MIS 5212-Advanced Penetration Testing

MIS 5212 - Section 001 - Wade Mackey

Fox School of Business

Marcus A. Wilson

How Innovative Companies Lock Down Data

by Leave a Comment

How Innovative Companies Lock Down Data
http://www.darkreading.com/endpoint/how-innovative-companies-lock-down-data-/a/d-id/1328589?

This is an interesting article that discusses companies that are going “back to the basics” on security measures of protecting data while trying to incorporate the newest methods as well. The author discusses the old measures such as enforcing complex passwords, encryption standards, and disaster recovery readiness as the old but still important measures. He also mentions the new direction that companies are going in such as preventing attacking within applications, real-time monitoring, and using deep learning with cybersecurity analytics. A mixture of old reliable methods with new techniques are definitely needed to face the ever-changing security threats.

Blockchain’s New Role In The Internet of Things

by 1 Comment

Blockchain’s New Role In The Internet of Things

http://www.darkreading.com/iot/blockchains-new-role-in-the-internet-of-things/a/d-id/1328239

This article discusses the use of distributed consensus algorithms that combine both performance and security to prevent DDoS attacks such as the Mirai botnet attack that took down Dyn in October. Due to the large number of IoT devices the severity of DDos attacks have increased. By using a distributed consensus architecture you can prevent the attacker from targeting a single server and making them target several servers. This technology is currently used in Bitcoin and other transactional technology but due to performance restraints it hasn’t been a reliable option for DDos defense. However, there are firm developing distributed consensus technology that can handle the performance and security demands.

How I Would Hack Your Network (If I Woke Up Evil)

by Leave a Comment

Interesting article that discusses how most cyber attacks are not overly complicated. It outlines a high level approach on how the author would carry out a simple hack to a network. The author mentions some of the topics that we have been discussing in class such as using very basic social engineering based of simple reconnaissance from users’ social media sites. For example, targeting a user that shows a strong political interest throughout their posts. Sending a phishing email that attacks this interest. He also mentions using pivoting and password spraying to try and gain access to any external facing servers.

http://www.darkreading.com/cloud/how-i-would-hack-your-network-(if-i-woke-up-evil)-/a/d-id/1327985?