Episode 24: Dave Kennedy on Passwords, Pen Tests, Purple Teams and DerbyCon

Update: 2016-09-08

Description

The inimitable Hacking Dave himself, IANS Faculty member Dave Kennedy, joins us this week to talk about the recent password follies, ethical issues around vulnerability disclosures, and his advice for effective penetration testing and purple teaming. Dave also shares insights into the hyper-positive culture and vibe of DerbyCon and talks about witnessing the big win last June of his hometown Cleveland Cavaliers.

Comments

In Channel

Episode 41: Rapid 7 Founder Chad Loder on the Evolution of Vulnerability Management and the Mistakes We Make in Infosec Training

2017-08-0744:48

Episode 40: Mark Clancy on the Petya-NotPetya Attacks and Tough Choices in Enterprise Defense

2017-06-2826:14

Episode 39: Jon Condra on Dark Web Threats and Nation-State Attacks

2017-06-1428:44

Episode 38: Dave Shackleford on NIST Changes, WannaCry and Trump's Cyber Order

2017-05-2229:39

Episode 37: Call Center and Phone Fraud with Pindrop's David Dewey

2017-05-1222:20

Episode 36: Kevin Beaver on the Verizon DBIR and Our Perennial Security Shortcomings

2017-05-0530:09

Episode 35: George Gerchow on CASBs, Cloud Services Providers and the Reality of Security as Code

2017-04-1430:35

Episode 34: Raffy Marty on the Truth About Machine Learning, AI and Advanced Analytics in Infosec

2017-03-3036:38

Episode 33: Larry Walsh on Making Good MSSP Choices and Avoiding Vendor FUD in Pursuit of Better Security

2017-02-2344:24

Episode 32: David Kolb on the Soft Skills That Spell Infosec Success

2017-02-1036:47

Episode 31: Rich Mogull on 'Tidal Forces' Set to Upend Information Security

2017-01-2443:31

Episode 30: Joff Thyer on the Threat Hunter's Mindset and Making the Most of Penetration Testing

2017-01-0932:51

Bonus Episode: Russia Hacking: What Enterprise Defenders Need to Know

2017-01-0319:47

Episode 28: Chris Poulin on Conscripted Cameras, Connected Cars and Learning to Love the IoT

2016-12-1545:58

Episode 27: Aaron Turner on Ransomware, Privileged ID Management, The Killing of EMET, and the Internet of Criminal Things

2016-12-0843:45

Episode 26: Kevin Johnson on Pentests, Incident Response, Infosec Leadership and Sweating for Charity

2016-10-0339:11

Episode 25: Dave Shackleford on DDoS, Passwords, and Web App Testing With a UK Flair

2016-09-2140:04

Episode 24: Dave Kennedy on Passwords, Pen Tests, Purple Teams and DerbyCon

2016-09-0846:46

Episode 23: Ken Van Wyk on Shadow Brokers, Incident Response Exercises and Why Teams Struggle With Threat Modeling

2016-08-2438:33

Episode 22: Security Ledger Chief Paul Roberts on Giving Voice to Securing the Internet of Things

2016-08-0434:07

00:00

Episode 24: Dave Kennedy on Passwords, Pen Tests, Purple Teams and DerbyCon

#box-pro-ellipsis-176048442157521{-webkit-line-clamp:2;}Episode 24: Dave Kennedy on Passwords, Pen Tests, Purple Teams and DerbyCon

Episode 24: Dave Kennedy on Passwords, Pen Tests, Purple Teams and DerbyCon

Episode 24: Dave Kennedy on Passwords, Pen Tests, Purple Teams and DerbyCon