Reactive Progress and Tradecraft Innovation

Detection as Prediction

The overarching goal of a security operations program is to prevent or mitigate the impact of an attacker gaining unauthorized access to an IT environment. In service of this mission, information security professionals must make predictions about what that access can look like, what an attacker can do with that access, and how those actions can be observed.

While outright prevention via protective controls is always an admirable and necessary goal to strive for, information security (infosec) …

access attacker detection environment impact information information security information security professionals innovation mission operations predictions professionals program progress security security operations security professionals service unauthorized access