A 2007 AZSPF technical session where Hunter Storm dissected IDS/IPS tuning, false‑positive reduction, and event‑correlation logic, clarifying operational realities versus vendor claims.

Hunter Storm's Spooky Security is a plain‑English, Halloween‑themed walkthrough of real security threats, mapped to classic movie monsters to make the human‑layer patterns impossible to miss.

Designed for a non‑technical audience, the session shows how everyday behaviors create openings for adversaries — not through code, but through predictable human responses. Each “monster” represents a specific failure mode: curiosity, haste, trust, distraction, and the belief that “it won’t happen to me.”

The talk uses humor and familiar tropes to make security concepts stick, but the underlying message is serious: most breaches don’t come from sophisticated attacks. They come from normal people doing normal things in environments designed to exploit them.

Attendees leave with simple, actionable steps to reduce risk, understand adversarial patterns, and recognize when something “feels off.” No jargon. No scare tactics. Just clear, human‑layer security — wrapped in a spooky theme to make it memorable. Presented as part of the collaborative U.S. Department of Homeland Security and City of Phoenix Information Security Office (ISPO) Brown Bag Series

Hacking Humans | The Ports and Services Model of Social Engineering was the second major presentation in the Hacking Humans series, following the original 2007 keynote at the University of Advancing Technology. Delivered at the 2013 INTERFACE Phoenix conference, this session expanded the foundational concepts introduced in 2007 and formally presented the Ports & Services Model as a repeatable human‑layer threat‑modeling framework.

Building on the original UAT debut, the 2013 keynote refined adversarial behavior signatures, clarified cognitive “open ports,” and introduced structured methods for analyzing how attackers exploit predictable human responses. This presentation marked the point where Hacking Humans transitioned from an early conceptual framework into a fully articulated human‑layer security discipline.