Explore the groundbreaking approach to human vulnerability scanning presented in this Black Hat conference talk. Delve into the challenges of addressing human security risks and discover AVA, the first automated human vulnerability scanner. Learn how AVA maps people's connectivity, tests them with various security threats, and measures their behavior to make human security risk measurable. Understand the importance of actively protecting people within organizations, the limitations of current approaches, and the potential for transforming human security risk management. Gain insights into the phases of AVA, including the Principle of Least Privilege, information gathering, phishing attacks, and predictive behavior analysis. Examine case studies, discuss the public interest aspects of security tools, and consider the complexities of data scale and privacy. Reflect on the need for innovative solutions in the face of evolving security challenges and the potential impact of this new approach on organizational security strategies.
Read more