|
||||||
|
This is a super high level presentation about basic threat modeling, SDL, and why a proactive stance is better than a reactive. I thought that it was fun. Threats, Threat Modeling and Analysis I’ve had even less time to myself than usual lately so let me apologize in advance for not separating and expanding on my speaking [...] The current field of information security is largely one of arcana, vagueness, arbitrary views, philosophy, mountaintop sages, a general lack of reliable data, and legions of vendors selling “best practices.” It was my hope that I could help out a little by giving a talk on my take of how our industry can best navigate during these turbulent and weird times and come toward relevance and transparency. That’s enough of a preface. Here’s the talk I gave at the Seattle NAISG meeting this month. Toorcamp was many things this year. It was fun. It was uncomfortable. Dustdevils ate things occasionally. It was turbulent due to the trouble with Levitate to get hackers to help promote their event for free or they wouldn’t fulfill their agreement to let us use the missile facility for talks and workshops. There was some excellent music. There were fine people in attendance as it took some dedication and preparation to get out there and stay there. Enough said about that. I was expecting more problems. More can be found at the Toorcamp wiki. My presentation at this Toorcon Seattle area hacker retreat was concerned itself with three main points.
I entitled my talk Hacking HR in the traditional usage of the word hack. I’ve seen a lot of usage that uses “hack” as a synonym for small tips on how to accomplish obvious tasks. This isn’t how I use the word. Anyway, let’s get started. I gave a little talk this weekend at the second Seattle Toorcon. My presentation is as follows, though as usual, I ad lib when presenting. Video may appear in the future. This is the presentation that I gave earlier this week at the ITCi Conference in San Diego, California. It was well received and fostered a lot of interesting discussion.
My recording of the event on my laptop had enough problems as to be distracting, so I gave up on using it to export a real-time presentation. Instead I will try to give my speaking points inline with my individual slides. If a good audio recording becomes available, I will kick out a video format of this presentation synched with discussion audio. I was hoping to make use of some of the new Keynote functionality, but the audio and speaking position setup was a little questionable and I was unable to see my speaking notes, so I winged it freestyle. Everything seems to go well in a free form way. Anyway. On to my presentation. |
||||||
|
Copyright © 2010 Bad Penny - All Rights Reserved |
||||||
Recent Comments