Why it's all snake oil - and that may be ok

BSidesLV 2016

Presented by: Pablo Breuer
Date: Tuesday August 02, 2016
Time: 17:00 - 17:55
Location: Florentine F
Track: Ground Truth

Every few years, security vendors entice us with "next generation" security products with 0day detection and we must decide if this product will be our salvation or it's more snake oil full of empty promises. Basic theorems of computer science mathematically guarantee that many of the claims made by vendors are false without certain allowances, but that doesn't mean that the products are useless. Take a walk through the history of exploitation and computer science to learn how to ask the questions that will allow you to see if the vendor's claims can be achieved in your organization or whether you're being sold a bill of goods.

Pablo Breuer

Pablo is a computer scientist and INFOSEC professional with over twenty years experience in the public and private sector. He is currently the director of the Center for Information Warfare and Innovation, a military associate professor at the Naval Postgraduate School in Monterey, CA and lecturer at California State University Monterey Bay. He collects malware, 'sploits and memes.


KhanFu - Mobile schedules for INFOSEC conferences.
Mobile interface | Alternate Formats