Fundamental Flaws in Security Thinking

Explore the critical flaws in current security thinking in this 40-minute conference talk from BSidesSF 2012. Examine the historical context of cybersecurity, including the Morris Worm and the evolution of security practices. Analyze high-profile breaches and their implications for corporate security strategies. Delve into common misconceptions about security, including the limitations of PCI compliance and the false sense of security provided by physical measures. Challenge assumptions about risk management and the ability to achieve complete security. Learn how to identify and address fundamental flaws in security thinking, emphasizing the importance of understanding business needs and moving beyond average security measures. Gain insights to help reshape security approaches and avoid the pitfalls that lead to ineffective protection against modern threats.

Intro
The Morris Worm
Security a Teenager
Data Breach Investigation Report
Lack of Evidence
Log Review
I can keep my company secure
Physical security
Security vs Risk
The Fundamental Flaws
Understand the Business
Above Average