DEF CON 32 - The Immortal Retrofuturism of Mainframes and How to Keep Them Safe- Michelle Eggers

DEF CON 32 - The Immortal Retrofuturism of Mainframes and How to Keep Them Safe- Michelle Eggers

Source: YouTube · DEFCONConference · published Oct 16, 2024 · 25:49

Cybersecurity
No ratings yet Log in to rate
Transcript Available
Description

This presentation explores mainframe computers' evolution, security challenges, and critical role in modern infrastructure 0:12.

Key Takeaways:
• Mainframes have continuously evolved since the 1950s and remain essential to finance, healthcare, and government sectors, handling billions of daily transactions 3:00
• Security breaches typically occur through integration points like web applications and networks rather than direct mainframe attacks, as seen in TJX, Heartland, and Equifax breaches 15:55
• Proper security requires network topology configuration, logical partitioning, disabling unencrypted protocols, and regular penetration testing 23:13

Mainframes remain critical infrastructure requiring ongoing security attention as integrations increase potential attack surfaces 25:14.

Sources:

  • 0:12 Introduction to mainframe security topic
  • 3:00 Explanation of mainframe capabilities and evolution
  • 15:55 Major security breaches affecting mainframes
  • 23:13 Security recommendations for mainframe protection
  • 25:14 Conclusion about mainframe importance

Generate CPE Credits

Generate a professional CPE document from this video's transcript.

Estimated credit: 0.5 CPE hours

Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.

Topic: Cybersecurity. Commonly maps to: Security and Risk Management, Security Operations. Exact CISSP domains are assigned during generation.

CISSP Domain Mapping
Learning Objectives
Self-Assessment Questions
PDF Export Ready

Free account. One generation at a time, with a daily limit.

CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.

Watch on YouTube

Transcript Preview

First 800 characters of the transcript

thank [Applause] you right thanks everyone for being here uh we know it's Sunday and 10: a.m. so my heart goes out I appreciate you so much today we're going to talk about the immortal retrofuturism of mainframe computers and how to keep them safe I will give you a small disclaimer I am coming from of course the red team side defensive security side so this how to keep safe tips will not be as expansive as perhaps someone who is on the defensive side but we will touch on it a little bit so to begin let me see yes it worked okay this is me it looks a little weird it's all blown out but I'm Michelle Edgars I'm a security consultant with netspy I've been with them for a couple of years I specialize in Mainframe web application and network penetration testing I have a background in accounting …