BSidesSanFrancisco2011 - Misdirection: The Rise...

February 14, 2011

210

BSidesSanFrancisco2011 - Misdirection: The Rise and Fall and Rise of Regulatory Compliance

Brett Hardin

February 14, 2011

Tweet

More Decks by Brett Hardin

See All by Brett Hardin

Penetration Testing is Stupid - BsidesSF 2013

2

2.2k

Building Your House on Sand

2

1.5k

Bad Version of Builders vs. Breakers

1

65

Builders vs. Breakers - AppSec 2012

2

1.4k

Security the Wrong Way

2

240

Security? Who Cares! - Privacy is Dead

1

180

0

1k

Other Decks in Technology

See All in Technology

Classmethod AI Talks(CATs) #16 司会進行スライド(2025.02.12) / classmethod-ai-talks-aka-cats_moderator-slides_vol16_2025-02-12

0

110

スタートアップ1人目QAエンジニアが QAチームを立ち上げ、“個”からチーム、そして“組織”に成長するまで / How to set up QA team at reiwatravel

2

1.5k

全文検索+セマンティックランカー+LLMの自然文検索サ−ビスで得られた知見

2

110

トラシューアニマルになろう～開発者だからこそできる、安定したサービス作りの秘訣～

2

2k

オブザーバビリティの観点でみるAWS / AWS from observability perspective

8

1.5k

速くて安いWebサイトを作る

nishiharatsubasa

11

13k

プロダクトエンジニア構想を立ち上げ、プロダクト志向な組織への成長を続けている話 / grow into a product-oriented organization

1

220

PHPカンファレンス名古屋-テックリードの経験から学んだ設計の教訓

2

380

TAMとre:Capセキュリティ編〜拡張脅威検出デモを添えて〜

2

250

クラウドサービス事業者におけるOSS

2

860

運用しているアプリケーションのDBのリプレイスをやってみた

1

740

個人開発から公式機能へ: PlaywrightとRailsをつなげた3年の軌跡

11

3k

Featured

See All Featured

A Philosophy of Restraint

203

16k

10 Git Anti Patterns You Should be Aware of

656

59k

How To Stay Up To Date on Web Technology

790

250k

Templates, Plugins, & Blocks: Oh My! Creating the theme that thinks of everything

30

2.2k

Mobile First: as difficult as doing things right

223

9.3k

We Have a Design System, Now What?

51

7.4k

Evolution of real-time – Irina Nazarova, EuRuKo, 2024

6

550

GraphQLとの向き合い方2022年版

44

13k

[Rails World 2023 - Day 1 Closing Keynote] - The Magic of Rails

33

2.1k

Designing Experiences People Love

140

23k

Product Roadmaps are Hard

50

11k

GitHub's CSS Performance

1030

460k

Transcript

Being Sneaky About Security and Regulations - OR - "Misdirection:
The Rise and Fall and Rise of Regulatory Compliance" Brett Hardin and Mike Dahn
Who the Hell Are you Two? Mike Dahn @MikD Payment
Security Guy Brett Hardin @MiscSecurity Application Fixer Author: •  Hacking: The Next Generation •  SpotTheVuln.com •  MiscSecurity.com
None
How Do Regulatory Rules Get Made and The Goals of
Compliance
Stop Hitting Yourself
None
None
None
Immunization
None
None
Transition.
Black Swans & Data Breaches
None
Real Costs The Placebo Effect of Fear VS.
None
None
Don't make Compliance the End Goal
Transition.
None
Do not focus on the finger or you will miss
all that heavenly glory [of Regulatory Compliance] Lee (Bruce Lee) Enter the Dragon
None
None
None
None
CISSP
None
Compliance != Security
Out of the Box
THE END