The Ethics and Perils of APT Research
An Unexpected Transition Into Intelligence Brokerage
Read the Paper
A discussion of the private sector’s transition from analyzing criminal malware to witnessing nation-state espionage operations –effectively embracing intelligence brokerage in all of its complexity. The organic development of a contentious nascent space resulted in misaligned incentives, half-baked production processes, and predictable validation crises playing out in front of our eyes to this day.
Watch the Talk
The accompanying VirusBulletin 2015 talk is a whirlwind overview of the paper and the complexities of selling threat intelligence at an early stage.
This paper was presented at VB2015 in Prague, Czech Republic, 2 October 2015. The top tier of the information security industry has undergone a tectonic shift. Information security researchers are increasingly involved in investigating state-sponsored or geopolitically significant threats. As a result, the affable and community-friendly information security researcher has become the misunderstood and often imperilled intelligence broker.