Upgrade to Pro — share decks privately, control downloads, hide ads and more …

BSidesSanFrancisco2011 - Misdirection: The Rise...

Avatar for Brett Hardin Brett Hardin
February 14, 2011
Technology
1
220

BSidesSanFrancisco2011 - Misdirection: The Rise and Fall and Rise of Regulatory Compliance

Avatar for Brett Hardin

Brett Hardin

February 14, 2011
Tweet

More Decks by Brett Hardin

See All by Brett Hardin
Penetration Testing is Stupid - BsidesSF 2013
Avatar for Brett Hardin bretthardin
2
2.2k
Building Your House on Sand
Avatar for Brett Hardin bretthardin
2
1.5k
Bad Version of Builders vs. Breakers
Avatar for Brett Hardin bretthardin
1
74
Builders vs. Breakers - AppSec 2012
Avatar for Brett Hardin bretthardin
2
1.5k
Security the Wrong Way
Avatar for Brett Hardin bretthardin
2
250
Security? Who Cares! - Privacy is Dead
Avatar for Brett Hardin bretthardin
1
180
OWASP - Top 10
Avatar for Brett Hardin bretthardin
0
1k

Other Decks in Technology

See All in Technology
AIコーディングとエンジニアリングの現在地 / A Snapshot of AI Coding and Engineering(Sept. 2025)
Avatar for ar_tama ar_tama
0
130
Go Conference 2025: GoのinterfaceとGenericsの内部構造と進化 / Go type system internals
Avatar for turbofish ryokotmng
3
470
日経が挑戦するデータ民主化 ~ セルフサービス基盤がもたらす利点と苦悩~/nikkei-tech-talk-37
Avatar for 日本経済新聞社 エンジニア採用事務局 nikkei_engineer_recruiting
0
200
Pure Goで体験するWasmの未来
Avatar for asuka askua
1
140
Tomorrow graphlib, Let us use everybody
Avatar for HayaoSuzuki hayaosuzuki
0
130
避けられないI/O待ちに対処する:
Rails アプリにおけるSSEとasync gemの活用 / Tackling Inevitable I/O Latency in Rails Apps with SSE and the async gem
Avatar for moznion moznion
2
1.6k
北海道の人に知ってもらいたいGISスポット / gis-spot-in-hokkaido-2025
Avatar for sakaik sakaik
0
180
あなたのWebサービスはAIに自動テストしてもらえる？アクセシビリティツリーで読み解く、AIの『視点』
Avatar for Yusuke Iwaki yusukeiwaki
1
3.1k
Geospatialの世界最前線を探る [2025年版]
Avatar for Yasunori Kirimoto dayjournal
2
420
API提供者のためのMCPサーバー設計ガイド / MCP Server Design Guide for API Providers
Avatar for Yoichi Kawasaki yokawasa
0
220
kaigi_on_rails_2025_設計.pdf
Avatar for Yasuko Ohba nay3
8
3.3k
入門 FormObject / An Introduction to FormObject #kaigionrails
Avatar for Shu OGAWARA expajp
2
1.1k

Featured

See All Featured
It's Worth the Effort
Avatar for 3n 3n
187
28k
ピンチをチャンスに：未来をつくるプロダクトロードマップ #pmconf2020
Avatar for Aki / @LoveIdahoBurger aki_iinuma
127
53k
4 Signs Your Business is Dying
Avatar for Josh Pigford shpigford
185
22k
Documentation Writing (for coders)
Avatar for Carmen Chung carmenintech
75
5k
Sharpening the Axe: The Primacy of Toolmaking
Avatar for Bryan Cantrill bcantrill
45
2.5k
Designing Dashboards & Data Visualisations in Web Apps
Avatar for Des Traynor destraynor
231
53k
Measuring & Analyzing Core Web Vitals
Avatar for Philip Tellis bluesmoon
9
600
Why You Should Never Use an ORM
Avatar for John Nunemaker jnunemaker
PRO
59
9.5k
We Have a Design System, Now What?
Avatar for Morgane Peng morganepeng
53
7.8k
Context Engineering - Making Every Token Count
Avatar for Addy Osmani addyosmani
3
130
The Cult of Friendly URLs
Avatar for Andy Hume andyhume
79
6.6k
StorybookのUI Testing Handbookを読んだ
Avatar for Shingo Yamazaki zakiyama
31
6.1k

Transcript

  1. Being Sneaky About Security and Regulations - OR - "Misdirection:

    The Rise and Fall and Rise of Regulatory Compliance" Brett Hardin and Mike Dahn

  2. Who the Hell Are you Two? Mike Dahn @MikD Payment

    Security Guy Brett Hardin @MiscSecurity Application Fixer Author: •  Hacking: The Next Generation •  SpotTheVuln.com •  MiscSecurity.com
  3. None

  4. How Do Regulatory Rules Get Made and The Goals of

    Compliance

  5. Stop Hitting Yourself

  6. None
  7. None
  8. None

  9. Immunization

  10. None
  11. None

  12. Transition.

  13. Black Swans & Data Breaches

  14. None

  15. Real Costs The Placebo Effect of Fear VS.

  16. None
  17. None

  18. Don't make Compliance the End Goal

  19. Transition.

  20. None

  21. Do not focus on the finger or you will miss

    all that heavenly glory [of Regulatory Compliance] Lee (Bruce Lee) Enter the Dragon
  22. None
  23. None
  24. None
  25. None

  26. CISSP

  27. None

  28. Compliance != Security

  29. Out of the Box

  30. THE END