Sharing Cyber Outside of the Security Bubble with Lesley Carhart
Hacker Valley Studio22 Nov 2022

Sharing Cyber Outside of the Security Bubble with Lesley Carhart

Lesley Carhart, Director of Incident Response at Dragos, takes some time off mentoring cybersecurity practitioners, responding to OT incidents, and training in martial arts to hop on the mics this week. Named Hacker of the Year in 2020, Lesley’s impact on the industry stretches far and wide. As an incredible content creator for cybersecurity, Lesley advises listeners on how to find their niche and who to be willing to educate along the way. Be sure to subscribe to Hacker Valley Studio, the premiere cybersecurity podcast for cybersecurity professionals.

Timecoded Guide:

[00:00] Giving back to the community through martial arts & cyber education

[06:13] Being excluded from the cyber industry & turning to content creation instead

[12:33] Comparing incident response in IT vs OT environments

[19:46] Dealing with post-COVID problems with the wrong OT systems online

[26:51] Finding your cyber niche & exploring education options within it

Sponsor Links:

Thank you to our sponsors Axonius and NetSPI for bringing this episode to life!

Life is complex. But it’s not about avoiding challenges or fearing failure. Just ask Simone Biles — the greatest gymnast of all time. Want to learn more about how Simone controls complexity? Watch her video at axonius.com/simone

For more than 2 decades, NetSPI has helped companies discover and remediate critical security issues through its platform-driven, human-delivered security test. NetSPI is much more than a pentesting company, bringing you the most comprehensive suite of offensive security solutions. Visit netspi.com/HVM to learn more.

What inspired you to start creating cybersecurity content?

Lesley’s cybersecurity content has vastly influenced and impacted many cyber practitioners in the industry, including Ron and Chris. Unfortunately, Lesley’s journey into content creation was inspired by the lack of mentorship they received from other professionals when they were starting out. Never wanting anyone to feel the way they did, Lesley created an online world of resources to warmly welcome and educate new practitioners.

“It's not a really glamorous story. When I got into cybersecurity, I wanted to do digital forensics and nobody would help me, nobody would actually take me seriously and give me a shot. Everybody should have a chance to get into cybersecurity if it's something they want to do.”

How has teaching cyber to a general audience been appealing to you?

When not educating new cyber practitioners or tearing it up in the martial arts studio, Lesley likes to reach out to their community and give talks to audiences outside of typical tech and security groups. From churches to universities, Lesley loves meeting people outside of the cyber industry. These individuals always offer them a new perspective and a feeling of accomplishment for showing someone something new.

“It's enjoyable to me to find other people out there who want to learn about an entirely new topic and expose themselves to its problems and how it impacts society and things like that. I appreciate that. Cybersecurity is important and it impacts everything around us all the time.”

In your world, where does incident response start, and where does it stop?

Like many of cyber’s most complicated concepts, the answer to where incident response starts and ends is subjective to certain resources and elements of an organization. Lesley explains that incident response has to be planned and that the planning process has to involve when to declare an incident and when to close the said incident. Without proper planning in advance, an organization is at risk for a crisis that could’ve been responded to quickly turning into an out-of-control attack.

“There's no perfect defense against an incident, everybody's vulnerable. You do your best to mitigate and avoid having a cybersecurity incident, but there's only so much you can do. Eventually, you have to assume that you're gonna have an incident.”

What piece of advice do you have for anyone looking to share more knowledge and make the cyber industry better?

Although everything in cybersecurity can seem daunting, expansive, and interesting to everyone, Lesley’s recommendation to new practitioners is to find a niche in cyber and stick to it for a while. Finding a niche doesn’t have to be permanent, but Lesley believes that niche will help you carve out extensive knowledge worth sharing and creating content around. When you discover that niche, don’t be afraid to reach out to other industry experts along the way.

“Pick an area and then find mentorship in that and try to focus for a couple of years on a particular area. You can always change your mind later on, just like degrees, just like training programs, but it's going to help you a lot to focus for a little while.”

---------------

Links:

Keep up with our guest Lesley Carhart on LinkedIn, Twitter, and their blog

Learn more about Dragos, Inc on LinkedIn and the Dragos website

Connect with Ron Eddings on LinkedIn and Twitter

Connect with Chris Cochran on LinkedIn and Twitter

Purchase Hacker Valley swag at our shop

Continue the conversation by joining our Discord

Check out Hacker Valley Media and Hacker Valley Studio

Avsnitt(408)

Episode 176 -Technical Education with Dr. SK Moreland and Terri Oropeza

Episode 176 -Technical Education with Dr. SK Moreland and Terri Oropeza

We’ve switched it up again to bring you 2 guests this week on this double header masterclass in education. Chris and Ron are joined up by Terri Oropeza and Shakera Moreland, two natural teachers in their field. Shakera, also known as the HIM concierge, has used her past to shape how she teaches future professionals. Terri explains how to grow to understand your authentic self in learning and teaching while encouraging young people to never mind the stereotypes and get into cyber. With the opinions and strategies laid out by these two educators, you can be sure that you won’t leave this episode taking away nothing.    Key Takeaways:   Shakera Moreland 03:31 Bio 05:56 What is H.I.M.? 10:03 Connecting with others to guide and mentor 11:58 Marrying your super-power with your purpose 13:10 Shakera’s journey into podcasting 16:01 What need does Shakera’s business solve? 17:34 What’s the goal of the podcast, and why?   Terri Orepeza 20:20 Intro 21:03 Bio 25:43 Influences from teachers in the past 27:05 What Terri is teaching today 28:58 What can be changed in technical education? 31:48 Empowering students to find their calling in the field 33:32 Why is it important to get involved in organizations? 37:20 Advice for a newcomer     Hacker Valley Studio: Swag | LinkedIn | Twitter | Instagram | Email Ron & Chris | Website Shakera Moreland: LinkedIn | Podcast  Terri Orepeza: LinkedIn | Twitter  Support Hacker Valley Studio on Patreon Join our monthly mastermind group via Patreon This episode is sponsored by Living Security

19 Okt 202140min

Episode 175 - Deep into the Attacking Mindset with Maxie Reynolds

Episode 175 - Deep into the Attacking Mindset with Maxie Reynolds

Maxie Reynolds is the author of The Art of Attack, subsea engineer and R.O.V. Pilot with an interesting perspective on offense. She is an expert in understanding the mindset of an attacker and using that to mold a communicative, responsive group of blue and red professionals in the constantly-evolving cyber security playground. Join Chris, Ron and Maxie as they dive into why shifting your mindset could be the determinant for understanding an attacker's motives and next moves. Key Takeaways: 03:15 Bio 07:30 Same attacker mindset, just a different application 09:36 The mindset of an attacker; molding and shifting perspective 11:10 Encouraging curiosity - diving deep in Maxie’s past 14:22 Challenges with writing a book 17:50 Future predictions in cyber security 23:23 Why underwater? 26:38 The importance of observation and how to do it well 29:25 Defense should know about offense Hacker Valley Studio: Swag | LinkedIn | Twitter | Instagram | Email Ron & Chris | Website Maxie Reynolds: Book | Twitter | Instagram | Linkedin | Podcast Support Hacker Valley Studio on Patreon Join our monthly mastermind group via Patreon This episode is sponsored by Living Security

11 Okt 202130min

Episode 174 - Don‘t Do It For The Grammys with Tre Nagella

Episode 174 - Don‘t Do It For The Grammys with Tre Nagella

Tre Nagella is a 3x grammy award-winning studio engineer, record mixer and music producer. With decades of experience in music, he started his studio in Dallas, Texas and has flourished as a craftsperson and leader. Serving clients like Kirk Franklin, Christina Aguilera, and contributing to several blockbusters, such as “The Hate You Give” and “Hidden Figures”, Tre knows a thing or two about what it takes to become a skilled craftsperson. Listen as Tre, Chris and Ron present a masterclass in all things art. Key Takeaways: 02:47 Bio 04:20 The choice inn music- what was the reason? How did you do it? 07:35 Patience, humility and learning 08:30 Finding your own flow and following no rules 10:54 Lady Gaga, Snoop Dogg…..Kanye?! 14:00 Security & Music; Keeping up with the times 16:52 Passion + discipline = success 19:54 You don’t have to motivate passionate people 21:40 Get in touch with Tre! Hacker Valley Studio: Swag | LinkedIn | Twitter | Instagram | Email Ron & Chris | Website Tre Nagella : Website | Instagram Luminous Sound: Website | Instagram | Facebook Support Hacker Valley Studio on Patreon Join our monthly mastermind group via Patreon This episode is sponsored by Axonius

7 Okt 202122min

Episode 173 - Laughing your Cyber Off with Ian Murphy

Episode 173 - Laughing your Cyber Off with Ian Murphy

This week, join Ron and Chris as they sit down for a raw conversation with Ian Murphy. Ian is a game-changing pioneer in cyber training resourcing, adding spice to a dull, outdated training market. His company, CyberOff, is the “antidote for dull cyber training.” The three dive deep into topics like comedy, creating and sourcing content, being vulnerable and the reason for it all.   Key Takeaways:   02:44 This is Rock n’ Roll  03:04 Bio 4:00 Content- where does it originate? 06:43 What is it like to be an entrepreneur in cyber? 08:20 Where does Ian draw the line? 11:55 What makes comedy? Chris and Ian deliberate 15:36 Working on vulnerability 17:23 Ian’s approach- Where did we go wrong in teaching? 20:31 The end goal 23:35 The most “popular” form  28:09 Ian’s inspiration     Hacker Valley Studio: Swag | LinkedIn | Twitter | Instagram | Email Ron & Chris | Website Ian Murphy: LinkedIn | Twitter | Email | Website Support Hacker Valley Studio on Patreon Join our monthly mastermind group via Patreon This episode is sponsored by Living Security

5 Okt 202135min

QuickQ: What the Heck is Going on with Ransomware?

QuickQ: What the Heck is Going on with Ransomware?

The average ransomware cost is $312,493. That number has increased 171% compared 2019. Why does it still work? What we have to do to stop it? How, in 2021, can a criminal organization have a customer service division? Yes, that’s right, customer service. Join Ron and Chris for this ransomware discussion.    Note: After additional research we discovered that an investigation determined that the woman that lost her life, did not die due to the ransomware and would have perished regardless of the attack.    Key Takeaways: 00:57 What is ransomware? 02:39 Who gets attacked? 04:53 Criminal service with customer service 07:43 The history of Ransomware 11:45 Immutable 14:40 Use 2-factor authentication! 16:32 Chris’ take on the future of ransomware 19:20 Ron’s future predictions     Hacker Valley Studio: Swag | LinkedIn | Twitter | Instagram | Email Ron & Chris | Website Support Hacker Valley Studio on Patreon Join our monthly mastermind group via Patreon This episode is sponsored by Axonius

30 Sep 202121min

Episode 171 - Resilient Mindset with Chris Hughes

Episode 171 - Resilient Mindset with Chris Hughes

Chris Hughes is the CISO and Co-Founder of Aquia and has nearly 20 years of Cyber/IT experience. He's an Air Force veteran as well as former Government civil service employee with the U.S. Navy and FedRAMP. Chris also teaches in two M.S. Cyber Programs at Capitol Technology University and UMGC. Chris is passionate about Cloud Security and is active with the Cloud Security Alliance and Cloud Native Computing Foundation and he also hosts a podcast called "Resilient Cyber". Key Takeaways: 02:52 Bio 04:24 What motivates Chris? 06:03 Time management 07:24 Failing up – lessons learned 09:09 Habits and mindset 10:59 Chris’ podcast – Resilient Cyber 13:09 Branding & persona – using your vulnerability 15:07 Using your network 19:06 Stop waiting and start working harder 20:40 Maintaining authenticity 22:22 Input vs. Output 25:13 Talking Legacy 28:12 Being resilient Hacker Valley Studio: Swag | LinkedIn | Twitter | Instagram | Email Ron & Chris | Website Chris Hughes: Linkedin | Podcast Support Hacker Valley Studio on Patreon Join our monthly mastermind group via Patreon This episode is sponsored by Living Security

28 Sep 202130min

Episode 170 - The Beauty of Cybersecurity with Grace Chi

Episode 170 - The Beauty of Cybersecurity with Grace Chi

Grace is Cofounder and COO of Pulsedive, a US-based threat intelligence startup. At Pulsedive, Grace works closely with defensive security (and in particular, cyber threat intelligence) teams to support the development of integrated intelligence capabilities and programs. Join Chris, Ron and Grace as they discuss transitioning into cyber, finding the right community to support your personality, and the beauty and purpose behind it all – as a creative in cybersecurity.   Key Takeaways: 01:46 Bio 02:46 Creativity & cyber 07:34 How does modeling help Grace’s career in cybersecurity?  09:37 The beauty in cybersecurity 14:38 Making the transition with no experience 17:27 What’s the greater purpose? How do you mesh your personality into your career? 20:51 Grace’s ideas for continuing to level the playing field regarding transitioning into cyber 23:19 Humanity in cybersecurity 28:32 Understanding how to find the beauty in cyber 31:42 Get in touch with Grace Chi     Hacker Valley Studio: Swag | LinkedIn | Twitter | Instagram | Email Ron & Chris | Website Grace Chi: LinkedIn | Twitter Pulsedive: Twitter | LinkedIn Support Hacker Valley Studio on Patreon Join our monthly mastermind group via Patreon This episode is sponsored by livingsecurity.com

21 Sep 202133min

Episode 169 - Art, Science, and Nanotechnology with Dr. Bahijja Raimi-Abraham

Episode 169 - Art, Science, and Nanotechnology with Dr. Bahijja Raimi-Abraham

Among other things, Dr. Bahijja Raimi-Abraham is an award-winning researcher, lecturer and trailblazer in the world of nanotechnology. She also hosts a podcast called Monday Science, keeping listeners updated on the latest in tech, science, health and their relationship. She joins hosts Ron and Chris for a jam packed episode, where they cover nanotechnology, biohacking, the vast world of academia and much more.    Key Takeaways: 02:30 Bio 04:52 The origin story: combining science and art 09:40 Nanotechnology: what’s the latest, and where is the science headed? 16:00 Biohacking? 18:00 How does nanotechnology communicate? 23:34 The path to Academia: how do you find yours? 29:45 A message to the multi-talanted; knowing yourself, your strengths and Identifying the need 33:30 Get in touch with Bahijja Raimi-Abraham     Hacker Valley Studio: Swag | LinkedIn | Twitter | Instagram | Email Ron & Chris | Website Bahijja Raimi-Abraham: Twitter | LInkedin | Website | Podcast Support Hacker Valley Studio on Patreon Join our monthly mastermind group via Patreon This episode is sponsored by livingsecurity.com

14 Sep 202135min

Populärt inom Utbildning

rss-bara-en-till-om-missbruk-medberoende-2
historiepodden-se
det-skaver
alska-oss
harrisons-dramatiska-historia
nu-blir-det-historia
johannes-hansen-podcast
rss-sjalsligt-avkladd
not-fanny-anymore
sektledare
allt-du-velat-veta
sa-in-i-sjalen
i-vantan-pa-katastrofen
rss-max-tant-med-max-villman
handen-pa-hjartat
rikatillsammans-om-privatekonomi-rikedom-i-livet
polisutbildningspodden
sektpodden
rss-om-vi-ska-vara-arliga
roda-vita-rosen