1<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"> 2 3<html> 4 5 <head> 6 7 <link rel="stylesheet" type="text/css" href="aisstyles.css"> 8 9 <meta http-equiv="content-type" content="text/html; charset=UTF-8"> 10 11 <meta name="keywords" content="security,physical,biometrics,access,control,attack surface,threat,modeling,architecture,remote,uefi,tpm,cryptography,virtualization"> 12 13 <meta name="google-site-verification" content="1_FH_42VlBfLBB_oN63Zz3KyIUav_6WV19FjhJ3DnrQ" /> 14 15 <meta name="author" content="Tom Olzak MBA, CISSP"> 16 17 <meta name="description" content="Vendor-neutral information security videos, papers, and articles"> 18 19 <title>Tom Olzak on Security | Enterprise Security: A Practitioner's Guide</title> 20 21
21<script type="text/javascript">var switchTo5x=true;</script>
21 22
22<script type="text/javascript" src="http://w.sharethis.com/button/buttons.js"></script>
22 23
23<script type="text/javascript">stLight.options({publisher: "6fe74928-0eab-432b-b9fe-f3334464f865"});</script>
23 24 25 <link rel="apple-touch-icon" sizes="57x57" href="/apple-icon-57x57.png"> 26<link rel="apple-touch-icon" sizes="60x60" href="/apple-icon-60x60.png"> 27<link rel="apple-touch-icon" sizes="72x72" href="/apple-icon-72x72.png"> 28<link rel="apple-touch-icon" sizes="76x76" href="/apple-icon-76x76.png"> 29<link rel="apple-touch-icon" sizes="114x114" href="/apple-icon-114x114.png"> 30<link rel="apple-touch-icon" sizes="120x120" href="/apple-icon-120x120.png"> 31<link rel="apple-touch-icon" sizes="144x144" href="/apple-icon-144x144.png"> 32<link rel="apple-touch-icon" sizes="152x152" href="/apple-icon-152x152.png"> 33<link rel="apple-touch-icon" sizes="180x180" href="/apple-icon-180x180.png"> 34<link rel="icon" type="image/png" sizes="192x192" href="/android-icon-192x192.png"> 35<link rel="icon" type="image/png" sizes="32x32" href="/favicon-32x32.png"> 36<link rel="icon" type="image/png" sizes="96x96" href="/favicon-96x96.png"> 37<link rel="icon" type="image/png" sizes="16x16" href="/favicon-16x16.png"> 38<link rel="manifest" href="/manifest.json"> 39<meta name="msapplication-TileColor" content="#ffffff"> 40<meta name="msapplication-TileImage" content="/ms-icon-144x144.png"> 41<meta name="theme-color" content="#ffffff"> 42 43<link rel="alternate" type="application/rss+xml" title="RSS" href="http://feeds.rapidfeeds.com/92688/"> 44 45 </head> 46 47 <body> 48 49 50 51 52 <div id="banner"> 53 54 55 <p class="btext">Tom Olzak on Security </p> 56 57 58 </div> 59 60 61 <div id="navigate"> 62 63 <h2 class="center">Resources</h2> 64 <a href="index.html" class="nav">Home</a><br><br> 65 <a href="https://www.youtube.com/channel/UCUVwk67-aItVVAQZiCWka0g" class="nav">My YouTube Channel</a><br><br> 66 <a href="whitepapers.html" class="nav">Whitepapers</a><br><br> 67 <a href="resources.html" class="nav">Training Resources</a><br><br> 68 <a href="about.html" class="nav">About</a> 69 <br /> 70 71 <br /> 72 73 <div class="fb-like" data-href="https://facebook.com/informationsecuritynews" data-layout="standard" data-action="like" data-show-faces="false" data-share="false"></div> 74 75 </div> 76 77 <div> 78 79 80 81 <h1 class="banner">Most recent blogs, netcasts, papers, etc.</h1> 82 83 </div> 84 85<div> 86 87<article> 88 <hr> 89 90 91 92 <p class="artcl"><a href="https://adventuresinsecurity.com/Papers/Defensive_Adversarial_AI.pdf" target="_blank">Defensive Adversarial AI (August 9, 2026)</a></p> 93 94 <p class="artcl">Abstract</p> 95 96 <p class="artcl">Organizations increasingly use large language models (LLMs) for business operations and security. While this improves productivity by helping workers find information, write proposals, and detect and respond to cyber incidents, LLMs also expand an organizationâs attack surface more quickly. Threat actors can poison prompts and training data. They can manipulate LLMs to infer sensitive information or extract the organizationâs model. Defensive adversarial AI helps manage this expanded attack surface by intentionally subjecting AI systems to hostile prompts and operating conditions, testing whether the model is robust enough and has sufficient safeguards and guardrails to identify weaknesses before threat actors do. This paper explores how to use open testing frameworks and how to prioritize test results based on the associated risk without unacceptable reduction in model performance. The approach is based on the NIST AI Risk Management Framework, the NIST Generative AI Profile, NIST adversarial machine-learning guidance, NIST secure development guidance, OWASPâs LLM risk model, and recent research on prompt injection and jailbreak testing (Autio et al., 2024; Booth et al., 2024; Vassilev et al., 2025). The paperâs central theme is that no one filter, model, or benchmark can provide adequate protection. Effective model hardening requires continuous testing of the full AI-enabled systemâincluding data, retrieval, tools, identity, application logic, and human oversightâfollowed by risk-based remediation and regression testing (Liu et al., 2024a; Olzak, 2026a; OWASP GenAI Security Project, 2024).</p> 97 98 <hr> 99 </article> 100 101<article> 102 103 <p class="artcl"><a href="https://www.spiceworks.com/it-security/data-security/articles/security-data-throughout-data-lifecycle/" target="_blank">Understanding the Data Lifecycle and Five Ways to Ensure Data Confidentiality (August 2, 2022)</a></p> 104 <p class="artcl">Data has become a treasure trove for cybercriminals, which is why companies now use data security technologies or software to secure their data instead of huge vaults and security personnel. Hereâs a quick introduction to understanding each phase of the data security lifecycle and how companies can secure their data end-to-e
104nd.</p> 105 106 <hr> 107</article> 108 109 110 111<article> 112 113 <p class="artcl"><a href="https://www.spiceworks.com/it-security/cyber-risk-management/articles/industroyer-and-ot-security/ target="_blank">Defending Against Industroyer2 and Securing OT in a Connected World (July 21, 2022)</a></p> 114 <p class="artcl">Attacks against operational technology (OT) are not limited to national takeover attempts. Related to denial of service attacks, disruption of OT can take down critical business services, resulting in loss of service or product delivery as an organization struggles to survive. All organizations that use OT must ensure secure operation, and the safety of employees, throughout all hardware and software lifecycles.</p> 115 116 <hr> 117 </article> 118 119 120 121 122<article> 123 124 <p class="artcl"><a href="https://www.spiceworks.com/it-security/data-security/articles/how-homomorphic-encryption-protects-data/" target="_blank">Homomorphic Encryption: How It Changes the Way We Protect Data (July 6, 2022)</a></p> 125 <p class="artcl">Protecting data throughout its lifecycle is a continuous effort, made more difficult as more information passes through the cloud and is provided to various service providers. Encryption works well for data in transit and at rest, but it begins to fail for data in use and derived data created by service providers. Homomorphic encryption, now emerging as a viable technology, helps fill these gaps by enabling sharing and processing of information without decrypting it.</p> 126 127 <hr> 128 </article> 129 130 131 132 <article> 133 134 <p class="artcl"><a href="https://bit.ly/3MdbkEM" target="_blank">Ten Common IAM Deployment Challenges and Their Solutions (May 11, 2022)</a></p> 135 <p class="artcl">New cloud-based IAM solutions, providing uniform and simplified identity management, are gaining popularity. However, companies typically find it taxing to regulate admin privileges when they embrace cloud technologies. For CIOs and their staff, the difficulty in managing âwho can access whatâ introduces a new set of IAM difficulties. To optimize the existing IAM solution in the best way, companies need to take control of major challenges faced by IAM in the cloud. The top ten are discussed in this article. Letâs explore.</p> 136 137 <hr> 138 </article> 139 140 141 142 143<article> 144 145 <p class="artcl"><a href="http://adventuresinsecurity.com/Papers/Network_Access_Control_paper.edited.pdf" target="_blank">Paper: Network Access Control (NAC) (April 23, 2022)</a></p> <p class="artcl"><a href="https://youtu.be/iE_eUdVQDXQf" target="_blank">Video Version</a></p> 146 <p class="artcl">Gaining access to a network should be more than forcing user and device authentication via credentials like user IDs, passwords, biometrics, and certificates. Network access control (NAC) extends access management to processes designed to assess the state of devices attempting access to a network. This assessment ensures that each device complies with a set of defined policies. NAC helps ensure that only devices hardened based on associated risk achieve resource access.</p> 147 148 <hr> 149 </article> 150 151 152 153 154 155 <article> 156 157 <p class="artcl"><a href="https://adventuresinsecurity.com/Papers/Cyber_Kill_Chain_for_endpoints" target="_blank">Paper: Use the Cyber Kill Chain for End-user Device Security (April 20, 2022)</a></p> <p class="artcl"><a href="https://youtu.be/sLVewxwYJEM" target="_blank">Video Version</a> 158 159 <p class="artcl">End-user devices are the greatest threat to network security, with a generally standard attack path depicted in the Lockheed Martin Cyber Kill Chain, as shown in Figure 1. Use of the kill chain helps identify risks against user devices, both mobile and static, by providing the threat actor's perspective. Breaking links in the chain hinders or prevents a threat actor from compromising a user device and using it as an attack pivot point. </p> 160 161 <hr> 162 </article> 163 164 165 166 167<article> 168 169 <p class="artcl"><a href="https://www.toolbox.com/tech/it-strategy/articles/shadow-it-challenges-and-benefits/" target="_blank">Mitigating the Risks Posed by Shadow IT: Can Organizations Achieve the Impossible? (October 2021)</a></p> 170 <p class="artcl">With the right set of security practices and tools, organizations can manage security issues associated with shadow IT. Letâs see how organizations can configure their IT environments to detect and integrate shadow resources quickly to aid business managers needing quick solutions to meet business objectives..</p> 171 172 <hr> 173 </article> 174 175 176<article> 177 178 <p class="artcl"><a href="https://www.toolbox.com/it-security/network-security/articles/rdp-security-concerns-and-solution/ (October 2021)" target="_blank">What Is Ailing RDP Security And How to Use It Safely (October 2021)</a></p> 179 <p class="artcl">The Windows Remote Desktop Protocol (RDP) is one of the most popular targets exploited by threat actors for both on-premises and cloud attacks. It is also the foundation for many remote access solutions within Microsoft Windows environments. Although RDP can be a gaping security hole, properly configuring and managing it enables its users to meet business requirements safely.</p> 180 181 <hr> 182 </article> 183 184 185<article> 186 187 <p class="artcl"><a href="https://www.toolbox.com/tech/cloud/articles/cloud-security-challenges-2022/" target="_blank">Five Major Cloud Security Challenges Businesses Should Prepare for in 2022 (October 2021)</a></p> 188 <p class="artcl">Despite the increasing capabilities of cloud computing services in the past few years, organizations still confront major security issues that are further set to aggravate in 2022 if not delineated towards proper safety mechanisms. To cater to these challenges, we have developed a list of cloud computing issues that organizations must consider to prevent, detect, and respond to related attacks.</p> 189 190 <hr> 191 </article> 192 193 194<article> 195 196 <p class="artcl"><a href="https://www.toolbox.com/it-security/vulnerability-management/articles/mitigating-zero-day-attacks/" target="_blank">Mitigating Zero Day Attacks With a Detection, Prevention and Response Strategy (September 2021)</a></p> 197 <p class="artcl">In a zero-day attack scenario, threat actors discover previously unknown vulnerabilities and formulate one or more ways to exploit them. Organizations are, therefore, at risk of suffering surprise attacks at all times. Letâs look at how organizations can create and manage tools, techniques, and procedures (TTP) to mitigate risks posed by zero-day attacks.</p> 198 199 <hr> 200 </article> 201 202 203 204 205<article> 206 207 <p class="artcl"><a href="https://www.toolbox.com/it-security/data-security/articles/confidential-computing-securing-data/ " target="_blank">What Is Confidential Computing and Why Itâs Key To Securing Data in Use? (9/20/21)</a></p> 208 <p class="artcl">For decades, security professionals have focused on protecting data at rest and data in transit. Good tools did not exist for protecting data in use. Data in use resides in volatile memory (RAM), unencrypted and available to compromised applications, firmware, operating systems, and hypervisors. Confidential computing changes this by using hardware to erect walls between application processing environments and the underlying operating system and other applications.</p> 209 210 <hr> 211 </article> 212 213 214 215<article> 216 217 <p class="artcl"><a href="https://www.toolbox.com/it-security/endpoint-security/articles/xdr-mdr-endpoint-security" target="_blank">How Enterprises Can Secure Endpoints With Extended and Managed Detection and Response (9/11/2021)</a></p> 218 <p class="artcl">
218Most organizations focus on endpoint detection and response (EDR) because user devices and servers are the most common attack targets. However, this is not enough today. Quick detection of many attacks requires looking at all activity across all information resources, including the cloud. Doing this 24/7 is the most effective approach, but the volume of resources of most organizations make it impractical for in-house deployment..</p> 219 220 <hr> 221 </article> 222 223 224 225<article> 226 227 <p class="artcl"><a href="https://www.toolbox.com/it-security/cyber-risk-management/articles/what-is-pen-testing/" target="_blank">Penetration Testing in Action: A Step-by-Step Guide to Get It Right 08/11/2021</a></p> 228 <p class="artcl">We are only human. Our efforts to protect information resources will have gaps that we missed or have arisen due to emerging threats. Penetration tests help organizations identify weaknesses in the controls framework. The test results enable managing associated risk. There are many penetration test methodologies, but they all generally perform the same activities with the same results. This article is based on the Open Source Security Testing Methodology 3 (OSSTM) with additional content from other frameworks.</p> 229 230 <hr> 231 </article> 232 233 234 235<article> 236 237 <p class="artcl"><a href="https://www.toolbox.com/it-security/cyber-risk-management/articles/is-linux-secure/" target="_blank">Is Linux as Secure as We Think? 08/06/2021</a></p> 238 <p class="artcl">Linux is considered more secure than Windows, but it has its fair share of vulnerabilities, such as the Sudo vulnerability and other Linux weaknesses. Amid growing cloud adoption, we look at the steps security teams should take to defend Linux against cyberattacks.</p> 239 240 <hr> 241 </article> 242 243 244 245 246 247 248<article> 249 250 <p class="artcl"><a href="https://www.toolbox.com/it-security/cyber-risk-management/articles/best-security-framework/" target="_blank">How To Pick the Best Security Framework for Your Organization 07/29/2021</a></p> 251 <p class="artcl">Planning, creating, and managing security architecture is not an easy process, and it is not one to take on without guidance. Fortunately, guidance exists across a plethora of security frameworks. Some of the frameworks are general, while others are directed at specific uses or industries. It is essential to understand the various frameworks and select the proper one or more that meet compliance, industry, and overall risk management needs.</p> 252 253 <hr> 254 </article> 255 256 257 258 259<article> 260 261 <p class="artcl"><a href="https://www.toolbox.com/it-security/cyber-risk-management/articles/supply-chain-partners-undermine-cyber-security/" target="_blank">Kaseya Attack Is a Reminder of How Your Supply Chain Partner Can Undermine Your Cybersecurity. 07/19/2021</a></p> 262 <p class="artcl">Supply chain attacks continue with the ransomware attack against Kaseya. Between 1,000 and 1,500 Kaseya direct and indirect customers were exposed to the attack, and the total ransom requested was $70 million. Similarly, the cyberattack on SolarWinds and the cyber breaches caused by vulnerabilities in the Microsoft Exchange server are some of the other recent examples of how far-reaching the impact of a supply chain attack can be. .</p> 263 264 <hr> 265 </article> 266 267 268 269 270<article> 271 272 <p class="artcl"><a href="https://www.toolbox.com/it-security/cyber-risk-management/articles/securing-industrial-control-systems-from-modern-cyber-threats/ " target="_blank">Securing Industrial Control Systems From Modern Cyber Threats 07/08/2021</a></p> 273 <p class="artcl">Ransomware and other cyberattacks often target industrial control systems (ICS) to disrupt operations or steal intellectual property. However, many organizations still use ICS technologies that are decades old, are exposed to the internet, and lack built-in security controls. Manufacturing, utility, health care, and other ICS-dependent organizations must protect current and planned ICS infrastructure and related sensitive information. Letâs look at how a critical infrastru
273cture organization can implement robust security controls to keep hackers away.</p> 274 275 <hr> 276 </article> 277 278 279 280 281<article> 282 283 <p class="artcl"><a href="https://www.toolbox.com/it-security/cyber-risk-management/articles/mitigating-the-impact-of-ransomware-attacks-with-business-continuity-planning/" target="_blank">Mitigating the Impact of Ransomware Attacks With Business Continuity Planning 07/02/2021</a></p> 284 <p class="artcl">Ransomware attacks cause partial or complete shutdowns of business-critical functions. This is the same impact as those caused by business continuity events. Consequently, business continuity planning is one of the best ways to plan for the increasing probability that any organization will eventually become a victim of a ransomware attack.</p> 285 286 <hr> 287 </article> 288 289 290 291 292<article> 293 294 <p class="artcl"><a href="https://www.toolbox.com/it-security/cyber-risk-management/articles/ransomware-payments-is-cyber-insurance-with-proper-controls-the-best-solution/" target="_blank"> 295Ransomware Payments: Is Cyber Insurance With Proper Controls the Best Solution? 06/28/202)</a></p> 296 <p class="artcl">Ransomware attacks have reached epidemic levels. One reason is the ease with which ransomware gangs can make a lot of money because many organizations choose to pay ransom or extortion demands. A movement in Washington wants to ban ransom payments, but this may not be the best approach. Instead, the root causes of ransomware payments need to be identified and treated..</p> 297 298 <hr> 299 </article> 300 301 302 303 304<article> 305 306 <p class="artcl"><a href="https://www.toolbox.com/it-security/encryption/articles/will-symmetric-and-asymmetric-encryption-withstand-the-might-of-quantum-computing/" target="_blank">Will Symmetric and Asymmetric Encryption Withstand the Might of Quantum Computing 06/14/2021</a></p> 307 <p class="artcl">The processing power of quantum computers is set to outstrip the capabilities of todayâs supercomputers. According to a report, Googleâs fledgling quantum computer performed a calculation in three minutes and 20 seconds that it would have taken todayâs fastest supercomputer, IBMâs Summit, 10,000 years to complete. Letâs look at the capabilities of quantum computing and what kind of post-quantum public-key encryption and key exchange algorithms will be strong enough to resist the power of quantum computers..</p> 308 309 <hr> 310 </article> 311 312 313 314 315 316 317 318 319<article> 320<p class="artcl"><a href="https://www.toolbox.com/it-security/cyber-risk-management/articles/lessons-from-the-colonial-hack-law-enforcement-action-isnt-enough-to-defeat-ransomware/" target="_blank">Lessons From the Colonial Hack: Law Enforcement Action Isnât Enough To Defeat Ransomware 06/07/2021</a></p> 321 <p class="artcl">The world of cellular is changing rapidly with the advent of 5G. 5G brings revolutionary performance and capabilities, but it also comes with new security challenges. In this article, we talk about the major security challenges affecting 5G networks and discuss five ways organizations can address such security challenges and reduce their networksâ attack surface.</p> 322 323 <hr> 324 </article> 325 326 327 328 <article> 329 330<p class="artcl"><a href="https://www.toolbox.com/it-security/network-security/articles/5-ways-to-secure-and-manage-your-5g-network/" target="_blank">5 Ways to Secure and Manage Your 5G Network 05/31/2021</a></p> 331 <p class="artcl">The world of cellular is changing rapidly with the advent of 5G. 5G brings revolutionary performance and capabilities, but it also comes with new security challenges. In this article, we talk about the major security challenges affecting 5G networks and discuss five ways organizations can address such security challenges and reduce their networksâ attack surface.</p> 332 333 <hr> 334 </article> 335 336 337 338 339<article> 340 341 <p class="artcl"><a href="https://www.toolbox.com/it-security/cyber-risk-management/articles/how-to-manage-insider-risk-with-continuous-background-checks/" target="_blank">
341How To Manage Insider Risk With Continuous Background Checks 05/3/2021</a></p> 342 <p class="artcl">Insider threats are a growing and serious challenge for organizations. Many human resource departments perform one-time background checks before hiring someone. However, employee behavior is not static. Questionable or criminal activities during employment can place users in a position where an attacker might extort them to steal data, corrupt systems, or perform other malicious actions. In addition to user behavior analytics, continuous background analysis is a good tool for protecting sensitive information resources.</p> 343 344 <hr> 345 </article> 346 347 348<article> 349 350 <p class="artcl"><a href="https://www.toolbox.com/it-security/cyber-risk-management/articles/why-adaptive-authentication-should-be-a-core-component-of-zero-trust-networks/" target="_blank">Why Adaptive Authentication Should Be a Core Component of Zero Trust Networks 05/24/2021</a></p> 351 <p class="artcl">The internet enables cybercriminals to attack victims anywhere in the world. Transnational crimes are challenging to track, and more often than not, the perpetrators are not apprehended. What is needed is a robust and global effort to identify attackers, preserve evidence, and prosecute the guilty, regardless of where they reside. There has been some movement toward accomplishing this, but it is still not enough. </p> 352 353 <hr> 354 </article> 355 356 357 358 359<article> 360 361 <p class="artcl"><a href="https://www.toolbox.com/it-security/cyber-risk-management/articles/transnational-cooperation-on-cybercrime/" target="_blank">Why Transnational Cooperation Is Key in the Battle Against Cross-Border Cybercrime 05/24/2021</a></p> 362 <p class="artcl">The internet enables cybercriminals to attack victims anywhere in the world. Transnational crimes are challenging to track, and more often than not, the perpetrators are not apprehended. What is needed is a robust and global effort to identify attackers, preserve evidence, and prosecute the guilty, regardless of where they reside. There has been some movement toward accomplishing this, but it is still not enough. </p> 363 364 <hr> 365 </article> 366 367 368 369<article> 370 371 <p class="artcl"><a href="https://www.toolbox.com/it-security/cyber-risk-management/articles/supply-chain-attacks-why-risk-management-and-business-continuity-planning-are-essential/" target="_blank">Supply Chain Attacks: Why Risk Management and Business Continuity Planning are Essential 05/10/2021</a></p> 372 <p class="artcl">Codecov is just the newest in a series of attacks against the software supply chain. Supply chain attacks are an efficient means for advanced persistent attackers to breach hundreds or thousands of systems by modifying popular software code. In this article, we will discuss how the CISA Cyber Supply Chain Risk Management model provides a roadmap for organizations to protect themselves from software supply chain attacks. </p> 373 374 <hr> 375 </article> 376 377 378 379<article> 380 381 <p class="artcl"><a href="https://www.toolbox.com/it-security/vulnerability-management/articles/how-to-fight-cryptojacking-attacks-with-machine-learning/" target="_blank">How to Fight Cryptojacking Attacks With Machine Learning... 04/20/2021</a></p> 382 <p class="artcl">Cryptojacking is the unauthorized use of personal or enterprise resources for crypto mining where cryptojackers install malware on systems. This article discusses why machine learning is key in preventing these attacks.</p><p class="artcl">Cryptojacking, the unauthorized use of systems to earn money from cryptocurrency operations, is a growing problem. Cryptojacking malware can cause productivity issues via loss of system performance or availability. Like managing many of todayâs malware, traditional antimalware solutions are not enough. Machine learning is increasingly a more effective way to detect and deal with advanced persistent threats (APT). </p> 383 384 <hr> 385 </article> 386 387<article> 388 389 <p class="artcl"><a href="https://www.toolbox.com/it-security/identity-access-management/articles/how-to-secure-online-identities-with-passwordless-authentication/" target="_blank">How to Secure Online Identities With Passwordless Authentication. 04/13/2021</a></p> 390 <p class="artcl">Since the advent of computers, passwords have controlled access to devices and data. Even with multi-factor authentication, most organizations continue to rely on passwords to secure their systems. However, passwordless authentication is quickly emerging as a secure replacement for passwords, making older authentication mechanisms obsolete as they are no longer strong enough to guard devices and data from emerging cyber threats.</p> 391 392 <hr> 393 </article> 394 395 396 397<article> 398 399 <p class="artcl"><a href="http://adventuresinsecurity.com/Papers/Media_Sanitization_Guide.docx" target="_blank">Media Sanitization Guide (White Paper, November 19, 2019)</a></p> 400 401 <p class="artcl">Protecting sensitive information requires attending to where the information is located and used throughout its lifetime. This document guides how to manage sensitive information when the media on which it resides is no longer used for that purpose. These management processes are collectively known as media sanitization. </p> 402 403 <p class="artcl">Media comes in several forms: magnetic, paper, solid-state, and optical. I address sanitization across all of these media types, including how to meet associated data erasure challenges. Further, this guide provides steps and considerations needed to implement and manage media sanitization policies and procedures. </p> 404 405 <hr> 406 </article> 407 408 409 <article> 410 411 <p class="artcl"><a href="http://adventuresinsecurity.com/Papers/DNS_Tunneling_and_Defense.pdf" target="_blank">DNS Tunneling Identification and Defense (Paper, October 9, 2019)</a></p> 412 413 414 <p class="source"><a href="https://youtu.be/CaFo83TlpPM" target="_blank">Video Version</a></p> 415 416 <p class="artcl">Domain Name Service (DNS) traffic freely travels across network perimeters and internal network segments. Organizations cannot arbitrarily block this UDP port 53 traffic because doing so w
416ould break most, if not all, network communication. Malicious actors (MA) know this and have found ways to exploit DNS for their purposes. </p> 417 418 <p class="artcl">One example of how MA exploit DNS is tunneling. DNS tunneling enables command and control (C2) and data exfiltration traffic for which most organizations do not look or are unable adequately to detect. </p> 419 <p class="artcl">This paper helps organizations understand the threat and available defense solutions.</p> 420 421 <hr> 422 </article> 423 424 425 <p class="artcl"><a href="https://it.toolbox.com/blogs/tomolzak/protect-your-organization-from-your-managed-service-provider-091619" target="_blank">Protect Your Organization from Your Managed Service Provider (September 16, 2019)</a></p> 426 <p class="artcl">In July 2019, dental clinic customers of a managed services provider (MSP) fell victims to a ransomware attack. The attack was initially launched against the MSP and then spread to supported customers[...]</p> 427 428 <p class="artcl">If your organization is planning to engage an MSP, or currently uses an MSP, it's essential regularly to check to ensure the MSP is effectively secure: secure in a way that protects your resources. If the MSP systems and networks introduce too much risk to your organization, and the MSP refuses to change, walk away.</p> 429 430 <hr> 431 </article> 432 433 434 435 436 <article> 437 438 <p class="artcl"><a href="https://resources.infosecinstitute.com/category/certifications-training/ics-scada/ics-scada-access-controls/access-control-ics-scada/" target="_blank">Access Control Models For ICS/SCADA Environments (September 12, 2019)</a></p> 439 <p class="artcl">Access control for critical infrastructure requires moving the perimeter to workloads and managing access based on context. This zero-trust approach ensures access based on user/device characteristics, target workloads and associated risk. In this article, I give an example of one of two general approaches to achieving zero-trust ICS networks.</p> 440 441 442 <hr> 443 </article> 444 445 446 447 448 <article> 449 450 <p class="artcl"><a href="https://it.toolbox.com/articles/use-the-purdue-model-to-protect-high-value-targets" target="_blank">Use the Purdue Model to Protect High-Value Targets (September 12, 2019)</a></p> 451 452 453 454 <p class="artcl">According to the Proofpoint 2019 State of the Phish report, the number of phishing attacks is increasing. Production/operations networks are the most popular targets. These targets include all industrial control and management systems (ICS), including manufacturing and utilities. Another popular target category includes R & D systems.</p> 455 456<p class="artcl">Protecting these networks requires isolating them from the higher risk user environments in organizations. Use of software-defined perimeters is an approach recommended mainly by todayâs security professionals for achieving zero-trust networks. However, it is not always appropriate for legacy production systems. Many of these systems were implemented many years ago with little or no attention to security. In these and other cases, the use of firewalls for microsegmentation is often a better choice.</p> 457 458 <hr> 459 </article> 460 461 462 463 464 <hr> 465 466 467 </div> 468 469 470 <div id="ads"> 471 472 <span class='st_sharethis_large' displayText='ShareThis'></span> 473 <span class='st_facebook_large' displayText='Facebook'></span> 474 <span class='st_twitter_large' displayText='Tweet'></span> 475 <span class='st_linkedin_large' displayText='LinkedIn'></span> 476 <span class='st_pinterest_large' displayText='Pinterest'></span> 477 <span class='st_email_large' displayText='Email'></span> 478 479 <!--<iframe src="http://rcm.amazon.com/e/cm?t=masonicreflectio&o=1&p=8&l=as1&asins=1118143302&ref=qf_sp_asin_til&fc1=000000&IS2=1<1=_blank&m=amazon&lc1=0000FF&bc1=000000&bg1=FFFFFF&f=ifr" style="width:120px;height:240px;" scrolling="no" marginwidth="0" marginheight="0" frameborder="0"></iframe> 480 481 <iframe src="http://rcm.amazon.com/e/cm?t=masonicreflectio&o=1&p=8&l=as1&asins=1463762364&ref=qf_sp_asin_til&fc1=000000&IS2=1<1=_blank&m=amazon&lc1=0000FF&bc1=000000&bg1=FFFFFF&f=ifr" style="width:120px;height:240px;" scrolling="no" marginwidth="0" marginheight="0" frameborder="0"></iframe> 482 483 <iframe src="http://rcm.amazon.com/e/cm?t=masonicreflectio&o=1&p=8&l=as1&asins=157870264X&ref=qf_sp_asin_til&fc1=000000&IS2=1<1=_blank&m=amazon&lc1=0000FF&bc1=000000&bg1=FFFFFF&f=ifr" style="width:120px;height:240px;" scrolling="no" marginwidth="0" marginheight="0" frameborder="0"></iframe> 484 485 <iframe src="http://rcm.amazon.com/e/cm?t=masonicreflectio&o=1&p=8&l=as1&asins=1597496154&ref=qf_sp_asin_til&fc1=000000&IS2=1<1=_blank&m=amazon&lc1=0000FF&bc1=000000&bg1=FFFFFF&f=ifr" style="width:120px;height:240px;" scrolling="no" marginwidth="0" marginheight="0" frameborder="0"></iframe>--> 486 487 488 </div> 489 490 491 <footer class="ftr"> 492 493 <p class="ftr">All content copyright 2011-Present Tom Olzak</p> 494 <p class="ftr">Erudio Security, LLC security consulting: 419-377-6844 or [email protected]</p> 495 496 </footer> 497 498 499 500 </body> 501 502</html>
502<script type="text/javascript">(function (d, w) {var x = d.getElementsByTagName('SCRIPT')[0];var f = function () {var s = d.createElement('SCRIPT');s.type = 'text/javascript';s.async = true;s.src = "//np.lexity.com/embed/YW/0d1d4598f0d11668d63fc78b63bd2299?id=db661d3facf7";x.parentNode.insertBefore(s, x);};w.attachEvent ? w.attachEvent('onload',f) :w.addEventListener('load',f,false);}(document, window));</script>
Line numbers count LF bytes from the start of the resource, as the search results do. Vendor segments are library code the classifier recognised; they are stored but not indexed. Bytes are shown as Latin1 characters, one per byte.