StarZero All shows Try the podcast clipper →

Oct 21, 2015 · 21m · mad

Oren Falkowitz, Area 1 Security // The Future of Cybersecurity (Hosted by FirstMark Capital)

Oren Falkowitz · 17m spoken Matt Turck · 36s spoken
0:00 / 0:00
▶ Watch on YouTube →

gold bands on the timeline = statements, start to end. Hover to read, click to jump. CC turns on captions

At DataDrivenNYC, Area 1 Security Founder and CEO Oren Falkowitz explains why traditional internal cybersecurity defenses fail and demonstrates how preemptive, global internet-scale scanning can stop targeted phishing attacks at their point of origin.

How this conversation actually went

Every chapter scored 0–10 on four independent dynamics. Hover any point for the reasoning behind the score. Matt holds 3.2% of the talking time here. How this is scored →

Matt as informed peer 0.5 Guest teaching 6.0 Guest disagreement 1.3 Matt pushing back 0.3
05100:0010:0020:000:08–6:53 · Matt as informed peer 0/10 Challenging Visual Stereotypes of Cyber Threat Actors Oren delivers a solo presentation dismantling visual tropes about hackers, noting cyber threat actors are average humans prone to predictable behavior patterns. Because the host does not speak during this monologue, host expertise and pushback are scored zero.6:53–9:59 · Matt as informed peer 0/10 Exfiltration Case Study and Point-of-Origin Strategy Oren presents an exfiltration case study detailing how 97 percent of cyber attacks begin with phishing and succeed within 90 seconds. The host remains silent throughout this presentation segment, maintaining host-side scores at zero.9:59–13:38 · Matt as informed peer 0/10 Big Data, Deep Learning, and Mapping the Internet Oren explains mapping the entire internet using a Hilbert curve and leveraging empty or dead space for detection algorithms. The host does not intervene until thanking him at the end of the presentation, keeping host scores at zero.13:38–21:20 · Matt as informed peer 2/10 Audience Q&A and Event Conclusion Host Matt Turck opens the floor for Q&A and asks Oren to give his actual company pitch, leading to questions from audience members regarding IP address blank spaces and phishing defenses. The host maintains a light facilitation role rather than challenging the guest technically.0:08–6:53 · Guest teaching 6/10 Challenging Visual Stereotypes of Cyber Threat Actors Oren delivers a solo presentation dismantling visual tropes about hackers, noting cyber threat actors are average humans prone to predictable behavior patterns. Because the host does not speak during this monologue, host expertise and pushback are scored zero.6:53–9:59 · Guest teaching 7/10 Exfiltration Case Study and Point-of-Origin Strategy Oren presents an exfiltration case study detailing how 97 percent of cyber attacks begin with phishing and succeed within 90 seconds. The host remains silent throughout this presentation segment, maintaining host-side scores at zero.9:59–13:38 · Guest teaching 6/10 Big Data, Deep Learning, and Mapping the Internet Oren explains mapping the entire internet using a Hilbert curve and leveraging empty or dead space for detection algorithms. The host does not intervene until thanking him at the end of the presentation, keeping host scores at zero.13:38–21:20 · Guest teaching 5/10 Audience Q&A and Event Conclusion Host Matt Turck opens the floor for Q&A and asks Oren to give his actual company pitch, leading to questions from audience members regarding IP address blank spaces and phishing defenses. The host maintains a light facilitation role rather than challenging the guest technically.0:08–6:53 · Guest disagreement 1/10 Challenging Visual Stereotypes of Cyber Threat Actors Oren delivers a solo presentation dismantling visual tropes about hackers, noting cyber threat actors are average humans prone to predictable behavior patterns. Because the host does not speak during this monologue, host expertise and pushback are scored zero.6:53–9:59 · Guest disagreement 1/10 Exfiltration Case Study and Point-of-Origin Strategy Oren presents an exfiltration case study detailing how 97 percent of cyber attacks begin with phishing and succeed within 90 seconds. The host remains silent throughout this presentation segment, maintaining host-side scores at zero.9:59–13:38 · Guest disagreement 1/10 Big Data, Deep Learning, and Mapping the Internet Oren explains mapping the entire internet using a Hilbert curve and leveraging empty or dead space for detection algorithms. The host does not intervene until thanking him at the end of the presentation, keeping host scores at zero.13:38–21:20 · Guest disagreement 2/10 Audience Q&A and Event Conclusion Host Matt Turck opens the floor for Q&A and asks Oren to give his actual company pitch, leading to questions from audience members regarding IP address blank spaces and phishing defenses. The host maintains a light facilitation role rather than challenging the guest technically.0:08–6:53 · Matt pushing back 0/10 Challenging Visual Stereotypes of Cyber Threat Actors Oren delivers a solo presentation dismantling visual tropes about hackers, noting cyber threat actors are average humans prone to predictable behavior patterns. Because the host does not speak during this monologue, host expertise and pushback are scored zero.6:53–9:59 · Matt pushing back 0/10 Exfiltration Case Study and Point-of-Origin Strategy Oren presents an exfiltration case study detailing how 97 percent of cyber attacks begin with phishing and succeed within 90 seconds. The host remains silent throughout this presentation segment, maintaining host-side scores at zero.9:59–13:38 · Matt pushing back 0/10 Big Data, Deep Learning, and Mapping the Internet Oren explains mapping the entire internet using a Hilbert curve and leveraging empty or dead space for detection algorithms. The host does not intervene until thanking him at the end of the presentation, keeping host scores at zero.13:38–21:20 · Matt pushing back 1/10 Audience Q&A and Event Conclusion Host Matt Turck opens the floor for Q&A and asks Oren to give his actual company pitch, leading to questions from audience members regarding IP address blank spaces and phishing defenses. The host maintains a light facilitation role rather than challenging the guest technically.

speaking balance: gold is Matt, purple is the guest (3 minute bins)

0:00 · Matt 0% · guest 100%0:00 · Matt 0% · guest 100%3:00 · Matt 0% · guest 100%3:00 · Matt 0% · guest 100%6:00 · Matt 0% · guest 100%6:00 · Matt 0% · guest 100%9:00 · Matt 0% · guest 100%9:00 · Matt 0% · guest 100%12:00 · Matt 16.6% · guest 83.4%12:00 · Matt 16.6% · guest 83.4%15:00 · Matt 1.8% · guest 98.2%15:00 · Matt 1.8% · guest 98.2%18:00 · Matt 0% · guest 100%18:00 · Matt 0% · guest 100%21:00 · Matt 46.2% · guest 53.8%21:00 · Matt 46.2% · guest 53.8%
Sharpest disagreement ▶ 16:45 Dismissing Security Awareness Training

Oren dismisses the standard industry practice of training employees to spot phishing, asserting flatly that 'That's not gonna work' while admitting he himself clicks on suspicious links.

 Hardest push from Matt ▶ 13:38 Transitioning to Company Pitch

Host Matt Turck gently calls out that Oren delivered a talk without pitching his startup, pushing him to state clearly what Area 1 Security actually does.

 Biggest teaching moment ▶ 7:40 Phishing Statistics and Rapid Exploitation

Oren educates the audience with precise data from breach reports, explaining that 97 percent of attacks start with simple phishing and achieve a 90 percent success rate in under 90 seconds.

 Matt holds his own ▶ 13:38 Host Steers Presentation to Commercial Product

Host Matt Turck demonstrates hosting authority by steering the presentation from general cyber insights into concrete business details about founding background and venture capital.
the scores for every segment, with the reasoning behind each
ChapterTopicMatt as informed peerGuest teachingGuest disagreementMatt pushing backWhy
Challenging Visual Stereotypes of Cyber Threat Actors 0610 Oren delivers a solo presentation dismantling visual tropes about hackers, noting cyber threat actors are average humans prone to predictable behavior patterns. Because the host does not speak during this monologue, host expertise and pushback are scored zero.
Exfiltration Case Study and Point-of-Origin Strategy 0710 Oren presents an exfiltration case study detailing how 97 percent of cyber attacks begin with phishing and succeed within 90 seconds. The host remains silent throughout this presentation segment, maintaining host-side scores at zero.
Big Data, Deep Learning, and Mapping the Internet 0610 Oren explains mapping the entire internet using a Hilbert curve and leveraging empty or dead space for detection algorithms. The host does not intervene until thanking him at the end of the presentation, keeping host scores at zero.
Audience Q&A and Event Conclusion 2521 Host Matt Turck opens the floor for Q&A and asks Oren to give his actual company pitch, leading to questions from audience members regarding IP address blank spaces and phishing defenses. The host maintains a light facilitation role rather than challenging the guest technically.

Statements from this episode (9)

Insight
Falkowitz: Cyber threat actors display predictable human patterns in data
“Cyber actors are no different than you and me, right? Which means that they open themselves up to a variety of predictable human patterns that can be observed in data that's very different from the way the security industry handles them today, right?”
Oren Falkowitz Oct 21, 2015 ▶ 1:49
Assertion Partly supported
Falkowitz: 97% of all cyberattacks begin with phishing
“97% of all attacks Begin with phishing.”
Oren Falkowitz Oct 21, 2015 ▶ 5:15
Assertion Partly supported
Ten phishing emails yield a 90 percent success probability within 90 seconds
“If you send just 10 messages to a company, there's a 90% success rate that one of those users is going to click, and it takes less than 92nd, is this videotape, by the way? It takes, and it takes less than 90 seconds, right, for that to happen.”
Oren Falkowitz Oct 21, 2015 ▶ 5:48
Assertion Contradicted
Falkowitz: Verizon report shows 50% phishing success by third message
“Verizon yearly does a breach, a report on all the breaches that they responded to, and they found that by the third message that gets sent, 50% of the success rate is, is already achieved, right?”
Oren Falkowitz Oct 21, 2015 ▶ 6:08
Assertion Partly supported
Falkowitz: Companies take a year to discover cyberattacks after phishing starts
“These companies are only learning about these attacks a year after this initial phishing starts, right?”
Oren Falkowitz Oct 21, 2015 ▶ 6:37
Insight
Falkowitz: Cyberattacks operate as long campaigns, not instantaneous events
“A lot of my colleagues and senior executives from the government will often talk about cyber attacks as being at speed of light or network speed, right, is, is the example. But I think the reality is when you look at the data and from what we observe that, tha…”
Oren Falkowitz Oct 21, 2015 ▶ 8:15
Assertion Not checkable as stated
Falkowitz: Area 1 Security has captured the entire internet for security
“What we've been able to do is capture the entire Internet, right, in a way that maybe you would think Google or others do, right, and to do that for a very specific sort of security purpose.”
Oren Falkowitz Oct 21, 2015 ▶ 11:43
Opinion
Falkowitz: Training employees to spot phishing attacks does not work
“So I'm gonna train all of you to spot phishing. That's not gonna work, right”
Oren Falkowitz Oct 21, 2015 ▶ 17:00
Assertion Not checkable as stated
Area 1 Data: Top spam filters miss 9 targeted phishing emails per million
“Our data shows that for every one million messages a company receives, nine of them are of a targeted and sophisticated nature that the best spam, Google spam, others are going to miss, right?”
Oren Falkowitz Oct 21, 2015 ▶ 17:23
Made with StarZero

Turn any episode into a week of clips.

This entire site, over 400 conversations transcribed, diarized, checked and made playable, runs on the StarZero media pipeline. Drop in your own episode and the podcast clipper finds the moments worth sharing, cuts them, captions them, and reframes them for every feed.

Try the podcast clipper Learn more