Upgrade to Pro — share decks privately, control downloads, hide ads and more …
Sign up for free

Intro to Cybersecurity Workshop

Avatar for John Downey John Downey
July 24, 2017
Technology
170
0

Intro to Cybersecurity Workshop

Avatar for John Downey

John Downey

July 24, 2017

More Decks by John Downey

See All by John Downey
Cryptography Pitfalls at CactusCon 2019
Avatar for John Downey jtdowney
0
210
Cryptography Pitfalls at BsidesMSP 2017
Avatar for John Downey jtdowney
0
220
Cryptography Pitfalls at THOTCON 0x8
Avatar for John Downey jtdowney
0
230
Cryptography Pitfalls at ConFoo Montreal 2017
Avatar for John Downey jtdowney
1
400
Cryptography Pitfalls at BSidesPhilly 2016
Avatar for John Downey jtdowney
0
180
Cryptography Pitfalls at LASCON 2016
Avatar for John Downey jtdowney
0
240
Debugging TLS/SSL at DevOps Days Detroit 2016
Avatar for John Downey jtdowney
1
330
Debugging TLS/SSL at DevOpsDays Boston
Avatar for John Downey jtdowney
1
410
Cryptography Pitfalls at Abstractions
Avatar for John Downey jtdowney
0
160

Other Decks in Technology

See All in Technology
Devin プロモコードの受け取りと適用(2026.10.27)
Avatar for kinopee kinopeee
1
820
Agent Loopを組み込んだ アンビエントなAI機能を実現する / Ambient AI fetures with Agent Loop
Avatar for Mitsuhiro Komuro (nekorush14) nekorush14
0
130
AI AgentによるEmbedded SREの取り組み
Avatar for norimichi.osanai tgidgd
1
320
FinOpsを導入してマルチプロダクトのコスト最適化を実現する
Avatar for KNOWLEDGE WORK / 株式会社ナレッジワーク kworkdev
PRO
0
110
なぜAI時代に技術記事を書くのか？どう書くのか？ 〜bunの場合〜
Avatar for KNOWLEDGE WORK / 株式会社ナレッジワーク kworkdev
PRO
0
3.5k
Adversary Infrastructure Hunting101
Avatar for DiscoNinja disconinja
0
190
AIコーディングエージェント開発_全体像
Avatar for コロッケそば happysamurai294
0
150
20261031_IoTLT_vol140_kitazaki_v1.pdf
Avatar for Zakkiea kitazaki
0
150
re:Invent の去年のスケジュールを公開します！
Avatar for Kazuki Miura miu_crescent
PRO
0
150
(swiftc) NonCopyableとライフタイム修飾子
Avatar for Himeshi teamhimeh
0
160
あなたのDartコードは丸見えかもしれない ～reFlutterで暴くFlutterアプリの中身と多層防御～
Avatar for ZOZO Developers zozotech
PRO
0
740
LLMの知識とAIエージェント
Avatar for コロッケそば happysamurai294
0
150

Featured

See All Featured
jQuery: Nuts, Bolts and Bling
Avatar for Doug Neiner dougneiner
66
8.7k
Designing Dashboards & Data Visualisations in Web Apps
Avatar for Des Traynor destraynor
232
55k
GraphQLの誤解/rethinking-graphql
Avatar for sonatard sonatard
75
12k
GraphQLとの向き合い方2022年版
Avatar for Yosuke Kurami quramy
50
15k
エンジニアに許された特別な時間の終わり
Avatar for watany watany
109
250k
Automating Front-end Workflow
Avatar for Addy Osmani addyosmani
1370
210k
Save Time (by Creating Custom Rails Generators)
Avatar for Garrett Dimon garrettdimon
PRO
33
5.6k
Test your architecture with Archunit
Avatar for Yoan thirion
2
2.5k
HU Berlin: Industrial-Strength Natural Language Processing with spaCy and Prodigy
Avatar for Ines Montani inesmontani
PRO
0
780
How to Get Subject Matter Experts Bought In and Actively Contributing to SEO & PR Initiatives.
Avatar for Liv Day livdayseo
0
240
[RailsConf 2023 Opening Keynote] The Magic of Rails
Avatar for Eileen M. Uchitelle eileencodes
31
10k
How Software Deployment tools have changed in the past 20 years
Avatar for Geshan Manandhar geshan
2
35k

Transcript

  1. Intro to Cybersecurity John Downey | @jtdowney http://bit.ly/2tTOeu1 1

  2. Intro to Cybersecurity Information Security John Downey | @jtdowney http://bit.ly/2tTOeu1

    2

  3. whoami 4 John Downey 4 Security Lead at Braintree 4

    All self taught 4 No certifications http://bit.ly/2tTOeu1 3

  4. Managing Risk Risk = Liklihood × Impact http://bit.ly/2tTOeu1 4

  5. Likelihood http://bit.ly/2tTOeu1 5

  6. Threat Actors 4 Skill 4 Motive 4 Opportunity 4 Organization

    http://bit.ly/2tTOeu1 6

  7. Vulnerability 4 Ease of discovery 4 Ease of exploitation 4

    Awareness 4 Zero day http://bit.ly/2tTOeu1 7

  8. Impact http://bit.ly/2tTOeu1 8

  9. Technical Loss 4 Confidentiality 4 Integrity 4 Availability http://bit.ly/2tTOeu1 9

  10. Damages 4 Financial 4 Reputation 4 Leadership Change http://bit.ly/2tTOeu1 10

  11. Mitigation Approach http://bit.ly/2tTOeu1 11

  12. Prevention 4 Segmentation 4 Access control lists 4 Training 4

    Testing 4 Governance http://bit.ly/2tTOeu1 12

  13. Detection 4 Scanning 4 Intrusion detection systems 4 File integrity

    monitoring 4 Antivirus http://bit.ly/2tTOeu1 13

  14. Response 4 Incident response plans 4 Security operations center 4

    Digital forensics 4 Active mitigtaion http://bit.ly/2tTOeu1 14

  15. Case Studies http://bit.ly/2tTOeu1 15

  16. Denial of Service http://bit.ly/2tTOeu1 16

  17. http://bit.ly/2tTOeu1 17

  18. http://bit.ly/2tTOeu1 18

  19. Tips 4 Evaluate the risk 4 Maybe have a plan

    for dealing with a DDoS attack http://bit.ly/2tTOeu1 19

  20. Password Reuse http://bit.ly/2tTOeu1 20

  21. http://bit.ly/2tTOeu1 21

  22. http://bit.ly/2tTOeu1 22

  23. Tips 4 Use a password manager 4 Enable two-factor authentication

    everywhere 4 Resources 4 https://haveibeenpwned.com 4 https://opensource.com/article/17/2/password- management http://bit.ly/2tTOeu1 23

  24. Software Patching http://bit.ly/2tTOeu1 24

  25. http://bit.ly/2tTOeu1 25

  26. http://bit.ly/2tTOeu1 26

  27. Tips 4 Turn on automatic updates 4 Don't dismiss or

    ignore updates 4 Keep all devices up to date 4 Help out those who aren't as security savvy http://bit.ly/2tTOeu1 27

  28. Software Bug http://bit.ly/2tTOeu1 28

  29. http://bit.ly/2tTOeu1 29

  30. Tips 4 OWASP - https://www.owasp.org 4 WebGoat - https://github.com/WebGoat/WebGoat 4

    Hacksplaining - https://www.hacksplaining.com http://bit.ly/2tTOeu1 30

  31. Workshop 4 Verizon Data Breach Report - http://vz.to/2qihidi 4 Hacksplaining

    - https://www.hacksplaining.com 4 WebGoat - https://github.com/WebGoat/WebGoat 4 flAWS - http://flaws.cloud http://bit.ly/2tTOeu1 31

  32. Image Credits 4 https://flic.kr/p/bov2cY 4 https://flic.kr/p/aoSXLS 4 https://flic.kr/p/npSVNU 4 https://en.wikipedia.org/wiki/Information_security

    4 https://en.wikipedia.org/wiki/PAVE_PAWS http://bit.ly/2tTOeu1 32