PageSourceSearch

https://adventuresinsecurity.com/index.html

html adventuresinsecurity.com collected 2026-10-04 22:37:10 UTC 33,825 bytes, 502 lines download raw bytes

1<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
2
3<html>
4
5	<head>
6	
7		<link rel="stylesheet" type="text/css" href="aisstyles.css">
8		
9		<meta http-equiv="content-type" content="text/html; charset=UTF-8">
10		
11		<meta name="keywords" content="security,physical,biometrics,access,control,attack surface,threat,modeling,architecture,remote,uefi,tpm,cryptography,virtualization">
12		
13		<meta name="google-site-verification" content="1_FH_42VlBfLBB_oN63Zz3KyIUav_6WV19FjhJ3DnrQ" />
14		
15		<meta name="author" content="Tom Olzak MBA, CISSP">
16						
17		<meta name="description" content="Vendor-neutral information security videos, papers, and articles">
18		
19		<title>Tom Olzak on Security | Enterprise Security: A Practitioner's Guide</title> 				
20	
21		
21<script type="text/javascript">var switchTo5x=true;</script>
21
22		
22<script type="text/javascript" src="http://w.sharethis.com/button/buttons.js"></script>
22
23		
23<script type="text/javascript">stLight.options({publisher: "6fe74928-0eab-432b-b9fe-f3334464f865"});</script>
23
24		
25		<link rel="apple-touch-icon" sizes="57x57" href="/apple-icon-57x57.png">
26<link rel="apple-touch-icon" sizes="60x60" href="/apple-icon-60x60.png">
27<link rel="apple-touch-icon" sizes="72x72" href="/apple-icon-72x72.png">
28<link rel="apple-touch-icon" sizes="76x76" href="/apple-icon-76x76.png">
29<link rel="apple-touch-icon" sizes="114x114" href="/apple-icon-114x114.png">
30<link rel="apple-touch-icon" sizes="120x120" href="/apple-icon-120x120.png">
31<link rel="apple-touch-icon" sizes="144x144" href="/apple-icon-144x144.png">
32<link rel="apple-touch-icon" sizes="152x152" href="/apple-icon-152x152.png">
33<link rel="apple-touch-icon" sizes="180x180" href="/apple-icon-180x180.png">
34<link rel="icon" type="image/png" sizes="192x192"  href="/android-icon-192x192.png">
35<link rel="icon" type="image/png" sizes="32x32" href="/favicon-32x32.png">
36<link rel="icon" type="image/png" sizes="96x96" href="/favicon-96x96.png">
37<link rel="icon" type="image/png" sizes="16x16" href="/favicon-16x16.png">
38<link rel="manifest" href="/manifest.json">
39<meta name="msapplication-TileColor" content="#ffffff">
40<meta name="msapplication-TileImage" content="/ms-icon-144x144.png">
41<meta name="theme-color" content="#ffffff">
42
43<link rel="alternate" type="application/rss+xml" title="RSS" href="http://feeds.rapidfeeds.com/92688/">
44	
45	</head>
46
47	<body>
48
49
50		
51						
52		<div id="banner">
53		
54				
55			<p class="btext">Tom Olzak on Security 	</p>	
56			
57					
58		</div>	
59				
60			
61		<div id="navigate">
62			
63			<h2 class="center">Resources</h2>
64			<a href="index.html" class="nav">Home</a><br><br>
65			<a href="https://www.youtube.com/channel/UCUVwk67-aItVVAQZiCWka0g" class="nav">My YouTube Channel</a><br><br>
66			<a href="whitepapers.html" class="nav">Whitepapers</a><br><br>
67			<a href="resources.html" class="nav">Training Resources</a><br><br>
68			<a href="about.html" class="nav">About</a>
69			<br />
70			
71			<br />
72			
73			<div class="fb-like" data-href="https://facebook.com/informationsecuritynews" data-layout="standard" data-action="like" data-show-faces="false" data-share="false"></div>			
74		
75		</div>
76		
77		<div>
78		
79		
80		
81			<h1 class="banner">Most recent blogs, netcasts, papers, etc.</h1>
82			
83		</div>
84		
85<div> 
86
87<article>
88					<hr>
89
90					
91					
92					<p class="artcl"><a href="https://adventuresinsecurity.com/Papers/Defensive_Adversarial_AI.pdf" target="_blank">Defensive Adversarial AI (August 9, 2026)</a></p>				
93					
94					<p class="artcl">Abstract</p>
95					
96					<p class="artcl">Organizations increasingly use large language models (LLMs) for business operations and security.  While this improves productivity by helping workers find information, write proposals, and detect and respond to cyber incidents, LLMs also expand an organization’s attack surface more quickly.  Threat actors can poison prompts and training data.  They can manipulate LLMs to infer sensitive information or extract the organization’s model.  Defensive adversarial AI helps manage this expanded attack surface by intentionally subjecting AI systems to hostile prompts and operating conditions, testing whether the model is robust enough and has sufficient safeguards and guardrails to identify weaknesses before threat actors do.  This paper explores how to use open testing frameworks and how to prioritize test results based on the associated risk without unacceptable reduction in model performance.  The approach is based on the NIST AI Risk Management Framework, the NIST Generative AI Profile, NIST adversarial machine-learning guidance, NIST secure development guidance, OWASP’s LLM risk model, and recent research on prompt injection and jailbreak testing (Autio et al., 2024; Booth et al., 2024; Vassilev et al., 2025).  The paper’s central theme is that no one filter, model, or benchmark can provide adequate protection.  Effective model hardening requires continuous testing of the full AI-enabled system—including data, retrieval, tools, identity, application logic, and human oversight—followed by risk-based remediation and regression testing (Liu et al., 2024a; Olzak, 2026a; OWASP GenAI Security Project, 2024).</p>
97				
98					<hr>
99			</article>
100
101<article>
102					
103					<p class="artcl"><a href="https://www.spiceworks.com/it-security/data-security/articles/security-data-throughout-data-lifecycle/" target="_blank">Understanding the Data Lifecycle and Five Ways to Ensure Data Confidentiality (August 2, 2022)</a></p>				
104					<p class="artcl">Data has become a treasure trove for cybercriminals, which is why companies now use data security technologies or software to secure their data instead of huge vaults and security personnel. Here’s a quick introduction to understanding each phase of the data security lifecycle and how companies can secure their data end-to-e
104nd.</p>
105
106					<hr>
107</article>
108
109
110
111<article>
112					
113					<p class="artcl"><a href="https://www.spiceworks.com/it-security/cyber-risk-management/articles/industroyer-and-ot-security/ target="_blank">Defending Against Industroyer2 and Securing OT in a Connected World (July 21, 2022)</a></p>				
114					<p class="artcl">Attacks against operational technology (OT) are not limited to national takeover attempts. Related to denial of service attacks, disruption of OT can take down critical business services, resulting in loss of service or product delivery as an organization struggles to survive. All organizations that use OT must ensure secure operation, and the safety of employees, throughout all hardware and software lifecycles.</p>
115				
116					<hr>
117			</article>
118
119
120
121
122<article>
123					
124					<p class="artcl"><a href="https://www.spiceworks.com/it-security/data-security/articles/how-homomorphic-encryption-protects-data/" target="_blank">Homomorphic Encryption: How It Changes the Way We Protect Data (July 6, 2022)</a></p>				
125					<p class="artcl">Protecting data throughout its lifecycle is a continuous effort, made more difficult as more information passes through the cloud and is provided to various service providers. Encryption works well for data in transit and at rest, but it begins to fail for data in use and derived data created by service providers. Homomorphic encryption, now emerging as a viable technology, helps fill these gaps by enabling sharing and processing of information without decrypting it.</p>
126				
127					<hr>
128			</article>
129
130			
131
132	<article>
133					
134					<p class="artcl"><a href="https://bit.ly/3MdbkEM" target="_blank">Ten Common IAM Deployment Challenges and Their Solutions (May 11, 2022)</a></p>				
135					<p class="artcl">New cloud-based IAM solutions, providing uniform and simplified identity management, are gaining popularity. However, companies typically find it taxing to regulate admin privileges when they embrace cloud technologies. For CIOs and their staff, the difficulty in managing “who can access what” introduces a new set of IAM difficulties. To optimize the existing IAM solution in the best way,  companies need to take control of major challenges faced by IAM in the cloud. The top ten are discussed in this article. Let’s explore.</p>
136				
137					<hr>
138			</article>
139
140			
141
142
143<article>
144					
145					<p class="artcl"><a href="http://adventuresinsecurity.com/Papers/Network_Access_Control_paper.edited.pdf" target="_blank">Paper: Network Access Control (NAC)  (April 23, 2022)</a></p>	<p class="artcl"><a href="https://youtu.be/iE_eUdVQDXQf" target="_blank">Video Version</a></p>					
146					<p class="artcl">Gaining access to a network should be more than forcing user and device authentication via credentials like user IDs, passwords, biometrics, and certificates.  Network access control (NAC) extends access management to processes designed to assess the state of devices attempting access to a network.  This assessment ensures that each device complies with a set of defined policies.  NAC helps ensure that only devices hardened based on associated risk achieve resource access.</p>
147				
148					<hr>
149			</article>
150			
151
152			
153					
154
155			<article>
156					
157					<p class="artcl"><a href="https://adventuresinsecurity.com/Papers/Cyber_Kill_Chain_for_endpoints" target="_blank">Paper: Use the Cyber Kill Chain for End-user Device Security (April 20, 2022)</a></p>	<p class="artcl"><a href="https://youtu.be/sLVewxwYJEM" target="_blank">Video Version</a>
158					
159					<p class="artcl">End-user devices are the greatest threat to network security, with a generally standard attack path depicted in the Lockheed Martin Cyber Kill Chain, as shown in Figure 1.  Use of the kill chain helps identify risks against user devices, both mobile and static, by providing the threat actor's perspective.  Breaking links in the chain hinders or prevents a threat actor from compromising a user device and using it as an attack pivot point.  </p>
160				
161					<hr>
162			</article>
163			
164	
165
166
167<article>
168					
169					<p class="artcl"><a href="https://www.toolbox.com/tech/it-strategy/articles/shadow-it-challenges-and-benefits/" target="_blank">Mitigating the Risks Posed by Shadow IT: Can Organizations Achieve the Impossible? (October 2021)</a></p>				
170					<p class="artcl">With the right set of security practices and tools, organizations can manage security issues associated with shadow IT. Let’s see how organizations can configure their IT environments to detect and integrate shadow resources quickly to aid business managers needing quick solutions to meet business objectives..</p>
171				
172					<hr>
173	</article>
174
175			
176<article>
177					
178					<p class="artcl"><a href="https://www.toolbox.com/it-security/network-security/articles/rdp-security-concerns-and-solution/ (October 2021)" target="_blank">What Is Ailing RDP Security And How to Use It Safely (October 2021)</a></p>				
179					<p class="artcl">The Windows Remote Desktop Protocol (RDP) is one of the most popular targets exploited by threat actors for both on-premises and cloud attacks. It is also the foundation for many remote access solutions within Microsoft Windows environments.  Although RDP can be a gaping security hole, properly configuring and managing it enables its users to meet business requirements safely.</p>
180				
181					<hr>
182	</article>
183			
184
185<article>
186					
187					<p class="artcl"><a href="https://www.toolbox.com/tech/cloud/articles/cloud-security-challenges-2022/" target="_blank">Five Major Cloud Security Challenges Businesses Should Prepare for in 2022 (October 2021)</a></p>				
188					<p class="artcl">Despite the increasing capabilities of cloud computing services in the past few years, organizations still confront major security issues that are further set to aggravate in 2022 if not delineated towards proper safety mechanisms. To cater to these challenges, we have developed a list of cloud computing issues that organizations must consider to prevent, detect, and respond to related attacks.</p>
189				
190					<hr>
191			</article>
192
193
194<article>
195					
196					<p class="artcl"><a href="https://www.toolbox.com/it-security/vulnerability-management/articles/mitigating-zero-day-attacks/" target="_blank">Mitigating Zero Day Attacks With a Detection, Prevention and Response Strategy (September 2021)</a></p>				
197					<p class="artcl">In a zero-day attack scenario, threat actors discover previously unknown vulnerabilities and formulate one or more ways to exploit them. Organizations are, therefore, at risk of suffering surprise attacks at all times. Let’s look at how organizations can create and manage tools, techniques, and procedures (TTP) to mitigate risks posed by zero-day attacks.</p>
198				
199					<hr>
200			</article>
201			
202						
203
204
205<article>
206					
207					<p class="artcl"><a href="https://www.toolbox.com/it-security/data-security/articles/confidential-computing-securing-data/ " target="_blank">What Is Confidential Computing and Why It’s Key To Securing Data in Use? (9/20/21)</a></p>				
208					<p class="artcl">For decades, security professionals have focused on protecting data at rest and data in transit. Good tools did not exist for protecting data in use. Data in use resides in volatile memory (RAM), unencrypted and available to compromised applications, firmware, operating systems, and hypervisors. Confidential computing changes this by using hardware to erect walls between application processing environments and the underlying operating system and other applications.</p>
209				
210					<hr>
211			</article>
212
213
214
215<article>
216					
217					<p class="artcl"><a href="https://www.toolbox.com/it-security/endpoint-security/articles/xdr-mdr-endpoint-security" target="_blank">How Enterprises Can Secure Endpoints With Extended and Managed Detection and Response (9/11/2021)</a></p>				
218					<p class="artcl">
218Most organizations focus on endpoint detection and response (EDR) because user devices and servers are the most common attack targets. However, this is not enough today. Quick detection of many attacks requires looking at all activity across all information resources, including the cloud. Doing this 24/7 is the most effective approach, but the volume of resources of most organizations make it impractical for in-house deployment..</p>
219				
220					<hr>
221			</article>
222			
223
224
225<article>
226					
227					<p class="artcl"><a href="https://www.toolbox.com/it-security/cyber-risk-management/articles/what-is-pen-testing/" target="_blank">Penetration Testing in Action: A Step-by-Step Guide to Get It Right 08/11/2021</a></p>				
228					<p class="artcl">We are only human. Our efforts to protect information resources will have gaps that we missed or have arisen due to emerging threats.  Penetration tests help organizations identify weaknesses in the controls framework.  The test results enable managing associated risk.    There are many penetration test methodologies, but they all generally perform the same activities with the same results.  This article is based on the Open Source Security Testing Methodology 3 (OSSTM) with additional content from other frameworks.</p>
229				
230					<hr>
231			</article>
232			
233
234
235<article>
236					
237					<p class="artcl"><a href="https://www.toolbox.com/it-security/cyber-risk-management/articles/is-linux-secure/" target="_blank">Is Linux as Secure as We Think? 08/06/2021</a></p>				
238					<p class="artcl">Linux is considered more secure than Windows, but it has its fair share of vulnerabilities, such as the Sudo vulnerability and other Linux weaknesses. Amid growing cloud adoption, we look at the steps security teams should take to defend Linux against cyberattacks.</p>
239				
240					<hr>
241			</article>
242			
243			
244
245
246
247
248<article>
249					
250					<p class="artcl"><a href="https://www.toolbox.com/it-security/cyber-risk-management/articles/best-security-framework/" target="_blank">How To Pick the Best Security Framework for Your Organization 07/29/2021</a></p>				
251					<p class="artcl">Planning, creating, and managing security architecture is not an easy process, and it is not one to take on without guidance. Fortunately, guidance exists across a plethora of security frameworks. Some of the frameworks are general, while others are directed at specific uses or industries. It is essential to understand the various frameworks and select the proper one or more that meet compliance, industry, and overall risk management needs.</p>
252				
253					<hr>
254			</article>
255
256					
257
258
259<article>
260					
261					<p class="artcl"><a href="https://www.toolbox.com/it-security/cyber-risk-management/articles/supply-chain-partners-undermine-cyber-security/" target="_blank">Kaseya Attack Is a Reminder of How Your Supply Chain Partner Can Undermine Your Cybersecurity. 07/19/2021</a></p>				
262					<p class="artcl">Supply chain attacks continue with the ransomware attack against Kaseya. Between 1,000 and 1,500 Kaseya direct and indirect customers were exposed to the attack, and the total ransom requested was $70 million. Similarly, the cyberattack on SolarWinds and the cyber breaches caused by vulnerabilities in the Microsoft Exchange server are some of the other recent examples of how far-reaching the impact of a supply chain attack can be. .</p>
263				
264					<hr>
265			</article>
266
267
268
269
270<article>
271					
272					<p class="artcl"><a href="https://www.toolbox.com/it-security/cyber-risk-management/articles/securing-industrial-control-systems-from-modern-cyber-threats/ " target="_blank">Securing Industrial Control Systems From Modern Cyber Threats 07/08/2021</a></p>				
273					<p class="artcl">Ransomware and other cyberattacks often target industrial control systems (ICS) to disrupt operations or steal intellectual property. However, many organizations still use ICS technologies that are decades old, are exposed to the internet, and lack built-in security controls. Manufacturing, utility, health care, and other ICS-dependent organizations must protect current and planned ICS infrastructure and related sensitive information. Let’s look at how a critical infrastru
273cture organization can implement robust security controls to keep hackers away.</p>
274				
275					<hr>
276			</article>
277
278
279
280
281<article>
282					
283					<p class="artcl"><a href="https://www.toolbox.com/it-security/cyber-risk-management/articles/mitigating-the-impact-of-ransomware-attacks-with-business-continuity-planning/" target="_blank">Mitigating the Impact of Ransomware Attacks With Business Continuity Planning 07/02/2021</a></p>				
284					<p class="artcl">Ransomware attacks cause partial or complete shutdowns of business-critical functions. This is the same impact as those caused by business continuity events. Consequently, business continuity planning is one of the best ways to plan for the increasing probability that any organization will eventually become a victim of a ransomware attack.</p>
285				
286					<hr>
287			</article>
288
289
290
291
292<article>
293					
294					<p class="artcl"><a href="https://www.toolbox.com/it-security/cyber-risk-management/articles/ransomware-payments-is-cyber-insurance-with-proper-controls-the-best-solution/" target="_blank">
295Ransomware Payments: Is Cyber Insurance With Proper Controls the Best Solution? 06/28/202)</a></p>				
296					<p class="artcl">Ransomware attacks have reached epidemic levels. One reason is the ease with which ransomware gangs can make a lot of money because many organizations choose to pay ransom or extortion demands. A movement in Washington wants to ban ransom payments, but this may not be the best approach. Instead, the root causes of ransomware payments need to be identified and treated..</p>
297				
298					<hr>
299			</article>
300			
301						
302
303
304<article>
305					
306					<p class="artcl"><a href="https://www.toolbox.com/it-security/encryption/articles/will-symmetric-and-asymmetric-encryption-withstand-the-might-of-quantum-computing/" target="_blank">Will Symmetric and Asymmetric Encryption Withstand the Might of Quantum Computing 06/14/2021</a></p>				
307					<p class="artcl">The processing power of quantum computers is set to outstrip the capabilities of today’s supercomputers. According to a report, Google’s fledgling quantum computer performed a calculation in three minutes and 20 seconds that it would have taken today’s fastest supercomputer, IBM’s Summit, 10,000 years to complete. Let’s look at the capabilities of quantum computing and what kind of post-quantum public-key encryption and key exchange algorithms will be strong enough to resist the power of quantum computers..</p>
308				
309					<hr>
310			</article>
311			
312						
313						
314			
315						
316
317
318
319<article>
320<p class="artcl"><a href="https://www.toolbox.com/it-security/cyber-risk-management/articles/lessons-from-the-colonial-hack-law-enforcement-action-isnt-enough-to-defeat-ransomware/" target="_blank">Lessons From the Colonial Hack: Law Enforcement Action Isn’t Enough To Defeat Ransomware 06/07/2021</a></p>					
321					<p class="artcl">The world of cellular is changing rapidly with the advent of 5G. 5G brings revolutionary performance and capabilities, but it also comes with new security challenges. In this article, we talk about the major security challenges affecting 5G networks and discuss five ways organizations can address such security challenges and reduce their networks’ attack surface.</p>
322				
323					<hr>
324			</article>
325
326		
327		
328		<article>
329		
330<p class="artcl"><a href="https://www.toolbox.com/it-security/network-security/articles/5-ways-to-secure-and-manage-your-5g-network/" target="_blank">5 Ways to Secure and Manage Your 5G Network  05/31/2021</a></p>					
331					<p class="artcl">The world of cellular is changing rapidly with the advent of 5G. 5G brings revolutionary performance and capabilities, but it also comes with new security challenges. In this article, we talk about the major security challenges affecting 5G networks and discuss five ways organizations can address such security challenges and reduce their networks’ attack surface.</p>
332				
333					<hr>
334			</article>
335		
336
337
338
339<article>
340					
341					<p class="artcl"><a href="https://www.toolbox.com/it-security/cyber-risk-management/articles/how-to-manage-insider-risk-with-continuous-background-checks/" target="_blank">
341How To Manage Insider Risk With Continuous Background Checks  05/3/2021</a></p>				
342					<p class="artcl">Insider threats are a growing and serious challenge for organizations. Many human resource departments perform one-time background checks before hiring someone. However, employee behavior is not static. Questionable or criminal activities during employment can place users in a position where an attacker might extort them to steal data, corrupt systems, or perform other malicious actions. In addition to user behavior analytics, continuous background analysis is a good tool for protecting sensitive information resources.</p>
343				
344					<hr>
345			</article>
346		
347			
348<article>
349					
350					<p class="artcl"><a href="https://www.toolbox.com/it-security/cyber-risk-management/articles/why-adaptive-authentication-should-be-a-core-component-of-zero-trust-networks/" target="_blank">Why Adaptive Authentication Should Be a Core Component of Zero Trust Networks 05/24/2021</a></p>				
351					<p class="artcl">The internet enables cybercriminals to attack victims anywhere in the world. Transnational crimes are challenging to track, and more often than not, the perpetrators are not apprehended. What is needed is a robust and global effort to identify attackers, preserve evidence, and prosecute the guilty, regardless of where they reside. There has been some movement toward accomplishing this, but it is still not enough. </p>
352				
353					<hr>
354			</article>
355
356
357	
358
359<article>
360					
361					<p class="artcl"><a href="https://www.toolbox.com/it-security/cyber-risk-management/articles/transnational-cooperation-on-cybercrime/" target="_blank">Why Transnational Cooperation Is Key in the Battle Against Cross-Border Cybercrime 05/24/2021</a></p>				
362					<p class="artcl">The internet enables cybercriminals to attack victims anywhere in the world. Transnational crimes are challenging to track, and more often than not, the perpetrators are not apprehended. What is needed is a robust and global effort to identify attackers, preserve evidence, and prosecute the guilty, regardless of where they reside. There has been some movement toward accomplishing this, but it is still not enough. </p>
363				
364					<hr>
365			</article>
366
367
368
369<article>
370					
371					<p class="artcl"><a href="https://www.toolbox.com/it-security/cyber-risk-management/articles/supply-chain-attacks-why-risk-management-and-business-continuity-planning-are-essential/" target="_blank">Supply Chain Attacks: Why Risk Management and Business Continuity Planning are Essential  05/10/2021</a></p>				
372					<p class="artcl">Codecov is just the newest in a series of attacks against the software supply chain. Supply chain attacks are an efficient means for advanced persistent attackers to breach hundreds or thousands of systems by modifying popular software code. In this article, we will discuss how the CISA Cyber Supply Chain Risk Management model provides a roadmap for organizations to protect themselves from software supply chain attacks. </p>
373				
374					<hr>
375			</article>
376
377			
378
379<article>
380					
381					<p class="artcl"><a href="https://www.toolbox.com/it-security/vulnerability-management/articles/how-to-fight-cryptojacking-attacks-with-machine-learning/" target="_blank">How to Fight Cryptojacking Attacks With Machine Learning... 04/20/2021</a></p>				
382					<p class="artcl">Cryptojacking is the unauthorized use of personal or enterprise resources for crypto mining where cryptojackers install malware on systems. This article discusses why machine learning is key in preventing these attacks.</p><p class="artcl">Cryptojacking, the unauthorized use of systems to earn money from cryptocurrency operations, is a growing problem. Cryptojacking malware can cause productivity issues via loss of system performance or availability. Like managing many of today’s malware, traditional antimalware solutions are not enough. Machine learning is increasingly a more effective way to detect and deal with advanced persistent threats (APT). </p>
383				
384					<hr>
385			</article>			
386		
387<article>
388					
389					<p class="artcl"><a href="https://www.toolbox.com/it-security/identity-access-management/articles/how-to-secure-online-identities-with-passwordless-authentication/" target="_blank">How to Secure Online Identities With Passwordless Authentication.  04/13/2021</a></p>				
390					<p class="artcl">Since the advent of computers, passwords have controlled access to devices and data. Even with multi-factor authentication, most organizations continue to rely on passwords to secure their systems. However, passwordless authentication is quickly emerging as a secure replacement for passwords, making older authentication mechanisms obsolete as they are no longer strong enough to guard devices and data from emerging cyber threats.</p>
391				
392					<hr>
393			</article>
394
395			
396				
397<article>
398					
399					<p class="artcl"><a href="http://adventuresinsecurity.com/Papers/Media_Sanitization_Guide.docx" target="_blank">Media Sanitization Guide (White Paper, November 19, 2019)</a></p>
400					
401														<p class="artcl">Protecting sensitive information requires attending to where the information is located and used throughout its lifetime.  This document guides how to manage sensitive information when the media on which it resides is no longer used for that purpose.  These management processes are collectively known as media sanitization. </p>
402
403			<p class="artcl">Media comes in several forms: magnetic, paper, solid-state, and optical.  I address sanitization across all of these media types, including how to meet associated data erasure challenges.  Further, this guide provides steps and considerations needed to implement and manage media sanitization policies and procedures. </p>
404							
405			<hr>
406		</article>						
407						
408								
409		<article>
410					
411					<p class="artcl"><a href="http://adventuresinsecurity.com/Papers/DNS_Tunneling_and_Defense.pdf" target="_blank">DNS Tunneling Identification and Defense (Paper, October 9, 2019)</a></p>
412					
413									
414													<p class="source"><a href="https://youtu.be/CaFo83TlpPM" target="_blank">Video Version</a></p>
415				
416					<p class="artcl">Domain Name Service (DNS) traffic freely travels across network perimeters and internal network segments.  Organizations cannot arbitrarily block this UDP port 53 traffic because doing so w
416ould break most, if not all, network communication.  Malicious actors (MA) know this and have found ways to exploit DNS for their purposes. </p>
417
418			<p class="artcl">One example of how MA exploit DNS is tunneling.  DNS tunneling enables command and control (C2) and data exfiltration traffic for which most organizations do not look or are unable adequately to detect. </p>
419			<p class="artcl">This paper helps organizations understand the threat and available defense solutions.</p>
420				
421			<hr>
422		</article>	
423
424							
425					<p class="artcl"><a href="https://it.toolbox.com/blogs/tomolzak/protect-your-organization-from-your-managed-service-provider-091619" target="_blank">Protect Your Organization from Your Managed Service Provider (September 16, 2019)</a></p>				
426					<p class="artcl">In July 2019, dental clinic customers of a managed services provider (MSP) fell victims to a ransomware attack.  The attack was initially launched against the MSP and then spread to supported customers[...]</p>
427
428			<p class="artcl">If your organization is planning to engage an MSP, or currently uses an MSP, it's essential regularly to check to ensure the MSP is effectively secure: secure in a way that protects your resources.  If the MSP systems and networks introduce too much risk to your organization, and the MSP refuses to change, walk away.</p>
429				
430			<hr>
431		</article>	
432			
433			
434			
435			
436		<article>
437					
438					<p class="artcl"><a href="https://resources.infosecinstitute.com/category/certifications-training/ics-scada/ics-scada-access-controls/access-control-ics-scada/" target="_blank">Access Control Models For ICS/SCADA Environments (September 12, 2019)</a></p>				
439					<p class="artcl">Access control for critical infrastructure requires moving the perimeter to workloads and managing access based on context. This zero-trust approach ensures access based on user/device characteristics, target workloads and associated risk. In this article, I give an example of one of two general approaches to achieving zero-trust ICS networks.</p>
440
441				
442			<hr>
443		</article>
444
445			
446			
447			
448			<article>
449					
450					<p class="artcl"><a href="https://it.toolbox.com/articles/use-the-purdue-model-to-protect-high-value-targets" target="_blank">Use the Purdue Model to Protect High-Value Targets (September 12, 2019)</a></p>
451					
452									
453																	
454					<p class="artcl">According to the Proofpoint 2019 State of the Phish report, the number of phishing attacks is increasing. Production/operations networks are the most popular targets. These targets include all industrial control and management systems (ICS), including manufacturing and utilities. Another popular target category includes R & D systems.</p>
455
456<p class="artcl">Protecting these networks requires isolating them from the higher risk user environments in organizations. Use of software-defined perimeters is an approach recommended mainly by today’s security professionals for achieving zero-trust networks. However, it is not always appropriate for legacy production systems. Many of these systems were implemented many years ago with little or no attention to security. In these and other cases, the use of firewalls for microsegmentation is often a better choice.</p>
457				
458					<hr>
459			</article>
460			
461			
462			
463			
464			<hr>
465			
466													
467		</div>
468
469
470		<div id="ads">
471		
472			<span class='st_sharethis_large' displayText='ShareThis'></span>
473			<span class='st_facebook_large' displayText='Facebook'></span>
474			<span class='st_twitter_large' displayText='Tweet'></span>
475			<span class='st_linkedin_large' displayText='LinkedIn'></span>
476			<span class='st_pinterest_large' displayText='Pinterest'></span>
477			<span class='st_email_large' displayText='Email'></span>
478		
479			<!--<iframe src="http://rcm.amazon.com/e/cm?t=masonicreflectio&o=1&p=8&l=as1&asins=1118143302&ref=qf_sp_asin_til&fc1=000000&IS2=1&lt1=_blank&m=amazon&lc1=0000FF&bc1=000000&bg1=FFFFFF&f=ifr" style="width:120px;height:240px;" scrolling="no" marginwidth="0" marginheight="0" frameborder="0"></iframe>
480
481			<iframe src="http://rcm.amazon.com/e/cm?t=masonicreflectio&o=1&p=8&l=as1&asins=1463762364&ref=qf_sp_asin_til&fc1=000000&IS2=1&lt1=_blank&m=amazon&lc1=0000FF&bc1=000000&bg1=FFFFFF&f=ifr" style="width:120px;height:240px;" scrolling="no" marginwidth="0" marginheight="0" frameborder="0"></iframe>
482			
483			<iframe src="http://rcm.amazon.com/e/cm?t=masonicreflectio&o=1&p=8&l=as1&asins=157870264X&ref=qf_sp_asin_til&fc1=000000&IS2=1&lt1=_blank&m=amazon&lc1=0000FF&bc1=000000&bg1=FFFFFF&f=ifr" style="width:120px;height:240px;" scrolling="no" marginwidth="0" marginheight="0" frameborder="0"></iframe>
484			
485			<iframe src="http://rcm.amazon.com/e/cm?t=masonicreflectio&o=1&p=8&l=as1&asins=1597496154&ref=qf_sp_asin_til&fc1=000000&IS2=1&lt1=_blank&m=amazon&lc1=0000FF&bc1=000000&bg1=FFFFFF&f=ifr" style="width:120px;height:240px;" scrolling="no" marginwidth="0" marginheight="0" frameborder="0"></iframe>-->
486
487		
488		</div>
489
490
491		<footer class="ftr">
492			
493			<p class="ftr">All content copyright 2011-Present Tom Olzak</p>
494			<p class="ftr">Erudio Security, LLC security consulting: 419-377-6844 or [email protected]</p>
495				
496		</footer>
497
498	
499			
500	</body>
501
502</html>	
502<script type="text/javascript">(function (d, w) {var x = d.getElementsByTagName('SCRIPT')[0];var f = function () {var s = d.createElement('SCRIPT');s.type = 'text/javascript';s.async = true;s.src = "//np.lexity.com/embed/YW/0d1d4598f0d11668d63fc78b63bd2299?id=db661d3facf7";x.parentNode.insertBefore(s, x);};w.attachEvent ? w.attachEvent('onload',f) :w.addEventListener('load',f,false);}(document, window));</script>

Line numbers count LF bytes from the start of the resource, as the search results do. Vendor segments are library code the classifier recognised; they are stored but not indexed. Bytes are shown as Latin1 characters, one per byte.