Social Security @ Riot

This presentation talks about my experiences in InfoSec @ Riot Games and how we are ramping up InfoSec @ Riot.

Transcript

1. Social Security @ Riot
2. Agenda Bonus Levels Game of Security Level Up Who & What?
3. Who am I { contact: { email: mhillick@riotgames.com, twitter: @markofu }, work: { 'Riot Games': LoL , cert : { 'GIAC GSE': True }, life: { Everything: Busy} }, tags: [ { infosec: 1}, {challenge: 1}, {IR: 1}, {growth: 1}, {’scale': 1}, {'tons of damage': 1}, {fun: 1}, { DDoS: 1} ], learning : [ { Riot: 'every day'} , {Industry: 'so much change'}, { Sharing: yes} ] }
4. Who am I (2)
5. Developer and publisher of League of Legends Player Experience First Host some of the largest eSports events Riot Games
6. Aspire
10. Stats 67MILLION MONTHLY ACTIVE PLAYERS MORE THAN 27MILLION DAILY ACTIVE PLAYERS MORE THAN 7.5MILLION PEAK CONCURRENT PLAYERS
11. Scale? 200 new group chats/sec Datawarehouse size : 12 PB Millions of lines of code
12. Global
13. AGENDA Bonus Levels Game of Security Level Up Who am I
14. Move Fast - Goals AGILITY SECURITY QUALITY
15. Security Game
16. Awareness for a gamer?
17. VPC VPC VPC AWS (1)
18. VPC VPC VPC 1 # of VPNs AWS (2)
19. VPC VPC VPC 40 # of VPNs AWS (3)
20. !! # of VPNs VPC VPC VPC AWS (4)
21. What brought us agility also brought us the Wild West of Cloud Computing
22. Incident (1)
23. Incident (2)
24. Incident (3)
25. AGENDA Bonus Levels Problem Level Up Who am I
26. RFCs Visibility Red Team The Security Game?
27. RFCs
28. Visibility
29. Red Team
30. AGENDA Bonus Levels Problem Level Up Who am I
31. -   What next?
32. All The Things?
33. Security Week?
34. Awareness Standards & Verify Tech Futures (1)
35. Tools Community Hiring Futures (2)
36. Bug Bounty
37. Wall of Shame?
38. Question
39. Align & Iterate Learn Repeat Conclusion
40. Scaling League of Legends Chat to Millions of Users - Michal Ptaszek - https://www.youtube.com/watch?v=_jsMpmWaq7I The Science Behind Shaping the Player - Jeffrey “Lyte” Lin - http://gdcvault.com/play/1017940/The-Science-Behind- Shaping-Player How Riot Games re:Invented Their AWS Model - Jonathan McCaffrey & Marty Chong - https://www.youtube.com/watch?v=Uu9zpTrO7fg Some Other Riot Presentations
41. QUESTIONS? Content: Security Issue: mhillick@riotgames.com soc@riotgames.com