What the Jolly Roger Telephone Company and the LaBrea honeypot can teach us about designing security controls.
Watch more videos on my YouTube channel.
Archive for February, 2017
Stuck in Traffic – What to test when doing drills
Posted byIncident Response exercises. Business continuity drills. You might wonder, what’s all in the test? Here’s a starter agenda.
Watch more videos on my YouTube channel.
Stuck in Traffic – Protecting Public Access Computers
Posted by“If a bad guy has unrestricted physical access to your computer, it’s not your computer anymore.” It’s an immutable law of security. The defensive trick is in the word is “unrestricted.”
Watch more videos on my YouTube channel.
Stuck in Traffic – Cheating, aka, Testing Beyond Controls
Posted byWeakening one control in a penetration test so that we can evaluate the redundancy of controls along the attack path.
Watch more videos on my YouTube channel.
Stuck in Traffic – Baselining Configurations
Posted byFirewalls, routers, and switches. Oh my! Adding some automation to baselining.
Watch more videos on my YouTube channel.
Stuck in Traffic – Physical Security is a Thing
Posted bySo, my computer was locked and my office was locked. Was.
Watch more videos on my YouTube channel.
Stuck in Traffic – Frequently asked Questions
Posted byCouple questions and answers on how to build a security program and on what products to use. Spoiler alert: I don’t recommend what products you should buy.
Watch more videos on my YouTube channel.