Collaborate Disseminate
By looking at probability graphs for nodes at metrics.torproject.org, it seems that exit nodes can’t also be guards (they have 0.0000% probability of serving as guard) and vice versa.
Why is that so?
Continue reading Why can’t a Tor node simultaneously be a guard and an exit node?
I work in an organisation with 3 levels as far as information security is concerned. I’m sitting at level two where we develop policies and also assist with the standards. One of the most difficult things which have come to l… Continue reading How do I measure compliance to Information security policies?
There are any number of use cases where you would need a disaster recovery solution. These can be a disaster emanating from within, such as end user error that has unexpected catastrophic results that cripples your system. There can also be outside inf… Continue reading RPO and RTO – What do I need to Know?
Effectively connect people, process and technology to minimize MTTD and MTTR There’s a reason it’s said that what gets measured gets managed. In order to successfully achieve a goal, you have to be able to measure progress. It’s the o… Continue reading What You Should Know About Driving Down MTTD and MTTR
A while back, Medium blogger ‘Nykolas Z’ posted results from a globally distributed DNS resolver test to find the speediest provider (NOTE: speed is not the only consideration when choosing an alternative DNS provider). While the test metho… Continue reading Nykolas Z Updates Global Alternative DNS Speed Test to Include Cloudflare (1.1.1.1)
I started my security (post-sysadmin) career heavily focused on security policy frameworks. It took me down many roads, but everything always came back to a few simple notions, such as that policies were a means of articulating security direction, that… Continue reading Measure Security Performance, Not Policy Compliance
How many people liked your last tweet? Oh yeah? Didja get any retweets? Was it enough to satisfy your need for acceptance, or were you disappointed by the Twitterverse’s reaction?
If you couldn’t see the number of likes, retweets, or followers you had, would you still even use Twitter?
[Ben Grosser] wants to know. He’s trying to see if people will look their relationship with social media squarely in the eye and think honestly about how it affects them. After all, social media itself isn’t the bad guy here—we are all responsible for our own actions and reactions. He’s created …read more
In a previous post by my colleague Irfahn Khimji, he spoke about how ensuring devices on your network is a great way to minimize the attack surface of your infrastructure. Organizations like the Center for Internet Security (CIS) provide guidelines on … Continue reading What is Configuration Drift?
Amazon has announced a new unified agent for their AWS CloudWatch monitoring service, making it easier for admins to log and view data.
The post Amazon Releases New Unified CloudWatch Agent appeared first on Petri.
Continue reading Amazon Releases New Unified CloudWatch Agent
I am working on a state-of-the-art quantification of security, meaning a numerical assessment of security for a system.
In my research, most of the work is not recent (up to 2012 so far) and is really theoretical. Most of t… Continue reading Quantifying security with metrics