Page 68 - Cyber Warnings

Deploying a software defined perimeter (SDP) model to protect highly sensitive information,
such as IP, contracts, business processes, and communications, can help meet these
challenges by effectively making the infrastructure invisible.

For years many have argued that you can’t secure what you can’t see, however the reverse is
also true - you can’t hack what you can’t see!

The approach is simple – provide access to the least amount of network-based resources for
the least number of individuals, who are then granted the lowest level of privileges required to
perform their job. Access privileges are set, defined and updated by user-centric policies, which
leverage multiple aspects of server and user context, including device integrity as part of the
authentication process.

About the Author

Leo Taddeo

Chief Information Security Officer, Cyxtera Technologies

Leo Taddeo is responsible for oversight of Cyxtera's global security
operations, investigations and intelligence programs, crisis management,
and business continuity processes. He provides deep domain insight into
the techniques, tactics and procedures used by cybercriminals, to help
Cyxtera continue to develop disruptive solutions that enable customers to
defend against advanced threats and breaches.

Taddeo is the former Special Agent in Charge of the Special Operations/Cyber Division of the
FBI’s New York Office. In this role, he directed over 400 special agents and professional
support personnel conducting cyber investigations, surveillance operations, information
technology support, and crisis management. Previous responsibilities focused on FBI
international operations, including service as a Section Chief in the International Operations
Division, where he managed operations in Africa, Asia, and the Middle East.

Taddeo received a B.S. in applied physics in 1987 from Rensselaer Polytechnic Institute. After
completing his studies, Taddeo served as a tank officer in the US Marine Corps. In 1991, he
was awarded a Purple Heart and Bronze Star Medal for valor for his service in the Gulf War.
Following his service, Taddeo earned a J.D. from St. John’s University. Upon graduation, he
joined the law firm of Mound, Cotton & Wollan in New York, where he practiced in the field of
civil litigation until entering duty with the FBI.

Taddeo is a graduate of the CISO Executive Program at Carnegie Mellon University. He
maintains the Certified Information Systems Security Professional (CISSP) and GIAC Certified
Incident Handler certifications.

68 Cyber Warnings E-Magazine – May 2017 Edition
Copyright © Cyber Defense Magazine, All rights reserved worldwide