BSidesSanFrancisco2011 - Misdirection: The Rise...

February 14, 2011

210

BSidesSanFrancisco2011 - Misdirection: The Rise and Fall and Rise of Regulatory Compliance

Brett Hardin

February 14, 2011

Tweet

More Decks by Brett Hardin

See All by Brett Hardin

Penetration Testing is Stupid - BsidesSF 2013

2

2.2k

Building Your House on Sand

2

1.5k

Bad Version of Builders vs. Breakers

1

64

Builders vs. Breakers - AppSec 2012

2

1.4k

Security the Wrong Way

2

240

Security? Who Cares! - Privacy is Dead

1

180

0

1k

Other Decks in Technology

See All in Technology

エンジニアの育成を支える爆速フィードバック文化

3

1.1k

Amazon S3 Tablesと外部分析基盤連携について / Amazon S3 Tables and External Data Analytics Platform

0

130

アジャイル開発とスクラム

0

170

Oracle Cloud Infrastructure：2025年2月度サービス・アップデート

oracle4engineer

1

210

N=1から解き明かすAWS ソリューションアーキテクトの魅力

0

130

運用しているアプリケーションのDBのリプレイスをやってみた

1

720

ビジネスモデリング道場　目的と背景

9

520

Data-centric AI入門第6章：Data-centric AIの実践例

1

400

Goで作って学ぶWebSocket

0

180

飲食店予約台帳を支えるインタラクティブ UI 設計と実装

7

1.8k

個人開発から公式機能へ: PlaywrightとRailsをつなげた3年の軌跡

11

3k

ユーザーストーリーマッピングから始めるアジャイルチームと並走するQA / Starting QA with User Story Mapping

0

200

Featured

See All Featured

Evolution of real-time – Irina Nazarova, EuRuKo, 2024

6

550

Embracing the Ebb and Flow

84

4.6k

Building Adaptive Systems

40

2.4k

Typedesign – Prime Four

40

2.5k

Thoughts on Productivity

69

4.5k

87

9.5k

4 Signs Your Business is Dying

182

22k

Save Time (by Creating Custom Rails Generators)

29

1k

Automating Front-end Workflow

1368

200k

Measuring & Analyzing Core Web Vitals

6

240

Practical Orchestrator

186

10k

Build The Right Thing And Hit Your Dates

34

2.5k

Transcript

Being Sneaky About Security and Regulations - OR - "Misdirection:
The Rise and Fall and Rise of Regulatory Compliance" Brett Hardin and Mike Dahn
Who the Hell Are you Two? Mike Dahn @MikD Payment
Security Guy Brett Hardin @MiscSecurity Application Fixer Author: •  Hacking: The Next Generation •  SpotTheVuln.com •  MiscSecurity.com
None
How Do Regulatory Rules Get Made and The Goals of
Compliance
Stop Hitting Yourself
None
None
None
Immunization
None
None
Transition.
Black Swans & Data Breaches
None
Real Costs The Placebo Effect of Fear VS.
None
None
Don't make Compliance the End Goal
Transition.
None
Do not focus on the finger or you will miss
all that heavenly glory [of Regulatory Compliance] Lee (Bruce Lee) Enter the Dragon
None
None
None
None
CISSP
None
Compliance != Security
Out of the Box
THE END