Security and Risks
summary
Shows that breaches spike: 8 mega breaches in 2013 vs 1 in 2012 (700% increase) and daily attacks rise from 190k (2011) to 570k (2013); cites Adobe (152M) and Target (110M). Emphasizes practical fixes: implement bcrypt and brute‑force detection, run capture the flag quarterly, add monitoring, test backups, enforce least privilege, map third‑party failure modes, use two‑factor (Duo), and pay for external black‑box testing.
AI-written summary · about
chapters (12)
- 0:00dot Scale Alison Gianotto
- 4:17DEC 2013: TARGET EXPOSED CUSTOMER DATA, DEBIT/ CREDIT CARD NUMBERS, PINS IMPACTED: 110 MILLION USERS
- 8:44CONFIDENTIALITY IS A SET OF RULES THAT LIMITS ACCESS TO INFORMATION
- 11:36INTEGRITY IS THE ASSURANCE THAT THE INFORMATION IS TRUSTWORTHY & ACCURATE.
- 12:12AVAILABILITY IS A GUARANTEE OF READY ACCESS TO THE INFO BY AUTHORIZED PEOPLE.
- 15:45CAPTURE ALL THE FLAGS!
- 18:35RISK MATRIX FOR EVERY MAJOR PROJECT OR PRODUCT.
- 18:53KEEP YOUR SYSTEMS AS SIMPLE AS POSSIBLE.
- 20:03ONLY COLLECT THE DATA YOU ABSOLUTELY NEED.
- 20:22IMPLEMENT TWO-FACTOR AUTHENTICATION. IT'S EASIER THAN YOU THINK.
- 20:54LEVERAGE BUILT-IN VALIDATION/SANITIZATION FROM FRAMEWORKS.
- 21:10PAY ATTENTION TO YOUR ALERTS.
related talks
22mSecurity and Risks
28mBreaches Are Everywhere; What's a Good Security Leader to Do
46mBreaches Are Everywhere. What’s A Good Security Leader To Do?!
40mData Breaches: Barbarians in the Throne Room
22mCybersecurity: The Challenge of Our Decade
24mSecurity in 2023 and Beyond: Automation, Analytics and Architecture
26mPrivacy Issues in Big Data Processing in light of Data Breaches
26mThe Risky Business of Risk Illiteracy (Sean Juroviesky)