Cyber Defense eMagazine August 2019

More documents

Recommendations

Info

smarter. Network perimeters aren’t dead. Rather, they’ve gone everywhere. We now need internal perimeters around all the uncontrollable endpoints in our networks. Resilience is also key, because perfect protection and containment are not possible. Experienced organizations balance their efforts between protection and recovery, recognizing that incidents are inevitable, but serious damage is not. Resilience means understanding your infrastructure ahead of an attack, thinking through how an incident could spread, and building response and containment plans, just the way first responders anticipate and practice for the inevitable bad days. IoT presents novel challenges for today’s CISO. The three-step strategy recommended here starts by understanding the categories of IoT devices that you use (whether you planned to or not). Next, realize that standard techniques we use to control general-purpose computers don’t work, and so we have to rely on segmentation. Third, we cannot expect to stop all incidents, so having a well thought out containment plan, based on real knowledge of your environment, is essential to damage control. This is how CISOs can deal with the IoT headache and deliver resilience in this complex new world. About the Author Dr. Mike Lloyd has more than 25 years of experience modeling and controlling fast-moving, complex security and network systems and holds 21 patents. He joined RedSeal as the Chief Technology Officer (CTO) in 2004 and has been growing the company’s brand and reputation through its technological innovations ever since. Dr. Mike can be reached online at RedSeal’s website https://www.redseal.net/ 86
<strong>Cyber</strong>security & Your Company Identifiable Threats and How to Block them By Frances Dewing, CEO, Rubica As more smaller companies rely on technology to do their day-to-day business, their risk of being hacked increases. For some people, this may seem counterintuitive. Hacking larger corporations offers bigger payoffs and we tend to only hear of cyber attacks on big companies such as Adobe, Sony and Equifax. On the other hand, smaller businesses do not have the resources nor the money to invest in robust cyber infrastructures, leading them to be vulnerable. The result is loss of money, production and client information – and negative impact on reputation. These smaller businesses can also be the gateway to access the information of big corporations. For example: The Target hack, which resulted in tens of millions of consumer’s credit card details stolen, stemmed from hackers infiltrating a small HVAC company which allowed them to access credentials to Target’s network. According to Small Business Trends, 43% of cyber attacks are targeted at companies with 250 employees or less. A small business is particularly at risk if they have frequent wire transfers or payment transactions, deal in customer personally identifiable information (PII), financial info, health data, intellectual property, or contract with larger entities or high-profile individuals (where they could be targeted as a weak link into them). Fortunately, there are a few things companies can look out for to prevent risks. 87
Page 1 and 2:
Top 25 Women In Cybersecurity Know
Page 3 and 4:
CONTENTS (cont') Virtual Private Se
Page 5 and 6:
@CYBERDEFENSEMAG CYBER DEFENSE eMAG
Page 7 and 8:
SPONSOR OF THE MONTH… 7
Page 9 and 10:
9
Page 11 and 12:
11
Page 13 and 14:
*Here are the winners* Catherine A.
Page 15 and 16:
Anne Bonaparte, CEO at Appthority I
Page 17 and 18:
Hong Jia, Co-founder, Chief Securit
Page 19 and 20:
Dervla Mannion, Vice President Sale
Page 21 and 22:
Christine de Souza, Cyberspace Oper
Page 23 and 24:
23
Page 25 and 26:
5 Tips to Protect Your Personal Inf
Page 27 and 28:
About the Author Susan Alexandra is
Page 29 and 30:
usiness that cannot be ignored. The
Page 31 and 32:
About the Author Jim Souders is CEO
Page 33 and 34:
Addressing Modern Security Challeng
Page 35 and 36: Bitglass 2019 Cloud Security Report
Page 37 and 38: 37
Page 39 and 40: 39
Page 41 and 42: 41
Page 43 and 44: 43
Page 45 and 46: 45
Page 47 and 48: 47
Page 49 and 50: The intricacy of the jurisdictional
Page 51 and 52: All Secure Chorus member technologi
Page 53 and 54: called ‘Defense in Depth’ produ
Page 55 and 56: About the Author Lalit Shinde, Head
Page 57 and 58: €10 million or 2% annual global t
Page 59 and 60: One of the Greatest Threats Facing
Page 61 and 62: This approach could be installed as
Page 63 and 64: Despite the statistics, it often ta
Page 65 and 66: 10 Steps to Kicking Off Your Inside
Page 67 and 68: 8. Spread the knowledge: Small- and
Page 69 and 70: are not using machine learning in o
Page 71 and 72: What Is DNS Hijacking And How Can Y
Page 73 and 74: DNS hijacking attack types (6 main
Page 75 and 76: The Top 4 Application Security Defe
Page 77 and 78: 1. Am I being attacked right now? 2
Page 79 and 80: July Patch Tuesday Microsoft Resolv
Page 81 and 82: How To Prevent Your Data Loss Using
Page 83 and 84: How to protect your IT asset from t
Page 85: The Iot Headache and How to Bolster
Page 89 and 90: It’s not just about which permiss
Page 91 and 92: they would deal with something bein
Page 93 and 94: Five Ways a Software Defined Perime
Page 95 and 96: With a fixed price per user regardl
Page 97 and 98: - if the hackers deal with the prof
Page 99 and 100: The Foundation Common to Most Secur
Page 101 and 102: Fortunately, NIST and other securit
Page 103 and 104: Dukes of CIS points to recently ena
Page 105 and 106: physical servers. The VPS service p
Page 107 and 108: About the Author Preeti has more th
Page 109 and 110: In summary, HIPAA exists to protect
Page 111 and 112: The Dangers of HTTPS: When Secure I
Page 113 and 114: Going for Gold - Why Hackers Are Lo
Page 115 and 116: On the subject of privilege, organi
Page 117 and 118: Federal IT leaders should take a ph
Page 119 and 120: Is Your Organization Driving the Ge
Page 121 and 122: Are You Taking Corporate Social Res
Page 123 and 124: About the Author Simon Marchand, CF
Page 125 and 126: What’s at Stake The cybercrime pr
Page 127 and 128: Facing the Reality of VPN Security
Page 129 and 130: security strategies to accommodate
Page 131 and 132: immediate chaos, and panic would en
Page 133 and 134: Privacy Regulations Are Popping Up
Page 135 and 136: ● create comprehensive record of
Page 137 and 138:
Reducing the Occurrence and Impact
Page 139 and 140:
in California, certain California l
Page 141 and 142:
About the Author Billie Elliott McA
Page 143 and 144:
Zero Day Attacks and not current Wo
Page 145 and 146:
The Role of Certifications for a Cy
Page 147 and 148:
In detail, CompTIA Security+ is a c
Page 149 and 150:
To Pay or Not To Pay, That Is the Q
Page 151 and 152:
About the Author Chris Bates is the
Page 153 and 154:
today’s cyber security realities,
Page 155 and 156:
Federal and state governments are r
Page 157 and 158:
of cyber security specialists, they
Page 159 and 160:
The attack mechanism can be summari
Page 161 and 162:
Jenkins Disabled deserialization +
Page 163 and 164:
163
Page 165 and 166:
165
Page 167 and 168:
167
Page 169 and 170:
169
Page 171 and 172:
171
Page 173 and 174:
173
Page 175 and 176:
175
Page 177 and 178:
177
Page 179 and 180:
179
Page 181 and 182:
181
Page 183 and 184:
183
Page 185 and 186:
185
Page 187 and 188:
187
Page 189 and 190:
189
Page 191 and 192:
191
Page 193 and 194:
193
Page 195 and 196:
Meet Our Publisher: Gary S. Miliefs
Page 197 and 198:
Free Monthly Cyber Defense eMagazin
Page 199 and 200:
199
Page 201 and 202:
201
Page 203 and 204:
7 Years in The Making… Thank You
Page 205:
205
show all

Cyber Defense eMagazine August 2019

Create successful ePaper yourself

Delete template?

Save as template?