In episode 66 of the We Hack Purple Podcast Host Tanya Janca sits down with one of her colleagues from IANs Research, Wolfgang Goerlich! We talked about his work and AMAZING team at Cisco (Hi Wendy and Dave!), how they were originally part of Duo Security, and that they missed their chance for a fun rebrand of Duo + Cisco = Disco! Besides all the silly jokes, we talked about what security looks like beyond just vulnerabilities and trying to keep the bad guys out. We zeroed in on legitimate users that misuse systems, and dug into how Threat modelling and diversity could be used to prevent situations such as the infamous apple AirTags misuse. We talked about including privacy as part of threat modelling, Cara Bloom’s Mitre Privacy Framework (https://www.usenix.org/system/files/pepr22_slides_bloom.pdf), ‘least data collection’, as well as using nudge economics to promote positive security and privacy culture change. This conversation was AWESOME.
Plus, Wolfgang has a podcast (https://www.securingsexuality.com/), a conference (Detroit, 2023), and a book coming out! If you ‘colour outside the lines’, you definitely want to check out everything Wolf does! Subscribe his newsletter, we know we did!
Wolf’s Bio:
J. Wolfgang Goerlich is an Advisory CISO for Cisco Secure. Prior to this role, he led IT and IT security in the healthcare and financial services verticals. Wolfgang has held VP positions at several consulting firms, leading security advisory and assessment practices. He is an active part of the security community. Wolfgang regularly advises on the topics of security architecture and design, identity and access management, zero trust, and resilience.
Social media:
https://mastodon.social/@jwgoerlich@infosec.exchange
https://twitter.com/jwgoerlich
https://www.linkedin.com/in/jwgoerlich/
Websites:
Personal - https://jwgoerlich.com/
Conference and podcast - https://www.securingsexuality.com/
Very special thanks to our sponsor: The Diana Initiative! (https://www.dianainitiative.org/)
A conference committed to helping all those underrepresented in Information Security
Monday August 7, 2023 In-Person at The Westin Las Vegas Hotel & Spa
Join We Hack Purple!
Join us in the We Hack Purple Community: A fun and safe place to learn and share your knowledge with other professionals in the field. Subscribe to our newsletter for even more free knowledge! You can find us, in audio format, on Podcast Addict, Apple Podcast, Overcast, Pod, Amazon Music, Spotify, and more!