Security Weekly
Application Security WeeklySubscribe
Security Staff Acquisition & Development, Application security

Myths and Lies in Infosec – Adrian Sanabria – ASW #228

Most of the myths and lies in InfoSec take hold because they seem correct or sound logical. Similar cognitive biases make it possible for even the most preposterous conspiracy theories to become commonly accepted in some groups.

This is a talk about the importance of critical thinking and checking sources in InfoSec. Our industry is relatively new and constantly changing. Too often, we operate more off faith and hope than fact or results. Exhausted and overworked defenders often don't have the time to seek direct evidence for claims, question sources, or test theories for themselves.

Resources

Full episode and show notes

Announcements

  • Follow us on X (formerly known as Twitter) for livestream reminders, highlighted clips, memes, and more! You can find us @ SecWeekly.

Guest

Adrian Sanabria
Adrian Sanabria
Director of Product Marketing at Valence Security

Adrian is an outspoken researcher that doesn’t shy away from uncomfortable truths. He loves to write about the security industry, tell stories, and still sees the glass as half full.

Hosts

Mike Shema
Mike Shema
Tech Lead at Block
John Kinsella
John Kinsella
Co-founder & CTO at Cysense

Related

Leadership
Do You Really Want to Be a CISO? – Spencer Mott – CSP #150

Reaching the level of CISO in a large corporation requires time and determined application as well as aptitude and very specific professional and personal attributes. It's the role against which many security professionals set their career sights without really knowing what they'll be getting themselves into. Fitzgerald, T. 2019. Chapter 14. CISO ...
Leadership
1% Leadership – Andy Ellis – BSW #329

Most leadership books suffer from one of two critical failures (and sometimes both). The book might be a hagiography: telling you the biography of some amazing leaders, pretending there is one secret trick that will let you emulate that leader. Or the lesson of book should have been written as a tweet: in 280 characters you could have learned one l...