More Related Content
What's hot
What's hot (10)
Similar to GrrCon 2018 - Getting Into InfoSec
Similar to GrrCon 2018 - Getting Into InfoSec (20)
Recently uploaded
Recently uploaded (20)
GrrCon 2018 - Getting Into InfoSec
- 3. Agenda: ā¢āÆ Whoās the hairy thing in a kilt? ā¢āÆ Industry history ā¢āÆ How to break into ācyberā ā¢āÆ How to break into the corporate worldā¦ ā¢āÆ Why we really need you to break in ā¢āÆ Why we need ALL of you in, not just the geeksā¦ ā¢āÆ The family, who we are, why we are hereā¦ ā¢āÆ CommunicaQon, collaboraQon and understandingā¦ ā¢āÆ The bigger picture, WHY we need to do thisā¦ ā¢āÆ Final thoughts
- 4. The Goateeā¦ ā¢āÆ In the InfoSec/Cyber industry for too many years... ā¢āÆ Broke Nigeria, ISS, Mars Rover, airplanes, trains, etc. āāÆ Researched a whole lot moreā¦ ā¢āÆ Now working at Lares and consulQng to AWvo āāÆ Why? Because we need to change this industry āāÆ Why? Because we are going to lead from the FRONT ā¢āÆ Currently researching humans, AI, ML and consciousness compuQngā¦ āāÆ Because thereās beEer ways than passwords! āāÆ Because the futureās not already scary enough J āāÆ Because weāre heading oļ¬ the cliļ¬ā¦and we need to wake up ā¢āÆ Might also have a whisky collecQon that borders on the obsessiveā¦ āāÆ Occasionally travels with the whisky football (thanks Inbar!)
- 6. Agenda: ā¢āÆ Whoās the hairy thing in a kilt? ā¢āÆ Industry history ā¢āÆ How to break into ācyberā ā¢āÆ How to break into the corporate worldā¦ ā¢āÆ Why we really need you to break in ā¢āÆ Why we need ALL of you in, not just the geeksā¦ ā¢āÆ The family, who we are, why we are hereā¦ ā¢āÆ CommunicaQon, collaboraQon and understandingā¦ ā¢āÆ The bigger picture, WHY we need to do thisā¦ ā¢āÆ Final thoughts
- 8. Wrong!
- 10. WTF Happened?
- 11. Today?
- 14. WE NEED BALANCE!
- 16. Why Now?
- 17. Agenda: ā¢āÆ Whoās the hairy thing in a kilt? ā¢āÆ Industry history ā¢āÆ How to break into ācyberā ā¢āÆ How to break into the corporate worldā¦ ā¢āÆ Why we really need you to break in ā¢āÆ Why we need ALL of you in, not just the geeksā¦ ā¢āÆ The family, who we are, why we are hereā¦ ā¢āÆ CommunicaQon, collaboraQon and understandingā¦ ā¢āÆ The bigger picture, WHY we need to do thisā¦ ā¢āÆ Final thoughts
- 18. Know Your Basics ā¢āÆ Computer science āāÆ What IS a computer? āāÆ How does it bloody work? ā¢āÆ Networking āāÆ What is it, how does it work ALL spectrums āāÆ Breaking packets downā¦ ā¢āÆ Core programming āāÆ Perl, Python, C++, Assembly, etc. ā¢āÆ CompuQng in the REAL worldā¦ āāÆ From mainframes to embedded devices, learn the diļ¬erences āāÆ What WILL you ļ¬nd in a corporaQon? (And the verQcal diļ¬erences)
- 19. Know Your Basics ā¢āÆ External ā¢āÆ Internal ā¢āÆ Physical ā¢āÆ Signal ā¢āÆ Human ā¢āÆ PPCās ā¢āÆ ReporQngā¦
- 20. More Damm Basics ā¢āÆ CommunicaQons, verbal, non-verbal, etc. ā¢āÆ The wriEen language PLEASE! ā¢āÆ Psychology, know your audience. ā¢āÆ Sociology, know their surroundingsā¦ ā¢āÆ Human behavioral sciences, know why! ā¢āÆ Abstract thinking skills ā¢āÆ Logical and transforming skills
- 21. Know Your IniQal LimitaQonsā¦ ā¢āÆ I want to be a penetraQon testerā¦ ā¢āÆ I want to be RED ā¢āÆ I want to leap from tall buildingsā¦ ā¢āÆ I want to break all the cyber ā¢āÆ I want to build a botnet and take over Africaā¦ ā¢āÆ Actually what you want is BLUE, learn tradecrak AND know HOW RED thinksā¦ and then you can decide!
- 24. Certs vs. Experience ā¢āÆ Experience counts ā¢āÆ Certs get you in the door IF you go via HR ā¢āÆ Experience will get you to the geeks who hire ā¢āÆ Certs get you to the āBig4ā and othersā¦ ā¢āÆ Experience is valued by most of usā¦ ā¢āÆ Certs are valued by some leadership (and clients)
- 26. PracQce Breathing! ā¢āÆ PaMence, if you are new it takes Qme to build up the personal brand, the Qme and eļ¬ort spend on it WILL pay oļ¬. ā¢āÆ Enthusiasm, donāt loose it, even when things seem like theyāve hit the brick wallā¦ ā¢āÆ Perseverance, see above, that brick wall can take Qme to clearā¦this industry is NOT easy! ā¢āÆ Interest, show it, keep it, build it, focus it and conQnually evolve it.
- 27. Agenda: ā¢āÆ Whoās the hairy thing in a kilt? ā¢āÆ Industry history ā¢āÆ How to break into ācyberā ā¢āÆ How to break into the corporate worldā¦ ā¢āÆ Why we really need you to break in ā¢āÆ Why we need ALL of you in, not just the geeksā¦ ā¢āÆ The family, who we are, why we are hereā¦ ā¢āÆ CommunicaQon, collaboraQon and understandingā¦ ā¢āÆ The bigger picture, WHY we need to do thisā¦ ā¢āÆ Final thoughts
- 28. TradiQonal OR Other? ā¢āÆ TradiQonal route is simply applying Qme and Qme again to companies ā¢āÆ Otherā¦is what weāll talk about here, how to leverage OUR world to help. ā¢āÆ Otherā¦is also using social media. ā¢āÆ Otherā¦is using brains over brawn, something we should be good at (someQmes) ā¢āÆ Otherā¦is going to take extra work, suck it up itās worth it!
- 29. Job Rolesā¦ ā¢āÆ Security analyst, blue team SOC ā¢āÆ Security engineer, tamer of all the blinky shit ā¢āÆ Forensic analyst, digger of all things digital ā¢āÆ Malware analyst, collector of bugs ā¢āÆ Incident response, bringer of Advil and Qssues ā¢āÆ Audit and compliance, ļ¬ller of formsā¦ ā¢āÆ Threat analyst, speaker in tonguesā¦ ā¢āÆ IdenQty and access management, keeper of the keys ā¢āÆ PenetraQon tester, tamer of the bits and bytes ā¢āÆ Vulnerability researcher, digger of code
- 30. LinkedIn ā¢āÆ USE IT! āāÆ Seriously, get a GOOD proļ¬le up and running āāÆ Start to talk with people, reach out āāÆ Start to interact on topics you care about āāÆ Start to do your OSINT and HUMINT on companies, on people and on areas you want to focus on! āāÆ Engage with people, with groups, LISTEN lots, talk when you have something to contribute. āāÆ Keep it short, concise and to the pointā¦essays scare people. (LinkedIn posts are 1300 characters for a reason!)
- 31. YOUR Brandā¦ ā¢āÆ Tell me about yourself? āāÆ ARGHā¦Umā¦Ahā¦ ā¢āÆ Tell me about yourself? āāÆ I blogā¦ (Peerlyst, LinkedIn, BrightTALK, Conference Forums) āāÆ I work within the community (HFC, Hak4kidz, ILF, EFF, Etc.) āāÆ I goto conferences (HERE!) āāÆ I take part in CTFās or Hackathons or villages or (insert here) āāÆ I research in my own lab environmentā¦ āāÆ I work with āxā whoās a mentorā¦ āāÆ Iām contribuQng to āxā where āxā is a book, paper, arQcle, etc.
- 33. Congrats! They Want To Talkā¦ ā¢āÆ OSINT the damm company, know WHO they are ā¢āÆ Bring the damm resume and something to take notes withā¦ ā¢āÆ Be early, hide round the corner, steal a car, donāt be late! ā¢āÆ LEAVE the electronics behind! ā¢āÆ DONāT hack the damm company and explain how to help ļ¬x it! ā¢āÆ Eye contact, pay aEenQon, be direct (but civilized) ā¢āÆ Be honest, nobody knows everything, DONāT bullshit ā¢āÆ If you are new, talk about your research, your hobbies, etc. ā¢āÆ Talk about being here! Hell, Iāll back you up! ā¢āÆ DONāT talk about hacking āxā and how you broke inā¦ ā¢āÆ DO talk about your work with BugCrowd, HackerOne, etc.
- 34. Sok Skills ā¢āÆ CommunicaQon (lots of references here!) ā¢āÆ WriQng (PLEASE!) ā¢āÆ Listening (Seriously, we NEED to do this more!) ā¢āÆ EmoQonal Intelligence (ourselves and in others!) ā¢āÆ Public Speaking (Get up here!) ā¢āÆ CriQcal Thinking (ObjecQve analysis) ā¢āÆ Leadership (Step the F**k up!) ā¢āÆ PosiQve AWtude (Yeaā¦we DO have to have this!) ā¢āÆ Teamwork (We have to work with othersā¦someQmes)
- 37. Interviews: Keep It To Yourselfā¦ ā¢āÆ Yes, Chinaās hacking us āāÆ And weāre hacking themā¦ ā¢āÆ Yes, North Koreaās got talent āāÆ Weāve got a few good folks tooā¦ ā¢āÆ Yes, Russia is in our infrastructure āāÆ You think weāre not in theirs? ā¢āÆ Yes, the NSAās listening āāÆ Two can play at that game ;-) ā¢āÆ Yes, AnQ-Virus sucks āāÆ But doing nothing is worse, build a beEer mousetrap in your spare Qme! ā¢āÆ Yes, users can be exasperaQngā¦ āāÆ SO CAN WE!
- 39. It Is NOT An Overnight Thingā¦ ā¢āÆ A LOT of jobs want 1-3 years of experience? āāÆ You NEED experience to GET the experience?!? ā¢āÆ So, you donāt have it in the 9-5 world? āāÆ Whatās stopping you from doing it at night? āāÆ Whatās stopping you from doing bug bounQes? āāÆ Whatās stopping you from volunteering? āāÆ Whatās stopping you from building it yourself? āāÆ Whatās stopping you from geWng involved? āāÆ Stop talking start coding! āāÆ Quit the āI wantā and simply DO
- 40. Agenda: ā¢āÆ Whoās the hairy thing in a kilt? ā¢āÆ Industry history ā¢āÆ How to break into ācyberā ā¢āÆ How to break into the corporate worldā¦ ā¢āÆ Why we really need you to break in ā¢āÆ Why we need ALL of you in, not just the geeksā¦ ā¢āÆ The family, who we are, why we are hereā¦ ā¢āÆ CommunicaQon, collaboraQon and understandingā¦ ā¢āÆ The bigger picture, WHY we need to do thisā¦ ā¢āÆ Final thoughts
- 41. 41
- 42. Current State Of The Union ā¢āÆ We are adding more and more complex technology. ā¢āÆ We are handing that technology to a populaQon that doesnāt understand, or care about security. ā¢āÆ We are integraQng it into our homes, oļ¬ces, bodies, cars, livesā¦ ā¢āÆ We donāt have enough qualiļ¬ed people to manage the current list of issues, let alone the future. ā¢āÆ We donāt have good eyes on our own environmentsā¦
- 44. Our Industry Status ā¢āÆ Currently weāre short 2-3-4-500,000 folksā¦ ā¢āÆ Future predicQons anywhere from 2-4 Million ā¢āÆ Weāre in negaQve unemployment, yea (not!) ā¢āÆ Salaries are good (back to that experience thing) ā¢āÆ Money is NOT everythingā¦ ā¢āÆ We DO need more good peopleā¦
- 46. Agenda: ā¢āÆ Whoās the hairy thing in a kilt? ā¢āÆ Industry history ā¢āÆ How to break into ācyberā ā¢āÆ How to break into the corporate worldā¦ ā¢āÆ Why we really need you to break in ā¢āÆ Why we need ALL of you in, not just the geeksā¦ ā¢āÆ The family, who we are, why we are hereā¦ ā¢āÆ CommunicaQon, collaboraQon and understandingā¦ ā¢āÆ The bigger picture, WHY we need to do thisā¦ ā¢āÆ Final thoughts
- 50. Agenda: ā¢āÆ Whoās the hairy thing in a kilt? ā¢āÆ Industry history ā¢āÆ How to break into ācyberā ā¢āÆ How to break into the corporate worldā¦ ā¢āÆ Why we really need you to break in ā¢āÆ Why we need ALL of you in, not just the geeksā¦ ā¢āÆ The family, who we are, why we are hereā¦ ā¢āÆ CommunicaQon, collaboraQon and understandingā¦ ā¢āÆ The bigger picture, WHY we need to do thisā¦ ā¢āÆ Final thoughts
- 53. Get Involved!
- 54. Agenda: ā¢āÆ Whoās the hairy thing in a kilt? ā¢āÆ Industry history ā¢āÆ How to break into ācyberā ā¢āÆ How to break into the corporate worldā¦ ā¢āÆ Why we really need you to break in ā¢āÆ Why we need ALL of you in, not just the geeksā¦ ā¢āÆ The family, who we are, why we are hereā¦ ā¢āÆ CommunicaQon, collaboraQon and understandingā¦ ā¢āÆ The bigger picture, WHY we need to do thisā¦ ā¢āÆ Final thoughts
- 55. CommunicaQon ā¢āÆ How to communicate without the FUD āāÆActual defensible staQsQcs āāÆIgnore the vendors, seek independent numbers! ā¢āÆ How to communicate without geek speak āāÆWE have to speak other peoples language āāÆWE have to be able to explain our world to others ā¢āÆ How to listen āāÆWe have TWO ears and ONE mouth for a reason āāÆACTUALLY listen, donāt smile and nodā¦
- 59. Agenda: ā¢āÆ Whoās the hairy thing in a kilt? ā¢āÆ Industry history ā¢āÆ How to break into ācyberā ā¢āÆ How to break into the corporate worldā¦ ā¢āÆ Why we really need you to break in ā¢āÆ Why we need ALL of you in, not just the geeksā¦ ā¢āÆ The family, who we are, why we are hereā¦ ā¢āÆ CommunicaQon, collaboraQon and understandingā¦ ā¢āÆ The bigger picture, WHY we need to do thisā¦ ā¢āÆ Final thoughts
- 62. The Future? ā¢āÆ WHEN we can digiQze consciousness: āāÆ How much is enough? For us, for a terminal paQent? āāÆ Can we then determine our own future with technology? āāÆ Do we go digital, do we remain ļ¬esh/blood, or both? ā¢āÆ We donāt need travel: āāÆ We ARE a series of electrical impulses. āāÆ We are capturing sequences and predicQng them. āāÆ We can transmit themā¦anywhere. ā¢āÆ Societal changes? āāÆ Who goes digital and why? āāÆ Who stays? Who then has the power to determine the future?
- 64. An Abstractā¦ ā¢āÆ In 1949 George Orwell introduced us to the dystopian future of 1984 in which independent thinking and individualism were ground out of our society. ā¢āÆ Ironically enough IN 1984 we were introduced to the means by which such individualism would eventually be our undoingā¦the machines. ā¢āÆ In this instance, a 6ā2ā Austrian sent back from 2029 by a machine that gained consciousness in 1997. ā¢āÆ Weāve apparently been persecuted by machine for about the last 30+ years and we are yet to realize it.
- 66. An Intelligence Wakes Up ā¢āÆ Whose hands are on the keyboards, how inļ¬uenQal is that in the overall design? ā¢āÆ Whose countries are at the forefront of design and what implicaQon does that have? ā¢āÆ Who is paying for all this and what are those implicaQons? ā¢āÆ What IS privacy and do we need it, can we have privacy and ACTUAL arQļ¬cial intelligence? ā¢āÆ How DO we account for all 7.4 billion of us on this planet when we are designing a system to think for us
- 68. Agenda: ā¢āÆ Whoās the hairy thing in a kilt? ā¢āÆ Industry history ā¢āÆ How to break into ācyberā ā¢āÆ How to break into the corporate worldā¦ ā¢āÆ Why we really need you to break in ā¢āÆ Why we need ALL of you in, not just the geeksā¦ ā¢āÆ The family, who we are, why we are hereā¦ ā¢āÆ CommunicaQon, collaboraQon and understandingā¦ ā¢āÆ The bigger picture, WHY we need to do thisā¦ ā¢āÆ Final thoughts
- 69. Mr. Kempā¦ ā¢āÆ Mike is family, heās been coming here for yearsā¦ ā¢āÆ Heās having a rough Qme of it at the momentā¦ ā¢āÆ Thereās cards ALL over the place, āāÆPLEASE sign one, leave a caring HUG and possibly a sarcasQc message and then pass them onā¦ āāÆPlease also feel free to reach out to him on TwiEer (clappymonkey) ā¢āÆ We try to take care of family, Mike we miss you!
- 75. With Thanks!! ā¢āÆ As always, HUGE HUGS to everyone @GrrCON āāÆ Hug Chris and the family please āāÆ Hug everyone in a yellow, red and other color shirt! āāÆ Per Chris, say thanks TO the vendors for the beer etc. ā¢āÆ Shout out to the following for their help on this deck: āāÆ Chris Nickerson āāÆ Leslie Carhart āāÆ Christopher Grayson āāÆ Michal Zalewski āāÆ Parisa Tabriz ā¢āÆ And, go give Eddie a hug (and some $) for artā¦it all goes to charity!