Upgrade to Pro — share decks privately, control downloads, hide ads and more …

BSidesSanFrancisco2011 - Misdirection: The Rise...

Sponsored · Your Podcast. Everywhere. Effortlessly. Share. Educate. Inspire. Entertain. You do you. We'll handle the rest. →
Avatar for Brett Hardin Brett Hardin
February 14, 2011
Technology
250
1

BSidesSanFrancisco2011 - Misdirection: The Rise and Fall and Rise of Regulatory Compliance

Avatar for Brett Hardin

Brett Hardin

February 14, 2011

More Decks by Brett Hardin

See All by Brett Hardin
Penetration Testing is Stupid - BsidesSF 2013
Avatar for Brett Hardin bretthardin
2
2.3k
Building Your House on Sand
Avatar for Brett Hardin bretthardin
2
1.5k
Bad Version of Builders vs. Breakers
Avatar for Brett Hardin bretthardin
1
91
Builders vs. Breakers - AppSec 2012
Avatar for Brett Hardin bretthardin
2
1.5k
Security the Wrong Way
Avatar for Brett Hardin bretthardin
2
270
Security? Who Cares! - Privacy is Dead
Avatar for Brett Hardin bretthardin
1
210
OWASP - Top 10
Avatar for Brett Hardin bretthardin
0
1.1k

Other Decks in Technology

See All in Technology
【2026年版】 ベクトル検索とEmbedding最前線
Avatar for Tomoko Uchida mocobeta
18
4.8k
自分が詳しくない領域でAIを使う #プロヒス2026
Avatar for konifar konifar
14
5.4k
AI時代のコスト管理を考えよう〜明日から使える実践AWSノウハウ～
Avatar for yoshimi0227 yoshimi0227
0
320
攻撃者視点で考えるDetection Engineering
Avatar for Ruslan Sayfiev cryptopeg
3
2k
人材育成分科会.pdf
Avatar for _awache _awache
4
300
データレイクの「見えない問題」を可視化する
Avatar for SansanTech sansantech
PRO
1
110
Bucharest Tech Week 2026 - Guardians of the Cloud-Native Galaxy
Avatar for Eric Deandrea edeandrea
PRO
0
120
20260619 私の日常業務での生成 AI 活用
Avatar for Masaru Ogura masaruogura
1
230
マルチアカウント環境での コーディングエージェントを使った障害調査が大変なので AIエージェントにReadOnly権限を付与してみた / ReadOnly AI Agents for Multi-Account AWS Incident Response
Avatar for Takashi Yamaguchi yamaguchitk333
2
110
Agent Skills設計で柔軟性と硬さのバランスが難しい話
Avatar for nassy nassy20
0
150
Agile and AI Redmine Japan 2026
Avatar for Kenji Hiranabe hiranabe
3
310
2026 TECHFRESH 畢業分享會 - 開發日常大解密！從領域驅動到企業級上線
Avatar for LINE Developers Taiwan line_developers_tw
PRO
0
1.3k

Featured

See All Featured
Building an army of robots
Avatar for Kyle Neath kneath
306
46k
Large-scale JavaScript Application Architecture
Avatar for Addy Osmani addyosmani
515
110k
Ten Tips & Tricks for a 🌱 transition
Avatar for Manu Carrasco Molina stuffmc
0
140
Why Our Code Smells
Avatar for Brandon Keepers bkeepers
PRO
340
58k
Balancing Empowerment & Direction
Avatar for Lara Hogan lara
6
1.2k
Bash Introduction
Avatar for André Augusto Costa Santos 62gerente
615
220k
Into the Great Unknown - MozCon
Avatar for Noah Learner thekraken
41
2.6k
Bootstrapping a Software Product
Avatar for Garrett Dimon garrettdimon
PRO
307
120k
The Mindset for Success: Future Career Progression
Avatar for Greg Gifford greggifford
PRO
0
360
CoffeeScript is Beautiful & I Never Want to Write Plain JavaScript Again
Avatar for Sam Stephenson sstephenson
162
16k
Optimising Largest Contentful Paint
Avatar for Harry Roberts csswizardry
37
3.7k
Writing Fast Ruby
Avatar for Erik Berlin sferik
630
63k

Transcript

  1. Being Sneaky About Security and Regulations - OR - "Misdirection:

    The Rise and Fall and Rise of Regulatory Compliance" Brett Hardin and Mike Dahn

  2. Who the Hell Are you Two? Mike Dahn @MikD Payment

    Security Guy Brett Hardin @MiscSecurity Application Fixer Author: •  Hacking: The Next Generation •  SpotTheVuln.com •  MiscSecurity.com
  3. None

  4. How Do Regulatory Rules Get Made and The Goals of

    Compliance

  5. Stop Hitting Yourself

  6. None
  7. None
  8. None

  9. Immunization

  10. None
  11. None

  12. Transition.

  13. Black Swans & Data Breaches

  14. None

  15. Real Costs The Placebo Effect of Fear VS.

  16. None
  17. None

  18. Don't make Compliance the End Goal

  19. Transition.

  20. None

  21. Do not focus on the finger or you will miss

    all that heavenly glory [of Regulatory Compliance] Lee (Bruce Lee) Enter the Dragon
  22. None
  23. None
  24. None
  25. None

  26. CISSP

  27. None

  28. Compliance != Security

  29. Out of the Box

  30. THE END