Even though large breaches have hit headline news in years past, some companies are still on the fence about investing in cybersecurity. As a security practitioner (or jack of all trades) how can you be expected to cover your assets with zero budget? Thankfully, there are plenty of open-source tools out there that will allow you to secure your organization. Come join me as I discuss how you can track your network assets, perform vulnerability assessments, prevent attacks with intrusion prevention systems, and even deploy HIDS. We will also jump into finding sensitive data and PII in your network, as well as incident response tools and automation. All it costs is your time (and maybe a VM or two). You really can drastically improve the security posture of your network with little to no budget, and you’ll have fun doing it! OK, maybe it won’t be fun, but at least you’ll learn something, right?

For over a decade, Kyle Bubp has been elevating the state of security for enterprises, service providers, government organizations and the industry at large. Throughout his career, Kyle has worked on several privileged and classified U.S. government projects for multiple 3-letter agencies. He has developed secure architectures for fingerprint processing, protected research for the scientific and academic communities and locked down envioronments for defense logistics. He's put his skills to the test at a massive scale for an international hosting company and has since co-founded Savage Security, an InfoSec Research and Consulting firm. Kyle has been published in ISSA Journal about the malware threat and he continues to pen articles and speak about best practices in security.

Back to Bsides Cleveland 2017 video list