Explore a conference talk that delves into the critical issues plaguing modern information security infrastructure. Examine the foundations of cybersecurity, from common sense approaches to the state-of-the-art technologies. Investigate technical debt, low-level attacks, and design flaws in trusted computing bases. Learn about virtual memory, paging, and potential vulnerabilities in these systems. Discuss the challenges of communicating security concerns, balancing security with usability, and managing information security debt. Analyze the concept of risk modeling and return on investment in cybersecurity. Gain insights into worst-case security scenarios and examine OS X security as a case study.
Overview
Syllabus
Intro
Background
Information Security
Chest vs Poker
Common Sense
Cyber Civilians
State of the Art
Technical Debt
COBOL
Trusted Computing Base
Face Dancer
LowLevel Attacks
SteppingPants
LegBack
ShadowWalker
Paging and Virtual Memory
Map in Physical Memory
Virtual Addresses
ECAM
Page Directory Entry
The best part
Scratchpad data
Alignment caveats
Design flaws
New features
Lazy attackers
Youre going to be rich
Youre game over
Google Apps for government
The least privileged principle
Trust of unknown entities
How do you communicate security
Holistic view of threats
Who is that actually harming
Selfish goal
Low hanging fruit attacker
Advanced persistent targeted threat
How to stand out
Segmentation
Competitors
KPIs
Data Liability
Predict Costs
Balance Security Usability Support
Information Security Debt
Stop Patching
Model Your Risk
Return on Investment
Worst Examples of Security
OS X Security
Taught by
WEareTROOPERS
