Rives: Decoding Infosec Jargon

### Overview At the RSA Conference, guest speaker Rives delivers a lighthearted, comedic monologue exploring his experience as an industry outsider trying to navigate and decipher cybersecurity jargon. Observing the unique culture, acronyms, and terminology used by attendees, Rives highlights how everyday civilian perspectives clash with specialized industry language.

### Key Topics - **Industry Acronyms and Misinterpretations:** Rives discusses his confusion around terms like "SOC"—noting a speaker named Rohit who mentioned an RSA Academy in Singapore providing hands-on experience in a real SOC—which sounded literally like footwear to an outsider. He also riffs on the word "InfoSec," humorously guessing it might be one-sixtieth of an "info minute," a data transfer rate, or the awkward pause required when explaining a cybersecurity job to a civilian. - **Humorous Civilian Re-definitions:** Several common technical terms are given comedic civilian translations. "Two-factor authentication" is redefined as checking a t-shirt visually and then sniffing it before deciding it is clean enough to wear. A "pseudo-random number" is likened to calling an ex-partner late at night and pretending the call was an accident. "Loadable kernel modules" are compared to microwavable popcorn, and "keylogger" is interpreted as the most critical lumberjack in a logging crew. - **Industry Buzzwords and Concepts:** The speaker notes ubiquitous buzzwords such as "GDPR," which he repeatedly heard without knowing the formal definition, humorously noting people discuss it with frustration as if referring to an unpopular acquaintance named Kevin. He touches on looking up terms like "Smurf attack" (which led to humorous imagery involving Smurf characters), "hash value" (joking about drug measurements and college hobbies), "bad actor" and "threat actor" (associating them with film acting and movies like *Billy Madison*), and "honey monkey."

### Technical Details Because this presentation is a comedic opening monologue rather than an engineering or threat-analysis session, it lacks formal technical architecture or deep technical detail. The transcript explicitly mentions specific security concepts and phrases—such as SOC, InfoSec, two-factor authentication, pseudo-random numbers, GDPR, loadable kernel modules, Smurf attacks, hash values, keyloggers, bad actors, threat actors, and honey monkeys—purely as subjects of observational humor and creative misinterpretation.

### Takeaways The talk serves as an entertaining reminder of how insular cybersecurity vocabulary can sound to non-practitioners. Through observational humor, it illustrates the gap between specialized security terminology and civilian understanding, closing with Rives thanking the audience for the new vocabulary.