The Pyramid of Protection: Rethinking Layered Security
summary
Ben Johnson outlines a security architecture framed as a "pyramid of capabilities" rather than a stack of discrete technology categories, guiding how organizations should rebuild or upgrade programs. The talk emphasizes combining human analysts with automated tools (uniting man and machine) and prioritizing efficiency to achieve more with fewer resources.
AI-written summary · about
chapters (10)
- 0:00Intro
- 1:00What is today's goal?
- 1:19Quick Background Check
- 5:46CURRENT USAGE OF TIME
- 9:05HARVESTING ALERTS (FARMING)
- 9:35VISIBILITY: RELATIONSHIPS MATTER
- 12:25ORCHESTRATION IS ESSENTIAL
- 14:11REMEMBER THESE GUYS? HUNTING?
- 16:52COMPROMISE IS INEVITABLE
- 18:05Pyramid of Human Time
related talks
46mThe Swiss Cheese Security Pattern
17mSecurity 101: The Critical Need to Go Back to the Basics
51mThinking Differently About Security
43mSecurity By Design
22mLayered Approach of API Security Strategies and its Business Impact
49mThe Security Testing Pyramid for Developers
16mDesigning Holistic Security Programs
01h 00mLayered Threat Modeling: An Architectural Approach