Enterprise security: A new hope
summary
Claim: corporate security is failing despite huge spending, and offensive teams win mostly because defenses are under-resourced and assumptions are wrong. Evidence includes repeated successful pen tests and social engineering, the discovery of DVI adapter with ARM and 2GB RAM, pervasive embedded computers like monitors running x86, and even $0.20 SD cards with processors that can be backdoored. Presents an expanding attack surface as the core problem and points toward emergent engineering practices as the realistic path to improvement.
AI-written summary · about
chapters (8)
- 0:00Intro
- 0:35Signs were all around us
- 1:10Security teams felt a little smug
- 1:40We were geniuses
- 2:00Hope isnt a strategy
- 2:20Brian Snow
- 3:00Things have only gotten worse
- 3:30Conclusion
