Focus Areas:
⚖️ Governance, Risk & Compliance
, 🛡️ Security Operations & Defense
, 🚨 Incident Response
, 🏗️ Security Architecture
, 📚 Security Awareness
Presentation Material
Abstract
“Today’s attacks succeed because the defense is reactive”. I have been researching attacks and offensive techniques since the past 16 years. As the defenses kept catching up and closing open doors, we attackers looked for new avenues and vectors. This talk looks back on the state of defenses during my days of One-Way Web Hacking in 2001 to Stegosploit in 2016, and a common pattern emerges. Defense boils down to reacting to new attacks and then playing catch-up. It is time to take another look at defense strategy. In this talk I present the basics of what should be the next evolution of pro-active defense architecture.