The conversation promotes the Barcelona Cybersecurity Congress, scheduled for November 3-5, 2026. Scott emphasizes the importance of cybersecurity and networking opportunities at the event. Sounil Yu, a seasoned cybersecurity professional, discusses the evolving landscape of cybersecurity, particularly the role of AI in making cybersecurity less relevant. He introduces the DIE triad (Distributed, Immutable, Ephemeral) and the Cyber Defense Matrix as frameworks for addressing cybersecurity challenges. Sounil also highlights the need for a cultural shift towards high-velocity engineering and continuous reengineering to stay secure. The discussion concludes with information on how to connect with Sounil and attend the Congress.
Outline
Barcelona Cybersecurity Congress Promotion
- Scott introduces the Barcelona Cybersecurity Congress, emphasizing its importance and urging listeners to mark their calendars for November 3-5.
- The event is described as a must-attend for networking with top cybersecurity professionals from around the world.
- Scott mentions their own participation and broadcasting at the event, encouraging listeners to join.
- Contact information and details about the event are available on Industrial Talk.
Introduction to Industrial Talk Podcast
- Scott reiterates the importance of the Barcelona Cybersecurity Congress and its alignment with Industrial Talk's mission to celebrate industry professionals.
- The podcast is described as a platform for celebrating bold, brave, and innovative industry professionals.
- Scott emphasizes the collaboration with the Barcelona Cybersecurity Congress and the importance of cybersecurity solutions and professionals.
Introduction of Sounil Yu
- Scott introduces Sounil Yu, highlighting his extensive experience and expertise in cybersecurity.
- Sounil's background includes roles at Bank of America and his experience in penetration testing and red team activities.
- Scott praises Sounil's ability to make complex cybersecurity concepts consumable and understandable.
- The conversation is set to delve into topics like cybersecurity, AI, and network protection.
Sounil Yu's Background and Philosophy
- Sounil shares his 30+ years of experience in cybersecurity, including his role as a chief scientist at Bank of America.
- He describes his job as running experiments to learn through failures, emphasizing the importance of documenting and explaining what is learned.
- Sounil discusses the rapid changes in technology and the need for organizations to adapt to new challenges.
- He introduces the concept of the Cyber Defense Matrix and the DIE triad (Distributed, Immutable, Ephemeral) as tools for understanding and addressing cybersecurity issues.
The Role of AI in Cybersecurity
- Sounil explains how AI is accelerating the evolution of cybersecurity, making traditional cybersecurity approaches less relevant.
- He introduces the concept of high-velocity engineering organizations that constantly build, rebuild, and tear down systems to reduce attack surfaces.
- Sounil provides examples of how AI tools are enabling organizations to pivot quickly and adapt to new challenges.
- The discussion touches on the cultural shift needed for organizations to embrace high-velocity engineering and the role of AI in facilitating this change.
The DIE Triad and Cybersecurity
- Sounil elaborates on the DIE triad, explaining how distributed, immutable, and ephemeral systems can reduce the burden of security.
- He discusses the trade-offs between long-lived assets and the benefits of short-lived systems in terms of security.
- Sounil provides examples of how AI is enabling the creation of ephemeral systems that are less vulnerable to attacks.
- The conversation highlights the importance of adapting to new technologies and the role of AI in enhancing cybersecurity.
Training the Next Generation of Cybersecurity Professionals
- Sounil emphasizes the importance of curiosity and experimentation in developing cybersecurity professionals.
- He encourages young professionals to explore new technologies and understand their vulnerabilities.
- The discussion touches on the need for continuous learning and adaptation in the cybersecurity field.
- Sounil highlights the importance of addressing both long-lived and ephemeral systems in cybersecurity training.
The Future of Cybersecurity and AI
- Sounil discusses the potential of AI to improve cybersecurity by proactively finding and addressing vulnerabilities.
- He acknowledges the current advantage of attackers in using AI for attacks, but sees a future where defenders can leverage AI for better security.
- The conversation explores the role of AI in accelerating high-velocity engineering and the benefits of reengineering systems quickly.
- Sounil emphasizes the need for a mindset shift towards continuous building and reengineering to stay ahead of cybersecurity threats.
Cultural Shift and Organizational Adaptation
- Sounil discusses the cultural shift needed for organizations to embrace high-velocity engineering and AI.
- He provides examples of how organizations have adapted quickly during crises, such as the COVID-19 pandemic.
- The conversation highlights the importance of a flexible and adaptive culture in cybersecurity.
- Sounil encourages organizations to see themselves as developing countries, constantly building and reengineering to stay competitive.
Conclusion and Contact Information
- Scott wraps up the conversation, emphasizing the importance of attending the Barcelona Cybersecurity Congress and networking with professionals like Sounil.
- Sounil provides his contact information, including his website and LinkedIn profile, for listeners interested in learning more.
- The conversation ends with a reminder of the discount code for the Barcelona Cybersecurity Congress and the importance of staying connected and informed.
- Scott reiterates the value of the event and the opportunities it presents for professional growth and networking.
