Sounil Yu is the CISO and Head of Research at JupiterOne. He created the Cyber Defense Matrix and the DIE Triad, which are reshaping approaches to cybersecurity. He's a Board Member of the FAIR Institute; is a visiting fellow at GMU Scalia Law School's National Security Institute; guest lectures at Carnegie Mellon; and advises many startups. Sounil previously served as the CISO-in-Residence at YL Ventures and Chief Security Scientist at Bank of America. Sounil has over 20 granted patents and was recognized as one of the most influential people in security in 2020 by Security Magazine, Influencer of the Year in 2021 by SC Awards, a 2021 Top 10 CISO by Black Unicorn Awards, and for Lifetime Achievement in 2022 by the SANS Institute. He has an MS in Electrical Engineering from Virginia Tech and a BS in Electrical Engineering and a BA in Economics from Duke University.
Do we need to secure everything by design? Or is there a better way? A new paradigm, called the DIE Triad (which stands for Distributed, Immutable, and Ephemeral) enables us to truly be resilient and escape some of the burdens of cybersecurity.
The Cyber Defense Matrix is a simple mental model that helps explain the capabilities that are needed to build, manage, and operate a security program. This presentation will show how we can use the Matrix to organize technologies, skillsets, and processes. This enables us to understand what problems each capability can solve, what gaps exist, and what options are available to close those gaps.