Invisible Security: Protecting Users with No Time to Spare
summary
Argument for shifting security burdens to automated defenses with concrete results: operating systems and apps use automatic updates to patch the majority of exploitable flaws, DNS-based filtering via protective DNS blocks malicious lookups and a National Security Agency pilot yields a reported 92% reduction in successful malware campaign opportunities, and phone facial recognition replaces weak passwords. Primary beneficiaries are the ~300,000-company Defense Industrial Base, small healthcare providers, and nontechnical consumers who lack time or money for manual security.
AI-written summary · about
chapters (15)
- 0:00Start
- 1:0750 Years of Protecting Users
- 2:28Usable Security is Necessary but Not Sufficient
- 3:28Introducing Invisible Security
- 4:46Automatic Updates
- 6:10Protective DNS
- 8:19Facial Recognition Authentication
- 9:56Attributes of Invisible Security
- 13:17Benefits to Defense Industrial Base (DIB)
- 14:45Benefits to Healthcare Providers
- 16:16Benefits to General Public
- 17:15Limits of Invisible Security
- 19:30Open Research Questions
- 21:16What Comes Next?
- 24:10Apply What You Have Learned Today
related talks
44m(in)Security is eating the world
52mPhilosophizing Security In A "Mobile-First" World
51mThinking Differently About Security
42mReal-World Security Implementations and Key Lessons
05mEnterprise security: A new hope
03mAn infinite set of security tools
42mKeynote: How much security is too much?
01h 03mWhy Don't Users Do What They are Supposed to Do? A look at users and security