Garett Montgomery - Target Based Security Model

### Deconstructing Marketing in Defense-in-Depth At 00:00, Garett Montgomery introduces a target-based security architectural model at the Packet Hacking Village. Montgomery critiques compliance checklists and industry marketing buzzwords that promote layered tools without regard for actual system architecture.

### Aligning Security Controls with High-Value Assets At 09:34 and 19:34, Montgomery outlines the target-based security methodology. Rather than deploying security products in arbitrary perimeter rings, organizations must identify their core data and computational assets, threat model specific adversary objectives, and build concentric controls tailored directly around those targets.

### Layer-Specific Mitigations Against Network Threats At 30:47, the presentation demonstrates how target-based modeling applies to specific attack scenarios. Montgomery analyzes defensive controls across the OSI model, illustrating how network-level rate limiting, SYN-flood protections, transport-layer TLS inspection, and application-level authorization work in tandem to neutralize threats before they reach critical assets.

### Operationalizing Threat-Driven Metrics Concluding between 35:00 and 42:12, Montgomery encourages defenders to measure security effectiveness through threat-aligned metrics. By evaluating whether controls successfully impede realistic adversarial techniques rather than relying on compliance checkboxes, organizations can construct resilient, cost-effective defenses.

(AI summary — Gemini Flash)