Explore the concept of "Thinking Purple" in cybersecurity through this 55-minute conference talk from Derbycon 2016. Delve into the distinctions between Red, Blue, and Purple teams, and examine the current landscape of cybersecurity practices. Learn about cooperative engagement strategies, threat simulation techniques, and adversary emulation methods. Gain insights into full-scope attack simulation and receive valuable recommendations for enhancing your organization's security posture. Discover how integrating "Purple" thinking can bridge the gap between offensive and defensive cybersecurity approaches, ultimately improving overall security effectiveness.
Overview
Syllabus
Intro
Agenda
What is Red?
What is a Blue?
What is Purple?
Current Situation
Cooperative Engagement
Threat Simulation
Adversary Emulation
Full Scope Attack Simulation
Recommendations