RSAC 2023
2023-04-24..2023-04-27
San Francisco, United States
[RSAC 2018 Asia Pacific & Japan, RSAC 2019 Asia Pacific & Japan, RSAC 2020 Asia Pacific & Japan, RSAC 2021, RSAC 2022, RSAC 2023, RSAC 2025 Conference]
| title | author | length |
|---|---|---|
| If It’s Smart, It’s Vulnerable | Mikko Hypponen, Cecilia Marinier | 51m |
Claim: every device that gains connectivity gains exploitable attack surface, labeled the Hypponen Law. Evidence: the original Brain virus (1986) links to an… | ||
| Preparing for and Defending OT Systems from Ransomware | Jeff Jones, Tom VanNorman | 51m |
Ransomware hits OT because uptime matters: examples include Colonial Pipeline, JBS and Rackspace and Trend Micro shows Microsoft, VMware, Fortinet and Adobe… | ||
| Purple Is the New Red - Providing the Most Value from Offensive Security | Jorge Orchilles | 41m |
Releases the Purple Team Exercise Framework v3 on GitHub and shows an operationalized flow: plan, CTI, emulate TTPs, build detections, deploy, retest, and push… | ||
| Backdoors & Breaches: Live Tabletop Exercise Demo | Jason Blanchard, John Strand | 59m |
Backdoors & Breaches is a free, brandable tabletop for incident response with 80,000 decks in circulation and a hosted web version at… | ||
| RSAC Launch Pad | Hugh Thompson, Robert Ackerman, Emily Heath, Arik Kleinstein | 46m |
Three startups pitch concrete products and early traction: a collaboration platform that integrates 70+ security point tools, knowledge stores and vendors to… | ||
| xIoT Hacking Demonstrations & Strategies to Disappoint Bad Actors | Brian Contos | 49m |
Six years of xIoT research claims huge exposure: about 50 billion devices, 50% use default passwords, and many run six‑year‑old or end‑of‑life firmware… | ||
| Point-and-Shoot Exploits to Hack Avionics, Maritime, Satellite Devices | Andrei Costin | 51m |
Presenter: Andrei Costin, CEO/co-founder, Binare.io
It is difficult to understand fully the key role various satellite and avionics systems play in our daily… | ||
| Software Supply Chain: Panel on Threat Intel, Trends, Mitigation Strategies | Jossef Harush Kadouri, Karine Ben-Simhon, Nir Peleg, Idan Wiener, Omer Yaron | 50m |
Panelists claim attackers shift upstream for big ROI — SolarWinds hits ~18,000 orgs, 3CX affects many customers — and urge treating a malicious package as a… | ||
| Breach Data and the Dark Web | Joseph Mlodzianowski | 35m |
Examines a 2022 Shanghai National Police compromise where threat actor ChinaDan posts 22 terabytes containing roughly 1 billion records with names, addresses… | ||
| Increasing Security ROI with Adversary Simulation and Purple Teaming | Jonathan Baker, Abhijith B R, Daniel DeCloss, Jorge Orchilles | 53m |
Panelists argue that adversary emulation mimics documented threat actors while simulation/red teaming mixes novel TTPs, and purple teaming is the collaborative… | ||
| Improving OT Network and Host Baselines to Secure Critical Infrastructure | Dan Gunter, Gabe Weaver | 39m |
Proposes building micro-baselines that match observable network and host artifacts to physical events by parsing PCAP payloads and protocol fields (DNP3, IEC… | ||
| Protecting the Organization: The Psychology of Social Engineering | Rachael Tubbs | 35m |
Claims that social engineering underlies 98% of attacks and cites the FBI 2018 figures of 26,379 victims and about $50 billion in losses, then maps a six‑part… | ||
| FAA: More Than Just a Regulator | Steve Luczynski, Hector Morales | 51m |
FAA describes concrete moves: it treats the National Airspace System as critical infrastructure, runs internal pen testing and vulnerability triage, and pilots… | ||
| Tales from the Breach - A Crash Course in Modern Adversaries | Jason Haddix | 50m |
Presenter: Jason Haddix, CISO, BuddoBot
In 2022, Lapsus$ breached my well-funded, security product rich, and contentious staffed organization driving me to… | ||
| Dressing Adversary Emulation in Business Attire: Outcomes and Successes | Jamie Williams | 34m |
Presenter: Jamie Williams, Principal Adversary Emulation Engineer, The MITRE Corporation
We very often focus on the technical execution of adversary… | ||
| Food for Thought: Safer Models For Our Most Vital Critical Infrastructure | Joshua Corman | 49m |
Presenter: Joshua Corman, Vice President, Cyber Safety Strategy, Claroty
When everything is critical, nothing is. The 16 Sector, stove-piped model for… | ||
| nothing matches | ||