How to Utilize Your Red Team for Privacy
summary
Meta runs a dedicated privacy red team that applies adversarial testing to data flows, using the open‑source Privacy Adversarial Framework and an internal weakness catalog to map attacks. Operations split into campaign‑style privacy adversary emulation and scoped product compromise test pen‑tests, run with a trusted internal blue‑team liaison and legal oversight, using synthetic data, rules of engagement, and working with anti‑scraping to validate findings across the Pyramid of pain and build detections.
AI-written summary · about
chapters (9)
- 0:00Introduction
- 2:03Identifying adversaries
- 3:59Frameworks and strategy
- 5:22Operational planning
- 7:34Scoping operations
- 8:38Legal and safety
- 10:19Analyzing findings
- 12:09Metrics and outcomes
- 15:20Key takeaways
related talks
49mHow to Kick Off Privacy Engineering Within a Security Team
40mKnow Thy Enemy: The Taxonomies That Meta Uses to Map the Offensive Privacy Space
33mBuilding Red Team Capability
12mIntroduction To Red Team Tooling And Opsec
39mColorful AppSec - Red, Blue, or Purple?
40mFantastic Red-Team Attacks and How to Find Them
41mPurple Is the New Red - Providing the Most Value from Offensive Security
53mIncreasing Security ROI with Adversary Simulation and Purple Teaming