attack-driven defense
Talkat AppSec California 2014 · on Monday, 2014-01-27· at 10:45· Track 1, Annenberg Community Beach House, East Pacific Coast Highway·
summary
Describes concrete outcomes: a homegrown host IDS called Trip Yarn that ships endpoint command and kernel‑module data to servers for central analysis, a GitHub framework released with Facebook (Midas) and a finding that only 29% of CAs on standard builds ever see traffic, so unused CAs get removed. Java browser plugins get nuked and replaced with Java jump boxes, SSO prompts drive rapid browser updates, phishing programs reward reporters with gift cards, and live attack simulations run from realistic start points using 0‑days and iterative goals.
AI-written summary · about
chapters (6)
- 0:00Start
- 3:09Fundamentally we have three goals
- 6:01Non-Technical bucket
- 9:15Host level persistence
- 19:32Organizational level persistence
- 46:41Four keys to effective attack simulations
related talks
50mStranger Danger: Your Java Attack Surface Just Got Bigger
26mStranger Danger: Your Attack Surface Just Got Bigger
46mThe 5 Most Dangerous New Attack Techniques and How to Counter Them
40mHostile JavaScript: Attacking and Defending the Browser
46mLive hacking: Breaking into your Java web app
48mLateral Movement in the Age of Hybrid Cloud
40mA New Attack Interface in Java Applications
20mAttack & Defend, Defend & Monitor, Monitor & Respond