Cyber Nottingham - October Meetup

We're excited to announce the October Nottingham Cyber Security Meetup following the success of our first two events and the continued success of our sister event in London.

---

Speaker 1: Ian Thornton-Trump (@phat_hobbit)

Intro to Cyber Threat Intelligence: The edge you need to face the threats from over the horizon

The epic cartoon G.I. Joe concluded every episode with a character saying, "Knowing Is Half the Battle." Join Ian Thornton-Trump a/k/a Phat_hobbit for an epic presentation on building a Cyber ThreatIntelligence (CTI) capability for your organisation. Information on impactful attacks is out there just waiting to be collected and used to protect your organisation from malicious actors - even at a nation state level. Ian will provide case studies and hands on examples of how to plan, collect, process, analyse, and disseminate cyber threat intelligence products for an organisation.

Bio: Ian has been a military intelligence analyst, a criminal intelligence analyst and set up CTI programs for two large enterprises here in the UK. This is the must attend presentation - because without knowing what's coming at you it makes it nearly impossible to defend yourself.

---

Speaker 2: Jon Hawes

Building a Defence Data Science capability that runs on graphs.

In 2015, someone commented on a thread about John Lambert's now famous quote ("Defenders think in lists, attackers think in graphs"), typing: "The problem is a graph, the solution is a list."

This talk shares how SecOps and Incident Response teams can approach common industry problems (e.g. too many alerts, too little context) as data science opportunities, by putting graphs at the centre of how they problem-solve, operate and automate.

First, we'll look at how teams managing Detect, Respond and Recover can quickly put data from lists they have into simple knowledge graphs, to reduce constant tactical fire-fighting (or worse, frequent arson investigations). Second, we'll look at how this opens the door to new ways of approaching detection engineering, alert design and SOC workflows that make operators' lives more productive and less frustrating. Finally, we'll look at how this data can be used to work out the right moment to push for the right change in upstream defence posture, to make security investment work as effectively as possible.

Bio: Jon runs the Detect function at Photobox Group, managing Security Operations, Incident Response and Red Teaming. He also leads the Cyber Innovation Hub, running projects to evaluate technologies and processes that support data-informed decision making, process automation and integrating security in a DevOps engineering culture. Prior to Photobox, Jon worked in various roles doing strategy, architecture, product management, project management and data analytics for companies that ranged from startups to federated multi-nationals. When he’s not doing security he’s either longboarding or writing music.

---

Would you like to speak at one of our meetups? If so, get in touch with details of the talk you'd like to give or speak to one of the organisers at one of our events.

Vendor-free Cyber Nottingham, hosted by Capital One is for anybody interested in cyber security, from novice to expert, student to seasoned professional, all are welcome.

Our mission is to create and support a community in the Nottingham and wider East Midlands area where cyber security enthusiasts can share experiences, ideas and knowledge.

We aim to meet about once every eight weeks, with two speaker/activity slots.

Provisional running order:
18:00 - Drinks, networking
18:30 - Announcements and first speaker
19:15 - Pizza, drinks, networking
20:00 - Second speaker
20:45 - Questions & Wrap-up
21:00 - Head to The Canalhouse to continue chatting
(https://www.castlerockbrewery.co.uk/pubs/the-canalhouse/)

Want to work for Capital One? Check out our current vacancies!
https://jobs.capitalone.co.uk/