This session is for members.

Subscribe or log in to watch every GoSec session.

Subscribe Log in

This recording is not available yet.

GoCast Podcast: Julien Turcot & Vicky Desjardins (University of Montreal)

Download resources

About this session

A GoCast interview with Vicky Desjardins, a PhD candidate in criminology at the University of Montreal, the day after her GoSec talk on ransomware defense. She describes a non-linear path from English literature into victimology, then criminology, driven by a puzzle: why do defenders keep losing to ransomware despite skill and effort. Rather than tracking constantly shifting tactics, she studied 139 ransomware strains from 2016 to 2023 to isolate the techniques that stayed stable over time, on the theory that a behavior that persists that long reflects a real operational necessity for attackers, and mapped defenses against those stable techniques. Her diagnosis of the defensive gap is less about missing tools than about excitement over new products fading before they are properly configured and tuned. She traces her research path through earlier work prioritizing online child-exploitation cases by risk before moving into ransomware and threat intelligence, credits mentors including Nadine, Andriane and Massara, and contrasts research priorities across regions: privacy and GDPR in Europe, criminology strength in Canada, defensive focus in the United States. She closes with advice to her younger self: don't let anyone tell you that you can't, and seek out other women already established in the field.

Le GoCast sort du studio et s’installe directement sur la Main Stage de GoSec 2025 ! Au programme : une série de mini-interviews exclusives avec les esprits les plus brillants de la cybersécurité. Retrouvez l’ambiance unique et l’énergie du GoCast, en direct du cœur de l’événement, pour des échanges courts, dynamiques et toujours aussi captivants. Un rendez-vous incontournable pour capter les idées, les tendances et les voix qui façonnent l’avenir de la cybersécurité.

Key takeaways

  • Look for the ransomware techniques that stay stable over years, not just what changes daily; a persistent behavior likely reflects a real operational necessity for attackers, and is worth building defenses around.
  • Check whether a defensive gap is really a missing tool or a tool that was never properly configured or tuned after the initial excitement of deploying it wore off.
  • Treat published security research with a critical eye: check the methodology and sample size before generalizing a finding.
  • Use risk-based prioritization when case volume outstrips capacity, rather than a strict critical/non-critical split; what looks low-risk now can escalate.
  • Seek out other women already established in a niche field and ask for guidance rather than assuming a non-technical starting point disqualifies you.

Speakers

Vicky Desjardins
Vicky Desjardins
PhD Candidate · University of Montreal
Vicky Desjardins est une candidate au doctorat en criminologie à l'Université de Montréal, spécialisée dans le domaine complexe des méthodologies d'attaques par rançongiciels. Ses recherches doctorales portent sur des stratégies innovantes visant à… Read moreRead less

Vicky Desjardins est une candidate au doctorat en criminologie à l'Université de Montréal, spécialisée dans le domaine complexe des méthodologies d'attaques par rançongiciels. Ses recherches doctorales portent sur des stratégies innovantes visant à perturber de manière préventive les scripts d'attaque, contribuant ainsi de manière significative à l'évolution du paysage de la cybersécurité. Les activités académiques de Vicky comprennent une expertise en matière de priorisation des risques et d'analyse du comportement criminel, enrichie par son mémoire de maîtrise sur la priorisation des cas de sollicitation sexuelle en ligne présentant un potentiel élevé de contact hors ligne. Vicky dirige également la réponse aux cyberincidents, jouant un rôle crucial dans le confinement et la neutralisation des acteurs de la menace, ce qui souligne son expertise pratique dans le domaine.

Resources

Tags

More from GoSec 2025

Also from Vicky Desjardins

On the same topic

This site is registered on wpml.org as a development site. Switch to a production site key to remove this banner.