CypherCon 2025

White Hat Business Process Hacking

Matt Meis

Abstract:

Adversaries are better at one thing. Better than any of our customers and most of our employees. That thing is: Business Process Hacking. They can reconstruct all your business processes from scratch and then find the weak points and exploit them, usually through some kind of social engineering.

What if you took their methods and your insider information and really mapped out your business processes to find the weak points, not in people, but your process all together? What could you fix before you have a loss?

This talk will dive deeper into how to really understand a business process and find the flaws that your adversaries are already exploiting, so that you can address them.

Importance: People may be our biggest weakness, but people create more weaknesses in our organization through processes they set up. If we focus on what business processes look like and truly understand them we can identify weak points in our systems and tools before they are exploited.

This is a good talk for non-it people, those looking to become a business analyst or those that don’t have a tech heavy background.

Matt Meis

Survives online

Matt Meis is a Cyber Fraud Manager at Summit Credit Union with over 15 years of experience in the cybersecurity and IT space. He has built banking fraud detection systems, written college level cybersecurity curriculum, and started DomainAlarm to proactively detect phishing sites. In addition, Matt recently published a new book: Survive Online which aims to help individuals improve their cybersecurity posture.