The New Ground Truth for Security
summary
Claim: assume attackers have insider knowledge and move in two to three stealthy lateral hops using tools like Samba RDP and Pass‑the‑Hash rather than the old 44‑move heists. Remedy: build hypervisor-level visibility and guest introspection so encrypted East‑West traffic and VM‑to‑VM conversations are visible without backhauling or TAPs. Operate a cloud model that attaches policies to workloads, keep air-gapped validated snapshots for fast ransomware recovery, and drive detection/remediation toward 1/10/60.
AI-written summary · about
chapters (11)
- 0:00Introduction and welcome
- 1:20Mindset shift one threats
- 3:11Modern attack techniques
- 5:49Holistic security context
- 6:35AI and data blind spots
- 8:51Distributed security model
- 11:05Ransomware recovery strategies
- 12:55Defense sector insights
- 15:51CISO role evolution
- 17:57Speed in threat response
- 19:27Cloud security operating model
related talks
40mEnemy Inside the Gates: Securing the New Battleground
48mLateral Movement in the Age of Hybrid Cloud
40mZero Trust: Regaining Trust in a Remote Work World
45mDefenders Struggle as the Adversary Continues to Break Away
45mOpening Remarks, Rumblings, Ruminations, and Rants
35mDefense Through Invisibility: Zero Trust Security for the Enterprise
48mSecurity from zero
01h 11m2024 Security BSides // Adam Pennington