Collaborate Disseminate
In your organisation’s advanced threat hunting program;
What are your most interesting datasets you hunt on?
What tools are used to hunt those datasets (are they open source? commercial? proprietary?)
We are trying to map… Continue reading Data sources used in advanced threat hunting programs
I want to discuss the following scenario:
I use a cloud provider like Amazon where every instance of the OS is a VM. The hypervisor launches the VMs as needed. So let’s assume there are two VMs running, mine and attacker’s … Continue reading What are some attacks to consider in a cloud deployment?
I am trying to understand how secure a VM based execution context isolation will be. So lets say, I instantiate a VM on a device and run the intended service in there. Assume that the attacker has physical access to the machi… Continue reading What are some practical attacks against VMs?
Tremendous piece on threat modeling, practiooner behviors, and a book… Tidily wrapped up and ready for examination for the thoughtful Threat Modeler amongst us by the eoponymous Adam Shostack, at his blog. Friday’s Must Read.
The post Threat Ruminat… Continue reading Threat Rumination
Our development teams are getting the hang of STRIDE threat discovery, but one issue that remains is related to threat decomposition.
The way we see threat analysis is that it consists of identifying applicable threats and t… Continue reading When are you done decomposing threats?
My friend just asked me: “why is it actually that bad to put various passwords directly in program’s source code, when we only store it in our private Git server?”
I gave him an answer that highlighted a couple of points, bu… Continue reading Why is storing passwords in version control a bad idea?
I plan on buying a couple of cheap cameras for my home. I plan to put them just inside the doors like the laundry door, I won’t be putting them in the bedroom or living room.
My major concern is how secure are they ? Can it … Continue reading Are unbranded home security camera secure?
I’m looking for templates to use when threat modelling and test scripts. I’ve constructed my own templates but each time I threat model a new system there’s always more question which I haven’t considered before. I was wonder… Continue reading Threat model templates? [on hold]
Permalink
The post Circle City Con 5.0 2018, Kyle Ehmke’s ‘Applying Thermodynamic Principles to Threat Intelligence’ appeared first on Security Boulevard.
Continue reading Circle City Con 5.0 2018, Kyle Ehmke’s ‘Applying Thermodynamic Principles to Threat Intelligence’
Well-crafted by Pinterest User Andrew Becraft, also Here…
Crispin Cowan of Leviathan Security, illuminates a vital component of both Information Security and Cyber Security with superb precision in his post The Calculus of Threat Modeling at the Lev… Continue reading Modeling Threats, The Regalia of Precision