laurabell anztb beyond digital · 2016-05-31 · the digital. This talk might make you feel...
Transcript of laurabell anztb beyond digital · 2016-05-31 · the digital. This talk might make you feel...
![Page 1: laurabell anztb beyond digital · 2016-05-31 · the digital. This talk might make you feel uncomfortable. Sorry. …I want you to feel uncomfortable. I like people. people are the](https://reader033.fdocuments.net/reader033/viewer/2022050516/5fa00e957c11765d1e4dbf42/html5/thumbnails/1.jpg)
Laura BellFounder and Lead Consultant - SafeStack@lady_nerd [email protected] http://safestack.io
Testing outside
the digital
![Page 2: laurabell anztb beyond digital · 2016-05-31 · the digital. This talk might make you feel uncomfortable. Sorry. …I want you to feel uncomfortable. I like people. people are the](https://reader033.fdocuments.net/reader033/viewer/2022050516/5fa00e957c11765d1e4dbf42/html5/thumbnails/2.jpg)
This talk might make you feel uncomfortable.
Sorry.
![Page 3: laurabell anztb beyond digital · 2016-05-31 · the digital. This talk might make you feel uncomfortable. Sorry. …I want you to feel uncomfortable. I like people. people are the](https://reader033.fdocuments.net/reader033/viewer/2022050516/5fa00e957c11765d1e4dbf42/html5/thumbnails/3.jpg)
…I want you to feel uncomfortable
![Page 4: laurabell anztb beyond digital · 2016-05-31 · the digital. This talk might make you feel uncomfortable. Sorry. …I want you to feel uncomfortable. I like people. people are the](https://reader033.fdocuments.net/reader033/viewer/2022050516/5fa00e957c11765d1e4dbf42/html5/thumbnails/4.jpg)
I like people
![Page 5: laurabell anztb beyond digital · 2016-05-31 · the digital. This talk might make you feel uncomfortable. Sorry. …I want you to feel uncomfortable. I like people. people are the](https://reader033.fdocuments.net/reader033/viewer/2022050516/5fa00e957c11765d1e4dbf42/html5/thumbnails/5.jpg)
people are the path of least resistance
![Page 6: laurabell anztb beyond digital · 2016-05-31 · the digital. This talk might make you feel uncomfortable. Sorry. …I want you to feel uncomfortable. I like people. people are the](https://reader033.fdocuments.net/reader033/viewer/2022050516/5fa00e957c11765d1e4dbf42/html5/thumbnails/6.jpg)
Inthistalk
TheProblem
Theneedforandlackofhumandefense
TheTool
WebuiltAVA…andwethinkyoumightlikeit
TheChallenges
Buildinghumansecuritysystemsishard…
![Page 7: laurabell anztb beyond digital · 2016-05-31 · the digital. This talk might make you feel uncomfortable. Sorry. …I want you to feel uncomfortable. I like people. people are the](https://reader033.fdocuments.net/reader033/viewer/2022050516/5fa00e957c11765d1e4dbf42/html5/thumbnails/7.jpg)
we are comfortable when we talk about technical vulnerability
![Page 8: laurabell anztb beyond digital · 2016-05-31 · the digital. This talk might make you feel uncomfortable. Sorry. …I want you to feel uncomfortable. I like people. people are the](https://reader033.fdocuments.net/reader033/viewer/2022050516/5fa00e957c11765d1e4dbf42/html5/thumbnails/8.jpg)
we do not empathise or sympathise with machines
They are inanimate objects.
![Page 9: laurabell anztb beyond digital · 2016-05-31 · the digital. This talk might make you feel uncomfortable. Sorry. …I want you to feel uncomfortable. I like people. people are the](https://reader033.fdocuments.net/reader033/viewer/2022050516/5fa00e957c11765d1e4dbf42/html5/thumbnails/9.jpg)
technology is only part of the security picture
technology people process
![Page 10: laurabell anztb beyond digital · 2016-05-31 · the digital. This talk might make you feel uncomfortable. Sorry. …I want you to feel uncomfortable. I like people. people are the](https://reader033.fdocuments.net/reader033/viewer/2022050516/5fa00e957c11765d1e4dbf42/html5/thumbnails/10.jpg)
technical systems are: reviewedscannedpenetration tested
![Page 11: laurabell anztb beyond digital · 2016-05-31 · the digital. This talk might make you feel uncomfortable. Sorry. …I want you to feel uncomfortable. I like people. people are the](https://reader033.fdocuments.net/reader033/viewer/2022050516/5fa00e957c11765d1e4dbf42/html5/thumbnails/11.jpg)
![Page 12: laurabell anztb beyond digital · 2016-05-31 · the digital. This talk might make you feel uncomfortable. Sorry. …I want you to feel uncomfortable. I like people. people are the](https://reader033.fdocuments.net/reader033/viewer/2022050516/5fa00e957c11765d1e4dbf42/html5/thumbnails/12.jpg)
processes are audited
![Page 13: laurabell anztb beyond digital · 2016-05-31 · the digital. This talk might make you feel uncomfortable. Sorry. …I want you to feel uncomfortable. I like people. people are the](https://reader033.fdocuments.net/reader033/viewer/2022050516/5fa00e957c11765d1e4dbf42/html5/thumbnails/13.jpg)
what about people?
![Page 14: laurabell anztb beyond digital · 2016-05-31 · the digital. This talk might make you feel uncomfortable. Sorry. …I want you to feel uncomfortable. I like people. people are the](https://reader033.fdocuments.net/reader033/viewer/2022050516/5fa00e957c11765d1e4dbf42/html5/thumbnails/14.jpg)
The problem with people
![Page 15: laurabell anztb beyond digital · 2016-05-31 · the digital. This talk might make you feel uncomfortable. Sorry. …I want you to feel uncomfortable. I like people. people are the](https://reader033.fdocuments.net/reader033/viewer/2022050516/5fa00e957c11765d1e4dbf42/html5/thumbnails/15.jpg)
human vulnerability is natural
![Page 16: laurabell anztb beyond digital · 2016-05-31 · the digital. This talk might make you feel uncomfortable. Sorry. …I want you to feel uncomfortable. I like people. people are the](https://reader033.fdocuments.net/reader033/viewer/2022050516/5fa00e957c11765d1e4dbf42/html5/thumbnails/16.jpg)
fear of rejection
fear of exposurefear of physical harm
fear of loss
![Page 17: laurabell anztb beyond digital · 2016-05-31 · the digital. This talk might make you feel uncomfortable. Sorry. …I want you to feel uncomfortable. I like people. people are the](https://reader033.fdocuments.net/reader033/viewer/2022050516/5fa00e957c11765d1e4dbf42/html5/thumbnails/17.jpg)
love
![Page 18: laurabell anztb beyond digital · 2016-05-31 · the digital. This talk might make you feel uncomfortable. Sorry. …I want you to feel uncomfortable. I like people. people are the](https://reader033.fdocuments.net/reader033/viewer/2022050516/5fa00e957c11765d1e4dbf42/html5/thumbnails/18.jpg)
humans are sufficiently predictableto make it suitably annoying when we fail to predict their behaviour.
![Page 19: laurabell anztb beyond digital · 2016-05-31 · the digital. This talk might make you feel uncomfortable. Sorry. …I want you to feel uncomfortable. I like people. people are the](https://reader033.fdocuments.net/reader033/viewer/2022050516/5fa00e957c11765d1e4dbf42/html5/thumbnails/19.jpg)
an emergent behavior can appear when a number of simple entities operate in an environment, forming more complex behaviors as a collective.
![Page 20: laurabell anztb beyond digital · 2016-05-31 · the digital. This talk might make you feel uncomfortable. Sorry. …I want you to feel uncomfortable. I like people. people are the](https://reader033.fdocuments.net/reader033/viewer/2022050516/5fa00e957c11765d1e4dbf42/html5/thumbnails/20.jpg)
The modern approaches
![Page 21: laurabell anztb beyond digital · 2016-05-31 · the digital. This talk might make you feel uncomfortable. Sorry. …I want you to feel uncomfortable. I like people. people are the](https://reader033.fdocuments.net/reader033/viewer/2022050516/5fa00e957c11765d1e4dbf42/html5/thumbnails/21.jpg)
we live in the age of adversarial defense
![Page 22: laurabell anztb beyond digital · 2016-05-31 · the digital. This talk might make you feel uncomfortable. Sorry. …I want you to feel uncomfortable. I like people. people are the](https://reader033.fdocuments.net/reader033/viewer/2022050516/5fa00e957c11765d1e4dbf42/html5/thumbnails/22.jpg)
![Page 23: laurabell anztb beyond digital · 2016-05-31 · the digital. This talk might make you feel uncomfortable. Sorry. …I want you to feel uncomfortable. I like people. people are the](https://reader033.fdocuments.net/reader033/viewer/2022050516/5fa00e957c11765d1e4dbf42/html5/thumbnails/23.jpg)
we shame the human victims of human security attacks*
*while secretly doing the exact same things
![Page 24: laurabell anztb beyond digital · 2016-05-31 · the digital. This talk might make you feel uncomfortable. Sorry. …I want you to feel uncomfortable. I like people. people are the](https://reader033.fdocuments.net/reader033/viewer/2022050516/5fa00e957c11765d1e4dbf42/html5/thumbnails/24.jpg)
we forget that we are a connected species
![Page 25: laurabell anztb beyond digital · 2016-05-31 · the digital. This talk might make you feel uncomfortable. Sorry. …I want you to feel uncomfortable. I like people. people are the](https://reader033.fdocuments.net/reader033/viewer/2022050516/5fa00e957c11765d1e4dbf42/html5/thumbnails/25.jpg)
compliance has us racing to the bottom
![Page 26: laurabell anztb beyond digital · 2016-05-31 · the digital. This talk might make you feel uncomfortable. Sorry. …I want you to feel uncomfortable. I like people. people are the](https://reader033.fdocuments.net/reader033/viewer/2022050516/5fa00e957c11765d1e4dbf42/html5/thumbnails/26.jpg)
we watch video training or e-learning
we make posters
we tick boxes
![Page 27: laurabell anztb beyond digital · 2016-05-31 · the digital. This talk might make you feel uncomfortable. Sorry. …I want you to feel uncomfortable. I like people. people are the](https://reader033.fdocuments.net/reader033/viewer/2022050516/5fa00e957c11765d1e4dbf42/html5/thumbnails/27.jpg)
this is not how people learngo ask the education and psychology communities
![Page 28: laurabell anztb beyond digital · 2016-05-31 · the digital. This talk might make you feel uncomfortable. Sorry. …I want you to feel uncomfortable. I like people. people are the](https://reader033.fdocuments.net/reader033/viewer/2022050516/5fa00e957c11765d1e4dbf42/html5/thumbnails/28.jpg)
![Page 29: laurabell anztb beyond digital · 2016-05-31 · the digital. This talk might make you feel uncomfortable. Sorry. …I want you to feel uncomfortable. I like people. people are the](https://reader033.fdocuments.net/reader033/viewer/2022050516/5fa00e957c11765d1e4dbf42/html5/thumbnails/29.jpg)
It’s time for the age of collaborative defense
![Page 30: laurabell anztb beyond digital · 2016-05-31 · the digital. This talk might make you feel uncomfortable. Sorry. …I want you to feel uncomfortable. I like people. people are the](https://reader033.fdocuments.net/reader033/viewer/2022050516/5fa00e957c11765d1e4dbf42/html5/thumbnails/30.jpg)
why don't we actively assess and test our human security risk?
![Page 31: laurabell anztb beyond digital · 2016-05-31 · the digital. This talk might make you feel uncomfortable. Sorry. …I want you to feel uncomfortable. I like people. people are the](https://reader033.fdocuments.net/reader033/viewer/2022050516/5fa00e957c11765d1e4dbf42/html5/thumbnails/31.jpg)
we don't test because it’s too easy
![Page 32: laurabell anztb beyond digital · 2016-05-31 · the digital. This talk might make you feel uncomfortable. Sorry. …I want you to feel uncomfortable. I like people. people are the](https://reader033.fdocuments.net/reader033/viewer/2022050516/5fa00e957c11765d1e4dbf42/html5/thumbnails/32.jpg)
people can’t be taught
people are lazy
people are stupid
![Page 33: laurabell anztb beyond digital · 2016-05-31 · the digital. This talk might make you feel uncomfortable. Sorry. …I want you to feel uncomfortable. I like people. people are the](https://reader033.fdocuments.net/reader033/viewer/2022050516/5fa00e957c11765d1e4dbf42/html5/thumbnails/33.jpg)
s/people/we/g
![Page 34: laurabell anztb beyond digital · 2016-05-31 · the digital. This talk might make you feel uncomfortable. Sorry. …I want you to feel uncomfortable. I like people. people are the](https://reader033.fdocuments.net/reader033/viewer/2022050516/5fa00e957c11765d1e4dbf42/html5/thumbnails/34.jpg)
we don't test
because it makes us feel uncomfortable
because we don't want people to get hurt
because it’s hardbecause we don’t know how to fix it
because we don't want people to get fired
![Page 35: laurabell anztb beyond digital · 2016-05-31 · the digital. This talk might make you feel uncomfortable. Sorry. …I want you to feel uncomfortable. I like people. people are the](https://reader033.fdocuments.net/reader033/viewer/2022050516/5fa00e957c11765d1e4dbf42/html5/thumbnails/35.jpg)
border devices are not enough
![Page 36: laurabell anztb beyond digital · 2016-05-31 · the digital. This talk might make you feel uncomfortable. Sorry. …I want you to feel uncomfortable. I like people. people are the](https://reader033.fdocuments.net/reader033/viewer/2022050516/5fa00e957c11765d1e4dbf42/html5/thumbnails/36.jpg)
AVA
![Page 37: laurabell anztb beyond digital · 2016-05-31 · the digital. This talk might make you feel uncomfortable. Sorry. …I want you to feel uncomfortable. I like people. people are the](https://reader033.fdocuments.net/reader033/viewer/2022050516/5fa00e957c11765d1e4dbf42/html5/thumbnails/37.jpg)
Afirst generation proof of concept 3- phase automated human vulnerability scanner
![Page 38: laurabell anztb beyond digital · 2016-05-31 · the digital. This talk might make you feel uncomfortable. Sorry. …I want you to feel uncomfortable. I like people. people are the](https://reader033.fdocuments.net/reader033/viewer/2022050516/5fa00e957c11765d1e4dbf42/html5/thumbnails/38.jpg)
KnowPHASE 1
![Page 39: laurabell anztb beyond digital · 2016-05-31 · the digital. This talk might make you feel uncomfortable. Sorry. …I want you to feel uncomfortable. I like people. people are the](https://reader033.fdocuments.net/reader033/viewer/2022050516/5fa00e957c11765d1e4dbf42/html5/thumbnails/39.jpg)
We don’t know what our organisations look like
![Page 40: laurabell anztb beyond digital · 2016-05-31 · the digital. This talk might make you feel uncomfortable. Sorry. …I want you to feel uncomfortable. I like people. people are the](https://reader033.fdocuments.net/reader033/viewer/2022050516/5fa00e957c11765d1e4dbf42/html5/thumbnails/40.jpg)
Human securityrisk ismagnified byconnection
![Page 41: laurabell anztb beyond digital · 2016-05-31 · the digital. This talk might make you feel uncomfortable. Sorry. …I want you to feel uncomfortable. I like people. people are the](https://reader033.fdocuments.net/reader033/viewer/2022050516/5fa00e957c11765d1e4dbf42/html5/thumbnails/41.jpg)
Active DirectoryTwitterLinkedInFacebookEmail providers
PeopleIdentifiers
GroupsRelationships
Data
![Page 42: laurabell anztb beyond digital · 2016-05-31 · the digital. This talk might make you feel uncomfortable. Sorry. …I want you to feel uncomfortable. I like people. people are the](https://reader033.fdocuments.net/reader033/viewer/2022050516/5fa00e957c11765d1e4dbf42/html5/thumbnails/42.jpg)
LocationTime stamps
SenderReceiver
User agent
friendscontacts
frequencyaliasesprofiles
Last loginPw Expires?
Disabled?Influence
Admin?
![Page 43: laurabell anztb beyond digital · 2016-05-31 · the digital. This talk might make you feel uncomfortable. Sorry. …I want you to feel uncomfortable. I like people. people are the](https://reader033.fdocuments.net/reader033/viewer/2022050516/5fa00e957c11765d1e4dbf42/html5/thumbnails/43.jpg)
testPHASE 2
![Page 44: laurabell anztb beyond digital · 2016-05-31 · the digital. This talk might make you feel uncomfortable. Sorry. …I want you to feel uncomfortable. I like people. people are the](https://reader033.fdocuments.net/reader033/viewer/2022050516/5fa00e957c11765d1e4dbf42/html5/thumbnails/44.jpg)
Threat injection and behaviour monitoring
![Page 45: laurabell anztb beyond digital · 2016-05-31 · the digital. This talk might make you feel uncomfortable. Sorry. …I want you to feel uncomfortable. I like people. people are the](https://reader033.fdocuments.net/reader033/viewer/2022050516/5fa00e957c11765d1e4dbf42/html5/thumbnails/45.jpg)
Attack vectors that mean something
EmailSocial NetworksRemovable MediaFiles and honeypotsSMS
![Page 46: laurabell anztb beyond digital · 2016-05-31 · the digital. This talk might make you feel uncomfortable. Sorry. …I want you to feel uncomfortable. I like people. people are the](https://reader033.fdocuments.net/reader033/viewer/2022050516/5fa00e957c11765d1e4dbf42/html5/thumbnails/46.jpg)
Email attacks that go beyond phishing
phishing Internal request
social
panic
Direct request External request
favour
authoritative
![Page 47: laurabell anztb beyond digital · 2016-05-31 · the digital. This talk might make you feel uncomfortable. Sorry. …I want you to feel uncomfortable. I like people. people are the](https://reader033.fdocuments.net/reader033/viewer/2022050516/5fa00e957c11765d1e4dbf42/html5/thumbnails/47.jpg)
TheURLmaybedifferentondifferentmessages.Subject:SecurityAlert:UpdateJava(*SeeKronosNote)Date:February22,2013************************************************************************Thisisanautomaticallygeneratedmessage.PleaseDONOTREPLY.Ifyourequireassistance,pleasecontacttheHelpCenter.************************************************************************OraclehasreleasedanupdateforJavathatfixes50securityholes,includingacriticalholecurrentlybeingexploitedinthewild.TheITSecurityOfficestronglyrecommendsthatyouupdateJavaas
User generated and publicly sourced attacks
![Page 48: laurabell anztb beyond digital · 2016-05-31 · the digital. This talk might make you feel uncomfortable. Sorry. …I want you to feel uncomfortable. I like people. people are the](https://reader033.fdocuments.net/reader033/viewer/2022050516/5fa00e957c11765d1e4dbf42/html5/thumbnails/48.jpg)
Removing the boundaries between business and personal
![Page 49: laurabell anztb beyond digital · 2016-05-31 · the digital. This talk might make you feel uncomfortable. Sorry. …I want you to feel uncomfortable. I like people. people are the](https://reader033.fdocuments.net/reader033/viewer/2022050516/5fa00e957c11765d1e4dbf42/html5/thumbnails/49.jpg)
Instant, scheduled and recurring
Security fails when it is treated like a special event
![Page 50: laurabell anztb beyond digital · 2016-05-31 · the digital. This talk might make you feel uncomfortable. Sorry. …I want you to feel uncomfortable. I like people. people are the](https://reader033.fdocuments.net/reader033/viewer/2022050516/5fa00e957c11765d1e4dbf42/html5/thumbnails/50.jpg)
Give the option of succeedingand reinforce good behaviours
![Page 51: laurabell anztb beyond digital · 2016-05-31 · the digital. This talk might make you feel uncomfortable. Sorry. …I want you to feel uncomfortable. I like people. people are the](https://reader033.fdocuments.net/reader033/viewer/2022050516/5fa00e957c11765d1e4dbf42/html5/thumbnails/51.jpg)
analysePHASE 3
![Page 52: laurabell anztb beyond digital · 2016-05-31 · the digital. This talk might make you feel uncomfortable. Sorry. …I want you to feel uncomfortable. I like people. people are the](https://reader033.fdocuments.net/reader033/viewer/2022050516/5fa00e957c11765d1e4dbf42/html5/thumbnails/52.jpg)
Behaviour Vs. time
![Page 53: laurabell anztb beyond digital · 2016-05-31 · the digital. This talk might make you feel uncomfortable. Sorry. …I want you to feel uncomfortable. I like people. people are the](https://reader033.fdocuments.net/reader033/viewer/2022050516/5fa00e957c11765d1e4dbf42/html5/thumbnails/53.jpg)
Measuring impact of training
![Page 54: laurabell anztb beyond digital · 2016-05-31 · the digital. This talk might make you feel uncomfortable. Sorry. …I want you to feel uncomfortable. I like people. people are the](https://reader033.fdocuments.net/reader033/viewer/2022050516/5fa00e957c11765d1e4dbf42/html5/thumbnails/54.jpg)
And now for something a little bit different
![Page 55: laurabell anztb beyond digital · 2016-05-31 · the digital. This talk might make you feel uncomfortable. Sorry. …I want you to feel uncomfortable. I like people. people are the](https://reader033.fdocuments.net/reader033/viewer/2022050516/5fa00e957c11765d1e4dbf42/html5/thumbnails/55.jpg)
Bridges, weak links and targeting
![Page 56: laurabell anztb beyond digital · 2016-05-31 · the digital. This talk might make you feel uncomfortable. Sorry. …I want you to feel uncomfortable. I like people. people are the](https://reader033.fdocuments.net/reader033/viewer/2022050516/5fa00e957c11765d1e4dbf42/html5/thumbnails/56.jpg)
Pivotingand propagation
![Page 57: laurabell anztb beyond digital · 2016-05-31 · the digital. This talk might make you feel uncomfortable. Sorry. …I want you to feel uncomfortable. I like people. people are the](https://reader033.fdocuments.net/reader033/viewer/2022050516/5fa00e957c11765d1e4dbf42/html5/thumbnails/57.jpg)
You know what would be fun?
Predictive risk behaviour analysis
![Page 58: laurabell anztb beyond digital · 2016-05-31 · the digital. This talk might make you feel uncomfortable. Sorry. …I want you to feel uncomfortable. I like people. people are the](https://reader033.fdocuments.net/reader033/viewer/2022050516/5fa00e957c11765d1e4dbf42/html5/thumbnails/58.jpg)
The challenges
![Page 59: laurabell anztb beyond digital · 2016-05-31 · the digital. This talk might make you feel uncomfortable. Sorry. …I want you to feel uncomfortable. I like people. people are the](https://reader033.fdocuments.net/reader033/viewer/2022050516/5fa00e957c11765d1e4dbf42/html5/thumbnails/59.jpg)
a public interest security tool
![Page 60: laurabell anztb beyond digital · 2016-05-31 · the digital. This talk might make you feel uncomfortable. Sorry. …I want you to feel uncomfortable. I like people. people are the](https://reader033.fdocuments.net/reader033/viewer/2022050516/5fa00e957c11765d1e4dbf42/html5/thumbnails/60.jpg)
….from everyone
success requires engagement
![Page 61: laurabell anztb beyond digital · 2016-05-31 · the digital. This talk might make you feel uncomfortable. Sorry. …I want you to feel uncomfortable. I like people. people are the](https://reader033.fdocuments.net/reader033/viewer/2022050516/5fa00e957c11765d1e4dbf42/html5/thumbnails/61.jpg)
is this even legal?
![Page 62: laurabell anztb beyond digital · 2016-05-31 · the digital. This talk might make you feel uncomfortable. Sorry. …I want you to feel uncomfortable. I like people. people are the](https://reader033.fdocuments.net/reader033/viewer/2022050516/5fa00e957c11765d1e4dbf42/html5/thumbnails/62.jpg)
The law in this space is immature
![Page 63: laurabell anztb beyond digital · 2016-05-31 · the digital. This talk might make you feel uncomfortable. Sorry. …I want you to feel uncomfortable. I like people. people are the](https://reader033.fdocuments.net/reader033/viewer/2022050516/5fa00e957c11765d1e4dbf42/html5/thumbnails/63.jpg)
publically availablepreviously knownalready published
![Page 64: laurabell anztb beyond digital · 2016-05-31 · the digital. This talk might make you feel uncomfortable. Sorry. …I want you to feel uncomfortable. I like people. people are the](https://reader033.fdocuments.net/reader033/viewer/2022050516/5fa00e957c11765d1e4dbf42/html5/thumbnails/64.jpg)
can we assess human vulnerability on this scalecompromising the privacy the people we assess?
![Page 65: laurabell anztb beyond digital · 2016-05-31 · the digital. This talk might make you feel uncomfortable. Sorry. …I want you to feel uncomfortable. I like people. people are the](https://reader033.fdocuments.net/reader033/viewer/2022050516/5fa00e957c11765d1e4dbf42/html5/thumbnails/65.jpg)
Privacy is about protecting people
Know
Update
Delete
Ask
![Page 66: laurabell anztb beyond digital · 2016-05-31 · the digital. This talk might make you feel uncomfortable. Sorry. …I want you to feel uncomfortable. I like people. people are the](https://reader033.fdocuments.net/reader033/viewer/2022050516/5fa00e957c11765d1e4dbf42/html5/thumbnails/66.jpg)
yeah, if you could just give me access to all the information you have…that’d be great
![Page 67: laurabell anztb beyond digital · 2016-05-31 · the digital. This talk might make you feel uncomfortable. Sorry. …I want you to feel uncomfortable. I like people. people are the](https://reader033.fdocuments.net/reader033/viewer/2022050516/5fa00e957c11765d1e4dbf42/html5/thumbnails/67.jpg)
No.
![Page 68: laurabell anztb beyond digital · 2016-05-31 · the digital. This talk might make you feel uncomfortable. Sorry. …I want you to feel uncomfortable. I like people. people are the](https://reader033.fdocuments.net/reader033/viewer/2022050516/5fa00e957c11765d1e4dbf42/html5/thumbnails/68.jpg)
AVA Ethics and Privacy BoardObjective, Representative, Independent, Collaborative
new members welcome to apply
![Page 69: laurabell anztb beyond digital · 2016-05-31 · the digital. This talk might make you feel uncomfortable. Sorry. …I want you to feel uncomfortable. I like people. people are the](https://reader033.fdocuments.net/reader033/viewer/2022050516/5fa00e957c11765d1e4dbf42/html5/thumbnails/69.jpg)
Open. Honest. Plain English
![Page 70: laurabell anztb beyond digital · 2016-05-31 · the digital. This talk might make you feel uncomfortable. Sorry. …I want you to feel uncomfortable. I like people. people are the](https://reader033.fdocuments.net/reader033/viewer/2022050516/5fa00e957c11765d1e4dbf42/html5/thumbnails/70.jpg)
Is this technically possible?
![Page 71: laurabell anztb beyond digital · 2016-05-31 · the digital. This talk might make you feel uncomfortable. Sorry. …I want you to feel uncomfortable. I like people. people are the](https://reader033.fdocuments.net/reader033/viewer/2022050516/5fa00e957c11765d1e4dbf42/html5/thumbnails/71.jpg)
Building new things is hard
![Page 72: laurabell anztb beyond digital · 2016-05-31 · the digital. This talk might make you feel uncomfortable. Sorry. …I want you to feel uncomfortable. I like people. people are the](https://reader033.fdocuments.net/reader033/viewer/2022050516/5fa00e957c11765d1e4dbf42/html5/thumbnails/72.jpg)
Scale that has to be visible
![Page 73: laurabell anztb beyond digital · 2016-05-31 · the digital. This talk might make you feel uncomfortable. Sorry. …I want you to feel uncomfortable. I like people. people are the](https://reader033.fdocuments.net/reader033/viewer/2022050516/5fa00e957c11765d1e4dbf42/html5/thumbnails/73.jpg)
There is a reason why compromised email accounts have value
Can we simulate attack aliases in a manageable way?
![Page 74: laurabell anztb beyond digital · 2016-05-31 · the digital. This talk might make you feel uncomfortable. Sorry. …I want you to feel uncomfortable. I like people. people are the](https://reader033.fdocuments.net/reader033/viewer/2022050516/5fa00e957c11765d1e4dbf42/html5/thumbnails/74.jpg)
Won’t somebody think of the test data
![Page 75: laurabell anztb beyond digital · 2016-05-31 · the digital. This talk might make you feel uncomfortable. Sorry. …I want you to feel uncomfortable. I like people. people are the](https://reader033.fdocuments.net/reader033/viewer/2022050516/5fa00e957c11765d1e4dbf42/html5/thumbnails/75.jpg)
Integration
GoogleFacebook
TwitterLinkedin
MicrosoftSlack
GitHub
If you are reading this and work for these places, we should probably talk.HINT HINT
![Page 76: laurabell anztb beyond digital · 2016-05-31 · the digital. This talk might make you feel uncomfortable. Sorry. …I want you to feel uncomfortable. I like people. people are the](https://reader033.fdocuments.net/reader033/viewer/2022050516/5fa00e957c11765d1e4dbf42/html5/thumbnails/76.jpg)
TL;DR
Wehaveapeopleproblem
Attackerswillchoosethepathofleastresistanceandwearenotprepared
AVAisanearlyalphaprototype
Wewantafutureofcontinuoushumanvulnerabilityassessment
Theroadaheadishard
Privacy,ethics,momentum,security, scalingandmuchmore
![Page 77: laurabell anztb beyond digital · 2016-05-31 · the digital. This talk might make you feel uncomfortable. Sorry. …I want you to feel uncomfortable. I like people. people are the](https://reader033.fdocuments.net/reader033/viewer/2022050516/5fa00e957c11765d1e4dbf42/html5/thumbnails/77.jpg)
Laura BellFounder and Lead Consultant - SafeStack@lady_nerd [email protected] http://safestack.io
Questions?#protectyourpeople