YOU'RE TESTING IT WRONG - ADVENTURES IN IPS AND FIREWALL TESTING METHODOLOGIES presented at BsidesCa 2017

by Chuck Mcauley,

Summary : Firewall vendors all claim the same thing. They block 100% of malicious attacks, never false positive, and go really really fast. Their datasheets never lie and are direct comparisons of their peers. In this talk I systemically destroy the datasheet, the myths surrounding performance and security testing, and show that there is truly is no silver bullet when it comes to securing your network. Attendees will walk away understanding how to read the tea leaves of datasheets and have the confidence to make better, more informed decisions when purchasing security devices.