Securing Organizations Through Bad Behavior
summary
Organizations face mostly simple, opportunistic attacks that target passwords, misconfigured internet-facing systems, and human helpers rather than exotic zero days; defenders need three concrete shifts: stop thinking like a villain by enumerating exact assets an attacker would steal, create a safe place to break things — isolated testbeds and chaos spaces to run destructive experiments — and protect the kitten by hardening auth, removing stale accounts, and fixing deploy/config pipelines shown to be the common failure points.
AI-written summary · about
chapters (7)
- 0:00Introduction
- 0:45Why are we here
- 3:28Selfdefense
- 5:47Why is this hard
- 8:58Stop thinking like a villain
- 10:16Why are they here
- 13:28Be creative
related talks
50mYou’re Doing It Wrong! Common Security Anti Patterns
01h 03mBe your own Threatbuster!
05mEnterprise security: A new hope
33mLearning from Past Security Breaches: Strengthening AppSec Efforts and Focus
20mStop Doing Stupid $%^--How Not to Secure Your Environment
38mDo You Feel Secure?
51mThinking Differently About Security
20mCalcifying Crisis Readiness