- [Katie] Please join me in welcoming Gary Gagnon.
(clapping)
- Can you guys hear me?
Is this turned on?
Okay.
Yeah, so thank you, Katie, that was incredible.
I can't believe I actually did all that.
So, I'm the Vice President in charge
of Cyber Strategy here at MITRE
and the Chief Security Officer
and we purposely line those two up
so we can actually eat our own dog food,
try things out ourselves
inside our own enterprise
to try concepts out that we advise our government on.
I've been at MITRE since 1986 in Cyber Security,
pretty much all that time.
I had a brief time where I was outside of MITRE
most recently as the CSqO for Amazon.
It was the public service mission that MITRE had
that brought me back here to MITRE.
I'm really excited that I'm back.
This year, the vibe in this room has just been incredible.
There's been so much excitement.
The MITRE team coupled with
what you guys are doing in a partnership
has really been just outstanding.
I never would have thought in 2015
when Blake presented the ATT&CK framework to me
that we'd have this type of commitment
across the eco-system.
So I really appreciate all the enthusiasm.
Instead of talking about ATT&CK,
'cause you're going to hear a lot about ATT&CK...
I think a lot of us should be thinking
to ourselves right now
what is it that we want to get
out of this time together today?
We're certainly building a partnership.
We're building a strong partnership
where we want to continue to advance ATT&CK
and advance Threat-Informed Defense at large.
I think this is an opportunity for us
to network, socialize and really get to know each other
and try to figure out what we want to do next.
In 1999, when we released CVE,
who would've thought 20 years later
that would still be an industry standard?
Just quick statistics:
143,000 named vulnerabilities now
and we have 109 CNAs--
CV numbering authorities
companies who've agreed
to release their vulnerability information--
in 18 countries.
And so I think we're on the same trajectory here
with what we're doing with ATT&CK.
I think we've got the same type of momentum.
I really want to encourage us all
to continue the engagement
and work towards that.
So the idea behind ATT&CK was formed out of
I'll call it frustration on my point.
I was watching the security community doing
what I call "block and crouch".
We were vulnerability-based
we were blocking
and then we were crouching
till we saw the next attack coming.
And hopefully we saw it
and then we blocked it again
and then we crouched waiting
for the next one to come in.
And it was not a proactive defense at all.
And so we decided we wanted to try to change the game.
That simple high-level strategy
with a talented team underneath you,
you can actually do a lot of great things.
I think that's what's happened here with us
and now with you guys.
Getting out of the vulnerability-based
block and crouch approach
to Threat-Informed Proactive Defense
is kind of the message
that I think we've been trying to deliver.
I just got my talking point ten minutes ago.
So, again I'd encourage us all
to continue to work together
and try to stay engaged.
I think Blake did a great job this morning
in laying out the framework
in what the future's going to hold.
Rich Struse is going to do a presentation later on today
on his vision for how he sees ATT&CK
over the next few years.
We're looking for feedback in response
on what that could look like.
We've got some ideas
but we're really looking for the community
to help us shape it.
Again, by numbers, we have more than 5,000 people
who are attending this event
both here, in our watch rooms and online.
So we've got a tremendous, tremendous turnout
and again, that excitement, I think we want to take
out of this conference into the future
in what we're trying to do with ATT&CK.
So, thanks again for all your support.
Thanks for coming out.
It's kind of interesting I'm doing a welcome
a day and a half into a conference,
with a day and a half left.
But that's okay.
So, welcome and let's keep up the momentum.
Thanks.
(clapping)