BSidesSanFrancisco2011 - Misdirection: The Rise...

February 14, 2011

220

BSidesSanFrancisco2011 - Misdirection: The Rise and Fall and Rise of Regulatory Compliance

Brett Hardin

February 14, 2011

Tweet

More Decks by Brett Hardin

See All by Brett Hardin

Penetration Testing is Stupid - BsidesSF 2013

2

2.2k

Building Your House on Sand

2

1.5k

Bad Version of Builders vs. Breakers

1

69

Builders vs. Breakers - AppSec 2012

2

1.5k

Security the Wrong Way

2

240

Security? Who Cares! - Privacy is Dead

1

180

0

1k

Other Decks in Technology

See All in Technology

【日本Zabbixユーザー会】LLDを理解するときの勘所〜LLDのある世界を楽しもう！〜

0

120

Ops-JAWS_Organizations小ネタ3選.pdf

2

120

Amazon S3 Tables + Amazon Athena / Apache Iceberg

0

240

50人の組織でAIエージェントを使う文化を作るためには / How to Create a Culture of Using AI Agents in a 50-Person Organization

6

3.2k

MCP Documentation Server @AI Coding Meetup #1

2

2.6k

MCPを活用した検索システムの作り方/How to implement search systems with MCP #catalks

3

810

AI Agentを「期待通り」に動かすために：設計アプローチの模索と現在地

2

390

フロントエンドも盛り上げたい！フロントエンドCBとAmplifyの軌跡

2

240

テキスト解析で見る PyCon APAC 2025 セッション＆スピーカートレンド分析

0

280

ゆるくVPC Latticeについてまとめてみたら、意外と奥深い件

2

230

20250413_湘南kaggler会_音声認識で使うのってメルス・・・なんだっけ？

1

390

NLP2025 参加報告会 / NLP2025

4

510

Featured

See All Featured

Distributed Sagas: A Protocol for Coordinating Microservices

331

21k

Into the Great Unknown - MozCon

37

1.7k

Build The Right Thing And Hit Your Dates

35

2.6k

Designing for Performance

607

69k

[RailsConf 2023 Opening Keynote] The Magic of Rails

29

9.4k

実際に使うSQLの書き方徹底解説 / pgcon21j-tutorial

178

53k

RailsConf & Balkan Ruby 2019: The Past, Present, and Future of Rails at GitHub

135

33k

Why You Should Never Use an ORM

55

9.3k

Intergalactic Javascript Robots from Outer Space

270

27k

Adopting Sorbet at Scale

76

9.3k

Fashionably flexible responsive web design (full day workshop)

407

66k

Faster Mobile Websites

306

31k

Transcript

Being Sneaky About Security and Regulations - OR - "Misdirection:
The Rise and Fall and Rise of Regulatory Compliance" Brett Hardin and Mike Dahn
Who the Hell Are you Two? Mike Dahn @MikD Payment
Security Guy Brett Hardin @MiscSecurity Application Fixer Author: •  Hacking: The Next Generation •  SpotTheVuln.com •  MiscSecurity.com
None
How Do Regulatory Rules Get Made and The Goals of
Compliance
Stop Hitting Yourself
None
None
None
Immunization
None
None
Transition.
Black Swans & Data Breaches
None
Real Costs The Placebo Effect of Fear VS.
None
None
Don't make Compliance the End Goal
Transition.
None
Do not focus on the finger or you will miss
all that heavenly glory [of Regulatory Compliance] Lee (Bruce Lee) Enter the Dragon
None
None
None
None
CISSP
None
Compliance != Security
Out of the Box
THE END