DEF CON 32 - Social Engineering Like you’re Picard - Jayson E Street
Source: YouTube · DEFCONConference · published Oct 16, 2024 · 46:43
[BLUF] The speaker discusses how AI can be used in social engineering and cybersecurity, emphasizing the importance of situational awareness and real-world training over generic security awareness programs, while highlighting the risks and ethical boundaries of AI misuse 19:00.
Key Takeaways:
• AI can be leveraged to create realistic phishing websites and social engineering tools, such as fake executive bios and websites mimicking real companies 20:11.
• The speaker uses AI to generate conversation starters and payloads for educational purposes, demonstrating how AI can assist in teaching security concepts in a relatable, non-jargony way 25:00.
• AI-generated avatars and tools can be used to simulate real-world attacks, such as a CEO AI avatar, to train employees on recognizing threats and improving situational awareness 41:00.
• The speaker criticizes traditional security awareness training, advocating instead for hands-on, real-world scenarios like fire drills to teach employees to recognize and report suspicious activity 38:00.
[Closing statement] The talk urges organizations to stop relying on generic security training and instead foster a culture of situational awareness, using real-world analogies and AI tools to make security education more effective and relatable.
Sources:
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 1 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Cybersecurity. Commonly maps to: Security and Risk Management, Security Operations. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
for the record I'm I'm not starting technically early because this is not my like my my talk slide this is my uh legal disclaimer slide so I'm not talking early 100% we're we're cool on that kosher okay there okay good um this is my uh legal disclaimer I'm not a lawyer but I've played one successfully on the internet before um and so uh when I talk about things about like you know robbing people or how we can kill people and stuff like don't chill okay it's like I'm adorable remember the kittens okay I would never try to steal from you ruin you financially or you know uh you know rob you unless there's a contract mostly uh so this is the start of our talk the name of the talk is social engineering AI like your bicard and subverting hi like your lutus you know because the Devcon theme is en…