Cybersecurity Secrets, Courtesy of the Russian FSB

Cybersecurity Secrets, Courtesy of the Russian FSB

Effective cybersecurity depends on understanding the threat: who is attacking a system, what tactics and techniques they are using, and what they hope to accomplish. Security professionals get these answers from a wide variety of sources, but Gregory Crabb used a particularly interesting one—the Russian FSB.

During Owl’s recent event, Elevating the Federal Cybersecurity Discussion, Mr. Crabb, former CISO of the United States Postal Service and now founder of 10-8 LLC cyber consultancy, presented an animated talk on Cybersecurity Secrets for CISOs: Courtesy of the Russian FSB.

Mr. Crabb shared compelling stories about working with an official in Russia’s national security service to track an international crime ring, and the unique insights he gained into Russian security operations and cyber threats in general.

In detailing his experiences, Mr. Crabb shared four lessons he learned from interacting with Russian intelligence and cyber criminals. These lessons have direct bearing on preventing and detecting U.S. critical infrastructure assets:

  • Influence operations are key in the Russian culture. They regularly apply techniques, tactics and procedures to control those they wish to influence (like the citizenry), and are very good at disinformation.
  • Supply chains depend on trust, but supply chains are where Russians aim many attacks. The SolarWinds attack should have come as no surprise, nor should the next attack. This reality creates massive urgency for the government to address the imperative of Zero Trust architecture. As Mr. Crabb put it, “Zero Trust can’t be applied 10 years from now. It needs to be applied yesterday.”
  • Ransomware attacks originating in Russia will continue to be a threat in the long term. The overlap between Russian businessmen, politicians and organized crime figures means that little if anything will be done to mitigate the problem at its source.
  • Risk management and security operations need to be tuned to understanding the threat. Mr. Crabb emphasized the importance of seeking out information and learning from others, then applying those learnings to our own organizations.

The full presentation is available below. To learn more about how Owl’s hardware-enforced security solutions can enhance Zero Trust architecture and protect critical assets against advanced cyber threats, contact us for a consultation today.

Insights to your Inbox

Stay informed with the latest cybersecurity news and resources.

Paul Nguyen DoD Account Director

Proven Solutions for Navy “Data Maneuverability” @ AFCEA WEST

Hi, I’m Paul Nguyen, one of the new leaders of Owl’s DoD Mission Support team. I joined Owl Cyber Defense (Owl) earlier this month, just in time to be a part of our annual corporate o...
January 31, 2024

Owl SEER Lab MiniBlog 1: CVE-2023-21093

Hello and welcome to the launch of the Owl Cyber Defense System Evaluation, Exploitation, and Research (SEER) Laboratory miniblog! This is the very first in a line of forthcoming posts. ...
September 26, 2023

Reduce Cyber Stress (at least at work) by Implementing Data Diode Enforced Segmentation

In today's digital age, cybersecurity professionals play a crucial role in ensuring the safety and security of an organization's sensitive information. With the rise of cyberattacks, it's...
April 20, 2023