How To Be Your Security Team's Best Friend
summary
Follow the actionable items not the sloganry: keep an asset database correlated with DHCP logs for asset discovery so a weird IP maps to a known host, run weekly authenticated and unauthenticated scans from inside and outside and never use full admin creds to scan, enforce separate admin and user accounts and gold images for secure defaults, remove leaked commits and rotate keys using TruffleHog to find checked in keys, and rely on Amazon Macie to monitor S3 buckets and contents rather than hoping permissions alone block leaks.
AI-written summary · about
chapters (9)
- 0:00Start
- 0:05How to be your Security Team's Best Friend
- 3:31The CIS Critical Security Controls
- 4:13Not Rocket Science
- 6:31Inventory and Control of Hardware Assets
- 10:35Software Inventory
- 11:23Inventory and Control of Software Assets
- 20:45Controlled Use of Admin Privileges
- 27:46References
related talks
27mHow to Be Your Security Team's Best Friend
01h 03mBe your own Threatbuster!
33mLearning from Past Security Breaches: Strengthening AppSec Efforts and Focus
29mGet the Freaking Basics Right!
20mStop Doing Stupid $%^--How Not to Secure Your Environment
26mThink Like an Adversary: OPSEC for Laravel Developers
48mSecurity from zero
21mSecuring a Security Company