Compliance: the Enterprise Vulnerability Roadmap
Weasel details weasel: Compliance: The Enterprise Vulnerability Roadmap Compliance is no longer new.
Summary
Architecture and Background
Weasel: Compliance: The Enterprise Vulnerability Roadmap Compliance is no longer new. Compliance has been accepted by the corporate-state.
Vulnerability Analysis
Compliance is common-place. Compliance is the intruders' new friend.
Exploitation and Demonstrations
Decision makers thinks Compliance == Security. While many compliance standards have resulted in the implementation of some very important controls, they have also left a roadmap for intruders, ill doers and the sort to hone their attack.
Remediation and Defensive Strategies
This presentation will go over such weaknesses and show how compliance entities are, regardless of intent, proving that compliance != security. Weasel is a veteran member Nomad Mobile Research Centre. Over the years he has performed deep research into areas ranging from Forensics/Anti-Forensics to Enterprise Culture to Cyber Warfare and Binary Analysis. Weasel is the last surviving international member of NMRC as Canada has been ruled too lame to be considered "international." For copies of the slides and additional materials please see the DEF CON 16 Archive here:
Related talks
Main Stage·1 hr 54 min
Workshop
Workshop details workshop: Davix Workshop Need help understanding your gigabytes of application logs or network captures.
Main Stage·48 min
Valsmith · Colin Ames
Valsmith and Colin Ames explores metapost-exploitation at DEF CON 16, examining emergency-systems and practical defenses.
Main Stage·40 min
Travis Goodspeed
Travis Goodspeed details travis Goodspeed:Journey to the center of the HP28 In 1990, a wire-bound book was published in Paris by the title of &qout;Voyage au centre de la HP28 c/s&qout".