Changing Our Mindset From Technical To Psychological Defenses

Explore psychological defenses in cybersecurity through this 58-minute conference talk from Derbycon 2018. Delve into the shift from technical to psychological defenses, examining how human factors impact security. Learn about social engineering statistics, vendor vulnerabilities, and physical security risks. Discover lessons from aviation risk management and their application to information security and IT. Gain insights on implementing strict processes and improving human performance to enhance overall cybersecurity posture.

Introduction
Defenses Are Mainly Technical
Infosec is Everyone's Job?
Examples of Psychological Attacks
Human Performance is Highly Variable
Impacts to Judgement
Stress and SE Success Rates
Social Engineering Stats
Vendors and Help Desks
Physical Security
Northwest Flight 255
What can we do?
Strict Processes
Lessons from Aviation
Applying Aviation Risk Management to Infosec and IT
Questions?