Upgrade to Pro — share decks privately, control downloads, hide ads and more …
Sign up for free

BSidesSanFrancisco2011 - Misdirection: The Rise...

Avatar for Brett Hardin Brett Hardin
February 14, 2011
Technology
270
1

BSidesSanFrancisco2011 - Misdirection: The Rise and Fall and Rise of Regulatory Compliance

Avatar for Brett Hardin

Brett Hardin

February 14, 2011

More Decks by Brett Hardin

See All by Brett Hardin
Penetration Testing is Stupid - BsidesSF 2013
Avatar for Brett Hardin bretthardin
2
2.3k
Building Your House on Sand
Avatar for Brett Hardin bretthardin
2
1.5k
Bad Version of Builders vs. Breakers
Avatar for Brett Hardin bretthardin
1
98
Builders vs. Breakers - AppSec 2012
Avatar for Brett Hardin bretthardin
2
1.5k
Security the Wrong Way
Avatar for Brett Hardin bretthardin
2
270
Security? Who Cares! - Privacy is Dead
Avatar for Brett Hardin bretthardin
1
220
OWASP - Top 10
Avatar for Brett Hardin bretthardin
0
1.2k

Other Decks in Technology

See All in Technology
正解のない研修に放り出されて / Being thrown into a training program with no right answers
Avatar for akira ohno ohnoeight
1
150
導入から定着へ ~コーディングエージェントを日常業務に組み込む実践知~
Avatar for Yuki Sakai yukisakai1225
0
230
AI駆動開発におけるハーネスエンジニアリングの勘所
Avatar for つくぼし tsukuboshi
1
780
契約で守るコンパウンドプロダクトのデザインシステム
Avatar for Yuji Yamaguchi yug1224
1
1.4k
演劇と私とスクラム
Avatar for Tomonori Fukuta chinmo
0
160
1週間、Opus封印でお願いします
Avatar for KintoTech_Dev kintotechdev
0
160
AIをリアル世界に解き放つ　〜M5Stack×AIであなたのアイディアを手の平に〜
Avatar for 濱田孝治 hamadakoji
1
540
ドメインエキスパートは いかにして AI を使って プロダクト開発をするか
Avatar for tshiraishi tatsuyashiraishi
1
190
freeeにおけるSoftware Factory
Avatar for freee freee
PRO
0
520
freeeにおける AI を用いた ブラウザ動作確認の自動化の取り組み
Avatar for freee freee
PRO
0
220
Claude for Google Workspaces ポン出し/claude-for-google-workspace-slide-conversion
Avatar for emi emiki
0
13k
LLM-as-a-Judgeは本当に信頼できるのか――評価器を評価する話
Avatar for Takaaki Yayoi taka_aki
3
1.1k

Featured

See All Featured
What does AI have to do with Human Rights?
Avatar for Per Axbom axbom
PRO
1
2.5k
DBのスキルで生き残る技術 - AI時代におけるテーブル設計の勘所
Avatar for soudai sone soudai
PRO
68
59k
How Fast Is Fast Enough? [PerfNow 2025]
Avatar for Tammy Everts tammyeverts
3
950
職位にかかわらず全員がリーダーシップを発揮するチーム作り / Building a team where everyone can demonstrate leadership regardless of position
Avatar for MADOX madoxten
70
67k
Save Time (by Creating Custom Rails Generators)
Avatar for Garrett Dimon garrettdimon
PRO
33
5.4k
Unsuck your backbone
Avatar for Amy Palamountain ammeep
672
58k
Everyday Curiosity
Avatar for Cassini Nazir cassininazir
0
360
Design and Strategy: How to Deal with People Who Don’t "Get" Design
Avatar for Morgane Peng morganepeng
133
20k
Claude Code どこまでも/ Claude Code Everywhere
Avatar for nwiizo nwiizo
68
59k
A Guide to Academic Writing Using Generative AI - A Workshop
Avatar for Kenji Saito ks91
PRO
1
530
Between Models and Reality
Avatar for mayunak mayunak
4
510
Raft: Consensus for Rubyists
Avatar for Patrick Van Stee vanstee
143
7.8k

Transcript

  1. Being Sneaky About Security and Regulations - OR - "Misdirection:

    The Rise and Fall and Rise of Regulatory Compliance" Brett Hardin and Mike Dahn

  2. Who the Hell Are you Two? Mike Dahn @MikD Payment

    Security Guy Brett Hardin @MiscSecurity Application Fixer Author: •  Hacking: The Next Generation •  SpotTheVuln.com •  MiscSecurity.com
  3. None

  4. How Do Regulatory Rules Get Made and The Goals of

    Compliance

  5. Stop Hitting Yourself

  6. None
  7. None
  8. None

  9. Immunization

  10. None
  11. None

  12. Transition.

  13. Black Swans & Data Breaches

  14. None

  15. Real Costs The Placebo Effect of Fear VS.

  16. None
  17. None

  18. Don't make Compliance the End Goal

  19. Transition.

  20. None

  21. Do not focus on the finger or you will miss

    all that heavenly glory [of Regulatory Compliance] Lee (Bruce Lee) Enter the Dragon
  22. None
  23. None
  24. None
  25. None

  26. CISSP

  27. None

  28. Compliance != Security

  29. Out of the Box

  30. THE END