BSidesDelhi 2017 - Keynote - Thom Langford

I was dating these nights daily before we start something very important smile volunteer right so welcome to be sites daily and I will be talking about the power of community found community that we read right now moist pushed off burn women a quick disclaimer all of this is my own work none of this reflects anything of mine boy this is good

[Music] I got into the drug

we enjoyed thunderous is whether in my breasts on why we talking about in the community but a key thing here is that let me open up these events we talk about specific problems like DLP or violence would then set box or something like that we don't always address the outside issues as we make it easier base the outside solve the reviews that will help us actually accomplished more with less and let's face it whose company here as I've told they told you to do more with less right so the very first thing I wanted to want to say is hands up here anybody who is looking for their first intercept job anybody name and something

anybody who's looking for a job one of the next job in if you say that busy always possibly ok all the bosses funds your eyes but had to manage that people are looking for another job looking for another challenge in England right yeah brilliant Thank You sirs a few people here oh this is important right because it makes like this will actually help us achieve them the base like this and the community around us help us do and help us grow as individuals and that means sometimes going outside of your comfort zone things like this will put somebody who's never spoken in front of the large audience before on the stage for the very first time events like this will

have you talking to people that you never thought you might talk to people either perspective in the industry a people that you've met 30 online perhaps and you've always wanted to talk to them ask is your opportunity to villain this allows you to run but million ounces your comfort zone it allows you to interact with like-minded people not just the people that are in your that are in your organization it allows you to challenge the norms that you've heard within your business operations and within your within your own companies allows you to challenge those with other people and allows over the peoples of challengers this is a great example you know how to up anybody lose his password

policy says did not change your password every 90 days only change it when we tell you to and he will you have that past the fullest hands up against what hands up those have a 90 day policy or similar right okay well you're all wrong okay that's fine then you're all wrong in fact list for bring as well give into the mix like this that we actually get to explore and challenge those new ideas and those new ways of thinking so how does everybody you would like to Hollywood well there's a gentleman here who's a real misery guts so throw out some words but what word is not one word each that destroys pharmacy is it dance glamour

entertainment so for me the thing that really comes out of something like Bollywood the real word is passion right that's the word summarize everything is done passionate right I know I see them smoldering lips for 20 people it's passionate a community event like this helps reignite the passion within your chosen field when you're working day after day in your office looking at the same logs or looking at the same documentation or asking for the same controls day after day after day you're going to get changes you're going to start to feel them you know you're not thinking the biggest of contributions in the world right but when you come to a community event like this you talk to

your peers you'll know you're going to get ideas about how to diffuse them but you're going to really know your passion feel craft for your InfoSec ground and the most we're all we're all in this infinite emotions because we chose me for all the limited because we want to get in there doing the job one of the best ways of doing a good job is to be passionate about it to become a fanatical advocate for what it is that you are doing and so an event like this when you're outside you're chatting to people when you've seen speakers talk about something that they've done a framework think bill to have been created and you see how

passionate they feel about it that's infectious that's actually going to allow you to take that feedback to your own work and do more with it and to do a better job as a result and grow yourself as well okay so what about those of you what about us bold people that the people with gray hair and you know who have to wear ties to work and all that sort of thing I can only see one or two ties here what about them we made it right witness to the top of our game what a weekend I don't need to learn about you know a particular hat or I don't meet is necessarily talking to something that

password policy how much staff to do that I don't need to worry about that but I think this quote from Kevin Spacey really really sums it up which is you know if you are lucky enough to be the very top of your gun it's your responsibility to help those up the same pathway that you've been in to send the elevator back down community events like this help you do that they help you network you help you help your the participants in these conferences to communicate and to find out about other industries and then you can perhaps help perhaps offer to help mentor them in whatever reason you know resources mainly if you're trying to start up if

you don't get any building a lab at home or something all we need is a couple of really old computers well sure there are some lying around somewhere that people this is about giving back to the community and trust me they take a little while but that's going to feed directly into your business and it's your your environment and the way that I'm having quality and caliber of people that you employ okay so for all of us Wilmington how do we engage with the community so the community is not just in this room the community is not justice besides daily in this it's not just in it's a global community right so we all know study the social media right

time in my space is a little bit out too dangerous on this particular picture we don't do that a friend - based upon ability like a couple of weeks ago we all know tumblr Twitter Facebook YouTube Instagram etc these all have their own information security communities on and so you see something like this is a very easy way to find people in different countries to follow to be blood luminaries the rock stars if you will in a different country you know a continent etcetera but you never get opportunity to interact with you can actually have direct access to these people and you're going to you know ask interesting questions make interesting observations you're going to engage with them and

you're going to learn so for me it's I use Twitter and dare I say anything but for me Twitter is something I've had every single day and I guarantee I learn one thing every single day because we're how small it is but I learned something Twitter every single day I even learn about people abilities you know the threat intelligence whether it's a great dream so gets onto the social you start following people start engaging start asking questions and start getting involved the other side as well is events like this you know hats off to the organizers they have worked so hard on this so hard to make this and when this event for all of you

and be sciences a phenomenon that goes around the world as such it explains this is a community of people that we control these events has only three or very very low costs such as this one and these are just so on the b-sides one homewards know for instance in India the biases where I said that many of these events are offering admittin if you know a number of them in this country and not all of them were great intentions but you know is it with you here today right so why are we not supporting these groups who are actually trying to help you be better at your jobs to be better at what you do need to engage them if

you want to volunteer and support do know it doesn't matter if you're handing out registration cards or if you happen to like photography then be the official photographer for the day so that they don't have to pay for something's doing that you've got a drone that somebody can be even used contact you in any way it doesn't have to be technically it doesn't have to be you don't have to spend weeks and weeks and weeks of your spare time noise that the more people in conscious is the better community becomes right to look out for these things engage with them talk to me be the people who've organized besides out of the hole talk to people

my own words talk to people I suspect what's that what do we need to do to build this community further would it give you an example real-world example of somebody who's done this this is a yalena velocity so I met her the privilege of working with Yelena and besides huntin in June this year besides London have a ruddy tracker first time speakers intersecting the screen to stand up in front of audience and learn how to speak learn how to present and they match you with an experience video I couldn't find one in her case they are similar to me but what I what I found with Elena she's very very passionate about what she does

in fact if you look at her Twitter page where I asked you to read it look at her Twitter feed see that's her talking talk why the turn what she talked about to talk about stops engaging really well with this you know witness community since June which was at b-sides London which was her very first tall she's presented she's presented at seven other events and she speaking another tune before the end of November her hands up anybody came who was spoken at seven events in three months right precisely now Elena is not an intersect professional she's a pediatric nurse she feels passionate about 80 percent in the health care industry she wants to contribute to her thinking and every

single one of the organizers of these conferences feels she has something to share how many people in the room can say they've had an entire article on the register dedicated around your talk your InfoSec professionals she says pediatric nurse why do you not got an article in the register the reason she has is she's found something she's found an issue in her industry she's passionate about it and she's willing to engage do something about it because of this our entire community is stronger as a result we have learned things that actually the health care industry you know has problems has very fundamental problems we can all say me know about with other when somebody within that

industry and she tells us we tend to sit up take notice to the point where the register makes a point an article about it so I did a bit of over brainstorm on account the four things that the Elena sort of presented as qualities that allowed her to engage to work so effectively and the first one she she decided she lives in Amsterdam she speaks three languages she gives it out of that she decided to speak to the b-sides London team who asked if she could present okay that's pretty effective letting go she paid out of her own pocket to travel from Amsterdam tonight she spent evening to the women are freaking with me on the phone non-stop

go through a presentation she do she she had energy I can't tell you how exhausting it is traveling to seven different places in three months and presenting a talk at each one that have attended entire conference been exhausted she's got energy she's channeling that energy into something that's very constructive she's moved out of her comfort zone she's a pediatric nurse she doesn't do public speaking but she was willing to do it she was willing to learn in order to get her message across and finally she had passion she really exhibits passion she feels so strongly about this and it comes across it didn't come across she wouldn't be invited back to half of these places

you know the talk of physically died so turns out when you do no serious Indian businessman it's not such an endeavor he's right down the bottom we get some really bad pictures but I'm going to talk to them cloistered hands up here someone who employs fields someone who employs people looking at the man at the time he's not with his hand open and you blasted you got one key stone up please yes please stand up anyone else make you feel alone come on you are the only one who what was toast confessing to it okay you got you there - okay so anybody the two people that were looking forward and anybody else mrs. Barrus with the

hand up these are the two people you need to be talking to you in the hallway turn out there these are the people and we hear all the time but but there's a skills gap right it's getting harder to hire people we haven't got the skills etc contractors it cost four times in that plane they're really difficult to work but this is skills go and we it's ridiculous hi someone like going right hire Elaine she may not have all of the skills but she has the passion she has the desire she had the bunkers she has the values of many information security culture and that can't be taught it has to be within you can teach skills

you can't teach passion you can inspire passion can't teach now for me and I mean I do this very very carefully these four companies to be sponsors of be ScienceDaily I have no affiliation whatsoever please guys get me they sponsored community events so that they can get in front of people here they're not just hitting - selling product the hint of talk to people to learn about what we do to engage to network perhaps find you know someone who in their organization so these people get if you're not engaging with the community has of business your business is not working you know with conferences like this or or any kind of events where ice explain they're not really investing

they're not really really care about you know in your InfoSec group inside you need to actually get your business to engage in this I continue experience I have of hiring people through my organization is not great because my HR organization is geared up to hire people to do the world the business world but not to hire security people therefore I need to go out find these security people in other ways and it's an event site basically makes all of the difference only give you another story as well another real case of stories is Lee Munson Lee Munson runs a website called security FA news it's been running for about 10 or 12 years give you an idea of how successfully is in

the industry it wouldn't get about two hundred fifty thousand hits of punch now does anybody here run a personal website at traffic right that mean he does he does this he's doing this in his spare time this was a hobby and Li was not an intersect professional even though he gave me the second wife's even though you know he he followed the news he provided opinion and all that sort of thing Lin was not in a second national he worked in a shop he worked in retail stacking chairs pricing things taking orders but any percent was his passion it was exactly what he wanted to do and as a result of that he now works and

he's doing is a Anaya stone lead implementer he has communicated his own gross communications for the security reasons he communicates of a regular basis to nearly ninety two thousand people at a time he runs and he creates awareness and training campaigns but he says Rito but I tell you what behind these four boxes other things that have really made a difference in his time it reads now he would attend two events he would network and leave me the first ones attorney that's not him you notice there's a shy person but he didn't paint it he talked to me engaged he was also patient it took a long time it's very very patient took a long time and at one

point it lost hope but he maintained it and we got what we got stuck working it for second and that they soon made really big one so you know from a full time and full time job but the patient it's not going to happen overnight this is not a panacea for the pillion tape and just suddenly he was self educated he learns everything they knew of his own man he looked he read he researched he attended conferences in lists of people who would then write up about his conferences his work is published multiple places is twenty in in the medium in the UK and he was a return work come here it's twenties regularly in The Times of India on matters of in

percent but you're in Houston these is the reason he was in there is no sense we're looking in the wrong place for many of these team he was also committed and you more had no idea what a of a ping on their since our story aired the basically you can imagine breakfast even a Friday and even a slightest Bailey the chicken who provided VA was involved the pink that provided the plane that was too fitted that's the dinners don't just get involved commit so I'm glad to say I've got two minutes to three minutes left to write down so I'm glad to say come to the end of this session no more lecturing there's a few things

I'd like you to remember they say you remember 30 percent of what you heard in half an hour so I'm hoping you're gonna hear you're going to remember ibly some of this okay but there's three things to take away ring first one is find the community kind of already done that engage with it really again commit to it but just get involved but just playing around commit with what we give to educate yourself learn from people and network with them you never know when that person is going to be the conference was telling you about really excited framework that we're creating about information security culture whatever when actually that might become really imperative to you or to someone

you know demonstrate your passion your values your opinions you can do this on social media you can bro you can talk get on the you know or or talk to Isis square and other ways but not and talk to them about presenting so even if it's just five minutes five minutes of imparting your knowledge and getting feedback on that knowledge it's going to help you Pro okay you don't have to stand up and talk for an hour or 25 minutes or whatever you just have to give some knowledge over and you will receive twice as much back looks heck skills will be followed beyond once you have demonstrated that passion doesn't mean ignore them that

doesn't mean they're not important but actually tech skills to be taught and learned and you can do that in your spare time at least more importantly prove that you are a going to be a human sprinkle turn to the organizational community and finally lawyers that's that look outside of your normal channels start talking to people a base like this about who they are what they do when they go but do things happen too much they travel to them what is that what is what is their five-year plan within one five and ten year plan where they lots of me because you never know you might be able to help well they might have a friend who could help to

introduce you to become a part of that community you know I'm not gonna be all sales like but actually you know sponsoring events like this makes a huge difference in their allows us to be you are all here because of sponsors without sponsors this would not have happened so then actually be one of those spots as it possibly can because you will reap the benefit system because the end of the presentation you can reach me on all of these eminent residences and this is where you break out thunderous applause [Applause] the most positive spoken appreciation for besides initiatives on DT mr. thaw

[Music]