Loading…
Back To Schedule
Saturday, March 28 • 3:30pm - 4:30pm
Realigning From Chaotic Evil

Sign up or log in to save this to your schedule, view media, leave feedback and see who's attending!

Feedback form is now closed.


The talk uses AD&D (Advanced Dungeons and Dragons) as a metaphor for problems created by corporations and other organizations by having incorrect metrics and incentives for different teams and the need to realign to solve them. 

The AD&D theme provides a variety of jokes and clip art throughout the talk but enough background on the game is given that the audience does not need to be familiar with it to understand. 

The first part of the talk examines common incentives/goals for offensive and defensive security staff as well as other groups they often interact with such as developers and operations, some of the common ways that they end up working against each other to the detriment of security, and how to fix it. 

The second part of the talk delves into using individual sections of the MITRE ATT&CK framework to create manageable, granular tests that offensive and defensive teams can work together on in order to affect a positive change in a unified way. 

The talk closes with a brief detour into the terminology of video game terminology to use the concept of tanking (players whose characters take the brunt of damage but often are relegated to the not so exciting parts of games) to talk about how junior SOC analysts often do a substantial portion of actually keeping companies secure and how security as an industry should do a better job of respecting and supporting them.

Zoom link: https://zoom.us/j/266304316

Speakers
avatar for Joe Schottman

Joe Schottman

Security Analyst focused on R&D, Truist (not speaking on behalf of them)
Joe Schottman is an application security focused security professional with experience ranging from web application development to purple team engagements. He has spoken at regional and national conferences on threat hunting, web shells, purple teams, and more.


Saturday March 28, 2020 3:30pm - 4:30pm EDT
'Connect' track 3333 Busbee Dr NW, Kennesaw, GA 30144, USA