Weaponizing Layer-8

In Infosecuruity it is important that we don't forget to get users onboard, because they are going to be an important asset in the defense of our networks.

The recorded talk to go with the slides is here: https://youtu.be/M2EKN1jZnM0

Transcript

2. Why is this talk relevant?
6. How Cyber impacts the physical domain
9. Bad example: SWATTING
10. How Cyber impacts the physical domain.
11. Empowering Users
12. How to deal with USB sticks
15. A tale of unecessarily complicated processes
17. Gone Phishing
18. https://bit.ly/2I12tV0 https://www.amaz0n.com https://nore2flev4ertx1brzg3.man https://paypal-security.legitdomain.com Which of those links is malicious?
19. Indicators of Bullshit (IoB)
20. Money!
21. Threats!
22. Romance!
23. Urgency!
25. Reverse Social Engineering
30. Passwords Company Style
32. vs. ^E-MsK&t4^gBsC9>k6ApQ>#d password1
33. Passwords Family Style
38. Make Awareness Training Interesting
39. Avoid FUD
40. Avoid Multiple Choice Clickfests
41. Engage the users
42. Use multiple channels
43. Find the right language
44. Conclusion and Call for Action
45. Links • Swatting: http://edition.cnn.com/2018/01/03/us/kansas-police-shooting- swatting/index.html • Usb-keys: https://elie.net/blog/security/concerns-about-usb-security-are-real- 48-percent-of-people-do-plug-in-usb-drives-found-in-parking-lots • Detention station example: https://odi-x.com/odix-kiosk/
46. Thanks for listening. @khae Many Thanks to Bryan Fite for the contributions to the original version of this talk!
47. Questions? Pictures are CC0 and taken from pexels.com pixabay.com unsplash.com morguefile.com Big Thank you to the photographers and artists!