Embrace the Bogeyman - Tactical Fear Mongering for Those Who Penetrate

Explore tactical fear mongering techniques in penetration testing through this 40-minute conference talk from Derbycon 2016. Delve into concepts like the Black Swan Theory, Unknown Unknowns, and Red Teaming to understand how possibility drives priority in cybersecurity. Learn to leverage the "bogeyman" approach to achieve security goals, while examining the balance between impact and cost. Discuss the security and fear immune responses, and analyze the differences between pranks and propaganda in penetration testing. Gain insights on the limitations of pentesting and participate in a Q&A session to enhance your understanding of strategic fear utilization in cybersecurity.

Intro
What's a bogeyman?
Black Swan Theory
Unknown Unknowns
Red Teaming
Possibility will push priority
Getting things done is good
So Embrace The Bogeyman
Bogeyman 404?
Come to the Dark Side
Build the Bogeymen
Freedom
Maturity
Impact at what cost?
Fear of being a target
So afraid...
you just became the bogeyman
Security Immune Response
Fear Immune Response
Mistakes
Goatpocalypse
Prank vs Propaganda
Propagandaxample: A clever ruse
Propagandaxample: Gotta Get Caught
Propagandapocalypse
Pentesting Isn't Everything
Questions?