Successfully reported this slideshow.
We use your LinkedIn profile and activity data to personalize ads and to show you more relevant ads. You can change your ad preferences anytime.

DevSecCon London 2018: Lessons from the legion (the DevSecCon London Remix)

179 views

Published on

NICK DRAGE
The popularity of DevSecCon, and the enthusiasm for DevSecOps as a concept, shows that there is a desire for significant change within the IT industry – that merely improving our abilities, and our tooling, hasn’t provided the gains we expected and hoped for. This presentation will demonstrate the value of ideas from diverse areas, providing a range of examples where others have faced similar situations regarding conflict, training, adversaries, or complexity, and showing how we can use those ideas to improve our own processes and practice.

Published in: Technology
  • Got a new Iphone 6 in just 7 days completing surveys and offers! Now I'm just a few days away from completing and receiving my samsung tablet! Highly recommended! Definitely the best survey site out there! ➤➤ https://bit.ly/2Ruzr8s
       Reply 
    Are you sure you want to  Yes  No
    Your message goes here
  • Be the first to like this

DevSecCon London 2018: Lessons from the legion (the DevSecCon London Remix)

  1. 1. Nick Drage – Path Dependence – @SonOfSunTzu Lessons From The Legion Nick Drage Path Dependence Limited DevSecCon - 19 Oct 18 V 4.11 - 19Oct
  2. 2. LONDON 18-19 OCT 2018 Lessons From the Legion ( The DevSecCon Remix ) NICK DRAGE
  3. 3. Nick Drage – Path Dependence – @SonOfSunTzu
  4. 4. LONDON 18-19 OCT 2018 Lessons From the Legion ( The DevSecCon Remix ) NICK DRAGE
  5. 5. Nick Drage – Path Dependence – @SonOfSunTzu I have a question
  6. 6. Nick Drage – Path Dependence – @SonOfSunTzu You’ll Have Questions... ● Available afterwards ● Contact details at the end ● All references blogged ● All media – owner’s copyright ● If no credit, probably Pixabay
  7. 7. Nick Drage – Path Dependence – @SonOfSunTzu
  8. 8. Nick Drage – Path Dependence – @SonOfSunTzu
  9. 9. Nick Drage – Path Dependence – @SonOfSunTzu
  10. 10. Nick Drage – Path Dependence – @SonOfSunTzu
  11. 11. Nick Drage – Path Dependence – @SonOfSunTzu
  12. 12. Nick Drage – Path Dependence – @SonOfSunTzu
  13. 13. Nick Drage – Path Dependence – @SonOfSunTzu Tactics ● System Administrators ● Developers ● Security Operations
  14. 14. Nick Drage – Path Dependence – @SonOfSunTzu How do we learn and train
  15. 15. Nick Drage – Path Dependence – @SonOfSunTzu Matt Wiebe - a lonely robot - https://www.flickr.com/photos/mattwieve/29221303838 CC2.0
  16. 16. Nick Drage – Path Dependence – @SonOfSunTzu BreachLevelIndex.com
  17. 17. Nick Drage – Path Dependence – @SonOfSunTzu BreachLevelIndex.com
  18. 18. Nick Drage – Path Dependence – @SonOfSunTzu
  19. 19. Nick Drage – Path Dependence – @SonOfSunTzu
  20. 20. Nick Drage – Path Dependence – @SonOfSunTzu
  21. 21. Nick Drage – Path Dependence – @SonOfSunTzu
  22. 22. Nick Drage – Path Dependence – @SonOfSunTzu What’s wrong with Golf? ● Nothing wrong with golf ● … or training for golf ● … if you’re going to play golf. Image: Costume SuperCentre
  23. 23. Nick Drage – Path Dependence – @SonOfSunTzu
  24. 24. Nick Drage – Path Dependence – @SonOfSunTzuhttps://www.competitivedge.com/catalog/all-sports
  25. 25. Nick Drage – Path Dependence – @SonOfSunTzu TRIZ ● Russian - “Theory of Inventive Problem Solving” ● Characteristics of problems ● Patterns in solutions ● A sufficient level of abstraction ● Use other’s solutions
  26. 26. Nick Drage – Path Dependence – @SonOfSunTzu
  27. 27. Nick Drage – Path Dependence – @SonOfSunTzu By Oxford Creativity - Own work, CC BY-SA 4.0 https://commons.wikimedia.org/w/index.php?curid=40358248
  28. 28. Nick Drage – Path Dependence – @SonOfSunTzu Strategic Inflection Point
  29. 29. Nick Drage – Path Dependence – @SonOfSunTzu Jump the s-curve
  30. 30. Nick Drage – Path Dependence – @SonOfSunTzu So ...
  31. 31. Nick Drage – Path Dependence – @SonOfSunTzu
  32. 32. Nick Drage – Path Dependence – @SonOfSunTzu ● Utterly incomprehensible from outside ● Complex ● Team games ● Highly specialised – By situation – Attack or Defend ● Fight over territory ● Offensive or defensive playbooks
  33. 33. Nick Drage – Path Dependence – @SonOfSunTzuhttps://media.defense.gov/
  34. 34. Nick Drage – Path Dependence – @SonOfSunTzu
  35. 35. Nick Drage – Path Dependence – @SonOfSunTzu ● Get screenshot about 14 seconds in to https://www.youtube.com/watch?v=f1ZK7T5dezI
  36. 36. Nick Drage – Path Dependence – @SonOfSunTzu
  37. 37. Nick Drage – Path Dependence – @SonOfSunTzu
  38. 38. Nick Drage – Path Dependence – @SonOfSunTzu Seattle Seahawks’ Defense – 2011 to 2017 ● Sherman - CornerBack ● Thomas – Free Safety ● Chancellor – Strong Safety ● Everyone
  39. 39. Nick Drage – Path Dependence – @SonOfSunTzu 2012-2015 ● Fewest points allowed 2012, 2013, 2014, 2015 – NFL Record Image: ESPN
  40. 40. Nick Drage – Path Dependence – @SonOfSunTzu 2012-2015 ● Lead the league – Fewest Passing Yards Allowed ● Lead the league – Fewest First Downs ● 2nd Quarterback Pressures ● 4th Rushing Yards per carry ● 6th in takeways ● Always high in DVOA ranking
  41. 41. Nick Drage – Path Dependence – @SonOfSunTzu LESSON – “shift left” your conflict
  42. 42. Nick Drage – Path Dependence – @SonOfSunTzu Practice is everything
  43. 43. Nick Drage – Path Dependence – @SonOfSunTzu
  44. 44. Nick Drage – Path Dependence – @SonOfSunTzu
  45. 45. Nick Drage – Path Dependence – @SonOfSunTzu The Caffrey Triangle
  46. 46. Nick Drage – Path Dependence – @SonOfSunTzu
  47. 47. Nick Drage – Path Dependence – @SonOfSunTzu Image:FrasierScott
  48. 48. Nick Drage – Path Dependence – @SonOfSunTzu
  49. 49. Nick Drage – Path Dependence – @SonOfSunTzu
  50. 50. Nick Drage – Path Dependence – @SonOfSunTzu The Base of Sand Problem
  51. 51. Nick Drage – Path Dependence – @SonOfSunTzu Footnote 3 “Battle outcomes have historically borne no relationship to the raw force ratio... ...what matters is the ratio of effective forces” ( emphasis mine )
  52. 52. Nick Drage – Path Dependence – @SonOfSunTzu
  53. 53. Nick Drage – Path Dependence – @SonOfSunTzu
  54. 54. Nick Drage – Path Dependence – @SonOfSunTzu LESSON – Eliminate the big play
  55. 55. Nick Drage – Path Dependence – @SonOfSunTzu
  56. 56. Nick Drage – Path Dependence – @SonOfSunTzu
  57. 57. Nick Drage – Path Dependence – @SonOfSunTzu NIST – five core functions https://medium.com/@TechTieu/cyber-security-framework-66aa07c1b7a5
  58. 58. Nick Drage – Path Dependence – @SonOfSunTzu NIST – five core functions https://medium.com/@TechTieu/cyber-security-framework-66aa07c1b7a5
  59. 59. Nick Drage – Path Dependence – @SonOfSunTzu NIST – five core functions https://medium.com/@TechTieu/cyber-security-framework-66aa07c1b7a5
  60. 60. Nick Drage – Path Dependence – @SonOfSunTzu NIST – five core functions https://medium.com/@TechTieu/cyber-security-framework-66aa07c1b7a5
  61. 61. Nick Drage – Path Dependence – @SonOfSunTzu Drive chart Wikipedia:ByRunfellow-Ownwork,derivedfromFile:AmFBfield.svgby userXyzzyn,CCBY-SA3.0,https://commons.wikimedia.org/w/index.php? curid=22524383 +3
  62. 62. Nick Drage – Path Dependence – @SonOfSunTzu
  63. 63. Nick Drage – Path Dependence – @SonOfSunTzu
  64. 64. Nick Drage – Path Dependence – @SonOfSunTzu Sounil Yu - matrix
  65. 65. Nick Drage – Path Dependence – @SonOfSunTzu Sounil Yu - right of boom
  66. 66. Nick Drage – Path Dependence – @SonOfSunTzu Sounil Yu - right of boom
  67. 67. Nick Drage – Path Dependence – @SonOfSunTzu
  68. 68. Nick Drage – Path Dependence – @SonOfSunTzu
  69. 69. Nick Drage – Path Dependence – @SonOfSunTzu
  70. 70. Nick Drage – Path Dependence – @SonOfSunTzu
  71. 71. Nick Drage – Path Dependence – @SonOfSunTzu As we’re meant to be resilient now http://csd.ncb.mu/English/Pages/Presentations/Mauritius%20Event%20Dec2013v1%20Symantec.pdf
  72. 72. Nick Drage – Path Dependence – @SonOfSunTzu NCSC - “Cyber resilience - nothing to sneeze at”
  73. 73. Nick Drage – Path Dependence – @SonOfSunTzu Blog - Black Swan Security
  74. 74. Nick Drage – Path Dependence – @SonOfSunTzu
  75. 75. Nick Drage – Path Dependence – @SonOfSunTzu OODA: Observe – Orient – Decide - Act
  76. 76. Nick Drage – Path Dependence – @SonOfSunTzu
  77. 77. Nick Drage – Path Dependence – @SonOfSunTzu Image:MarkSkillen
  78. 78. Nick Drage – Path Dependence – @SonOfSunTzu LESSON – out hit your opponent The evidence of history is that soft factors: command-control processes, tactics, and strategy, are first-order determinants of both deterrence and war outcomes ( emphasis mine )
  79. 79. Nick Drage – Path Dependence – @SonOfSunTzu
  80. 80. Nick Drage – Path Dependence – @SonOfSunTzu
  81. 81. Nick Drage – Path Dependence – @SonOfSunTzu
  82. 82. Nick Drage – Path Dependence – @SonOfSunTzu
  83. 83. Nick Drage – Path Dependence – @SonOfSunTzu Bartle’s Taxonomy of Player Types
  84. 84. Nick Drage – Path Dependence – @SonOfSunTzu
  85. 85. Nick Drage – Path Dependence – @SonOfSunTzuImage: Yan Cui
  86. 86. Nick Drage – Path Dependence – @SonOfSunTzu
  87. 87. Nick Drage – Path Dependence – @SonOfSunTzuITHare.com
  88. 88. Nick Drage – Path Dependence – @SonOfSunTzu
  89. 89. Nick Drage – Path Dependence – @SonOfSunTzu
  90. 90. Nick Drage – Path Dependence – @SonOfSunTzu Image:MeadowEllis
  91. 91. Nick Drage – Path Dependence – @SonOfSunTzu Image:DevSecCon
  92. 92. Nick Drage – Path Dependence – @SonOfSunTzu
  93. 93. Nick Drage – Path Dependence – @SonOfSunTzu
  94. 94. Nick Drage – Path Dependence – @SonOfSunTzu
  95. 95. Nick Drage – Path Dependence – @SonOfSunTzu
  96. 96. Nick Drage – Path Dependence – @SonOfSunTzu
  97. 97. Nick Drage – Path Dependence – @SonOfSunTzu
  98. 98. Nick Drage – Path Dependence – @SonOfSunTzu
  99. 99. Nick Drage – Path Dependence – @SonOfSunTzu
  100. 100. Nick Drage – Path Dependence – @SonOfSunTzu
  101. 101. Nick Drage – Path Dependence – @SonOfSunTzu CHANGE CONTROL?
  102. 102. Nick Drage – Path Dependence – @SonOfSunTzu
  103. 103. Nick Drage – Path Dependence – @SonOfSunTzu
  104. 104. Nick Drage – Path Dependence – @SonOfSunTzu
  105. 105. Nick Drage – Path Dependence – @SonOfSunTzu
  106. 106. Nick Drage – Path Dependence – @SonOfSunTzu
  107. 107. Nick Drage – Path Dependence – @SonOfSunTzu
  108. 108. Nick Drage – Path Dependence – @SonOfSunTzuhttps://gds.blog.gov.uk/2015/07/10/you-cant-be-half-agile/
  109. 109. Nick Drage – Path Dependence – @SonOfSunTzu
  110. 110. Nick Drage – Path Dependence – @SonOfSunTzu
  111. 111. Nick Drage – Path Dependence – @SonOfSunTzu ● Get screenshot about 14 seconds in to https://www.youtube.com/watch?v=f1ZK7T5dezI
  112. 112. Nick Drage – Path Dependence – @SonOfSunTzu LESSONS ● Use others’ lessons ● Practice Is Everything ● Eliminate the Big Play ● Out Hit Your Opponent ● Or try to Golf our way through American Football...
  113. 113. Nick Drage – Path Dependence – @SonOfSunTzu
  114. 114. Nick Drage – Path Dependence – @SonOfSunTzu
  115. 115. LONDON 18-19 OCT 2018 [Nick Drage nickd@pathdependence.co.uk blog.sonofsuntzu.org.uk @SonofSunTzu]
  116. 116. Nick Drage – Path Dependence – @SonOfSunTzu BREAK BREAK BREAK

×