ElderUsr's Blog

This is part 2 (day 2) of my review of Atlantic Security Conference (AtlSecCon) 2017. Click here for Part 1 . A few items that I have been mentioned, and worth investigating ZAP, OSQuery, Komand and ThreatStack. Opening Speaker on Day 2: This was an interesting speech, it was titled "Move Fast and Fix Things" by Jen Andre. But basically the long and short of it was her explanation of how she was previously an entrepreneur and has assisted in startups previously, and how to start a proper security startup. The biggest takeaways are: - Search for a scalable business model - Start with a problem, not a technology - Make it minimalistic and viable - Know that your solution, and possibly your problem will evolve. - Don't boil the ocean. - Early Adopters are awesome, as they provide a crucial role in development. - Startups != the only path to innovate in Security. Speech 1: This was a speech outlining some of the Security and Cryptography laws within EU/Canada/US...

This document outlines information gathered at the most recent AtlSecCon, on 4/27-28/2017 and some interesting findings and presentations performed by the speakers there: Day 1: Keynote Talk - The biggest take away that I received from this was two fold: Educate your employees/non-technical folk in a method that they understand and rather than just tell them you have to do X, tell them why your doing X and how by not doing X, that Y/Z will occur in plain terms. And that security starts and ends with your users, so if your not doing the first portion right, you can place all of the fanciest UTM and latest and greatest white/black boxes in front/in your infrastructure and it will simply not matter. Cracking Locks like your on CSI: Cyber - This was interesting but was very much a if you have physical security, then it all goes out the window anyways talk. Concept was that using smart-locks, such as those with keypads could be easily circumvented from the outside either to fail open ...