Security Basics: Burn It All and Start Over
summary
Argues that common controls fail and lists concrete fixes: replace blacklist web filtering with blocking uncategorized sites, enforce 16-character passphrases instead of complexity rules, implement app allow‑listing by directory (allow-list directories not hashes), enable host firewalls to stop lateral movement, deploy Sysmon for detailed logs, run emulation with MITRE ATT&CK tools like Caldera and Atomic Red Team, map controls to the 20 Critical Controls, and set a tripwire disabled-admin account to catch password‑spray and lateral access.
AI-written summary · about
chapters (15)
- 0:00Intro
- 1:45Passwords
- 6:05Internet Whitelisting
- 8:57How many websites do users visit
- 10:53Application Whitelisting
- 13:29Architecture
- 16:13Firewalls
- 17:39Hostbased firewalls
- 18:58Password length
- 19:55Twofactor authentication
- 20:55Logging
- 22:52SISMON
- 24:43Eating an Elephant
- 25:41Protect Yourself
- 27:25Conclusion
related talks
50mYou’re Doing It Wrong! Common Security Anti Patterns
01h 11m2024 Security BSides // Adam Pennington
32mThe One About Controls
46mFire, Brimstone, and Bad Security Decisions
51mPlaying to lose: making sensible security decisions by assuming the worst
33mLearning from Past Security Breaches: Strengthening AppSec Efforts and Focus
41mSecurity: The world is broken and you are guilty
20mStop Doing Stupid $%^--How Not to Secure Your Environment