Security framework to determine whether defenders are winning

In a session at Black Hat 2024, Jason Healey, a senior research scholar at Columbia University, will present a developing framework for evaluating how successful cyber defenders are. He suggested several novel measures, such as “mean time between catastrophes” and the impact of cyberattacks. Healey emphasized the need to assess how threat actors adapt to defender behaviour and force adversaries to use more complex and costly tactics.