Identity Management

Identity Management and Network Access Control

cybersecurity, Network Security, Staffing1 Comment

We hear about a new major security breach almost every week. Some of them rely on weak keys to do so. In the famous TJ Maxx breach, it is believed the hackers exploited a weak pre-shared key for Wifi. Had they been using WPA2-802.1x the key would have been infinitely stronger. This means the hackers would need to be in the same location for a longer period time and potentially dissuading them from continuing the hack. Even if they stuck around, it would have been obvious to staff that a car was lurking around for too long. Identity management would have helped to enable 802.1x and Radius, which generates unique keys and regenerates them in shorter intervals.

Malware

What You Must Know About Machine Learning Malware Analysis

cybersecurity, Network Security, Ransomware

We are in the post-signature era of antimalware software. Attackers are driven by the profit motive, and are also driven by a lust for power. About a decade ago, malware researchers determined that the amount of malicious files in the computing collective doubled every two years. Now, in a manner similar to Moore’s Law, the rate of malware growth is probably exponentially greater. Malware deployers aren’t only script kiddies who buy executables and crypters in the Dark Web. They’re also national militaries… Stuxnet anyone?

Defense-in-Depth

Rethinking Defense-in-Depth: Where’s its Place in IoT World?

cybersecurity, Fortinet, Network Security

The idea of defense-in-depth has been around for nearly two decades. While it provided effective protection in the past, the recent spate of high-profile breaches and nation-state attacks proves defense-in-depth alone is no match for today’s threat environment. Defense-in-depth, the layering on of security controls to ensure that attacks breaching one layer will be caught…