Episode 60: Episode 169 - We Will Not Negotiate... The Southern Fried Security podcast

T

The Southern Fried Security Podcast

1

Episode 100: Episode 208 - All Good Things...34:01

1M ago34:01

34:01

It's been 9 years and over 210 different content items since we started this thing in January of 2010. As much as we hate it we feel it's time to end this project and start thinking about What Comes Next. Don't worry - the episodes and website aren't going anywhere anytime soon so you'll still be able to download all the content. We're also dis ...…

T

The Southern Fried Security Podcast

1

Episode 99: Episode 207 - On the Front Porch with Yvette and Brandon31:32

6M ago31:32

31:32

It's another Front Porch episode! Yvette talks to her friend Brandon Clark as his first novel "Ransomware" is about to be released. "Ransomware" is part of Brandon's "Killchain Chronicles" series that will be coming out over time. You can find the book here: https://www.amazon.com/gp/product/1732651108/ We will be back soon with more great new ...…

T

The Southern Fried Security Podcast

1

Episode 98: Episode 206 - The Front Porch w/@wendynather @securityincite @jwgoerlich1:00:57

8M ago1:00:57

1:00:57

Episode 206 - The Front Porch…. Welcome to the first of an occasional series of episodes featuring conversations with a variety of interesting people from both inside and outside of information security. In this inaugural episode you get to listen to dinner conversation between Wendy Nather, Mike Rothman, Wolfgang Goerlich, and Martin Fisher th ...…

T

The Southern Fried Security Podcast

1

Episode 97: Episode 205 - LIve from BSides Atlanta!58:13

9M ago58:13

58:13

We recorded this episode as the closing keynote at BSides Atlanta on May 5th, 2018. We want to give a big round of thanks to the organizers, volunteers, sponsors, and attendees of BSides Atlanta for a great venue and event. It was a great time and we hope to be there again next year.

T

The Southern Fried Security Podcast

1

Episode 96: Episode 204 - Evaluating Your Security Program: Communications Plan24:35

11M ago24:35

24:35

Episode 204 - Evaluating Your Security Program: Communications Plan Why Evaluate Your Program Part of annual policy review If you don’t evaluate you will never improve Continual review will help protect your budget Awareness and Education is how most people in your org know the program Threat Mapping maps the outside threats to your inside cont ...…

T

The Southern Fried Security Podcast

1

Episode 95: Episode 203 - Evaluating Your Security Program: Threat Mapping24:11

1y ago24:11

24:11

Show Notes Episode 203 - Evaluating Your Security Program: Threat Mapping Why Evaluate Your Program Part of annual policy review If you don’t evaluate you will never improve Continual review will help protect your budget Awareness and Education is how most people in your org know the program Threat Mapping maps the outside threats to your insid ...…

T

The Southern Fried Security Podcast

1

Episode 94: Episode 202: -Evaluating Your Security Program : Awareness & Education33:35

1y ago33:35

33:35

Episode 202 - Evaluating Your Security Program: Awareness & Education Why Evaluate Your Program Part of annual policy review If you don’t evaluate you will never improve Continual review will help protect your budget Awareness and Education is how most people in your org know the program Threat Mapping maps the outside threats to your inside co ...…

T

The Southern Fried Security Podcast

1

Episode 93: Episode 201 - Celebration27:50

1+ y ago27:50

27:50

We're going to use this episode to allow the cast to talk about reaching 200 episodes and you'll hear what *really* happened on the Lost Episode. We will be back in 2018 with more episodes. Until then be well and stay secure!

T

The Southern Fried Security Podcast

1

Episode 92: Episode 200 - Building a Security Strategy - Part III26:13

1+ y ago26:13

26:13

Episode 200 - Building A Security Strategy - Part III Recap Strategy vs Policy Understand the business of your Business Know who your stakeholders really are Capability = (Tech + Service) * Process Crawl, Walk, Run It Takes A Village The Question is “How do I make one?” Tech Tech, by itself, only consumes electricity and turns cool air into war ...…

T

The Southern Fried Security Podcast

1

Episode 91: Episode 199 - Building a Security Strategy - Part II28:04

1+ y ago28:04

28:04

Episode 199 - Building A Security Strategy - Part II Recap Strategy vs Policy Understand the business of your Business Know who your stakeholders really are Capability = (Tech + Service) * Process Crawl, Walk, Run It Takes A Village The Question is “How do I make one?” Almost no business is in the business of information security Follow The Mon ...…

T

The Southern Fried Security Podcast

1

Episode 90: Episode 198 - Building a Security Strategy Part 125:39

1+ y ago25:39

25:39

Episode 198 – Building a Security Strategy – Part 1 Strategy is the hardest thing a CISO will do in their career...except if they have to explain a massive breach… What is a Strategy? What’s the difference between a strategy and a policy? A policy is binding statements A strategy is thought out planning A list of tech you want to buy A remediat ...…

T

The Southern Fried Security Podcast

1

Episode 89: Episode 197 - After the Penetration Test26:42

1+ y ago26:42

26:42

Episode 197 - After the Penetration Test We've kind of talked about how to choose your vendors, and we’ll get more into services soon, but we wanted to take some time to talk about penetration tests and especially what to do as they wrap up, how they affect the organization, and how you can manage your penetration tests to make sure they're act ...…

T

The Southern Fried Security Podcast

1

Episode 88: Episode 196 - WannaCry: Woulda, Coulda, Shoulda29:39

1+ y ago29:39

29:39

SFS Podcast - Episode 196 Wannacry: Woulda, Coulda, Shoulda First and foremost: Why was medical hit so hard by WannaCry? See Episode 189 - Medical Device Security and Risky Business 455 - https://risky.biz/RB455/ The Lead-Up Threat Intelligence is A Thing Threat Intelligence is Hard Threat Intelligence Feeds are [REDACTED] for many/most Do Stay ...…

T

The Southern Fried Security Podcast

1

Episode 87: Episode 195 - Annual Policy Review - Making it Worthwhile34:53

2y ago34:53

34:53

Episode 195 - Annual Policy Review - Making It Worthwhile Define policy vs. standards vs. procedures What is a Policy? It is a guiding principle to set the direction of an organization. High level, governing, statements. Do not include technical details. Example: Policy statement = Users must authenticate with a unique ID and password Standard: ...…

T

The Southern Fried Security Podcast

1

Episode 86: Episode 194 - Evaluating Security Product Vendors24:46

2y ago24:46

24:46

Evaluating Security Product Vendors In light of recent news about “Vendors Behaving Badly” we want to talk about how a security professional should evaluate vendors and their products. Recent News: Tanium exposed hospital’s IT while using its network in sales demos: https://arstechnica.com/security/2017/04/security-vendor-uses-hospitals-network ...…

T

The Southern Fried Security Podcast

1

Episode 85: Episode 193 - Chief Information Security Oh-Crap26:51

2y ago26:51

26:51

Tonight's episode is all about those learning moments. CISOs and security orgs find new and interesting way to screw up all the time. Leaving that Any-Any rule in place on the new firewall… Disabling the CEOs account by accident… Not realizing that Shadow IT had just installed a new egress point… Here are our stories. The name have been changed ...…

T

The Southern Fried Security Podcast

1

Episode 84: Episode 192 - Security Waste27:49

2y ago27:49

27:49

Today's Topic: Security Waste - Buying new tools without maximizing use of current tool set It’s not just a security problem but we often add to our arsenal without fully (or even mostly) utilizing the tools that we do have. Problems associated with this are: Have more complexity in your environment Needing more staff or requiring current staff ...…

T

The Southern Fried Security Podcast

1

Episode 83: Episode 191 - Gone Phishin'29:52

2y ago29:52

29:52

The Southern Fried Security Podcast - Episode 191 - Gone Phishin’ Phishing your employees - Does it make them aware or do they feel mistrusted? Intro - Phishing - what is it typically? Example - Emails from a Prince in Nigeria, phished on Match.com, etc What is it? An email designed to get employees to click on suspicious links or give their cr ...…

T

The Southern Fried Security Podcast

1

Episode 82: Episode 190 - Burnout31:10

2y ago31:10

31:10

Episode 190 - Burnout Intro Why the topic of burnout? Because it affects all of us, and yet it’s not talked about much in this field Disclaimer: We am not a doctor. Or a psychiatrist or psychologist. Nor did we stay in a holiday inn express... Reason for sabbatical Martin’s story Personal Connection Symptoms may mirror depression “The Creeping ...…

T

The Southern Fried Security Podcast

1

Episode 81: Episode 189 - Bonus Track33:40

2y ago33:40

33:40

In this inaugural bonus track we release the interview we did with Nick Selby (@nselby) on his experience validating the work of MedSec on St. Medical devices.

T

The Southern Fried Security Podcast

1

Episode 80: Episode 189 - Medical Device Security31:39

2y ago31:39

31:39

SFS Podcast Episode: 189 Medical Device Security Intro Hospital devices (infusion pumps, CT, MRI, etc) Personal devices (pacemaker, insulin pumps, etc) Medical Devices are a broad category Discussion of Sentinel Events... This has some of the same threat landscape as the IoVCT, but the consequences can be much more serious. Lead times for devic ...…

T

The Southern Fried Security Podcast

1

Episode 79: Episode 188 - Memories & Prognostications19:27

2y ago19:27

19:27

Andy and Martin close out 2016 with a quick run through of the major stories of the year and look forward to what's to come in 2017. Thanks to everyone who came to BSides Atlanta!

T

The Southern Fried Security Podcast

1

Episode 78: Episode 187 - The Internet Is Down21:45

2+ y ago21:45

21:45

Martin, Steve, and Yvette discuss the recent DDoS of the DNS provider Dyn and what information security people should be considering in a world where terabit DDoS is a reality.

T

The Southern Fried Security Podcast

1

Episode 77: Episode 186 - Moral Compass25:38

2+ y ago25:38

25:38

Martin, Steve, and Yvette talk about recent events at Yahoo and the moral compass questions information security professionals and leaders may be forced to face when their employer appears to be doing something they shouldn't...

T

The Southern Fried Security Podcast

1

Episode 76: Episode 185 - Mo' Money20:26

2+ y ago20:26

20:26

For the first time we can think of it's just Yvette and Martin on this episode. The two of them talk about what to think about and what you might do if you run into some extra budget at the end of the year. Do you invest in shiny? What about services? Some training might be nice? Or so you score points with the team down the hall?…

T

The Southern Fried Security Podcast

1

Episode 75: Episode 184 - Nick Selby (@nselby)23:18

2+ y ago23:18

23:18

We interview Nick Selby (@nselby) about a recent blog post where he had a less than optimal experience with a managed security service provider. https://nselby.github.io/When-Security-Monitoring-Provides-Neither-Security-Nor-Monitoring/

T

The Southern Fried Security Podcast

1

Episode 74: Episode 183 - Third Party Risk25:59

2+ y ago25:59

25:59

Martin, Andy, and Steve talk about third party risk programs in light of breaches at Target, Banner Health, and other unfortunate souls.

T

The Southern Fried Security Podcast

1

Episode 73: The Southern Fried Security Podcast24:49

2+ y ago24:49

24:49

Joseph is on sabbatical but the rest of the crew talks about how infosec professionals should focus on their problems and how to effectively interact with "the business".

T

The Southern Fried Security Podcast

1

Episode 72: Episode 181 - WWDC Wish List with Guillaume Ross30:57

2+ y ago30:57

30:57

Guillaume’s last visit to the show: Episode 167 Last year’s WWDC episode WWDC 2016 Security Rumors and Wishes Possible Touch ID changes Touch ID for the Mac? Wishlist Encrypted iCloud Backups Permissions and Pairing Granular Location Access Better Public Wi-Fi, VPN And SSL/TLS Handling Reduced Annoyances and Increased Security on iOS Find us on ...…

T

The Southern Fried Security Podcast

1

Episode 71: Episode 180 - Interview with Patrick Heim24:52

2+ y ago24:52

24:52

This evening, Martin sat down with Patrick Heim from Dropbox. Enjoy the interview, and the gang will be back next episode.

T

The Southern Fried Security Podcast

1

Episode 70: Episode 179 - "Marketing Nazis"24:26

3y ago24:26

24:26

The 2016 DBIR OSVDB Thoughts on the DBIR Analyzing the 2016 Verizon Data Breach Investigations Report » Digital Shadows The DBIR’s ‘Forest’ of Exploit Signatures – Trail of Bits Blog Response to Kenna Security’s Explanation of the DBIR Vulnerability Mess | OSVDB Find us on Twitter: @SFSPodcast @armorguy @jsokoly @andywillingham @SteveD3 @jetset ...…

T

The Southern Fried Security Podcast

1

Episode 69: Episode 178 - Peak Vuln Logo23:37

3y ago23:37

23:37

This evening, Martin, Steve, and Joseph talk about overhyped vulnerabilities, and how that affects communication with the business. Badlock’s Site Sadlock Hyping vulnerabilities is no longer helping application security awareness | TechCrunch Find us on Twitter: @SFSPodcast @armorguy @jsokoly @andywillingham @SteveD3 @jetsetyvette And if you ha ...…

T

The Southern Fried Security Podcast

1

Episode 68: Episode 177 - Telling Tales23:56

3y ago23:56

23:56

Tonight, Martin and Joseph sit down and talk about communicating cautionary tales without turning them into FUD. US-CERT advisory on ransomware Find us on Twitter: @SFSPodcast @armorguy @jsokoly @andywillingham @SteveD3 @jetsetyvette And if you have any feedback, questions, or comments, drop us a comment or find us at @SFSPodcast on Twitter. An ...…

T

The Southern Fried Security Podcast

1

Episode 67: Episode 176 - Money Changes Everything28:59

3y ago28:59

28:59

InfoSec programs without money are like cereal but no milk, peanut butter but no jelly, Milli but no Vanilli… (Get over it, I’m old - Martin) Martin is doing a talk on “The ABCs of Getting Your InfoSec Program Funded” and we’re going to discuss how this works in the real world at all of the different levels. Find us on Twitter: @SFSPodcast @arm ...…

T

The Southern Fried Security Podcast

1

Episode 66: Episode 175 - RSAC Wrapup and More27:17

3y ago27:17

27:17

Episode 175 - RSAC Wrapup and More... Congrats to Risky Business for winning this year’s podcast of the year! RSA: Let’s get an update from our reporter on the scene: Mr. Steve Ragan. Fear and loathing at RSA: Hacking, security and the limits of protection | TechCrunch Hack the Planet! I mean the Pentagon: U.S. military invites vetted experts t ...…

T

The Southern Fried Security Podcast

1

Episode 65: Episode 174 - Doing Threat Intelligence Smartly26:54

3y ago26:54

26:54

We’ve been nominated for the 2016 Security Blogger Awards! Topic: Threat Intel Norse Corp disappears shortly after CEO is asked to step down Digital Shadows announces 14 million series B fund raising PDF WARNING - Threat Intelligence Maturity Model (tl;dr - Intel programs are hard and take years to get right) Forrester - Maximizing your investm ...…

T

The Southern Fried Security Podcast

1

Episode 64: Episode 173 - Vendor Relationships27:06

3y ago27:06

27:06

We’ve been nominated for the 2016 Security Blogger Awards! Topic: Vendor Relationships Trend Micro AV gave any website command-line access to Windows PCs Google security researcher excoriates TrendMicro for critical AV defects Trustwave lawsuit Norse story Demos: Pro Tip: Kicking off your demo with "I hope you'll understand these concepts" sets ...…

T

The Southern Fried Security Podcast

1

Episode 63: Episode 172 - Security Awareness Deep Dive26:45

3y ago26:45

26:45

Topic: Security Awareness Some people think it's a waste of time: Why you shouldn’t train employees for security awareness Schneier on Security Awareness Training Does security awareness training even work? But, that said, it's a requirement for government agencies and regulated industries: HHS Security Awareness and Training Requirements Priva ...…

T

The Southern Fried Security Podcast

1

Episode 62: Episode 171 - 2015 in Review32:37

3+ y ago32:37

32:37

Tonight, Martin, Joseph, Steve, and Andy got together and went over how their 2015 predictions went, and laid out what their predictions were for 2016. The gang is on break from now until the new year, happy holidays!

T

The Southern Fried Security Podcast

1

Episode 61: Episode 170 - The Gang's All Here29:26

3+ y ago29:26

29:26

Check for signs of the apocalypse, everyone was here tonight... Comcast resets nearly 200,000 passwords In the era of GPS, Naval Academy revives celestial navigation How Carders Can Use eBay as a Virtual ATM What Flu Season Can Teach Us About Fighting Cyberattacks Find us on Twitter: @SFSPodcast @jsokoly @steveD3 @armorguy @jetsetyvette…

T

The Southern Fried Security Podcast

1

Episode 60: Episode 169 - We Will Not Negotiate...24:10

3+ y ago24:10

24:10

This week, Andy's back! The FitBit "hack" The FBI's Advice on Ransomware? Just Pay The Ransom Find us on Twitter: @SFSPodcast @jsokoly @steveD3

T

The Southern Fried Security Podcast

1

Episode 59: Microcast - Interview with Jessy from 1Password12:41

3+ y ago12:41

12:41

Dale Myers - 1Password Leaks Your Data AgileBits - When a Leak Isn't a Leak Jessy on Twitter Joseph on Twitter Steve on Twitter

T

The Southern Fried Security Podcast

1

Episode 58: Episode 168 - Passwords Passwords Passwords30:50

3+ y ago30:50

30:50

Tonight, Steve and Joseph talked password managers and consumer reports for cybersecurity. LogMeIn now owns LastPass Troy Hunt's article on switching from LastPass Websites, Please Stop Blocking Password Managers. It's 2015 Mudge's Consumer Cyber Reports Find us on Twitter: @SFSPodcast @jsokoly @steveD3…

T

The Southern Fried Security Podcast

1

Episode 57: Episode 167 - Content Blockers with Guillaume Ross35:24

3+ y ago35:24

35:24

This week, Joseph and Guillaume Ross talked content blockers, phishing consequences, and home network monitoring. Back to Work Episode 239 Accidental Tech Podcast Episode 136 FireEye: Forbes.com served malicious ads to visitors | CSO Online Ad Blocking, Ad Networks, & Your IP Address DHS infosec chief: We should pull clearance of feds who fail ...…

T

The Southern Fried Security Podcast

1

Episode 56: Episode 166 - Interview with Martin Fisher23:38

3+ y ago23:38

23:38

This week Martin and Joseph sat down and talked about stress, burnout, and why Martin took a break for a while.

T

The Southern Fried Security Podcast

1

Episode 55: Episode 165 - Evergreen Content30:15

3+ y ago30:15

30:15

Tweet from Ed Willson Chrome and Firefox dump Flash Netflix dumps antivirus Windows 10: Even When Told Not To, Windows 10 Can't Stop Talking to Microsoft Even the pirates are nervous about Windows 10 Timcast - Windows 10 is spying on you and it's super creepy Where you can find us: @SFSPodcast @jsokoly @steved3…

T

The Southern Fried Security Podcast

1

Episode 54: Episode 164 - Why We Can't Have Nice Things33:43

3+ y ago33:43

33:43

This week's show notes: Vegas: BlackHat Day 1 Car Hacking BlackHat Day 2 Defcon Roundup @sawaba's BSides Talk Washington Post's Article on l0pht Oracle's CSO makes a questionable publishing decision Where you can find us: @SFSPodcast @jsokoly @steved3

T

The Southern Fried Security Podcast

1

Episode 53: Interview with Wendy Nather30:34

3+ y ago30:34

30:34

No full episode this week thanks to Security Summer Camp, but Martin got to sit down and chat with good friend of the podcast Wendy Nather. We'll be back soon!

T

The Southern Fried Security Podcast

1

Episode 52: Episode 163 - The Triumphant Return26:36

3+ y ago26:36

26:36

Life is Short. For some it may get shorter? Archuleta is out at OPM: Who didn't see that one coming? If you look for breaches, you might find them. Darkode Shutdown: Former FireEye Intern Accused Of Creating $65,000 Android Malware - Forbes BREAKING: UCLA Health breach hits data of 4.5M - Modern Healthcare…

T

The Southern Fried Security Podcast

1

Episode 51: Episode 162 - Hackers Hacking Hackers Who Hack Things24:47

3+ y ago24:47

24:47

Tonight, Joseph and Steve tackled the Hacking Team breach: why it's interesting, what's happening, and some of the data that's come out so far. Hacking Team hacked, attackers claim 400GB in dumped data | CSO Online Hacking Team responds to data breach, issues public threats and denials | CSO Online Find us on Twitter: @SFSPodcast @jsokoly @SteveD3…

The Southern Fried Security Podcast « »
Episode 60: Episode 169 - We Will Not Negotiate...

Welcome to Player FM

The Southern Fried Security Podcast « » Episode 60: Episode 169 - We Will Not Negotiate...

Welcome to Player FM

Take it with you

The Southern Fried Security Podcast « »
Episode 60: Episode 169 - We Will Not Negotiate...