Engaging the Next Generation of Cybersecurity Professionals: The Power of Security Zines
summary
Security Zines uses hand‑drawn comics and one‑page flyers to teach concrete bugs (SSTI, IDOR, JWT, phishing) and hosts 38 flyers and 12 zines free on the project site. Each flyer is built from scratch, taking 7–8 hours per page, and presents runnable attack demos (template RCE payloads, IDOR URL examples, JWT decoding/claims misuse). A small case study across two organizations shows the flyer/zine approach leads to fewer people getting phished in B versus a text/video course.
AI-written summary · about
chapters (13)
- 0:00Security Zines intro
- 1:26Speaker background
- 2:48What are Security Zines
- 4:13Flyers for developers
- 4:57Server Side Template Injection
- 9:50Insecure Direct Object Reference
- 12:19Understanding JWT through a Flyer
- 14:30Security for non-tech teams
- 16:59Detailed Zen on phishing attacks
- 20:47Training methods compared
- 22:53Security Zines journey
- 25:48Community and future
- 27:57Closing remarks
related talks
46mDecoding Gen Z: Cultivating Cybersecurity's Next Vanguard
31mThe Art of Cybersecurity Mastery: From Entry-Level to Staff+
52mWho Says Cybersecurity Can’t Be Creative?
35mCYBERSECURITY! The good, the bad, and the hacked
46mRSAC Security Scholar Poster Pitch-Off
24mConcrete Steps to Create a Security Culture
51mThinking Differently About Security
13mKeynote: Security Education Through the Art of Storytelling