2020-011-Alyssa miller, deep fakes, threatmodeling for Devops environments, and virtual conferences
BrakeSec Education Podcast · Bryan Brake
Audio is streamed directly from the publisher (traffic.libsyn.com) as published in their RSS feed. Play Podcasts does not host this file. Rights-holders can request removal through the copyright & takedown page.
Show Notes
https://twitter.com/AlyssaM_InfoSec/status/1159877471161839617?s=19
Looking forward to sharing my vision for ending the 60 year cycle of bad defense strategies in #infosec and my challenge to think about security in a more effective way. https://sched.co/TAqU
#DianaInitiative2019 #cdwsocial
1961 - MIT - CTSS - https://en.wikipedia.org/wiki/Compatible_Time-Sharing_System
Egg, coconut, brick ( my example of security --brbr)
Start with critical assets
Layer outward, not perimeter in.
Medieval castles
Create the keep, build out from that
Active defenses
Dover Castle - https://en.wikipedia.org/wiki/Dover_Castle#/media/File:1_dover_castle_aerial_panorama_2017.jpg
Detection defenses - watchguards
Mitigation defenses - moats - give time/space to respond (network segmentation)
Active countermeasures - knights/archers/cannons
DeepFake technology
Election year
Spoke at RSA
Business threat?
"Outsider trading"
"Video of Elon talking about problems - fake…"
Stocks tank - short
https://www.vice.com/en_us/article/ywyxex/deepfake-of-mark-zuckerberg-facebook-fake-video-policy
Could it be done strategically to destabilize things
Extort business leaders
Fake videos used to extort
Still difficult to create
What's the hurdles stopping it from being mainstream?
Huge render farms?
https://www.youtube.com/watch?v=18LN7VQM1aw - deepfake Sharon Stone/ Steve Buscemi
Threat modeling in devSecOps
Agile env needs to be quick, fast, and
Build it into user stories
Shostack's method is a bit weighty
How do we implement that in such a way to make dev want to do them?
Organizing Virtual cons
https://Allthetalks.online - April 15
24 hour conference for charity
Talks, followed by interactive channels, community generation
Virtual Lobbycon
Comedian
CFP is open 01 April 2020
Sticker swap!
Bsides Atlanta
27-29 March
https://bsidesatl.org/ - All virtual this weekend!
Infosec Oasis
https://Infosecoasis.com - 18 April
https://mashable.com/article/zoom-conference-call-work-from-home-privacy-concerns/
Check out our Store on Teepub! https://brakesec.com/store
Join us on our #Slack Channel! Send a request to @brakesec on Twitter or email [email protected]
#Brakesec Store!:https://www.teepublic.com/user/bdspodcast
#Spotify: https://brakesec.com/spotifyBDS #Pandora: https://pandora.app.link/p9AvwdTpT3
#RSS: https://brakesec.com/BrakesecRSS
#Youtube Channel: http://www.youtube.com/c/BDSPodcast
#iTunes Store Link: https://brakesec.com/BDSiTunes
#Google Play Store: https://brakesec.com/BDS-GooglePlay
Our main site: https://brakesec.com/bdswebsite
#iHeartRadio App: https://brakesec.com/iHeartBrakesec
#SoundCloud: https://brakesec.com/SoundcloudBrakesec
Comments, Questions, Feedback: [email protected]
Support Brakeing Down Security Podcast by using our #Paypal: https://brakesec.com/PaypalBDS OR our #Patreon
https://brakesec.com/BDSPatreon
#Twitter: @brakesec @boettcherpwned @bryanbrake @infosystir
#Player.FM : https://brakesec.com/BDS-PlayerFM
#Stitcher Network: https://brakesec.com/BrakeSecStitcher
#TuneIn Radio App: https://brakesec.com/TuneInBrakesec