How Conflict Leads to Innovation
Where
Ground Truth
BSides Las Vegas
Duration
38 min
Walks through the TRIZ problem-solving method and shows how it applies to security problems like supply chains and ICS.
Summary
The talk introduces TRIZ, a structured method for resolving contradictions instead of settling for compromise. The speaker traces its origin to a Soviet patent researcher who developed the framework from patterns found across thousands of inventions, and explains that the method starts by stating the conflict clearly, then working through a matrix of recurring principles to find solutions that remove the trade-off.
Physical examples carried the explanation, including a wrench with a ratcheting head, a keyboard without key legends, a key switch that ejects its key when turned off, and an air conditioner that moves its noisy compressor outside. Business cases followed, such as a company that reframed security as something that supports openness, and a test-data approach that split sensitive records from low-risk ones.
For security, the speaker applied the same thinking to data privacy, dark web markets where anonymity competes with trust, software supply chains where fast deployment conflicts with checking transitive dependencies, industrial control segmentation focused on availability, and insider monitoring versus employee autonomy. The method suits recurring conflicts rather than one-off incidents, and results still need domain experts to validate them. The takeaway is to name the contradiction precisely before looking for a fix.
Related talks
Talks·1 hr 3 min
Roger Thornton
Explains how venture capital works for security startups and which funding pitfalls founders should avoid.
Talks·44 min
Adam L. Hesch
Explains how to push ideas through large organizations by using policy, stakeholders and bureaucratic process to get things done.
Ground Truth·41 min
Brandon Pinzon
Shows how public SEC cyber filings can be paired with financial data to spot early warning signals of breach impact.


