Preparing for Dragons: Don’t Sharpen Swords. Set Traps, Gather...
summary
Argues that survival beats flashy “dragon‑slaying”: most breaches are simple misconfiguration and legacy tech, not exotic exploits, so prioritize asset hygiene, reduce attack surface, and automate patch/tech refresh. Recommends canary tokens.org and cheap deception to detect intrusions with near‑zero false positives, outbound filtering and virtual patching to blunt exploits, cites industry data like 5 days to exploitation and 30–40% third‑party breaches and gives a 10% backup recovery failure example.
AI-written summary · about
chapters (14)
- 0:00Introduction and welcome
- 1:27Common theme with keynote
- 3:12Focus on fundamentals over hype
- 8:32Breach analysis and foundational work
- 11:20Step 1: Reduce attack surface
- 15:55Step 3: Upgrade defenses
- 18:24Step 4: Understand real threats
- 20:11Step 5: Prepare countermeasures
- 21:36Step 6: Handle breaches effectively
- 24:47Step 7: Survive and recover
- 25:50Continuous improvement
- 26:55Key takeaways and vendor distractions
- 28:23Q&A: Personal attack surface
- 29:45Q&A: Insurance payouts and root causes
related talks
33mInterview with
18mSecuring Organizations Through Bad Behavior
21mhow to reconcile high-performance hosting and innovation projects with IT security
22mDiscussion - White Hat Hacking, Session 7
51mThinking Differently About Security
33mLearning from Past Security Breaches: Strengthening AppSec Efforts and Focus
01h 11m2024 Security BSides // Adam Pennington
45mDefenders Struggle as the Adversary Continues to Break Away