Upgrade to Pro — share decks privately, control downloads, hide ads and more …
Sign up for free

BSidesSanFrancisco2011 - Misdirection: The Rise...

Sponsored · SiteGround - Reliable hosting with speed, security, and support you can count on. →
Avatar for Brett Hardin Brett Hardin
February 14, 2011
Technology
270
1

BSidesSanFrancisco2011 - Misdirection: The Rise and Fall and Rise of Regulatory Compliance

Avatar for Brett Hardin

Brett Hardin

February 14, 2011

More Decks by Brett Hardin

See All by Brett Hardin
Penetration Testing is Stupid - BsidesSF 2013
Avatar for Brett Hardin bretthardin
2
2.3k
Building Your House on Sand
Avatar for Brett Hardin bretthardin
2
1.5k
Bad Version of Builders vs. Breakers
Avatar for Brett Hardin bretthardin
1
98
Builders vs. Breakers - AppSec 2012
Avatar for Brett Hardin bretthardin
2
1.5k
Security the Wrong Way
Avatar for Brett Hardin bretthardin
2
270
Security? Who Cares! - Privacy is Dead
Avatar for Brett Hardin bretthardin
1
220
OWASP - Top 10
Avatar for Brett Hardin bretthardin
0
1.2k

Other Decks in Technology

See All in Technology
Claude for Google Workspaces ポン出し/claude-for-google-workspace-slide-conversion
Avatar for emi emiki
0
13k
AI時代、つくる力を自分たちの手に。 ──電通×KAG、アジャイルとAI駆動開発で挑む開発の変革
Avatar for yuukiyo yuukiyo
3
380
AWS DevOps Agentはどこまで任せられるか 〜機能の現在地と、機能拡張の実践〜
Avatar for nyankotaro nyankotaro
0
240
Vue.jsのGitHubから学ぶ意思決定
Avatar for Yuto Nagai(Future) yut0naga1_fa
1
240
Agent × Maestro で始める モバイル E2E　端末準備からテスト実行・結果確認まで
Avatar for SansanTech sansantech
PRO
0
210
AIエージェント時代、Kaggleにどう取り組むか
Avatar for Naoya Takashima takanao
1
170
これだけは抑えておきたい！後悔しない re:Invent の過ごし方 / AWS re:Invent 2026 prestudy
Avatar for Masanori Yamaguchi kinunori
2
340
生成AI時代、PMは事業責任者に進化するともっと面白い〜PMだからこそ事業構造を動かせる時代に〜
Avatar for KAKEHASHI kakehashi
PRO
0
860
顧客価値を追いかけたら、プライシングにたどり着いた
Avatar for SansanTech sansantech
PRO
2
1k
CTO Night｜NotionのAIエージェントとFDE
Avatar for Kazuki Hayakawa kzkhykw1991
0
320
Teaching Python with three kinds of AI
Avatar for Reuven M. Lerner reuven
0
120
AI秘書と毎日働くのはもう当たり前。開発以外の業務に足りない機能をどう埋める？
Avatar for みのるん minorun365
PRO
2
1.7k

Featured

See All Featured
RailsConf & Balkan Ruby 2019: The Past, Present, and Future of Rails at GitHub
Avatar for Eileen M. Uchitelle eileencodes
141
35k
Technical Leadership for Architectural Decision Making
Avatar for Kenny Baas-Schwegler baasie
3
610
How to train your dragon (web standard)
Avatar for Monica Dinculescu notwaldorf
96
6.9k
How To Speak Unicorn (iThemes Webinar)
Avatar for Michelle Schulp Hunt marktimemedia
1
610
CSS Pre-Processors: Stylus, Less & Sass
Avatar for Bermon Painter bermonpainter
360
31k
<Decoding/> the Language of Devs - We Love SEO 2024
Avatar for Nikki Halliwell nikkihalliwell
1
360
Optimizing for Happiness
Avatar for Tom Preston-Werner mojombo
378
71k
Lightning Talk: Beautiful Slides for Beginners
Avatar for Ines Montani inesmontani
PRO
2
740
A designer walks into a library…
Avatar for Paul Jervis Heath pauljervisheath
211
25k
How to audit for AI Accessibility on your Front & Back End
Avatar for davetheseo davetheseo
0
610
The Organizational Zoo: Understanding Human Behavior Agility Through Metaphoric Constructive Conversations (based on the works of Arthur Shelley, Ph.D)
Avatar for Dr. Kim W Petersen kimpetersen
PRO
0
510
Evolving SEO for Evolving Search Engines
Avatar for Ryan Jones ryanjones
0
330

Transcript

  1. Being Sneaky About Security and Regulations - OR - "Misdirection:

    The Rise and Fall and Rise of Regulatory Compliance" Brett Hardin and Mike Dahn

  2. Who the Hell Are you Two? Mike Dahn @MikD Payment

    Security Guy Brett Hardin @MiscSecurity Application Fixer Author: •  Hacking: The Next Generation •  SpotTheVuln.com •  MiscSecurity.com
  3. None

  4. How Do Regulatory Rules Get Made and The Goals of

    Compliance

  5. Stop Hitting Yourself

  6. None
  7. None
  8. None

  9. Immunization

  10. None
  11. None

  12. Transition.

  13. Black Swans & Data Breaches

  14. None

  15. Real Costs The Placebo Effect of Fear VS.

  16. None
  17. None

  18. Don't make Compliance the End Goal

  19. Transition.

  20. None

  21. Do not focus on the finger or you will miss

    all that heavenly glory [of Regulatory Compliance] Lee (Bruce Lee) Enter the Dragon
  22. None
  23. None
  24. None
  25. None

  26. CISSP

  27. None

  28. Compliance != Security

  29. Out of the Box

  30. THE END