Penetration Testing Trends

Explore the latest penetration testing trends in this 52-minute conference talk by John Strand at Derbycon 2016. Delve into current industry observations, including the underestimated importance of mobile security and the chaotic state of internal networks. Examine the resistance to implementing proper security measures and the skewed focus in cybersecurity. Discover the growing need for Red Teaming and understand the differences between penetration testing and vulnerability assessment. Learn about threat modeling techniques and tackle complex scenarios such as attacking VPNs and exploiting garage door openers. Gain valuable insights from real-world experiences and lessons learned in this comprehensive overview of the evolving penetration testing landscape.

Intro
Trends, Trends, Trends
Trends we are seeing
Mobile should be an issue
Internal is a mess
Resistance to the "right" things
Heavy Skew..
The Need For Red Teaming
Pentest and Vulnerability Assessment
Threat Modeling
Hard Stuff
Attacking a VPN
Stealing your garage door opener...
Lesson
Worst year of my life... Period