Red Teaming gaps and musings

Presented at DerbyCon 8.0 Evolution (2018), Oct. 5, 2018, noon (25 minutes).

Red Teaming is currently the closest most companies get to adversary emulation. While Red Teaming can do a good job pointing out security gaps, blind spots, and human weaknesses within an organization, there are also limitations. Engagement SOW’s, timelines, and laws impose limitations which can unwittingly push a Red Team engagement far from adversary emulation. Some thoughts on the current status quo, and ways to mix it up.


Presenters:

Links:

Similar Presentations: