New "Geeking Out" Interview Series
In case you didn't know, I have been hosting a series of "Geeking Out..." interviews, with a couple of my friends in the industry. What I want to do with the series is conduct focused interviews with practitoners who are out there dealing with the tough problems in our field; I'll ask them what works and what doesn't and why, and we'll all get a chance to learn and have an interesting conversation.
The series is being done as a webinar and audio will be available after the webinar. Since it's a webinar, there's an opportunity for listeners to ask questions. We'll almost certainly never be able to answer all your questions on the air due to time constraints, so I'll occasionally do blog postings with some of your questions. I can't guarantee I'll answer every question.
The "Geeking Out..." series began with Ron Dilley, and will continue with a second session with Ron on April 3rd in which we'll be talking about detection algorithms and the problem of defining "normal" network activity. After that, I'll be interviewing on...
June 4 - Joel Yonts and geeking out with Joel about his malware response process, how he built his analysis team, what tools they use, and other related topics.
August 22 - Alex Hutton and I will do a session about metrics and measurements for security and talking about the infrastructure he's built for the bank where he works and what kind of actionable data he passes to whom, and why.
October 17 - Gary McGraw and I will geek out about the problem of measuring a topic that's still "squishy" for the last session in the series. Gary's the brains behind some innovative programs in software quality and security - a topic we might consider difficult to measure - and we'll be digging into that angle to see if there are any nuggets we can use for security practices as well.
My sincere apologies for managing to not attend my own webinar Feb. 19. I was calling in from a hotel in Germany and checked everything beforehand and it all looked OK - but when the time came to log into the webinar and give my moderator's PIN, the hotel's phone interpreted one of the PIN codes as the signal to hang up! So I was running around trying to get a direct connection, but it all took too long and Allan was able to step in for me and did a great job. I hope you can attend... I'm extremely enthusiastic about the program we'll be presenting!
mjr.
Related Articles
Cybersecurity Snapshot: Guide Unpacks Event-Logging Best Practices, as FAA Proposes Stronger Cyber Rules for Airplanes
August 23, 2024Looking to sharpen your team’s event logging and threat detection? A new guide offers plenty of best practices. Plus, the FAA wants airplanes to be more resilient to cyberattacks. Meanwhile, check out the critical vulnerabilities Tenable discovered in two Microsoft AI products. And get the latest on ransomware trends, vulnerability management practices and election security!
Taking IBM QRadar SIEM One Step Further Using Tenable.ad
September 30, 2021If you can't continuously monitor Active Directory, it's impossible to achieve full visibility into your evolving attack surface. Here's how combining Tenable.ad with IBM QRadar can help. It's no sec...
Recap: Geeking Out II with Marcus
April 15, 2013Ron and I spent most of the webcast rotating around the theme of detection algorithms: how do you determine what is normal and what is not? We started off with one of my favorite questions, "Are there...
Cybersecurity Snapshot: Prompt Injection and Data Disclosure Top OWASP’s List of Cyber Risks for GenAI LLM Apps
November 22, 2024Don’t miss OWASP’s update to its “Top 10 Risks for LLMs” list. Plus, the ranking of the most harmful software weaknesses is out. Meanwhile, critical infrastructure orgs have a new framework for using AI securely. And get the latest on the BianLian ransomware gang and on the challenges of protecting water and transportation systems against cyberattacks.
Active Directory Under Attack: Five Eyes Guidance Targets Crucial Security Gaps
November 21, 2024A landmark global report from cybersecurity agencies emphasizes 17 attack techniques against Microsoft Active Directory and cautions organizations to step up protections. In the first of our two-part series, we offer five steps you can take today to shore up your AD defenses.
Five Cyber Agencies Sound Alarm About Active Directory Attacks: Beyond the Basics
November 21, 2024A landmark global report emphasizes 17 attack techniques against Microsoft Active Directory and cautions organizations to step up protections. In the second of our two-part series, we take you beyond the basics to highlight three key areas to focus on.
- Event Monitoring
- Log Analysis
- Security Interviews