DiscoverIANS Information Security PodcastEpisode 24: Dave Kennedy on Passwords, Pen Tests, Purple Teams and DerbyCon
Episode 24: Dave Kennedy on Passwords, Pen Tests, Purple Teams and DerbyCon

Episode 24: Dave Kennedy on Passwords, Pen Tests, Purple Teams and DerbyCon

Update: 2016-09-08
Share

Description

The inimitable Hacking Dave himself, IANS Faculty member Dave Kennedy, joins us this week to talk about the recent password follies, ethical issues around vulnerability disclosures, and his advice for effective penetration testing and purple teaming. Dave also shares insights into the hyper-positive culture and vibe of DerbyCon and talks about witnessing the big win last June of his hometown Cleveland Cavaliers.

Comments 
Top Podcasts
The Best New Comedy Podcast Right Now – June 2024The Best News Podcast Right Now – June 2024The Best New Business Podcast Right Now – June 2024The Best New Sports Podcast Right Now – June 2024The Best New True Crime Podcast Right Now – June 2024The Best New Joe Rogan Experience Podcast Right Now – June 20The Best New Dan Bongino Show Podcast Right Now – June 20The Best New Mark Levin Podcast – June 2024
In Channel
Episode 41: Rapid 7 Founder Chad Loder on the Evolution of Vulnerability Management and the Mistakes We Make in Infosec Training

Episode 41: Rapid 7 Founder Chad Loder on the Evolution of Vulnerability Management and the Mistakes We Make in Infosec Training

2017-08-0744:48

Episode 40: Mark Clancy on the Petya-NotPetya Attacks and Tough Choices in Enterprise Defense

Episode 40: Mark Clancy on the Petya-NotPetya Attacks and Tough Choices in Enterprise Defense

2017-06-2826:14

Episode 39: Jon Condra on Dark Web Threats and Nation-State Attacks

Episode 39: Jon Condra on Dark Web Threats and Nation-State Attacks

2017-06-1428:44

Episode 38: Dave Shackleford on NIST Changes, WannaCry and Trump's Cyber Order

Episode 38: Dave Shackleford on NIST Changes, WannaCry and Trump's Cyber Order

2017-05-2229:39

Episode 37: Call Center and Phone Fraud with Pindrop's David Dewey

Episode 37: Call Center and Phone Fraud with Pindrop's David Dewey

2017-05-1222:20

Episode 36: Kevin Beaver on the Verizon DBIR and Our Perennial Security Shortcomings

Episode 36: Kevin Beaver on the Verizon DBIR and Our Perennial Security Shortcomings

2017-05-0530:09

Episode 35: George Gerchow on CASBs, Cloud Services Providers and the Reality of Security as Code

Episode 35: George Gerchow on CASBs, Cloud Services Providers and the Reality of Security as Code

2017-04-1430:35

Episode 34: Raffy Marty on the Truth About Machine Learning, AI and Advanced Analytics in Infosec

Episode 34: Raffy Marty on the Truth About Machine Learning, AI and Advanced Analytics in Infosec

2017-03-3036:38

Episode 33: Larry Walsh on Making Good MSSP Choices and Avoiding Vendor FUD in Pursuit of Better Security

Episode 33: Larry Walsh on Making Good MSSP Choices and Avoiding Vendor FUD in Pursuit of Better Security

2017-02-2344:24

Episode 32: David Kolb on the Soft Skills That Spell Infosec Success

Episode 32: David Kolb on the Soft Skills That Spell Infosec Success

2017-02-1036:47

Episode 31: Rich Mogull on 'Tidal Forces' Set to Upend Information Security

Episode 31: Rich Mogull on 'Tidal Forces' Set to Upend Information Security

2017-01-2443:31

Episode 30: Joff Thyer on the Threat Hunter's Mindset and Making the Most of Penetration Testing

Episode 30: Joff Thyer on the Threat Hunter's Mindset and Making the Most of Penetration Testing

2017-01-0932:51

Bonus Episode: Russia Hacking: What Enterprise Defenders Need to Know

Bonus Episode: Russia Hacking: What Enterprise Defenders Need to Know

2017-01-0319:47

Episode 28: Chris Poulin on Conscripted Cameras, Connected Cars and Learning to Love the IoT

Episode 28: Chris Poulin on Conscripted Cameras, Connected Cars and Learning to Love the IoT

2016-12-1545:58

Episode 27: Aaron Turner on Ransomware, Privileged ID Management, The Killing of EMET, and the Internet of Criminal Things

Episode 27: Aaron Turner on Ransomware, Privileged ID Management, The Killing of EMET, and the Internet of Criminal Things

2016-12-0843:45

Episode 26: Kevin Johnson on Pentests, Incident Response, Infosec Leadership and Sweating for Charity

Episode 26: Kevin Johnson on Pentests, Incident Response, Infosec Leadership and Sweating for Charity

2016-10-0339:11

Episode 25: Dave Shackleford on DDoS, Passwords, and Web App Testing With a UK Flair

Episode 25: Dave Shackleford on DDoS, Passwords, and Web App Testing With a UK Flair

2016-09-2140:04

Episode 24: Dave Kennedy on Passwords, Pen Tests, Purple Teams and DerbyCon

Episode 24: Dave Kennedy on Passwords, Pen Tests, Purple Teams and DerbyCon

2016-09-0846:46

Episode 23: Ken Van Wyk on Shadow Brokers, Incident Response Exercises and Why Teams Struggle With Threat Modeling

Episode 23: Ken Van Wyk on Shadow Brokers, Incident Response Exercises and Why Teams Struggle With Threat Modeling

2016-08-2438:33

Episode 22: Security Ledger Chief Paul Roberts on Giving Voice to Securing the Internet of Things

Episode 22: Security Ledger Chief Paul Roberts on Giving Voice to Securing the Internet of Things

2016-08-0434:07

loading
Google Play
Download from Google Play
Castbox
Download from App Store
usUnited States
00:00
00:00
x

0.5x

0.8x

1.0x

1.25x

1.5x

2.0x

3.0x

Sleep Timer

Off

End of Episode

5 Minutes

10 Minutes

15 Minutes

30 Minutes

45 Minutes

60 Minutes

120 Minutes

Episode 24: Dave Kennedy on Passwords, Pen Tests, Purple Teams and DerbyCon

Episode 24: Dave Kennedy on Passwords, Pen Tests, Purple Teams and DerbyCon