Red Team SIG
Mission
Traditional security methodologies have largely been focused on prevention, aimed at eliminating vulnerabilities and thereby mitigating security breaches before they happen. Security prevention strategies and technologies are important but cannot guarantee safety from every attack. Given today’s dynamic threat landscape, it is vital to acknowledge that a breach has either already occurred or that it’s only a matter of time until it will. Red Team activities deliver end-to-end breach simulations that provide, as realistically as possible, security incidents that prepare those involved with dealing with actual breaches. The Red Team SIG provides a forum for practitioners to discuss the state of the art for tools, technologies, processes and methodologies for red team activities and to share experiences and best practices.
Overall Goals/Deliverables
We have the following goals:
- Create a lively debate among red teams world-wide
- Capture frequently used terminology and categorize the different types of red team activities
- Share Tools, Techniques and Procedures (TTPs)
- Exchange on legal assessments in various jurisdictions
- Share experiences
- Document the best practice
- Assist participants in building a red team capability
SIG Workgroups
- Tactical Group (Red Team members/leads/researchers )
- Advisory Group (Organization leads and managers seeking help to build RT program)
- Strategic Group (CISOs, Cybersecurity leadership roles only advocating Adversarial Testing)
- Collaboration Group (Experienced BT members ready to share their professional tradecraft)
Chair
Sudhanshu Shekhar Sharma
Request to Join
