What's the Worst That Could Happen?

Understanding the potential impact of a security incident is crucial, whether at design time, or when responding to an actual event. Buzzwords like "inverted security" and "deperimeterization" have haunted security jargon for years, but don't help us guess how many systems an attack has compromised, or justify making a change in user account management. Using real-world examples of password trust relationships, we'll identify ways that diligent security efforts are often undermined, explain how to spot some potentially critical problems on our own networks, and better understand the practical application of concepts that often seem too abstract to be useful.