Cyber Defense is Hard and NOT Glamerous

Whereas Hacking is hard but includes a level of cool factor in the world (criminal or ethical). A new report came out yesterday from Rand.org: http://www.rand.org/pubs/research_reports/RR1024.html   It is a PDF that can be downloaded for free and is only 162 pages. http://www.rand.org/content/dam/rand/pubs/research_reports/RR1000/RR1024/RAND_RR1024.pdf    (if you have not noticed, on my site unless the link … Read more

Hackers Find Ways to Attack

It seems to me there is a large disconnect of how a hacker does their work. There are lot of youtube videos with hackers showing how they have hacked something. How can hackers seemingly get in complicated defenses? (not all hackers are criminal in nature)   The following shows some of the combinations within a … Read more

Cisco VNI Says 3x More Data by 2019

  Cisco’s survey of Global network traffic is being reviewed by Network Daily, so I thought I would discuss some of its ramifications for IT security. White paper link: http://www.cisco.com/c/en/us/solutions/collateral/service-provider/visual-networking-index-vni/white_paper_c11-520862.pdf   Network World Link: “Cisco Sees Internet Half Full” http://www.networkworld.com/article/2928657/cisco-subnet/cisco-sees-internet-half-full.html 24 Billion devices will be on the Internet by 2019 up from 14 Billion in 2014.   … Read more

Are We Falling Behind on Patching Computers?

I.e. Bruce Schneier quote: Can we patch vulnerabilities faster than attackers can exploit them?   The University of maryland, College park has a website project: https://www.umiacs.umd.edu/~tdumitra/blog/2015/04/15/impact-of-shared-code-on-vulnerability-patching/ In my opinion the crux of their vulnerability survey is in this graph(also from Univ of Maryland link):   The end result of this survey was that how long vulnerabilities … Read more