so what I would like to talk to you about today is demystifying site so I’m
about today is demystifying site so I’m
about today is demystifying site so I’m the chief of cyber operations at Army
the chief of cyber operations at Army
the chief of cyber operations at Army Materiel Command out on Redstone Arsenal
Materiel Command out on Redstone Arsenal
Materiel Command out on Redstone Arsenal and these issues every day probably a
and these issues every day probably a
and these issues every day probably a lot of folks don’t see anything or hear
lot of folks don’t see anything or hear
lot of folks don’t see anything or hear anything about it until they turn on the
anything about it until they turn on the
anything about it until they turn on the news and see something about hacking or
news and see something about hacking or
news and see something about hacking or breaches or all these things that we’re
breaches or all these things that we’re
breaches or all these things that we’re dealing with on a daily basis home and
dealing with on a daily basis home and
dealing with on a daily basis home and and so folks say okay I’m not important
and so folks say okay I’m not important
and so folks say okay I’m not important enough to have an attacker come after me
enough to have an attacker come after me
enough to have an attacker come after me or you know I don’t have anything that’s
or you know I don’t have anything that’s
or you know I don’t have anything that’s valuable to them anyway and what I want
valuable to them anyway and what I want
valuable to them anyway and what I want to disabuse you of is that notion you
to disabuse you of is that notion you
to disabuse you of is that notion you are important and you do have things you
are important and you do have things you
are important and you do have things you have access to your job you have access
have access to your job you have access
have access to your job you have access to your bank account you have access to
to your bank account you have access to
to your bank account you have access to the ability to be a cog in the larger
the ability to be a cog in the larger
the ability to be a cog in the larger wheel that might be a botnet and so what
wheel that might be a botnet and so what
wheel that might be a botnet and so what I would like to quickly impart upon you
I would like to quickly impart upon you
I would like to quickly impart upon you today all right set of analogies some
today all right set of analogies some
today all right set of analogies some security behaviors to help you
security behaviors to help you
security behaviors to help you understand why what you’re doing is no
understand why what you’re doing is no
understand why what you’re doing is no different than any other good security
different than any other good security
different than any other good security behavior you might have the theme of
behavior you might have the theme of
behavior you might have the theme of this this conference is transformation
this this conference is transformation
this this conference is transformation so I would like to leave you with some
so I would like to leave you with some
so I would like to leave you with some transform thoughts about your importance
transform thoughts about your importance
transform thoughts about your importance in the realm of cyber security social
in the realm of cyber security social
in the realm of cyber security social security behaviors so you do things on a
security behaviors so you do things on a
security behaviors so you do things on a daily basis that are peers whether you
daily basis that are peers whether you
daily basis that are peers whether you realize it or not you don’t go out of
realize it or not you don’t go out of
realize it or not you don’t go out of your house that’s likely without locking
your house that’s likely without locking
your house that’s likely without locking your door you don’t go down a dark alley
your door you don’t go down a dark alley
your door you don’t go down a dark alley without thinking about whether you
without thinking about whether you
without thinking about whether you should be there so we impart these
should be there so we impart these
should be there so we impart these security behaviors on our on our daily
security behaviors on our on our daily
security behaviors on our on our daily lives without necessarily thinking about
lives without necessarily thinking about
lives without necessarily thinking about them whether common-sense why would an
them whether common-sense why would an
them whether common-sense why would an attacker go down your chimney to gain
attacker go down your chimney to gain
attacker go down your chimney to gain access to your house if you leave your
access to your house if you leave your
access to your house if you leave your front door
front door
front door I’d open yet in many cases and we’re
I’d open yet in many cases and we’re
I’d open yet in many cases and we’re going to talk about some of these in
going to talk about some of these in
going to talk about some of these in many cases we leave the front door wide
many cases we leave the front door wide
many cases we leave the front door wide open all the time and simply don’t think
open all the time and simply don’t think
open all the time and simply don’t think about it because that cyber stuff is
about it because that cyber stuff is
about it because that cyber stuff is super weird so the hit from the first
super weird so the hit from the first
super weird so the hit from the first slide cyber is actually the less
slide cyber is actually the less
slide cyber is actually the less important word in cybersecurity security
important word in cybersecurity security
important word in cybersecurity security good security behaviors so I’m gonna
good security behaviors so I’m gonna
good security behaviors so I’m gonna give you a set of analogies for you to
give you a set of analogies for you to
give you a set of analogies for you to ponder over passwords so we all have to
ponder over passwords so we all have to
ponder over passwords so we all have to deal with passwords on a daily basis
deal with passwords on a daily basis
deal with passwords on a daily basis sometimes at work sometimes at home we
sometimes at work sometimes at home we
sometimes at work sometimes at home we have a variety of social media accounts
have a variety of social media accounts
have a variety of social media accounts we have email we have all these things
we have email we have all these things
we have email we have all these things and passwords are irritating they really
and passwords are irritating they really
and passwords are irritating they really are and they’re getting longer and
are and they’re getting longer and
are and they’re getting longer and they’re getting more complex and
they’re getting more complex and
they’re getting more complex and websites are forcing us to do things but
websites are forcing us to do things but
websites are forcing us to do things but let me leave something with you
let me leave something with you
let me leave something with you passwords are like the lock on your
passwords are like the lock on your
passwords are like the lock on your house they’re like your bank account
house they’re like your bank account
house they’re like your bank account they’re like the walk on your shed and
they’re like the walk on your shed and
they’re like the walk on your shed and you want that lot to be strong but let
you want that lot to be strong but let
you want that lot to be strong but let me leave you with this why would you use
me leave you with this why would you use
me leave you with this why would you use the same lock on your house that you use
the same lock on your house that you use
the same lock on your house that you use on your shed it use on your your bank
on your shed it use on your your bank
on your shed it use on your your bank you want different locks and you want
you want different locks and you want
you want different locks and you want different levels of security so think
different levels of security so think
different levels of security so think about your password like it’s a lock and
about your password like it’s a lock and
about your password like it’s a lock and you want different locks so don’t use
you want different locks so don’t use
you want different locks so don’t use the same password for all of those
the same password for all of those
the same password for all of those things super easy super simple and will
things super easy super simple and will
things super easy super simple and will save you a lot of trouble
patching so the picture here is of you
patching so the picture here is of you know razor wire and barbed wire and
know razor wire and barbed wire and
know razor wire and barbed wire and security cameras there’s probably some
security cameras there’s probably some
security cameras there’s probably some security guards roaming around
security guards roaming around
security guards roaming around so think about cyber security very much
so think about cyber security very much
so think about cyber security very much as a layered defense you have layers you
as a layered defense you have layers you
as a layered defense you have layers you have crown you have the basic stuff like
have crown you have the basic stuff like
have crown you have the basic stuff like simple fences you have locks you have
simple fences you have locks you have
simple fences you have locks you have security cameras patching your system
security cameras patching your system
security cameras patching your system might be one of the easiest things you
might be one of the easiest things you
might be one of the easiest things you do sometimes irritating zan under the
do sometimes irritating zan under the
do sometimes irritating zan under the middle of a
middle of a
middle of a you know FaceTime or you’re in the
you know FaceTime or you’re in the
you know FaceTime or you’re in the middle of an important email or playing
middle of an important email or playing
middle of an important email or playing a video game and pops up and says we
a video game and pops up and says we
a video game and pops up and says we need to restart your system of hyzers or
need to restart your system of hyzers or
need to restart your system of hyzers or critical patch needs to be applied and
critical patch needs to be applied and
critical patch needs to be applied and it’s super easy to say ignore and then
it’s super easy to say ignore and then
it’s super easy to say ignore and then you ignore and then you ignore and
you ignore and then you ignore and
you ignore and then you ignore and months SMI and you haven’t patched your
months SMI and you haven’t patched your
months SMI and you haven’t patched your system patches are not put out by your
system patches are not put out by your
system patches are not put out by your operating system provider but your
operating system provider but your
operating system provider but your software provider for nothing
software provider for nothing
software provider for nothing these are fixing vulnerabilities that an
these are fixing vulnerabilities that an
these are fixing vulnerabilities that an attacker can use to gain access to your
attacker can use to gain access to your
attacker can use to gain access to your system gain access to your information
system gain access to your information
system gain access to your information so think about a way or defense in this
so think about a way or defense in this
so think about a way or defense in this way this is a most basic defense a
way this is a most basic defense a
way this is a most basic defense a simple defense go ahead and click that
simple defense go ahead and click that
simple defense go ahead and click that you know it’s all and restart now save
you know it’s all and restart now save
you know it’s all and restart now save yourself a lot of trouble in the end
fishing so for those of you who may not
fishing so for those of you who may not be as aware of phishing phishing often
be as aware of phishing phishing often
be as aware of phishing phishing often occurs through email often someone
occurs through email often someone
occurs through email often someone emails young blue with an attachment or
emails young blue with an attachment or
emails young blue with an attachment or a link sometimes even someone you know a
a link sometimes even someone you know a
a link sometimes even someone you know a friend or a family member
friend or a family member
friend or a family member hey open this out take a look at it hey
hey open this out take a look at it hey
hey open this out take a look at it hey click this link I found this really cool
click this link I found this really cool
click this link I found this really cool side I want you to check out but what it
side I want you to check out but what it
side I want you to check out but what it really is going to do is gonna redirect
really is going to do is gonna redirect
really is going to do is gonna redirect you to something where it’s going to
you to something where it’s going to
you to something where it’s going to download something to your system it
download something to your system it
download something to your system it might make you a cog in a larger wheel
might make you a cog in a larger wheel
might make you a cog in a larger wheel of a botnet or an attack was going to
of a botnet or an attack was going to
of a botnet or an attack was going to take place pitching very often ends up
take place pitching very often ends up
take place pitching very often ends up with you losing information thank you
with you losing information thank you
with you losing information thank you count information passwords and
count information passwords and
count information passwords and usernames install something on your
usernames install something on your
usernames install something on your system so here we have a dark alley
system so here we have a dark alley
system so here we have a dark alley you’re walking on the street alone
you’re walking on the street alone
you’re walking on the street alone minding your business you come to this
minding your business you come to this
minding your business you come to this dark alley it looks ominous you probably
dark alley it looks ominous you probably
dark alley it looks ominous you probably think twice about walking down that
think twice about walking down that
think twice about walking down that alley that’s a little safe probably
alley that’s a little safe probably
alley that’s a little safe probably shouldn’t do that but a lot of folks an
shouldn’t do that but a lot of folks an
shouldn’t do that but a lot of folks an unbelievable amount of holes will click
unbelievable amount of holes will click
unbelievable amount of holes will click that email and open it up open an
that email and open it up open an
that email and open it up open an attachment up click that link and think
attachment up click that link and think
attachment up click that link and think nothing of it so what I would encourage
nothing of it so what I would encourage
nothing of it so what I would encourage you to do the next time you
you to do the next time you
you to do the next time you you know even from somebody you know and
you know even from somebody you know and
you know even from somebody you know and you’re not expecting it and has an
you’re not expecting it and has an
you’re not expecting it and has an attachment or I had a link maybe ask
attachment or I had a link maybe ask
attachment or I had a link maybe ask them yeah did you send this to me did
them yeah did you send this to me did
them yeah did you send this to me did you have something I was expecting that
you have something I was expecting that
you have something I was expecting that I just wanted to check that simple act
I just wanted to check that simple act
I just wanted to check that simple act can save you from again losing all of
can save you from again losing all of
can save you from again losing all of your information or possibly being a
your information or possibly being a
your information or possibly being a part of a larger botnet it can attack or
part of a larger botnet it can attack or
part of a larger botnet it can attack or harm other people and finally my
harm other people and finally my
harm other people and finally my favorite social media we love our social
favorite social media we love our social
favorite social media we love our social media these days Facebook Twitter all
media these days Facebook Twitter all
media these days Facebook Twitter all these things Instagram sharing with
these things Instagram sharing with
these things Instagram sharing with people sharing the the things that we’re
people sharing the the things that we’re
people sharing the the things that we’re doing in our lives sharing about kids
doing in our lives sharing about kids
doing in our lives sharing about kids and our family understand I would tell
and our family understand I would tell
and our family understand I would tell you though then the ology here is a club
you though then the ology here is a club
you though then the ology here is a club night club you walk into the night club
night club you walk into the night club
night club you walk into the night club you want to meet people you want to have
you want to meet people you want to have
you want to meet people you want to have a few drinks you know sit some time with
a few drinks you know sit some time with
a few drinks you know sit some time with friends you would not go into that night
friends you would not go into that night
friends you would not go into that night club and tell everybody there hey guys
club and tell everybody there hey guys
club and tell everybody there hey guys I’m going to be out of the country for
I’m going to be out of the country for
I’m going to be out of the country for the next two weeks on vacation or hey
the next two weeks on vacation or hey
the next two weeks on vacation or hey guys you know here’s all about my
guys you know here’s all about my
guys you know here’s all about my personal life here’s where I’m at here’s
personal life here’s where I’m at here’s
personal life here’s where I’m at here’s what I’m doing here’s what I do for a
what I’m doing here’s what I do for a
what I’m doing here’s what I do for a living I work at this place so why don’t
living I work at this place so why don’t
living I work at this place so why don’t we do it on social media because I’ll
we do it on social media because I’ll
we do it on social media because I’ll tell ya I’m guaranteed the by some sort
tell ya I’m guaranteed the by some sort
tell ya I’m guaranteed the by some sort of you haven’t look at your privacy
of you haven’t look at your privacy
of you haven’t look at your privacy setting clinically and you’re wide open
setting clinically and you’re wide open
setting clinically and you’re wide open to everyone so go back to their original
to everyone so go back to their original
to everyone so go back to their original statement I mean I’m not important I
statement I mean I’m not important I
statement I mean I’m not important I want my information absolutely they
want my information absolutely they
want my information absolutely they would breaking in your house breaking in
would breaking in your house breaking in
would breaking in your house breaking in your bank account it’s talking to your
your bank account it’s talking to your
your bank account it’s talking to your kids it’s all happened so think about
kids it’s all happened so think about
kids it’s all happened so think about that the next time you post on social
that the next time you post on social
that the next time you post on social media where you’re going to be or what
media where you’re going to be or what
media where you’re going to be or what you do or something about work
you do or something about work
you do or something about work furthermore I would really encourage all
furthermore I would really encourage all
furthermore I would really encourage all of you to go tonight check your privacy
of you to go tonight check your privacy
of you to go tonight check your privacy settings maybe limit the scope of the
settings maybe limit the scope of the
settings maybe limit the scope of the information that’s shared limit it to
information that’s shared limit it to
information that’s shared limit it to people you actually know or keep it
people you actually know or keep it
people you actually know or keep it private you know your birthday that’s a
private you know your birthday that’s a
private you know your birthday that’s a nice thing for people to know
nice thing for people to know
nice thing for people to know except for it is also very often a
except for it is also very often a
except for it is also very often a password hint to gain access to your
password hint to gain access to your
password hint to gain access to your passwords on websites think about that
passwords on websites think about that
passwords on websites think about that so in closing what I will tell you think
so in closing what I will tell you think
so in closing what I will tell you think about your security behaviors the simple
about your security behaviors the simple
about your security behaviors the simple things that you do on your in your daily
things that you do on your in your daily
things that you do on your in your daily life you wouldn’t walk down a street in
life you wouldn’t walk down a street in
life you wouldn’t walk down a street in the dark alone no lights so why don’t we
the dark alone no lights so why don’t we
the dark alone no lights so why don’t we continue to behave these ways transform
continue to behave these ways transform
continue to behave these ways transform your behavior and be a part of the
your behavior and be a part of the
your behavior and be a part of the solution and not a part of the problem
solution and not a part of the problem
solution and not a part of the problem thank you
thank you
thank you [Applause]
”
Be First to Comment