Lean Security for Small or Medium Sized Business
summary
A framework for prioritizing and implementing affordable security for small and medium businesses, focused on prevention, limitation, detection and response. Uses a common SMB scenario to show concrete, low-cost techniques and a decision process to turn limited security resources into effective protections. Technologies and contexts discussed include web applications, web services, networks, mobile apps and cloud systems as typical SMB assets.
AI-written summary · about
chapters (26)
- 0:00Start
- 0:23Speaker Introduction
- 3:40Inspirations
- 3:57Simplify the problem
- 5:05Framework
- 6:07Infrastructure Security - Prevention
- 9:07Carte Blanche Access
- 12:19Infrastructure Security - Limitation
- 14:50Infrastructure Security - Detection
- 16:28Infrastructure Security Detection
- 18:01Infrastructure Security - Response
- 19:21Common Network Intrusion Scenario
- 22:20Real Life Example - Codespaces
- 23:35Codespaces - The exploit chain
- 24:23Infrastructure Security Takeaways
- 25:03Application Security - Basic Prevention
- 26:15Protect your secrets!
- 26:48Application Security - Prevention
- 28:33Application Security - Limitation
- 31:07Application Security - Detection
- 33:30Application Security - Response
- 34:08Interlude
- 36:22Snapchat incident
- 37:51Snapchat & FTC Settlement
- 38:55Application Security Takeaways
- 39:20Questions?
related talks
24mCybersecurity Awareness: Small & Medium Enterprises (SMEs)
47mFuture Proofing SMBs for the Evolving Global Compliance Landscape
33mSecurity on a Shoestring: A Low-Budget Security Revival Tour (Jared Casner)
40mIn the Crosshairs: The State of Security in SLTT and SMB Organizations
30mEffective security on a tight budget
01h 04mShifting Security Everywhere
27mSmall Company, Big Threats: Cybersecurity for the Rest of Us
12mAI Risk Assessment for Cloud-Native SMBs