The Best Security Technology You Probably Aren’t Using




Pwned: The Information Security Podcast show

Summary: Show Notes: https://justinfimlaid.com/the-best-security-technology-you-probably-arent-using<br> <br> <br> <br> Sponsor: https://www.nuharborsecurity.com<br> <br> <br> <br> Contact Me: https://justinfimlaid.com/contact-me/<br> <br> <br> <br> Twitter: @justinfimlaid<br> <br> <br> <br> LinkedIn: https://www.linkedin.com/in/jfimlaid/<br> <br> <br> <br> With all the<br> breaches in the news as of late there’s been a lot of chatter about the<br> shifting threat landscape. I saw a post on social earlier in the week that got<br> me thinking; if the threat landscape is shifting - why is it that and how does<br> the collective industry slow things down so we can catch our breach and be<br> proactive with security.  The one piece<br> of security tech I rarely see folks using is deception technology, but maybe<br> the value of the tech is overlooked.<br> <br> <br> <br> The idea<br> of evolution and Darwinism is pretty established at this point. Whether you be<br> believe in creation or evolution it doesn’t matter too much but what I want to<br> dial into is the concept of natural selection, if you aren’t familiar with term<br> it’s the process whereby organisms better adapted to their environment tend to<br> survive and produce more offspring.  <br> Charles Darwin’s idea of natural selection is generally created as an<br> evolutionist  theory BUT the point I want<br> to highlight is I think we can all agree is the common thread here whether<br> you’re a evolutionist of creationist is…mutation.   As we, collectively, evolve as species and<br> as all species we mutate we migrate and create a sense of genetic drift from<br> the original DNA strains.   But at the<br> most fundamental level genetic drift occurs from testing.   We test food, if it poisons us we die. We<br> test our living environments, if it makes us sick we have a lower chance of<br> procreation. If we’re dispositioned to reckless habits it could limit our<br> ability to pass on our genetics and or lessons to the next generation if we’re<br> dead.<br> <br> <br> <br> Foundationally<br> speaking this is a very long term testing effort as a species but, what happens<br> if we couldn’t test.  What happens if the<br> test results were random.  I mean truly random.   What is something was gaming us all like<br> something out of the Hunger Games?  Two<br> people with the same genetic make up, eat the same berries - one gets poisoned<br> and dies and the other doesn’t.  What<br> happens those same two people with the same genetic make up live in an<br> environment that makes one sick but not the other.  If this was the case, it would be incredibly<br> hard to “test” and evolve.  Now, what<br> happens if that same idea applied to castle defenses?<br> <br> <br> <br> The idea<br> of attacking castles is well documented over time and there’s a long history or<br> action and reaction. An attacker storms the front gate and gets in, the<br> defenders react and build a moat if they have a next time.  The defenders build the walls higher, the<br> attackers build a siege tower to easily get soldiers over the walls.   The defenders build defense in depth and<br> attackers create the Trojan horse.  But<br> what would happen if attack results were truly random, sometimes you go through<br> the front gate…sometimes you didn’t. <br> Sometimes the moat was a problem, sometimes it wasn’t.  Sometimes you “thought” you got the Trojan<br> horse in, but you actually didn’t.  What<br> would have happened if the attackers thought they were exploiting castle<br> defense but were just wasting time and were delayed until the point they were<br> killed.  If this scenario was true - then<br> it’s safe to assume that the evolution of attacker techniques would be<br> slowed…because let’s be honest, they don’t know what does or doesn’t work.