Skip to content

DEF CON 34 talks are here: 354 talks, summarized and searchable.

Browse DEF CON 34

How Conflict Leads to Innovation

Munish Walther-Puri

PolicyGround Truth38 minBeginnerOpen on YouTube ↗

Where

Ground Truth
BSides Las Vegas

Duration

38 min

Walks through the TRIZ problem-solving method and shows how it applies to security problems like supply chains and ICS.

Summary

The talk introduces TRIZ, a structured method for resolving contradictions instead of settling for compromise. The speaker traces its origin to a Soviet patent researcher who developed the framework from patterns found across thousands of inventions, and explains that the method starts by stating the conflict clearly, then working through a matrix of recurring principles to find solutions that remove the trade-off.

Physical examples carried the explanation, including a wrench with a ratcheting head, a keyboard without key legends, a key switch that ejects its key when turned off, and an air conditioner that moves its noisy compressor outside. Business cases followed, such as a company that reframed security as something that supports openness, and a test-data approach that split sensitive records from low-risk ones.

For security, the speaker applied the same thinking to data privacy, dark web markets where anonymity competes with trust, software supply chains where fast deployment conflicts with checking transitive dependencies, industrial control segmentation focused on availability, and insider monitoring versus employee autonomy. The method suits recurring conflicts rather than one-off incidents, and results still need domain experts to validate them. The takeaway is to name the contradiction precisely before looking for a fix.

Related talks