Sunday, October 22, 2017

2 forensics / disk recovery posts coming, post-poned for SANS this week!


Super excited to run around and help Dr. Johannes Ullrich & Alissa Torres this week at SANS Berlin!

https://www.sans.org/event/berlin-2017/

Before getting a last-minute slot to facilitate this, I had nearly finished 2 exciting disk recovery projects with open source tools on Debian, and will share that as soon as the new information & lots of new friends partially soaks in!   Have a great week everyone!

Wednesday, October 4, 2017

Cyber Defense and Deterrence for the 21st Century (from the US Army's pov)

Originaly posted at https://www.linkedin.com/pulse/cyber-defense-deterrence-21st-century-from-us-armys-pov-jb-/





Video now available: https://www.youtube.com/watch?v=Ld0BmvQ6Qww



Hear or download the talk on soundcloud


Download slides, audio, or video for this and all BSides Springfield talks at https://drive.google.com/drive/folders/0BxWhKP-qMw2kTFptSy1SeXF6VmM




"Learning How to Innovate '1n51d3-th3-b0x': Cyber Defense and Deterrence for the 21st Century." (Audio only) - from Security BSides Springfield, 2017 (hosted at Drury University, Springfield, MO)- Talk 1.1 - Ernest "Cozy Panda" Wong (@ArmyCyberInst), West Point
Here is the first of the talks from BSides Springfield (MO/AR/KS/OK "Orzarks" region), the notes below are directly copied from the post on Soundcloud.
The other talks will follow fairly quickly (2 more are finished and just waiting on clearance), and as well the videos will come out soon as well (for this one I am just waiting on input from the other volunteers; I'll send them the link tomorrow or as soon as possible).
from https://soundcloud.com/securitybsides/bsides-springfield-2017-talk-11-ernest-cozy-panda-wong-us-army-innovation-cyber-defense
Security BSides Springfield, 2017 (hosted at Drury University, Springfield, MO)- Talk 1.1 - Ernest "Cozy Panda" Wong (@ArmyCyberInst), West Point, "Learning How to Innovate '1n51d3-th3-b0x': Cyber Defense and Deterrence for the 21st Century.
Music featured at the end and begining of the talk is "Over your cities grass will grow" by Ă–tone (Pablo Diserens), from the label YGAM @ygam Used with permission from YGAM and the artist.
Learn more about the artists and download the songs for free at
There is a video featured in the talk used with permission by the presenter. All other audio is from the conference or the VOC team.
From the presenter:
Since our Republic’s founding, Americans have demonstrated a speculative knack and considerable optimism that have translated into innovative solutions for grappling with tough problems. From the first American colonists who made do with limited resources to today’s NASA astronauts who boldly explore space with minimal supplies in order to break free of gravity, Americans have a proud history of discovering new and better ways for getting the job done. Today innovation has become a buzzword in the US Army, and it is helping to shape the vision for the “Army of 2025 and Beyond” as an agile organization able to adapt and prevail in this complex world. But does the US Army have the capabilities needed to protect vital national interests in cyber and to succeed in the Multi-Domain Battle? Does the US Army know how to foster innovations that can keep pace with disruptive cyberattacks so that it is able to triumph against sophisticated peer enemy threats in the not-too-distant future? The rapid growth of the Internet in our globally connected world has meant that the tools within the cyber domain are constantly changing. In such a fluid environment, does America still have the capacity to gain the strategic advantage necessary to effectively out-hack those who attack us in the cyber domain? To make matters worse, there are those who believe the US Army is such an unwieldy bureaucracy that it can’t adapt to win tomorrow’s wars, particularly in places where it lacks expertise, such as space, cyberspace, and other contested areas including the information environment and the cognitive dimension of warfare. This presentation provides a simple framework for analyzing different types of innovation, and in doing so, asks us to think inside-the-box to promote better ways the US Army can defend and deter against attacks within cyberspace. By analyzing what innovation really means and by highlighting the differences between four distinct types of innovation (disruptive, breakthrough, sustaining, and incremental), this presentation shows us just how easy the US Army can develop and nurture successful innovations for the cyber domain. Learning how to innovate using this inside-the-box methodology will help the US Army to exploit windows of advantage across time and space. Anyone wishing to discover and leverage the most appropriate framework for innovating in this 21st Century will not want to miss this briefing.
link & video cited in the talk:

The new "LinkedInSecureMessage"​ ?

With all the talk of secure messenger applications lately, I bet you’d like to have just one more, right? In the past few weeks, we’ve noti...

Follow by RSS