The Diana Initiative 2025
2025-08-04
Las Vegas, NV, United States
as the organisers put it
We would love to see you at one of the upcoming events we are attending or hosting.
who it's for
security engineers, incident responders, security operations teams, open source maintainers, security community organizers, security program managers, students and educators
topics
adversary emulation with Atomic Red Team; AI-enhanced threat intelligence; labeled phishing awareness drills; prompt-injection and AI exploitation; open source maintainer security practices; software supply chain incident case studies; privacy for always-on robots; data export and transfer flows; network filtering at scale; security champions anti-patterns; student-run community cyber clinics; tabletop role-playing incident response
| title | author | length |
|---|---|---|
| Cyber Werewolves: Emulating the Enemy Before the Full Moon Rises | Roxie Davis | 36m |
Claim: emulating live adversaries using open sources catches the “werewolf” behavior that generic advice misses. Steps shown: pull a live hash from VirusTotal… | ||
| From Mindless Scrolling to Meaningful Discovery: Finding Security | Farah Hawa | 35m |
Shows concrete Instagram bugs found with no tools, using only the app on phone or web: an IG Lite muted reel leak (private audio unmuting) nets a base $3,500… | ||
| Forging Strong Cyber Communities in Uncertain Times | HD Moore, Nicole Schwartz | 42m |
Shows how an open-source tool becomes a people engine: Metasploit project history explains building a user base, then a commercial product (Metasploit Pro)… | ||
| Click Here Now: A Positive Way to Create Phishing Awareness | Aaron Stanely | 38m |
Argues that shame-based phishing simulations fail and instead pilots labeled drills built from real malicious emails and multimodal vectors (WhatsApp audio… | ||
| Will the Terminator imprison us, or will threat actors | Harriet Farlow | 43m |
A research collaboration with top universities measures AI safety versus security, reports 97 incidents labelled AI security out of ~3,000 safety events, and… | ||
| The Case for AI Pessimism in the Age of AI Optimism | Lindsey Allen | 36m |
Claims vs evidence: a Mayo Clinic model flags pancreatic cancer on CT scans 475 days earlier than clinical diagnosis and a Swedish model finds early breast… | ||
| Insecurity in Security: Maintainer Support in | Jess McClintock, Jess Lowe | 34m |
Concrete incidents and numbers guide decisions: Harvard Business School estimates $8.8 trillion replacement cost, Cargo averages six direct → ~60 indirect deps… | ||
| What you can do with your data | Kyle Levine | 17m |
Google already exposes 80 products through Google takeout and claims 95% < 4 hours for a full-account export; exports usually finish under seven hours. A new… | ||
| When Machines See: Navigating Privacy | Erin Relford | 15m |
Robots with always-on sensors collect thermal images, gait and facial data and upload it over networks, creating concrete vulnerabilities in data in motion and… | ||
| The Hidden Cybersecurity Crisis Facing Human Rights | Jocelyn Woolbright | 25m |
A field survey of 45 organizations surveyed finds persistent operational impact: over 35% report a cyber incident in the last three months and nearly 40%… | ||
| The Cybersecurity Goldilock Problem: Finding Just-Right | Rachana Kamat | 42m |
Claims that algorithmic thresholds outperform gut and static cutoffs by using Gaussian distributions to define low/medium/high and K‑means for tiering… | ||
| Real Clients, Real Stakes: Building Cyber Leaders in | Bianca Ionescu | 27m |
Student-run cyber clinic at UNLV runs 365 days a year, gives no-cost security assessments to small businesses, and organizes by defined officer roles (project… | ||
| Dungeons & Dragons: The security tool you | Klaus Agnoletti, Glen Sorensen | 22m |
Claims that tabletop role‑playing actually increases engagement and builds muscle memory for incident response, cites a meta‑study in Frontiers in Psychology… | ||
| Supercharging Threat Intelligence with AI | Omkar Nimbalkar, Sai Kiran Uppu | 28m |
Claims that LLMs plus MCPs can automated IOC extraction from PDFs chats and advisories, then perform MCP-backed enrichment against OSINT commercial feeds… | ||
| Enabling Security Defenders with AI | Lauren Deason | 22m |
Benchmarks measure concrete capabilities: Autopatch Bench asks an LLM agent to read OSS‑Fuzz stack traces, produce a patch that compiles in Docker, and survive… | ||
| Docs, Demos, and DevRel: The Other Side of Tech | Kennedy Toomey | 21m |
Career paths broaden beyond IC vs management: technical advocacy, curriculum development, and documentation stay deeply technical while influencing product and… | ||
| Manage Network Filtering at Scale | Tavleen Kaur | 17m |
Claims management of millions of access rules across global infrastructure, implemented as a CI/CD pipeline that renders vendor configs via Capirca, with… | ||
| LlamaFirewall: An open source guardrail system for building | Stephanie Ding | 33m |
LlamaFirewall is an open source guardrail framework that ships three concrete tools: PromptGuard 86M/22M models as a lightweight jailbreak classifier with… | ||
| Security Champion Worst Practices | Tanya Janca | 41m |
Claims that over half fail and that clear goals, measurables and sustainable pace fix most problems. Evidence comes from surveys of a few thousand people… | ||
| What's on Your Shelf (and why that matters) | Heidi Potter | 45m |
Content lays out Turngate wellorganized shelf as a concrete tool: labeled shelves (good company, good human, clarity and simplicity), explicit books and… | ||
| nothing matches | ||