Collaborate Disseminate
As the perimeter shifts to the user and application, traditional network-based data loss prevention solutions are no longer effective. There is no longer a central network egress point to control the flow of data, as users, and the applications they ac… Continue reading Insider Threat Management – Detect and Respond to Data Exfiltration
As the perimeter shifts to the user and application, traditional network-based data loss prevention solutions are no longer effective. There is no longer a central network egress point to control the flow of data, as users, and the applications they ac… Continue reading Insider Threat Management – Detect and Respond to Data Exfiltration
We have a requirement where we are creating an user generation page over internet for various vendors.
This was earlier done by our operations team on intranet. For each vendor to create a unique ID that was used for various… Continue reading Authorization over Internet without storing user details
Videography Credit: Irongeek (Adrian Crenshaw, et. al). Please visit Irongeek for additional videographer credits and important information. Enjoy!
Permalink
The post BSides Columbus 2019, Isaiah Sarju’s ‘How Online Dating Made Me Better At… Continue reading BSides Columbus 2019, Isaiah Sarju’s ‘How Online Dating Made Me Better At Threat Modeling’
Adam Shostack mentioned on his last talk that he sees recently more people using Kill Chain threat modeling but how does it differ from STRIDE threat modeling?
https://youtu.be/ZoxHIpzaZ6U?t=2577
Continue reading What is the difference between Kill Chain and STRIDE threat modeling? [on hold]
Recently, I see so many emerging vendors that are advertising their use of zero-trust. What potential risks are we exposed to if we shift to zero-trust in our bank?
Continue reading Is the zero trust approach really so safe? [closed]
What questions to ask to scope an application threat modeling effort? Some questions which I could think of:
How many design documents and architecture diagrams are required to be reviewed?
How many key stakeholders are req… Continue reading Application Threat Modeling Scoping [on hold]
I am an Information Security Analyst, trying to understand the difference between data in transit and data in motion. I found the listed below definitions:
Data In Transit is defined as data moving outside of the server such… Continue reading Security controls around data in motion?
And, here’s Adam’s sldies, Enjoy.
The post Blackhat 2018, Adam Shostack’s ‘Threat Modeling In 2018’ appeared first on Security Boulevard.
Continue reading Blackhat 2018, Adam Shostack’s ‘Threat Modeling In 2018’
Our manager often asks us for a quick understanding of what the risks will be based on some idea that the department has been working on during the ideation phase (the business requirements are generally written but no impla… Continue reading How to create non-generic security requirements for an idea phase?