Ep13: The Consolation of Threat Intel (JAG-S LABScon keynote)
Sep 21, 2024
auto_awesome
Juan Andres Guerrero-Saade is a leading expert in threat intelligence at SentinelLabs. In this engaging keynote, he tackles the challenges facing the industry, calling for a much-needed conversation about its future. Juan highlights the feelings of burnout among professionals and stresses the importance of meaningful work. He advocates for interdisciplinary collaboration and actionable insights to enhance threat intelligence. Ultimately, he urges the cybersecurity community to revitalize the field by aligning efforts with business value and fostering a spirit of engagement.
The threat intelligence industry faces disillusionment and disenfranchisement, necessitating a reevaluation of its core purpose and practices.
To revitalize threat intelligence, stakeholders must engage collaboratively to redefine its value and support data-driven, actionable insights.
Deep dives
The Crisis of Meaning in the Industry
The discussion centers around a growing sense of disillusionment within the threat intelligence (TI) community. The speaker reflects on their own experiences, noting feelings of burnout and a persistent void regarding the purpose of the work. Questions arise about the usefulness of threat intelligence outputs and whether current practices provide real value to the industry. This introspection reveals a shared struggle among peers, as many become increasingly disconnected from the core motivations behind their roles in information security.
Disenfranchisement and Control
A significant theme is the disenfranchisement felt by professionals in the threat intelligence field, where smart individuals often have little influence over key decisions. This sense of exclusion significantly contributes to feelings of frustration, as talented researchers see their vital work undervalued amid corporate restructuring. The speaker argues for the importance of regaining control over TI practices and redefining its value within the broader information security landscape. Addressing this disenfranchisement is crucial for re-establishing purpose and direction in the community.
Reframing Threat Intelligence Value
To revitalize threat intelligence, the conversation must shift toward understanding its intrinsic value and broader implications. An invitation is extended for professionals to re-engage with traditional intelligence methodologies, emphasizing data-driven insights and actionable recommendations. There is a call to action for stakeholders, including journalists and venture capitalists, to support ongoing efforts rather than perpetuate ineffective practices. By fostering collaborative dialogue and reaffirming the significance of their work, the community can reclaim its place in the evolving landscape of security.
Three Buddy Problem - Episode 13: This is a special edition of the show, featuring Juan Andres Guerrero-Saade's full keynote day remarks at LABScon2024. In this talk, Juanito addresses the current state of the threat intelligence industry, expressing a need for a difficult conversation about its direction and purpose. He discusses feelings of disenfranchisement among professionals, the void in meaningful work, and the importance of reclaiming control and value in cybersecurity. Juan emphasizes the need for researchers, journalists, and even VCs, to be the change to reinvigorate the industry and ensure its relevance and impact.
Cast: Juan Andres Guerrero-Saade (SentinelLabs). Costin Raiu and Ryan Naraine are listening to this episode.