Collaborate Disseminate
A pressing challenge throughout 2019 is cybersecurity professionals must manage industry shifts as they protect security infrastructures. These industry trends and issues are compounded by a lack of visibility into the location and security of data inv… Continue reading Threat Modeling: Protecting Security Infrastructures in 2019
As the perimeter shifts to the user and application, traditional network-based data loss prevention solutions are no longer effective. There is no longer a central network egress point to control the flow of data, as users, and the applications they ac… Continue reading Insider Threat Management – Detect and Respond to Data Exfiltration
As the perimeter shifts to the user and application, traditional network-based data loss prevention solutions are no longer effective. There is no longer a central network egress point to control the flow of data, as users, and the applications they ac… Continue reading Insider Threat Management – Detect and Respond to Data Exfiltration
We have a requirement where we are creating an user generation page over internet for various vendors.
This was earlier done by our operations team on intranet. For each vendor to create a unique ID that was used for various… Continue reading Authorization over Internet without storing user details
Videography Credit: Irongeek (Adrian Crenshaw, et. al). Please visit Irongeek for additional videographer credits and important information. Enjoy!
Permalink
The post BSides Columbus 2019, Isaiah Sarju’s ‘How Online Dating Made Me Better At… Continue reading BSides Columbus 2019, Isaiah Sarju’s ‘How Online Dating Made Me Better At Threat Modeling’
Adam Shostack mentioned on his last talk that he sees recently more people using Kill Chain threat modeling but how does it differ from STRIDE threat modeling?
https://youtu.be/ZoxHIpzaZ6U?t=2577
Continue reading What is the difference between Kill Chain and STRIDE threat modeling? [on hold]
Recently, I see so many emerging vendors that are advertising their use of zero-trust. What potential risks are we exposed to if we shift to zero-trust in our bank?
Continue reading Is the zero trust approach really so safe? [closed]
What questions to ask to scope an application threat modeling effort? Some questions which I could think of:
How many design documents and architecture diagrams are required to be reviewed?
How many key stakeholders are req… Continue reading Application Threat Modeling Scoping [on hold]
I am an Information Security Analyst, trying to understand the difference between data in transit and data in motion. I found the listed below definitions:
Data In Transit is defined as data moving outside of the server such… Continue reading Security controls around data in motion?
And, here’s Adam’s sldies, Enjoy.
The post Blackhat 2018, Adam Shostack’s ‘Threat Modeling In 2018’ appeared first on Security Boulevard.
Continue reading Blackhat 2018, Adam Shostack’s ‘Threat Modeling In 2018’