BSidesSanFrancisco2011 - Misdirection: The Rise...

February 14, 2011

210

BSidesSanFrancisco2011 - Misdirection: The Rise and Fall and Rise of Regulatory Compliance

Brett Hardin

February 14, 2011

Tweet

More Decks by Brett Hardin

See All by Brett Hardin

Penetration Testing is Stupid - BsidesSF 2013

2

2.2k

Building Your House on Sand

2

1.4k

Bad Version of Builders vs. Breakers

1

60

Builders vs. Breakers - AppSec 2012

2

1.4k

Security the Wrong Way

2

240

Security? Who Cares! - Privacy is Dead

1

180

0

1k

Other Decks in Technology

See All in Technology

最速最小からはじめるデータプロダクト / Data Product MVP

5

740

Datachain会社紹介資料（2024年11月） / Company Deck

3

16k

Amazon FSx for NetApp ONTAPを利用するにあたっての要件整理と設計のポイント

1

160

CAMERA-Suite: 広告文生成のための評価スイート / ai-camera-suite

cyberagentdevelopers

3

270

いまならこう作りたい AWSコンテナ[本格]入門ハンズオン　〜2024年版ハンズオンの構想〜

9

2.1k

【若手エンジニア応援LT会】AWSで繋がり、共に成長！～コミュニティ活動と新人教育への挑戦～

0

180

ガチ勢によるPipeCD運用大全〜滑らかなCI/CDを添えて〜 / ai-pipecd-encyclopedia

cyberagentdevelopers

3

210

リンクアンドモチベーションソフトウェアエンジニア向け紹介資料 / Introduction to Link and Motivation for Software Engineers

4

290k

初心者に Vue.js を教えるには

5

390

オーティファイ会社紹介資料 / Autify Company Deck

9

120k

Gradle: The Build System That Loves To Hate You

2

150

プロダクトエンジニアが活躍する環境を作りたくて事業責任者になった話 ~プロダクトエンジニアの行き着く先~

1

480

Featured

See All Featured

Evolution of real-time – Irina Nazarova, EuRuKo, 2024

4

290

The Illustrated Children's Guide to Kubernetes

48

48k

Into the Great Unknown - MozCon

31

1.5k

Reflections from 52 weeks, 52 projects

346

20k

Art, The Web, and Tiny UX

296

20k

Practical Tips for Bootstrapping Information Extraction Pipelines

9

680

The Art of Programming - Codeland 2020

51

13k

181

16k

Fantastic passwords and where to find them - at NoRuKo

50

2.8k

The MySQL Ecosystem @ GitHub 2015

250

12k

144

15k

Thoughts on Productivity

67

4.3k

Transcript

Being Sneaky About Security and Regulations - OR - "Misdirection:
The Rise and Fall and Rise of Regulatory Compliance" Brett Hardin and Mike Dahn
Who the Hell Are you Two? Mike Dahn @MikD Payment
Security Guy Brett Hardin @MiscSecurity Application Fixer Author: •  Hacking: The Next Generation •  SpotTheVuln.com •  MiscSecurity.com
None
How Do Regulatory Rules Get Made and The Goals of
Compliance
Stop Hitting Yourself
None
None
None
Immunization
None
None
Transition.
Black Swans & Data Breaches
None
Real Costs The Placebo Effect of Fear VS.
None
None
Don't make Compliance the End Goal
Transition.
None
Do not focus on the finger or you will miss
all that heavenly glory [of Regulatory Compliance] Lee (Bruce Lee) Enter the Dragon
None
None
None
None
CISSP
None
Compliance != Security
Out of the Box
THE END