligence sharing and consumption on a large scale.
How does that happen?
Through the crowd, of course.
What makes it work beyond scale?
It's all about the real-world context that the crowd experiences and shares.
There are plenty of data lakes, and CTI feeds available to determine the state of an IP address; has it been seen as malicious or not?
That's only part of the question.
How relevant are these data sets to your business? To your environment? To your risk level? Can you ingest them, make sense of them, take action from them?
Once these and many other questions are answered, captured, shared, and utilized at scale by the crowd, we can effectively become competitive against cybercrime.
Learn more about what it means to join the crowd and how all the information can benefit businesses and organizations all over the globe.
This is the value of authentic and accurate information sharing.
Note: This story contains promotional content. Learn more.
____________________________
Guest
Philippe Humeau
On Linkedin 👉https://www.linkedin.com/in/philippehumeau/
On Twitter 👉https://twitter.com/philippe_humeau