| Title |
No More of the Same Bad Security: Why the OSSTMM 3 is Threatening Modern Security Practices |
| Type |
Slides
|
| Tags |
penetration testing
|
| Abstract |
Modern security has become just a dance-off between jargon and products. Enterprises are doing what their being told by compliance requirements, books, and blogs and it's not working or it's not scaling. The problem is we are being taught to build defenses like consumers and it fails us again and again. Then most of us learn to late however that it's failed because the verification methods and security metrics provided are biased or indirect and therefore point out unmanageable and imaginary cause/effect relationships. That's why ISECOM took a different direction with the OSSTMM 3. This short seminar will explain how and why the OSSTMM 3 is nothing like security that you know. There's no Risk analysis, no threat analysis, no patching, and no security awareness yet it works efficiently and economically. The operational security metrics and trust metrics you will see in action are realistic and allow for immediate and accurate defensive changes in your tactics and overall strategy. The OSSTMM 3 will challenge what you think you know about security. Be prepared to be amazed.
|
| Authors |
Pete Herzog
|
| Submitted |
January 13, 2011 |
| Rating |
Currently 0/5 stars (0 votes).
|
| Correlation |
| Linked to |
---
|
| Event |
Hashdays 2010
|
| Resource |
---
|
| Download |
| Source |
herzog_no_more_of_the_same_bad_security.pdf |
| Size |
1.8 MB |
| MD5 |
fff096f541cfff15e1d0091e81dbb1de
|
| SHA1 |
43184460d4db757804842cfb180f5df683f7afaa
|
top
