Collaborate Disseminate
What does look for when analyzing the security of an SoC? Lets say its something like an Alexa or a Nest thermostat. How would you answer that question? This is an interview question obviously. (So may be it will be closed.
… Continue reading Analyzing security of an SoC (System on Chip)
Permalink
The post NDC Security 2018, Aaron Bedra’s ‘Adaptive Threat Modeling’ appeared first on Security Boulevard.
Continue reading NDC Security 2018, Aaron Bedra’s ‘Adaptive Threat Modeling’
I know someone who works at a medium-sized company (between 1000 and 10,000 employees) and is somewhat chagrined that several intranet Windows web servers (SharePoint, internal apps, etc.) continue to authenticate Windows dom… Continue reading Convince an executive to mandate HTTPS use on Intranet web servers
Many are shaming the Hawaii Emergency Management Agency for keeping passwords on post-its, but the practice isn’t always a terrible idea. Continue reading Go Ahead and Put Your Password on a Post-It Note
What is the risk in the following scenario:
A bank wants to use an ATM pin (debit card and/or credit card) as an additional form of authentication after the customer logs in to her online/mobile banking platform
As the bank… Continue reading What is the risk of reusing the ATM Pin elsewhere when they tie to EMV cards?
I have data on attack patterns which has various attributes like severity of attack, attackers skill, attack likelihood all in the form of linguistic values like high, medium and low. I want to develop a metrics for prioritiz… Continue reading developing a metrics for prioritizing attack patterns based on a database for attack patterns(CAPEC)
We’re currently constructing a security development lifecycle in our software development corporation. Our main idea is to have an asset-driven approach, where we:
Enter assets into an asset inventory as the system is const… Continue reading Granularity for data assets when determining risk during software development
I am doing a PhD in design for cybersecurity / safety domain and I am having troubles to put the correct words on an idea I had.
Given some threats against a system, let’s assume we have identified the components / functions… Continue reading Modeling for security analysis
In my opinion, arguments we have been using for years to say that public Wi-Fi access points are insecure are no longer valid, and so are the recommended remedies (e.g. use VPN).
Nowadays, most sites use HTTPS and set HSTS headers, so the… Continue reading Is public Wi-Fi a threat nowadays?
I am wondering what points should I consider in setting up safe and private environment. Currently I am looking on Windows 10 machine.
If there is a list of such a points please let me know, I would be thankful for link list… Continue reading The points the ideal model must to consider (most private and safest Windows 10 as is possible) [on hold]