Upgrade to Pro — share decks privately, control downloads, hide ads and more …
Sign up for free

Intro to Cybersecurity Workshop

Avatar for John Downey John Downey
July 24, 2017
Technology
170
0

Intro to Cybersecurity Workshop

Avatar for John Downey

John Downey

July 24, 2017

More Decks by John Downey

See All by John Downey
Cryptography Pitfalls at CactusCon 2019
Avatar for John Downey jtdowney
0
210
Cryptography Pitfalls at BsidesMSP 2017
Avatar for John Downey jtdowney
0
220
Cryptography Pitfalls at THOTCON 0x8
Avatar for John Downey jtdowney
0
230
Cryptography Pitfalls at ConFoo Montreal 2017
Avatar for John Downey jtdowney
1
390
Cryptography Pitfalls at BSidesPhilly 2016
Avatar for John Downey jtdowney
0
180
Cryptography Pitfalls at LASCON 2016
Avatar for John Downey jtdowney
0
240
Debugging TLS/SSL at DevOps Days Detroit 2016
Avatar for John Downey jtdowney
1
330
Debugging TLS/SSL at DevOpsDays Boston
Avatar for John Downey jtdowney
1
410
Cryptography Pitfalls at Abstractions
Avatar for John Downey jtdowney
0
150

Other Decks in Technology

See All in Technology
デザインレビューは自動化できるのか？─ Flutter × Figma で UI 品質保証を考える
Avatar for Hirokazu Tanaka techiro
2
680
2拠点SRE活動始めてみた | sogaoh's LT @ ホンマでっかSRE勉強会 #3
Avatar for Hisashi SOGA sogaoh
PRO
0
210
"AWSはちょっと苦手"でも大丈夫。AWS Blocks で手軽に作る Flutter のバックエンド #FlutterKaigi
Avatar for Kihara, Takuya tacck
PRO
0
110
基本から分かる！AWSセキュリティ運用の考え方と任せ方
Avatar for cm-usuda-keisuke cmusudakeisuke
1
280
バイブコーディングの特徴と「コケて直す」ループ
Avatar for コロッケそば happysamurai294
0
130
クラウドエージェントの先駆け Devin。今も最先端を走る、他との違い
Avatar for kinopee kinopeee
1
520
[FECONF-2026] 신대륙을 향한 카카오페이증권 프론트엔드 항해기 (이주승)
Avatar for l1ghthouse l1ghthouse
0
330
ビジネス部門からPOを迎えての半年間の進歩と課題
Avatar for ZOZO Developers zozotech
PRO
0
170
Agent 活用環境の構築・運用のための AWS サービスのご紹介/agentcore-for-building-and-operating-agents
Avatar for Renya Kujirada ren8k
1
290
なぜAI時代に技術記事を書くのか？どう書くのか？ 〜bunの場合〜
Avatar for KNOWLEDGE WORK / 株式会社ナレッジワーク kworkdev
PRO
0
1.3k
「作れる」と「リリースできる」の間にあったもの── PdMを外して見えた、PdMがやるべき仕事/Buildable ≠ Shippable: What Removing the PM Taught Me About the PM’s Job
Avatar for Yappli Developers yappli_developers
0
390
AIエージェント統制はAPIから——押さえるべき5つの要素
Avatar for 草薙昭彦 nagix
0
110

Featured

See All Featured
Distributed Sagas: A Protocol for Coordinating Microservices
Avatar for Caitie McCaffrey caitiem20
333
23k
How to Align SEO within the Product Triangle To Get 
Buy-In & Support - #RIMC
Avatar for Aleyda Solis aleyda
2
1.8k
Reflections from 52 weeks, 52 projects
Avatar for Jefferson Lam jeffersonlam
356
22k
The Cost Of JavaScript in 2023
Avatar for Addy Osmani addyosmani
55
10k
Agile Actions for Facilitating Distributed Teams - ADO2019
Avatar for Mark Kilby mkilby
0
330
How to make the Groovebox
Avatar for あそなす asonas
2
2.5k
Everyday Curiosity
Avatar for Cassini Nazir cassininazir
0
380
4 Signs Your Business is Dying
Avatar for Josh Pigford shpigford
187
23k
The SEO identity crisis: Don't let AI make you average
Avatar for Varn varn
0
620
Making Projects Easy
Avatar for Brett Harned brettharned
120
6.8k
Producing Creativity
Avatar for Steve Smith orderedlist
PRO
348
41k
Building Experiences: Design Systems, User Experience, and Full Site Editing
Avatar for Michelle Schulp Hunt marktimemedia
1
650

Transcript

  1. Intro to Cybersecurity John Downey | @jtdowney http://bit.ly/2tTOeu1 1

  2. Intro to Cybersecurity Information Security John Downey | @jtdowney http://bit.ly/2tTOeu1

    2

  3. whoami 4 John Downey 4 Security Lead at Braintree 4

    All self taught 4 No certifications http://bit.ly/2tTOeu1 3

  4. Managing Risk Risk = Liklihood × Impact http://bit.ly/2tTOeu1 4

  5. Likelihood http://bit.ly/2tTOeu1 5

  6. Threat Actors 4 Skill 4 Motive 4 Opportunity 4 Organization

    http://bit.ly/2tTOeu1 6

  7. Vulnerability 4 Ease of discovery 4 Ease of exploitation 4

    Awareness 4 Zero day http://bit.ly/2tTOeu1 7

  8. Impact http://bit.ly/2tTOeu1 8

  9. Technical Loss 4 Confidentiality 4 Integrity 4 Availability http://bit.ly/2tTOeu1 9

  10. Damages 4 Financial 4 Reputation 4 Leadership Change http://bit.ly/2tTOeu1 10

  11. Mitigation Approach http://bit.ly/2tTOeu1 11

  12. Prevention 4 Segmentation 4 Access control lists 4 Training 4

    Testing 4 Governance http://bit.ly/2tTOeu1 12

  13. Detection 4 Scanning 4 Intrusion detection systems 4 File integrity

    monitoring 4 Antivirus http://bit.ly/2tTOeu1 13

  14. Response 4 Incident response plans 4 Security operations center 4

    Digital forensics 4 Active mitigtaion http://bit.ly/2tTOeu1 14

  15. Case Studies http://bit.ly/2tTOeu1 15

  16. Denial of Service http://bit.ly/2tTOeu1 16

  17. http://bit.ly/2tTOeu1 17

  18. http://bit.ly/2tTOeu1 18

  19. Tips 4 Evaluate the risk 4 Maybe have a plan

    for dealing with a DDoS attack http://bit.ly/2tTOeu1 19

  20. Password Reuse http://bit.ly/2tTOeu1 20

  21. http://bit.ly/2tTOeu1 21

  22. http://bit.ly/2tTOeu1 22

  23. Tips 4 Use a password manager 4 Enable two-factor authentication

    everywhere 4 Resources 4 https://haveibeenpwned.com 4 https://opensource.com/article/17/2/password- management http://bit.ly/2tTOeu1 23

  24. Software Patching http://bit.ly/2tTOeu1 24

  25. http://bit.ly/2tTOeu1 25

  26. http://bit.ly/2tTOeu1 26

  27. Tips 4 Turn on automatic updates 4 Don't dismiss or

    ignore updates 4 Keep all devices up to date 4 Help out those who aren't as security savvy http://bit.ly/2tTOeu1 27

  28. Software Bug http://bit.ly/2tTOeu1 28

  29. http://bit.ly/2tTOeu1 29

  30. Tips 4 OWASP - https://www.owasp.org 4 WebGoat - https://github.com/WebGoat/WebGoat 4

    Hacksplaining - https://www.hacksplaining.com http://bit.ly/2tTOeu1 30

  31. Workshop 4 Verizon Data Breach Report - http://vz.to/2qihidi 4 Hacksplaining

    - https://www.hacksplaining.com 4 WebGoat - https://github.com/WebGoat/WebGoat 4 flAWS - http://flaws.cloud http://bit.ly/2tTOeu1 31

  32. Image Credits 4 https://flic.kr/p/bov2cY 4 https://flic.kr/p/aoSXLS 4 https://flic.kr/p/npSVNU 4 https://en.wikipedia.org/wiki/Information_security

    4 https://en.wikipedia.org/wiki/PAVE_PAWS http://bit.ly/2tTOeu1 32