Security and Risks
summary
Gives concrete metrics and pragmatic fixes: defines Mega breaches as >10M records and cites eight in 2013 versus one in 2012 — a 700% increase — and daily attack counts (190k → 464k → 570k). Recommends hands‑on practices: capture the flag quarterly, bcrypt and Brute Force detection, two‑factor (Duo), risk matrices with an Excel template, logging rules, recovery testing, and notes commoditized attacks — “rent a botnet for $2/hour” — plus when simple code mistakes cost real money.
AI-written summary · about
chapters (12)
- 0:00dot Scale Alison Gianotto
- 4:17DEC 2013: TARGET EXPOSED CUSTOMER DATA, DEBIT/ CREDIT CARD NUMBERS, PINS IMPACTED: 110 MILLION USERS
- 8:44CONFIDENTIALITY IS A SET OF RULES THAT LIMITS ACCESS TO INFORMATION
- 11:36INTEGRITY IS THE ASSURANCE THAT THE INFORMATION IS TRUSTWORTHY & ACCURATE.
- 12:12AVAILABILITY IS A GUARANTEE OF READY ACCESS TO THE INFO BY AUTHORIZED PEOPLE.
- 15:45CAPTURE ALL THE FLAGS!
- 18:35RISK MATRIX FOR EVERY MAJOR PROJECT OR PRODUCT.
- 18:53KEEP YOUR SYSTEMS AS SIMPLE AS POSSIBLE.
- 20:03ONLY COLLECT THE DATA YOU ABSOLUTELY NEED.
- 20:22IMPLEMENT TWO-FACTOR AUTHENTICATION. IT'S EASIER THAN YOU THINK.
- 20:54LEVERAGE BUILT-IN VALIDATION/SANITIZATION FROM FRAMEWORKS.
- 21:10PAY ATTENTION TO YOUR ALERTS.
related talks
22mSecurity and Risks
28mBreaches Are Everywhere; What's a Good Security Leader to Do
22mCybersecurity: The Challenge of Our Decade
26mThe Risky Business of Risk Illiteracy (Sean Juroviesky)
46mBreaches Are Everywhere. What’s A Good Security Leader To Do?!
57mLessons From Billions of Breached Records
33mLearning from Past Security Breaches: Strengthening AppSec Efforts and Focus
40mData Breaches: Barbarians in the Throne Room