Perimeter-less: Engineering the future of Defense
Talkat OWASP AppSec Europe 2018 · on Friday, 2018-07-06· at 16:15· Fleming - 3rd Floor, QEII Centre Broad Sanctuary, Westminster·
summary
Claims that the castle‑and‑moat perimeter is dead and defences must be built into products and platforms, with three concrete model types offered: threat models, choice models, and behavioral/analytic models. Examples include redesigning a browser malware warning (improves safe clicks from 72% to 93%), real‑time fraud decisioning using feature engineering and logistic regression, a feedback loop that learns from labeled good and bad events, a cautionary lesson where a model trained on its own outputs “ate its tail,” and enforcement hooks that change UX in milliseconds.
AI-written summary · about
chapters (15)
- 0:00Intro
- 0:46Thank you
- 2:25Allisons background
- 6:31David and Goliath
- 17:59Attack Defend
- 20:26Choice Models
- 21:01Example
- 23:18Happy Paths
- 24:49Analytics
- 26:27Statistics
- 28:53Fraud
- 30:31Useful Signals
- 38:47Enforcement
- 42:50Takeaways
- 44:15Questions
related talks
45mFast, Ever-Evolving Defenders: The Resilience Revolution
34mSafety in Foundational Models
51mThinking Differently About Security
28mSecurity of Machine Learning
52mPhilosophizing Security In A "Mobile-First" World
01h 03m"Defense in depth": trench warfare principles
51mSecure Applications, By Design
53mRugged Reperimitersation