Mai's Whole Grain Sticky Rice

Charles Herring 10 November 2023
Mai's Genmai Rice
Being born and raised in Japan and a methodical cook, Mai has mastered cooking the perfect bowl of rice (in my opinion.) When she was visiting Japan and I was at home, I asked her help in learning how to make it myself. The recipe includes both her original guidance and my American translation (dumbing down.) It is a staple in everyday meals in our home. The whole grain, brown, genmai rice has additional fiber and nutrients over most typical white rice.

Vegan Double-Chocolate, Double-Nut Cookies

Charles Herring 10 November 2023
Vegan Double-Chocolate, Double-Nut Cookies
This recipe is adapted from the peanut-butter cookies I made with my mother and brother as a child. I've converted the recipe to be a plant-based, vegan recipe and I replace refined sugar with sweeteners that are gentler on the body. The cookie is pretty high in protein and fiber for a cookie. They are not overly sweet and are an effective way of satiating my sweet tooth without regret. They are sticky and messy to make but worth the effort.

Machine Learning Driven Social Engineering

Charles Herring 5 November 2023
Machine Learning in Social Engineering
Given at the 10th Annual Chicago Hacking Conference on 11/6/23. Machine learning (ML) is arguably the most potent advancement in technology since atomic fission with similar benefit and risk extremes. The outcome driven nature of machine learning allows computers to rapidly test theories to find pathways to support specific goals. These approaches applied to social engineering can be used to manipulate human factors for purposes including cybersecurity breach. This session will cover the philosophies, strategies and tactics used to accomplish a successful campaign to recruit human assets to a cause. Factors to mitigate risk in these advanced social engineering attacks will also be examined.

GrrCON 2023 - Deterring Cybercrime via a Global CyberGrid

Charles Herring 27 September 2023
GrrCON

Abstract

Detecting, catching and successfully prosecuting cybercrime requires collaboration across private sector, law enforcement, insurance companies and national security agencies. In this session, approaches to collect, analyze, store and share digital evidence will be examined. Methods of safely transmitting data between private sector and law enforcement will be discussed. Demonstration of workflows between investigators, law enforcement, prosecutors and insurance adjusters will be covered. 

I also reference this 2021 DarkReading Article: Handcuffs over AI.

2026 Conference Talks for Charles Herring

Charles Herring 11 December 2022
Linkboard
New for 2026: abstracts on Coding with AI (lessons from building WitFoo's analytics platform with Claude Code) and Empathetic Processing and Temporal Link Analysis (research pathways for AI in cyber defense). The classics on CyberGrid, SECOPS-as-law-enforcement, and the Seven Unstable Conversations are still on the menu. Bio refreshed for the Chairman era and the New Zealand base

Profit and Loss (PNL) of Cyber Security

Charles Herring 29 August 2022
Profit and Loss

The purpose of a CISO and a cyber program is to reduce the costs associated with cybersecurity. I said this to colleagues at a social mixer this week and their heads almost exploded. “Shouldn’t we be trying to stop and mitigate risk?” “We need to spend more money on cyber, not less.” “I can’t believe you, of all people, think we need to be doing less!”

Audacious Proposal

“Do you want to give up and let the bad guys win?” I want businesses to understand that cybercrime is a part of business in the exact same (not metaphorical) way as shoplifting, employees stealing office supplies, customers slipping on the floor, vandalism, executives abusing power against employees, hurricanes, power failures, earthquakes, flooding and taxes.

The goal in all risk management is to reduce the costs associated with the mishaps not to make them impossible.

Subscribe to Newest Content