Manage Your Attack Surface on a Budget

Explore effective strategies for managing your attack surface on a limited budget in this 47-minute conference talk from BSidesLV 2021. Learn about Scout, a homegrown solution for proprietary and sensitive data management, and discover how to tackle internal challenges and Internet of Things security concerns. Gain insights into cloud deployment, compliance issues, and the future of Scout, including improvements in scanning time. Understand the scope of applications, internal assets, and who should be paying attention to attack surface management. Delve into tradeoffs, SBOM (Software Bill of Materials), and practical approaches to enhancing your organization's security posture without breaking the bank.

Intro
Agenda
Scout
Proprietary or Sensitive Data
Scout Internal
Internal Challenges
Homegrown Solution
Internet of Things
Challenges
Conclusion
How did CG come together
Scope of the applications
Internal Assets
Who should be paying attention
Tradeoff
Cloud Deployment
Compliance
Sbomb
Future of Scout
Improving Scanning Time