Best Practices for using Splunk Enterprise for compliance
I have listed these best practices below in table format with more detail on the “why” then what is in the session slides. It’s more around “I need to measure technical controls in Splunk” versus “I want to use Splunk for general threat detection/response”, even though the latter typically is a part of compliance. Credit…
The 7 Types Of Security Jobs, According To NIST
Making sense of the complex. That’s what NIST’s National Initiative for Cybersecurity Education (NICE) aims to do in developing the draft NICE Cybersecurity Workforce Framework (NCWF). Bill Newhouse, NICE deputy director and lead author of the draft document, said in developing the NCWF, NIST synthesized the diverse field of cybersecurity by identifying seven categories of…
Getting Primed to Adopt Cognitive Security Solutions
President Barack Obama recently sat down for an interview on emerging technologies with Wired Magazine. “Traditionally, when we think about security and protecting ourselves, we think in terms of armor or walls,” he said. “Increasingly, I find myself looking to medicine and thinking about viruses, antibodies … It means that we’ve got to think differently…
Tip of the week: How to delete unwanted programs
Generally speaking, programs you don’t want — the bloatware that came with your computer or piggybacked on software updates, for example — often are not really dangerous. Nevertheless, they may be a drag in various ways, launching unwanted processes and slowing down your system, tracking your movements online and sending personal data to software developers….
Ongoing Use of Windows Vista, IE8 Pose Huge Enterprise Threat
A new report highlights the high number of users still operating outdated Windows operating systems and unsupported browsers. This represents a huge threat to the organizations whose users access company networks from insecure laptops and home computers within the growing adoption of BYOD policies. Duo Security reports that 65% of its clients’ Windows users are…
Researchers build undetectable rootkit for programmable logic controllers
Researchers have devised a new malware attack against industrial programmable logic controllers (PLCs) that takes advantage of architectural shortcomings in microprocessors and bypasses current detection mechanisms. The attack changes the configuration of the input/output pins that make up the interface used by PLCs to communicate with other devices such as sensors, valves, and motors.
IDG Contributor Network: 6 steps to creating a culture of security ownership
The state of corporate cyber-security is anything but static. With the list of potential threats diversifying, the stakes are high for securing company systems and data. As the average cost of a data breach grows (currently estimated at $4 million), business leaders’ appetite for risk lessens. And yet fewer than half of information security professionals…
PCI 3.2 Compliant Organizations Are Likely GDPR Compliant
PCI DSS version 3.1 will be retired on October 31, 2016, with version 3.2 being the only valid version beginning the 1st of November. From that date, any new validation of PCI compliance will have to be against version 3.2. The new requirements will, however, be considered ‘best practices’ until Feb. 1, 2018 when they…
What can we do about the critical cybersecurity skills shortage?
Tech-savvy youth could plug a widening skills gap as employers seek to combat the growing threat of cybercrime and avert mass disruption to public and private lives. But the industry is failing to provide a clear path for young people to find work, hone their skills, and serve society. Instead, they are being tempted to…
Black Hat Europe 2016 S: How Artificial Intelligence Will Liberate Security
T. Kuhn’s The Structure of Scientific Revolution outlined an episodic model in which periods of “normal science” were interrupted by periods of “revolutionary science.” It challenges us as a society to consider new paradigms, to change the rules of the game, our standards and our best practices. The advent of applied Artificial Intelligence (AI), also…