Fuzzbuts v. Fuzzbutts Red Team v. Blue Team Tabletop Game

Speaker(s): Kelly Ohlert (@gwyddia) Audience: RPG nerds, compliance folks, security leads, anyone who has ever hated sitting through a tabletop exercise Description: I specialize in doing gamified tabletop exercises – D&D for IR. I’d like to run a game I’ve designed so that other people can see how great this is. This game, Fuzzbuts v. Fuzzbutts, pits a cat meme aggregator site against three separate red teams, each with their own agenda. The blue team gets three chances to harden their systems, and the red teams each get to make an attack. The scenario is resolved by a combination of GM adjudication, player wrangling, and good old fashion dice. This game can run with as few as 2 and as many as 15 people, with audience participation welcome. It runs about two hours Bio: Kelly Ohlert is a Security and Compliance Consultant and the Tabletop Exercise Practice Lead for Leviathan Security Group. She helps Leviathan’s clients navigate multiple compliance frameworks with an eye toward risk management and best practices. As Tabletop Practice Lead, Kelly designs and facilitates simulated exercises in order to prepare clients for incident response situations such as data breaches and malware attacks. In addition to her information security work, Kelly is an attorney of over 15 years of experience. Her years as counsel in a range of legal disciplines have given her a unique perspective on client needs, sensitive issues, and confidentiality. Kelly has completed the prestigious Certificate course in Cyber Wargaming from the Military Operations Research Society. She is currently working on a book on tabletop design and facilitation for information security professionals. She is known for her theory of gamification of tabletops and has presented on that topic at the well-respected security conference Security BSides Las Vegas, where she is a member of the staff.