[Original] Cyber Warrior's Cybersecurity PRISM

Details: Written by: Meena; Category: Cybersecurity PRISM

While you might like to think your networks are perfectly maintained and documented, the reality is sometimes you lose track. In some cases, your network can grow so quickly you may have trouble keeping up. The solution to this issue is using a network discovery tool to ensure your network structure is always documented.

Details: Written by: Meena; Category: Cybersecurity PRISM

An IOC is a piece of forensic data that has the potential to identify malicious activity on a system. In other words, an IOC is a red flag that alerts threat hunters to a potential threat.

Common IOCs that are useful for external intelligence include static ones like registry keys and IP status domains. The best way to identify if these IOCs are present is checking against the firewall or antivirus.

Details: Written by: Meena; Category: Cybersecurity PRISM

What is an IoT device?

A network connected electronic device that senses or interacts with an internal state or the external environment, including operational technology (O T) devices that monitor and control equipment or their processes. These devices are all targets for attackers, and often aren't maintained by IT, unlike computers and phones that are managed by agents.

Details: Written by: Meena; Category: Cybersecurity PRISM

In the world of cybersecurity, there are many roles to play. While those roles can vary, there is also the NICE (National Initiative for Cybersecurity Education) Cybersecurity Workforce Framework to tie them together. This framework includes seven categories that describe cybersecurity work and workers. You can apply the NICE Framework to any sector — public, private or academia.

Details: Written by: Meena; Category: Cybersecurity PRISM

The rapid development of technology and the use of digital devices such as mobile phones, computers and tablets, which have become an indispensable part of modern society, have resulted in a significant transition from the creation of physical to digital data.

Details: Written by: Meena; Category: Cybersecurity PRISM

90% of sensitive data theft is from servers. Why? This is because most sensitive data are stored in servers. As the famous bank robber Willie Sutton once said “Why do I rob banks? Because that is where the money is!”

Details: Written by: Meena; Category: Cybersecurity PRISM

In Role-Based Access Control, roles are an intermediate layer between users and the permissions to execute certain operations.

Operations can be well-formed transactions with built-in integrity checks that actually mediate the access to protected objects or resources. Then, users are assigned roles and are made authorised to execute the operations linked to their active role.

Details: Written by: Meena; Category: Cybersecurity PRISM

A surprising amount of surveillance happens to us automatically, even if we do our best to opt out. It happens because we interact with others, and they’re being monitored.

Even if I never post or friend anyone on Facebook—I have a professional page, but not a personal account—Facebook tracks me. It maintains a profile of non-Facebook users in its database. It tracks me whenever I visit a page with a Facebook “Like” button.

Details: Written by: Meena; Category: Cybersecurity PRISM

Imagine someone breaking into your home, finding your jewelry, locking it in an impenetrable chest in the middle of your home, then leaving with the key after placing a ransom note. If you contact the burglar and pay the ransom note, he will give you the key to unlock the chest and get to your jewelry. Otherwise, good luck breaking the chest. You know all your valuables are there, but you simply can’t use them. Ransomware acts in a similar way, except that it goes after your files and data.

Details: Written by: Meena; Category: Cybersecurity PRISM

The 128-bit IPv6 addressing format offers 340 sextillion IP addresses, making it extremely future-proof. But, that’s not all; IPv6 is also considered a protocol of better reliability, security and privacy. Also, IPv4 packets are often blocked by corporate firewalls because they could potentially carry malware.

Details: Written by: Meena; Category: Cybersecurity PRISM

You can think of Security as a Service (SECaaS) as an umbrella term.

SECaaS is made up of a variety of solutions that offer end-to-end protection when combined with managed security services. These solutions include: Intrusion Detection and Prevention, Security Information and Event Management (SIEM), Identity Management, Email Security, and Vulnerability Solutions.