ITSecurity Training

According to TonyZ (Fixvirus.com) DefCon23  100 talks and pdf’s I chose 3  to focus on:   Added a fourth later in day :). Created a separate post with another-5th: http://oversitesentry.com/defcon-talk-your-domain-is-compromised-now-what/ )   Risk  discussion: Bruce Potter  A hacker’s Guide to Risk Risk”vs.”Threat”vs.”Vulnerability Risk”tends”to”be”bigger/more”general”than”threat.” Multiple”threats”can”role”up”in”to”a”single”risk Threats”rely”on”vulnerabilities”to”be”realized and more good risk info… to come. WiFi IDS/Firewall for windows: Vivek Ramachandran There is … Read more

Do you know the Heisenberg Principle?  Or more precisely “The Uncertainty Principle” https://www.aip.org/history/heisenberg/p08.htm The more precisely the position is determined, the less precisely the momentum is known in this instant, and vice versa. –Heisenberg, uncertainty paper, 1927You can’t completely measure stuff. Does this apply to network traffic? I am talking about measuring the characteristics of … Read more

My own criteria list, although using ideas from a 2012 discussion of NGFW InformationWeek-NetworkComputing: #1 Profitability and longevity.  You don’t want to buy a firewall and then have the company have financial problems even 5 years down the road.  (so startups need not apply – sorry) #2 Speed throughput – we have to be capable … Read more

http://oversitesentry.com/cisco-vni-says-3x-more-data-by-2019/ Above image is from my post May 31, 2015 – as Cisco surveyed data traffic 2014-2019 (going up – Internet traffic will triple) We know there will be more Internet traffic in the future, so how much do we spend on securing our networks?     To keep it simple, let’s pretend there is a … Read more

https://ics-cert.us-cert.gov/sites/default/files/ICSJWG-Archive/F2012/D1_PM2_Tr1_Ginter_wf-13-ways-icsjwg-2012-d2.pdf Andrew Ginter  has an interesting presentation (Director of Industrial Security – Waterfall security Solutions) Notice how in an ICS (Industrial control System)  environment there are firewalls seperating different networks from the plant floor (the device floor has PLC’s) But let me dispel some notions here, an ICS environment includes this Picture from threatpost.com  which looks … Read more