Upgrade to Pro — share decks privately, control downloads, hide ads and more …
Sign up for free

BSidesSanFrancisco2011 - Misdirection: The Rise...

Sponsored · Ship Features Fearlessly Turn features on and off without deploys. Used by thousands of Ruby developers. →
Avatar for Brett Hardin Brett Hardin
February 14, 2011
Technology
260
1

BSidesSanFrancisco2011 - Misdirection: The Rise and Fall and Rise of Regulatory Compliance

Avatar for Brett Hardin

Brett Hardin

February 14, 2011

More Decks by Brett Hardin

See All by Brett Hardin
Penetration Testing is Stupid - BsidesSF 2013
Avatar for Brett Hardin bretthardin
2
2.3k
Building Your House on Sand
Avatar for Brett Hardin bretthardin
2
1.5k
Bad Version of Builders vs. Breakers
Avatar for Brett Hardin bretthardin
1
95
Builders vs. Breakers - AppSec 2012
Avatar for Brett Hardin bretthardin
2
1.5k
Security the Wrong Way
Avatar for Brett Hardin bretthardin
2
270
Security? Who Cares! - Privacy is Dead
Avatar for Brett Hardin bretthardin
1
220
OWASP - Top 10
Avatar for Brett Hardin bretthardin
0
1.1k

Other Decks in Technology

See All in Technology
Databricksメトリクスビューはじめてのもくもく会
Avatar for Takaaki Yayoi taka_aki
0
200
ミイダス株式会社 テックチームのご紹介 / MIIDAS Tech Team
Avatar for ミイダス miidas
0
150
生成AIで高い生産性を求められて、 悩み、乗り越えた話
Avatar for GO Inc. dev mot_techtalk
2
130
全社共通データ基盤をつくる。ソニーのDatabricks活用とデータガバナンス設計の裏側
Avatar for ソニー株式会社 sony
0
420
Incremental HTTP
Avatar for kazuho kazuho
5
2k
AI 時代の Azure エンジニアリング ～ 私たちは何を磨き、何を任せるのか ～
Avatar for Akira Inoue chack411
1
450
Claude起点の仕様駆動開発
Avatar for 田中 聖也 tanakaseiya
0
380
インバスケット試験対策アプリを 作って見えたAIエージェント構築 ナレッジ2選
Avatar for ShichijoYuhi shichijoyuhi
1
130
サーバーフルコンピューティング？AWS Lambda
Avatar for TomoyaIwata iwatatomoya
1
240
MCPゲートウェイを作って運用してわかったこと — Agent時代の権限管理の現在地
Avatar for k.muguruma mtpooh
10
3.1k
組み立てて楽しむ AWS Blocks 入門
Avatar for たけのこ kmiya84377
0
210
スキルを作る、その前に！複数人で使われるスキルを 作るためのプロセス
Avatar for Junki Furukawa junkifurukawa
2
300

Featured

See All Featured
First, design no harm
Avatar for Per Axbom axbom
PRO
2
1.3k
Building a Scalable Design System with Sketch
Avatar for Laura Van Doore lauravandoore
464
34k
Noah Learner - AI + Me: how we built a GSC Bulk Export data pipeline
Avatar for Tech SEO Connect techseoconnect
PRO
0
450
How to build a perfect <img>
Avatar for Jono Alderson jonoalderson
1
6.1k
How to Ace a Technical Interview
Avatar for Jacob Kaplan-Moss jacobian
280
24k
Fight the Zombie Pattern Library - RWD Summit 2016
Avatar for Marcelo Somers marcelosomers
234
18k
SEOcharity - Dark patterns in SEO and UX: How to avoid them and build a more ethical web
Avatar for Sara Fernández Carmona sarafernandez
0
300
The World Runs on Bad Software
Avatar for Brandon Keepers bkeepers
PRO
72
12k
How Software Deployment tools have changed in the past 20 years
Avatar for Geshan Manandhar geshan
2
35k
Collaborative Software Design: How to facilitate domain modelling decisions
Avatar for Kenny Baas-Schwegler baasie
1
340
Leo the Paperboy
Avatar for Maya Tellez mayatellez
10
2.3k
Effective software design: The role of men in debugging patriarchy in IT @ Voxxed Days AMS
Avatar for Kenny Baas-Schwegler baasie
1
550

Transcript

  1. Being Sneaky About Security and Regulations - OR - "Misdirection:

    The Rise and Fall and Rise of Regulatory Compliance" Brett Hardin and Mike Dahn

  2. Who the Hell Are you Two? Mike Dahn @MikD Payment

    Security Guy Brett Hardin @MiscSecurity Application Fixer Author: •  Hacking: The Next Generation •  SpotTheVuln.com •  MiscSecurity.com
  3. None

  4. How Do Regulatory Rules Get Made and The Goals of

    Compliance

  5. Stop Hitting Yourself

  6. None
  7. None
  8. None

  9. Immunization

  10. None
  11. None

  12. Transition.

  13. Black Swans & Data Breaches

  14. None

  15. Real Costs The Placebo Effect of Fear VS.

  16. None
  17. None

  18. Don't make Compliance the End Goal

  19. Transition.

  20. None

  21. Do not focus on the finger or you will miss

    all that heavenly glory [of Regulatory Compliance] Lee (Bruce Lee) Enter the Dragon
  22. None
  23. None
  24. None
  25. None

  26. CISSP

  27. None

  28. Compliance != Security

  29. Out of the Box

  30. THE END