Keynote: Devaluing Attack: Disincentivizing Threats Against The Next Billion Devices
summary
Argues that defenders should reduce value to attackers instead of only raising attack cost, demonstrating concrete tools: encryption and tokenization (mobile payments use device account numbers), containment and immutability (verified boot, containers), and flux and speed (evergreen browsers, DevOps). Cites surprising scale figures—about 3 billion two‑factor cryptographic devices in use, the $81M Bangladesh Fed electronic heist, and a projected 50 billion IoT devices—to show these approaches scale where a tenfold security‑spend model fails.
AI-written summary · about
chapters (13)
- 0:00Opening and welcome
- 2:28Keynote introduction
- 4:48The case for devaluation
- 7:15Lessons from bank history
- 11:25Modern economic perspective
- 14:16Pitfalls of defensive scaling
- 19:49Strategies for devaluing
- 26:35Flux and diversity
- 32:43Real-world security successes
- 40:31The Android ecosystem
- 45:59Security in devops
- 48:08Securing the internet of things
- 53:14Q&A and closing
related talks
42mKeynote: How much security is too much?
18mKeynote
46mKeynote: The Moral Imperatives and Challenges for Modern Application Security
20mKeynote: Outsmarting IoT Defense: The Hacker's Perspective
45mSecuring The Future
05mEnterprise security: A new hope
01h 00mKeynote - Our Kryptonite: A Defendable Internet
52mPhilosophizing Security In A "Mobile-First" World