BruCON 0x0E

The industry has come a long ways in a short time in regards to understanding attack patterns and the ability to defend organizations. In 2011, David gave a talk on Adaptive Penetration Testing at DerbyCon and how we needed to understand an organization and craft our attacks based on the defenses of the organization for high levels of success. This talk went into how attacker methodologies would evolve over time and focus more on targeted attack vs. mass commodity In 2011, organized crime really hadn’t kicked off or had the high level of success it does today. When we look at the defenses we have – its through crowd sourcing breach data, various TTPs, and building defenses against known attacks. In this talk, we’ll dive into how adversaries capabilities ranging from novice to some of the most advanced that have adapted their techniques and what to expect on the horizon. This talk will dive into what we need to do to evolve to our next level, and most importantly how to build better defenses that aren’t heavily reliant on previously identified attacks.