Thinking Differently About Security
summary
Argues for concrete shifts: build resilient infrastructure instead of hiring more patchers, automate situational awareness with standards like security content automation protocol, and teach secure development across curricula. Gives striking metrics—87% found internally, 3% by researchers, 10% by customers—and notes attack-surface realities (wireless access turns a handful of operators into a billion potential entry points). Proposes self-aware, defensive components and pragmatic prioritization of scarce engineering resources.
AI-written summary · about
chapters (18)
- 0:00Intro
- 1:10Proofpoint
- 1:21Why do anything differently
- 5:17How do you speak differently
- 11:50Purity vs pragmatism
- 14:57Systemic risk
- 23:15Informationcentric
- 24:52Rorkes Drift
- 27:41Off the Shelf
- 30:09Thinking Differently
- 31:02Who We Build
- 33:41Better Cyber Engineers
- 35:29Build Differently
- 38:20Situational Awareness
- 39:26Sim Vendors
- 41:20Search Destroy
- 42:07Agility
- 44:42Summary
