Attributing Active Measures, Then and Now - SANS CTI Summit 2018

Security breaches, intrusions, exfiltration of information, and subsequent surfacing and “leaking” of compromised (and compromising) material for targeted effect is an old phenomenon. How has the internet changed this classic spy game? And how has the attribution of hack-and-leak operations evolved? Rid will present a small number of case studies to illustrate larger trends and conclusions. Thomas Rid (@RidT), Professor of Strategic Studies, Johns Hopkins University’s School of Advanced International Studies; Author, Rise of the Machines