The Future of Your Cybersecurity Career: Market Demand VS Talent Shortage The world is currently lacking some 2 million cybersecurity experts. That number is expected to double shortly, as more cyber-kinetic and anthro-cyber-kinetic (people, cyber and physical) systems are productized for industry and mass consumption. At the same time, cybersecurity practitioners have become laser-focused on insanely complex, highly verticalized, specific subsets of our industry. Rough translation: we tend to train and hire skill-set specialists versus security generalists. Security professionals often have trouble talking to each other because so many specializations use different nomenclatures, terms, and acronyms; dozens of technically disparate lingua francas. We have forgotten about teaching strategic generalities and interdisciplinarianism. Overspecialization and isolation from other technical fields are two clear recipes for failure. This webinar examines a variety of skills and knowledge that will greatly assist the professional and benefit the cybersecurity field as well, by dealing in higher levels of abstraction versus highly specialized knowledge and practice. Main points covered: Presenter: Our presenter for this webinar Winn Schwartau is one of the world’s top experts on security, privacy, infowar, cyber-terrorism, and related topics. Provocative, informed, challenging, he’s on the leading edge of thinking, writing and speaking. Highly technical security subjects are made understandable, entertaining, engaging and thought-provoking. Audiences find themselves challenged with original ideas which are related through historical analogy and metaphor and made relevant to the present and future world. He is the founder of The Security Awareness Company. Organizer: Ardian Berisha Date: July 10th, 2019 Recorded Webinar: https://youtu.be/uRsARV3ULy4

2. MY MOM -1943.
NBC MASTERING ENGINEER
DAD
RADAR DEV. WW2

3. MY FIRST DEFCON

4. WINN AS TV REPAIRMAN: $.50 PER REPAIR

5. MY ELECTRONICS STORE

6. 1961

7. HIGH SCHOOL COMPUTER

8. COULDN’T GET A JOB

9. THE FAMILY BUSINESS:
MY FIRST STUDIO (16 YRS. OLD)

10. MY FIRST LATHE: ANALOGUE/MECHANICAL

11. 1969-1970: COMPLEX SYSTEMS

12. IMSAI 1972

13. AUTO SYNC (RIGHT!)

14. MANUAL SYNC

15. 1979: BUILDING ANALOGUE/DIGITAL
BUSINESS

16. DIGITAL AUDIO AUTOMATION: 1980

17. MY STUDIO: 1980

18. 7 JANUARY 1983: WENT INTO
SECURITY
No Degree. No Certs. No Creds.

19. THE EARLY DAYS:
WEAPONIZATION OF THE INTERNET
1990 1993

20. June 27, 1991
Our computer systems are
so poorly protected, they
are “An electronic Pearl
Harbor waiting to happen.”
“The Civilian Architect of
Information Warfare.”
Admiral Tyrrell, UK MoD

21. NEED TO FIX THE INTERNET

22. WANTED TO PROVE SECURITY
IMPOSSIBLE.
OF COURSE IT IS.
HOLD ON.
WAIT.
(CRASS COMMERCIAL PLUG
COMING LATER…)

23. OK BACK TO THE
HISTORY…
I MEAN THE FUTURE OF
CYBERSECURITY
EDUCATION

24. THE SECURITY DOMAINS
CYBERSECURITY EDUCATION SHOULD TOUCH ALL THREE

25. 2010 - 2012
DHS SECRETARY JANET NAPOLITANO
“WE CAN’T FIND ENOUGH CYBER-SECURITY PEOPLE…”
… BULLSHIT
THE TRUTH IS…
“WE CAN’T FIND ENOUGH PERFECT WHITE PEOPLE, WHO
HAVE NEVER, EVER DONE ANYTHING WRONG, HAVE HAD A
FORMAL EDUCATION, RECEIVED DEGREES, GOT CERTS UP
THE WAZOO, WHO DON’T SMOKE WEED, CAN PASS AN H.R.
PERSONALITY TEST, AND AREN’T ON THE SPECTRUM…”

26. ARBITRARY DISCRIMINATORS
• AGE
• SEX/ORIENATION
• DRUG USE (ALCOHOLISM IS O.K.)
• DEGREES
• CRIMINAL BACKGROUND
• “OFFICE JOB”
• PERSONALITY TESTS
• ADHD & SPECTRUM
DO WE REALLY NEED OR WANT ‘NORMAL’?

27. SECURITY PROBLEMS: THEY ARE ALL THE
SAME
• SPAM
• DOS/DDOS
• PHISHING
• ACCESS CONTROL
• ENCRYPTION
• PRIVACY
• DECEPTION
• FAKE NEWS
• DETECTION
• ROOT CONTROL
• ETC.
• REACTION
• REMEDIATION
• ZERO-DAYS
• MALWARE
• METAMORPHIC NW
• AWARENESS
• TRUST
• MULTI-ADMIN
• DATA-EXFILTRATION
• ESPIONAGE
• ETC.

28. SO…TO GET ‘THE RIGHT STUFF’
A LITTLE MORE GENERALISM, PLEASE…
1. ENGINEERING
2. HISTORY
3. HUMANITY

29. ENGINEERING
TO ERR IS TO MAKE PROGRESS.
TO FAIL IS TO LEARN.
CYBER IS NOT AN ENGINEERING DISCIPLINE …
YET…
WHAT COULD WE LEARN FROM ENGINEERS?

30. LOGIC

31. MECHANICAL
• BRIDGES
• DRONES
• ROBOTS
• 3D - STUFF
ALL THINGS CYBER-KINETIC

32. ELECTRICAL

33. ANALOGUE

34. FEEDBACK

35. ICS/SCADA – FEEDBACK & ANALOGUE
PROGRAMMABLE LOGIC
CONTROLLER
• BINARY CONTROLS
- ON-OFF = 1:0 = YES/NO
• ANALOGUE CONTROLS
- > 0 & < 1

36. IT’S THE SMALL THINGS
• NANO-TECH
• DNA STORAGE (1019
BITS/CM2
• OPTICAL CPU
• BIONICS
• THE INTERNET OF BIO-
NANO-AI THINGS

37. BAYES & PROBABILITY

38. THE QUANTUM & NEWTON

39. NEURAL & AI/ML/DL
ETHICS, TROLLEYS AND AUTONOMOUS

40. FRACTALS

41. EXO-PLANETARY STUDIES
THE CARRINGTON EFFECT: 1859

42. HISTORY
TO IGNORE HISTORY IS TO REPEAT STUPID SHIT
INSANITY:
DOING THE SAME THING OVER AND OVER AND OVER
AGAIN…
AND EXPECTING DIFFERENT RESULTS.
(NEXT GEN CYBERSECURITY CRAP
1972 – 2018)

43. KNOW THE HISTORY OF OOPS!
GREAT PEOPLE MAKING HUGE MISTAKES

44. COMPUTER HISTORY
WHY REINVENT WHEELS WHEN THEY ALREADY EXIST?
• ANTIKYTHERA
• BOOLE
• ADA
LOVELACE/BABBAGE
• GRACE HOPPER
• BOMBE-ENIAC+++
• ANALOGUE
COMPUTING
• VON NEUMANN
• ARCHITECTURES
• SHANNON
• INFORMATION
THEORY

45. COMPUTER SECURITY HISTORY
• CAESAR, JEFFERSON, VIGENERE
• BLETCHLEY (UK), VENONA (US)
• WOMEN
• ANDERSON, BIBI, BELL, LAPADULA
• RAINBOW, CC, TCSEC
• RACF/TOP-SECRET/ACF-2
• MLS & BLACK/RED NETWORKING

46. WOMEN IN CYBER+SECURITY
(C’MON ALREADY… )

47. MILITARY HISTORY
• DECEPTION
• SUN TZU
• JOHN, JASPER & NEVIL MASKELYNE
(WAR MAGICIANS)
• MASSIFICATION (PRE-21ST C.)
• CLAUSWITZ
• NAPOLEON/ROME/
• JOHN BOYD (O-O-D-A)
• M.A.D. (TIME)
• FORTRESS MENTALITY (EPIC FAILURES)
• WHY ARE WE LOSING
THE CYBERWARS?

48. OODA - FEEDBACK

49. SPEED WINS

50. CABLE-PORN

51. NON-LINEARITY
ART SCIENCE
THINKING

52. HUMANITY
WE HAVE SPENT 70 YEARS TRY TO GET HUMANS TO
THINK, BEHAVE AND INTERACT WITH COMPUTERS ON
THEIR TERMS;
IN THEIR LANGUAGE: BINARY & DIGITAL
FOR SECURITY, WE NEED TO GET COMPUTERS TO THINK,
BEHAVE AND INTERACT WITH US ON OUR HUMAN TERMS;
IN OUR LANGUAGE: ANALOGUE

53. GREAT ENGINEERING + HUMAN ENDEAVOR =
FAILURE

54. PURPOSE OF THE BRAIN
1. TO SENSE THE
ENVIRONMENT
2. TO PREDICT THE FUTURE

55. PSYCHOLOGY
• NOT BINARY
• INFINITE FLAVORING
• SOFT/MALLEABLE
• WORST MEMORY CIRCUITS
• SUSCEPTIBLE TO
“FAKENESS/LIES” IN THE FACE
OF FACTS (TRUTH)
• SPECTRUMS
• IT’S UP TO US TO
UNDERSTAND OUR
AUDIENCE(S)
PIX FREUD

56. HUMAN (ENGINEERING): THE
SENSES
TIME-BASED DETECTION IN DEPTH

57. SENSOR TECH(S)
TIME-BASED DETECTION IN DEPTH

58. MULTI-SENSORY FILTERING

59. NEURO-PLASTICITY
• ADAPTABLE
• POLYMORPHIC NEURONS
• ½ A BRAIN WORKS
• DISTRIBUTED PROCESSING
• AI VS. HUMAN
• PARADOXICAL
• TROLLEYOLOGICAL CONUNDRA

60. PERCEPTION

62. FLATLAND +

63. INFLUENCE
(SOCIAL ENGINEERING? MY MOM SAID…)
• POLICY LEADERS
• CISO/CEO/BOARD
• NON GEEKS
• CO-WORKERS & STAFF
• EMPLOYEES
• PARTNERS
• CUSTOMERS
• ‘SPECIAL’ PEOPLE
• SPOUSE (YEAH, UH, HUH!)

64. ART & ART HISTORY
ART IS HOW WE TELL STORIES

65. COMMUNICATIONS
SHOW – DON’T TELL
• KNOW YOUR
AUDIENCE
• C-SUITE
• CUSTOMERS
• GEEKY COLLEAGUES
• STUPID PEOPLE
• KIDS
• MULTI-MEDIA

66. POSITIVE FEEDBACK:
LEARN ABOUT LEARNING
• 70-20-10 RULE
• RULE OF 3
• 7 SECOND RULE
• 2.2 MADISON AVE.
RULE
• EBBINGHAUS
FORGETTING CURVE
• TEACHING
MOMENTS

67. TECHNOLOGY, SECURITY, & ETHICS
(ESPECIALLY IN A CYBER-KINETIC WORLD)

68. APPLYING THE TRIADS
FUTURE OF CYBER-SECURITY EDUCATION
(& ADDING A WEE DOSE OF INTERDISCIPLINARY
GENERALISM)

69. CYBER-SECURITY IS JUST TOO HARD
LANDING ON THE MOON
TRANSCONTINENTAL RAILWAY
MARSHALL PLAN
MANHATTAN PROJECT
TVA
DNA
ICS
INTERNET

72. ISO/IEC 27032
Training Courses
• ISO/IEC 27032 Introduction
1 Day Course
• ISO/IEC 27032 Foundation
2 Days Course
• ISO/IEC 27032 Lead Cybersecurity Manager
5 Days Course
Exam and certification fees are included in the training price.
www.pecb.com/en/education-and-certification-for-individuals/iso-iec-27032
www.pecb.com/events

73. THANK YOU
?
winn@thesecurityawarenesscompany.com linkedin.com/company/the-security-awareness-company
www.thesecurityawarenesscompany.com