You’re Doing It Wrong! Common Security Anti Patterns
summary
Common organizational mistakes are named and rebutted with concrete fixes: stop toolapalooza! and silver‑bullet buys, adopt an outcome‑driven SOC that measures success as reduce attacker dwell time, and prioritize privileged access, high‑value assets, identity/endpoint/email controls. Recommend mapping defenses to MITRE ATT&CK and NIST CSF, simplify and automate repeat tasks, produce short technical and business summaries for IT and executives, and reframe blame as blameless collaboration so fixes actually get implemented.
AI-written summary · about
chapters (9)
- 0:00Identifying security problems
- 16:09Anti-patterns in the SOC
- 20:05The blame game in security
- 27:32Complexity vs simplicity
- 30:18Strategies for better security
- 36:16Investing budget wisely
- 38:17Identity and endpoint focus
- 41:26Collaboration and conclusion
- 46:49Q&A session
related talks
29mDevSecOps: Five Common Mistakes
01h 11m2024 Security BSides // Adam Pennington
33mLearning from Past Security Breaches: Strengthening AppSec Efforts and Focus
46mSecurity Design Anti-Patterns – Creating Awareness to Limit Security Debt
29mGet the Freaking Basics Right!
18mSecuring Organizations Through Bad Behavior
28mSecurity Basics: Burn It All and Start Over
51mThinking Differently About Security