Building a better user: Developing a security-fluent society

No ratings

Presented at Converge 2016 by

Rich Cassara

The quality of your security always boils down to the people in your organization. An executive clicking a link in a phishing email, a developer failing to sanitize an input field, or the front desk person letting an unscheduled maintenance worker through can all have disastrous results. These events keep repeating themselves because the people involved aren't fluent in security. Anyone can learn the "language of security", but like any foreign language becoming fluent requires either immersion or regular exposure at an early age. Using past techniques that have helped shaped modern society, I'll present some ideas that could lead to a future where the average person is more fluent in security -- and with employees that natively think about security, breaches may be fewer and further between.