SESSION ID: MASH1-T08 Imagining the Future of Security Heather Vescent CEO & Senior Researcher The Purple Tornado @heathervescent #RSAC #RSAC Would you play this game? 2 #RSAC Would you play this game? Pay a quarter per whack 3 #RSAC Would you play this game? Pay a quarter per whack Play against an adversary who has control 4 #RSAC Would you play this game? Pay a quarter per whack Play against an adversary who has control Buy a new mallet for each mole 5 #RSAC Would you play this game? Pay a quarter per whack Play against an adversary who has control Buy a new mallet for each mole 6 Every time you hit a mole the board gets bigger #RSAC Would you play this game? Pay a quarter per whack Play against an adversary who has control Buy a new mallet for each mole 7 Every time you hit a mole the board gets bigger There’s no prize #RSAC Would you play this game? 8 #RSAC Would you play this game? 9 We are asking the wrong questions • What’s the best tool? • Who should I hire? • Where can I find them? • Should I build stuff on the Blockchain? AI? 10 #RSAC We should instead be asking • How is world changing? • What trends favor me? • … my adversary? • Where should I spend my time & money? • Where should I make my adversary’s spend their time & money? 11 #RSAC #RSAC Which Future? Brazil Money CashCash HoesHoes Money In Code we trust I’m from the Government & I’m here to help #RSAC Which Future? Brazil Money CashCash HoesHoes Money In Code we trust I’m from the Government & I’m here to help #RSAC INTRODUCING FUTURISM #RSAC Introducing Futurism Goes by : Foresight, Futurism, Futurology Futurism is not prediction Both Art and Science Not one future, many possibilities 15 Futurism is a methodological discipline Helps us 1 2 3 Expand the range of future outcomes Identify which factors influence the evolution of the present into the future and how Understand what decisions and actions in the present might guide us toward desired futures 16 #RSAC #RSAC Foresight Methodology PAST HISTORY THE PRESENT CURRENT CONDITIONS Appreciative Information Sources • 1998 Reports Inquiry • Foresight Reports • Social Media • Trends Interviews Survey THE PRESENT FORCES OF CHANGE Variables S—Social T— Technology E—Environment E— Economic P— Political V—Value Adapted and expanded from Dr. Peter C. Bishop, Studies of the Future, 2012 FUTURE POSSIBILITIES Baseline Scenario Alternative Scenarios New Paradigms #RSAC APPLYING FUTURISM TO SECURITY Shifting Paradigms #RSAC Shifting Paradigms What is changing in the security world to improve or cause unintended consequences today? What has changed about what needs to be secured? How do we change the thinking of security professionals to better consider problems of the future? #RSAC