Cyber Defense eMagazine September Edition for 2022 #CDM

More documents

Recommendations

Info

situations, organizations often double up on work, leading to a loss of productivity and difficulty collaborating – and as organizations grow, and expectations on speedy software delivery grow steeper, the challenges grow as well. Organizations should seek out end-to-end solutions that have security baked into every step. By integrating security capabilities into the development workflow, developers can be alerted immediately to new vulnerabilities in every developed line of code. Many security professionals have been made to believe that development velocity is the enemy of security. In some cases, this is true. But by bringing security close to the developer, teams likely can produce more secure code even more efficiently than sending code to a third party scanner. A single source of truth allows developers to drive their mission forward while ensuring that security professionals have more visibility into any security risks that may arise throughout the development process. Enabling Telework Through Low-to-High Side Development As the effects of the pandemic begin to slow, some agencies have pushed the intelligence community to return to working high-side and in-person once more, despite the new level of efficiency and productivity enabled by telework and low-to-high side development. While the widescale adoption of remote work has been embraced by the private sector, many in the public sector have been hesitant to embrace telework beyond the short-term. By forcing people to return in person, organizations risk losing out on top talent for the sake of geography. Unlike the years prior to the changes the COVID-19 pandemic necessitated, agencies could seek out the brightest talent from all corners of the country. The return to the office could lead to turnover like that the Great Resignation that occurred in the private sector. Government agencies are competing with all other organizations to win talent, not just other public sector organizations. Low-to-high side development is a proven method that allows developers to focus on work that drives their missions forward – not managing complex toolchains or completing redundant work. But the greatest shift of all in the next stage of remote work and development is a mindset shift. It’s critical that government leaders prioritize a mindset of innovation, collaboration, and transparency alongside the adoption of new development processes and technologies – including remote work. The public sector is at a turning point – US Federal, State and Local governments can either revert to the prepandemic methods of software development, or identify seamless, real-time development processes that deliver software efficiently and securely, and allow teams to deliver truly innovative solutions. Cyber Defense eMagazine – September 2022 Edition 92 Copyright © 2022, Cyber Defense Magazine. All rights reserved worldwide.
About the Author Marc Kriz is a Strategic Account Leader of National Security Programs at GitLab Inc., the DevOps platform. GitLab’s single application helps organizations deliver software faster and more efficiently while strengthening their security and compliance. Since joining GitLab in 2018, Marc has been focused on driving innovative, end-to-end DevOps transformation in the National Security Community. As a technology specialist and trusted advisor to the U.S. Intelligence Community, he works with government agency clients and industry partners to assess and solve complex challenges that support the mission of protecting the nation’s citizens, infrastructure, and data. Prior to joining GitLab, Marc supported National Security programs at Cloudera, SAS, and HP. As an early employee at Compaq Computer, Marc was fundamental to launching, building, and leading the company’s successful Midwest channel sales program. Marc holds a B.A. from Eastern Washington University. Cyber Defense eMagazine – September 2022 Edition 93 Copyright © 2022, Cyber Defense Magazine. All rights reserved worldwide.
Page 1 and 2:
Critically Important Organization?
Page 3 and 4:
How Can Businesses Build Customer C
Page 5 and 6:
@MILIEFSKY From the Publisher… We
Page 7 and 8:
Welcome to CDM’s September 2022 I
Page 9 and 10:
Cyber Defense eMagazine - September
Page 11 and 12:
Page 13 and 14:
Page 15 and 16:
Page 17 and 18:
Page 19 and 20:
Page 21 and 22:
Page 23 and 24:
Critically Important Organization?
Page 25 and 26:
• Factors and metrics to consider
Page 27 and 28:
Zero Trust Momentum Seventy-six per
Page 29 and 30:
Information Warfare and What Infose
Page 31 and 32:
Influence: Surface and measure the
Page 33 and 34:
ecording a 10% hike from 2020 findi
Page 35 and 36:
5G Technology - Ensuring Cybersecur
Page 37 and 38:
on a great scale, the newness of th
Page 39 and 40:
Are Cyber Scams More Common and How
Page 41 and 42: Antivirus Software Keeping your com
Page 43 and 44: Avoiding the Risks of Ransomware St
Page 45 and 46: • How are you protecting home fie
Page 47 and 48: Black Hat Trip 2022 - Perception Po
Page 49 and 50: compared to legacy sandboxing solut
Page 51 and 52: Building A Layered Plan for Battlin
Page 53 and 54: The Challenge of Hyperconnected Fra
Page 55 and 56: Can Cloud Telephony Services with M
Page 57 and 58: software with an organization’s c
Page 59 and 60: Crack The Code Cybersecurity Workfo
Page 61 and 62: Photo Cred: Photo Cred: UofL Cybers
Page 63 and 64: More information on the Cybersecuri
Page 65 and 66: Virtual training addresses the high
Page 67 and 68: How Can Businesses Build Customer C
Page 69 and 70: associated access entitlements. A z
Page 71 and 72: have been able to quickly get servi
Page 73 and 74: How To Guard Critical Infrastructur
Page 75 and 76: 2. Control endpoint privileges. No
Page 77 and 78: especially when maxed out on events
Page 79 and 80: It Isn't Your Daddy's Oldsmobile An
Page 81 and 82: Full and Systematic Vehicle Cyberse
Page 83 and 84: Long-Term Impacts A Data Breach Can
Page 85 and 86: Encrypt data and update software re
Page 87 and 88: Perception Point has been built as
Page 89 and 90: company developed a 24/7 managed In
Page 91: Government agencies varied broadly
Page 95 and 96: Looking at the two studies over a f
Page 97 and 98: Patch Zero Days In 15 Minutes Or Be
Page 99 and 100: Advanced SQL Behavioral Analysis fr
Page 101 and 102: New normal, new problems The “new
Page 103 and 104: About the Author Ivar Wiersma is th
Page 105 and 106: world attacks on open-source softwa
Page 107 and 108: Protecting The Enterprise in The Di
Page 109 and 110: About the Author Anurag Lal is the
Page 111 and 112: Market potential GitHub claims to h
Page 113 and 114: The Implications of Zero Trust for
Page 115 and 116: Integrating Zero Trust at the Data
Page 117 and 118: Threat Modeling: Bridging the Gap B
Page 119 and 120: What’s next for threat modeling?
Page 121 and 122: 2. Adopt trust security Consider ho
Page 123 and 124: 7. Secure your dependencies As you
Page 125 and 126: Top Trends in Cyber Security Post-P
Page 127 and 128: improve cybersecurity. As the conne
Page 129 and 130: The migration of electronic healthc
Page 131 and 132: About the Author Coley Chavez is th
Page 133 and 134: A tool to make money Cybercriminals
Page 135 and 136: Using Identity for Access Is a Huge
Page 137 and 138: Never make your own keys - physical
Page 139 and 140: What We Have Learnt Building a Glob
Page 141 and 142: Businesses transact with, rely upon
Page 143 and 144:
Why CSOs Are Decluttering Their Cyb
Page 145 and 146:
The Middle Ground To effectively co
Page 147 and 148:
• Surge in utilization of cloud s
Page 149 and 150:
trustworthiness and accountability.
Page 151 and 152:
Why Throwing Money at Cybersecurity
Page 153 and 154:
2. Automated Analytics The human pr
Page 155 and 156:
SSL VPNs are available as stand-alo
Page 157 and 158:
About the Author Timothy Liu is Co-
Page 159 and 160:
Preparing Having never been to mult
Page 161 and 162:
Overall, this was a great conferenc
Page 163 and 164:
One of the unique things about DefC
Page 165 and 166:
Of where I was able to spend time a
Page 167 and 168:
In the end, DefCon was by far one o
Page 169 and 170:
they have. I was happy to share my
Page 171 and 172:
Page 173 and 174:
Page 175 and 176:
Page 177 and 178:
Page 179 and 180:
Page 181 and 182:
Page 183 and 184:
Page 185 and 186:
Page 187 and 188:
Page 189 and 190:
CyberDefense.TV now has 200 hotseat
Page 191 and 192:
Books by our Publisher: https://www
Page 193 and 194:
Page 195:
show all

Cyber Defense eMagazine September Edition for 2022 #CDM

Create successful ePaper yourself

Delete template?

Save as template?