Presentation Abstract: "Cybersecurity Models that Mostly Matter"! 

Oftentimes the terms "Controls" or "Frameworks" or "Models" are used interchangeably, but this talk focuses specifically on the Cybersecurity Models usable by Practitioners. This talk starts with a quick overview of the essential "CIA Triad" and the "Cyber Kill Chain", but then transitions into a much deeper dive into the "Pyramid of Pain", "STRIDE", and the "Diamond Model". Each of these models are easily leveraged in conjunction with other Controls and Frameworks, but each serve a specific purpose. The "Pyramid of Pain" provides a foundation of Detection Engineering absorbed by Incident Response and Threat Hunting teams. Of the various Threat Model methodologies, STRIDE (or often STRIDE+) remains a popular choice. The "Diamond Model of Intrusion Analysis" is a solid and underutilized methodology of diagramming and understanding actual cyber attacks.


Workshop Description: Hands-on CyberChef Guided Workshop!
Abstract: "What is CyberChef? It’s the Cyber Swiss Army Knife"!

CyberChef is a simple, intuitive web app for analyzing and decoding data without having to deal with complex tools or programming languages. CyberChef encourages both technical and non-technical people to explore data formats, encryption and compression. There are around 200 useful operations in CyberChef for anyone working on anything vaguely Internet-related, whether you just want to convert a timestamp to a different format, decompress gzipped data, create a SHA3 hash, or parse an X.509 certificate to find out who issued it.

Objective: Learn about the various components of the CyberChef platform.


- Open to all levels of interested Cyber Professionals
- Laptop required