Attackers Perspective: Dangers of Relying on Marketecture Exploring the Risks and Strategies in ESA

BSidesDFW 2024 Track 3 Session 4 - 02 Nov 2024
Attackers' Perspective: The Dangers of Relying on Marketecture Exploring the Risks and Strategies in Enterprise Security Architecture (ESA)
As the threat landscape evolves, traditional Enterprise Security Architectures (ESA) struggle to keep up with growing attack surfaces. This talk explores the critical intersection between ESA and Offensive Security Testing, focusing on how continuous, adversary-driven testing can uncover vulnerabilities and bridge gaps left by relying solely on security product marketing.
Drawing from real-world experience, the session will demonstrate the need for full-scope adversarial emulation, continuous penetration testing, and effective validation of security controls. Attendees will learn how to align security strategies with real-world threats, ensuring their architectures remain resilient and adaptive.
Key takeaways include evolving ESA to match modern threats, uncovering hidden security gaps, and integrating offensive testing to strengthen defenses.
This talk is essential for security architects, red teamers, and leaders aiming to adopt a proactive, threat-informed security strategy.
@dkfredde