Smart Meter Issues
A smart meter is a digital metering device used to measure public utility electric power consumption. They typically report their information via a wireless link every fifteen minutes or so.…
Misinformation About Hacking an Encrypted Phone
Recent news has the media atwitter with misinformation about hacking phones and encrypted data. Here are some of the basic issues: Encryption Encryption is the process of using a coding…
Encryption Ensures Privacy
Encryption techniques are mathematically designed to be uncrackable, at least in an amount of time that relates to the value of the secret. This means the time and computing resources…
Tips on Preparing a Blue Team Defense in the CCDC
Here are some tips and thoughts on preparing a blue team defense in the CCDC: Preparation Defensive Strategy Handling Business Injects
Cyberwar Defined
War is violent conflict on a large scale, often involving organizations on a national scale. There are many different forms of war and many different levels. We use the terms;…
FISMA Law vs. Home Email Server
Working for a federal agency that has IT functions regulated by public law and running an email server from home to use for agency business seems problematic, but it may…
APT vs. OODA Security Controls
Advanced Persistent Threat (APT) is a kind of attack comes from a team with advanced skills, deep resources, and specific targets. They use advanced tools and techniques that are capable…
Simple Secure Configuration Management
Configuration Management (CM) has some key controls and processes concentrated in the middle of the SDLC where configuration settings and the configuration baseline are recorded, but the entire process has…
Continuous Monitoring Misunderstood
Network security monitoring includes intrusion detection, audit log correlation and analysis and other methods of detecting failures of our network protections. Continuous monitoring is not the same thing. Continuous monitoring…
Wireless Restrictions
AC-18 WIRELESS RESTRICTIONS (NIST SP 800-53) The organization: (i) establishes usage restrictions and implementation guidance for wireless technologies; and (ii) authorizes, monitors, controls wireless access to the information system. NIST…