NIST Wants Comments on Secure Software Development
okt 15,
2019
The US National Institutes of Standards and Technology recently asked for comments on a new framework for secure software development. Called Mitigating the Risk of Software Vulnerabilities by Adopting a Secure Software Development Framework (SSDF) this framework seeks to aid developers by providing a somewhat universal framework for secure software development. What this framework doesn’t […]
Thinking in the Security Context
okt 7,
2019
What is Thinking in the Security Context? One of the biggest challenges organizations face as they strive to safeguard sensitive information is habituating employees to “thinking in the security context.” This mindset requires workers to be perpetually cognizant that every task they perform, from Internet downloads to paper recycling, has the potential to create corporate […]
Do or Don’t: It Makes a Difference to the Cyber Security Mindset
,
2019
Before I begin the main part of this post, I’d like you to do an exercise for me: pause and close your eyes but do not think of green monkeys! Concentrate on anything else, but do not think of green monkeys, alright? Good. One important aspect of developing security policies and security training is shaping […]
Beware the (Online) Game
,
2019
Playing online games does not really sound like much of a security risk. Whether it is a first-person shooter game, a game where one hunts mythical creatures, an MMORPG, or some sort of simulation, the security concerns often appear minimal. There are two major problems with that idea. The first big issue is that gamers […]
PowerShell DSC
okt 4,
2019
Desired State Configuration (DSC) has been around for a while, but it’s just beginning to take off. There are certain settings changes, such as adding and removing roles and features, that cannot be accomplished easily or at all with Active Directory Group Policy Objects (GPOs). Centrally managed GPOs are furthermore designed for AD domain machines, […]
