Lockheed Martin Cyber Kill Chain explained

Lockheed Martin Cyber Kill Chain explained

The Lockheed Martin Cyber Kill Chain is a popular model in information security. The model illustrates the typical cyber attack. Like the CIA triad, the Cyber Kill Chain is a fundamental concept that helps people understand what motivates security professionals. Understanding it and being able to explain it makes us more effective at our jobs.

Here’s an explanation of the Cyber Kill Chain, along with a couple of examples, one real, and one imagined.

Read more

What to do when you know a pedophile (and what not to)

Word got out this weekend that a fairly prominent member of my profession is a pedophile. Fortunately I don’t know the guy. But this is hardly the first time this happened. A fairly prominent tech journalist turned out to be a pedophile a couple years ago too. Unfortunately this happens, and unfortunately I came into some experience in this area early in life.

I know from experience, you don’t always know until afterward. If it were easy to know, these people wouldn’t get away with it for so long.

Read more

How long it takes to get a security job with no experience

I was involved in an interesting discussion about how long it takes to get a security job. But here’s an even more important question. How long does it take to get a security job with no experience? That’s a tougher question. I’ll also argue there’s no such thing as no experience. But to keep the search engines happy, here’s how long it takes to get a security job with no experience (except there’s no such thing as no experience!).

Read more

Automatic updates vs managed updates

Automatic updates vs managed updates

Just turning on automatic updates is one of those bumper sticker-style solutions to IT problems that won’t go away. It sounds really good, and of course it would be cheap. And since nobody’s doing it, it sounds like a new idea. As someone who’s been working in this space more than 20 years, I can tell you there’s a reason nobody does it. And it’s a good reason. It’s even a reason most proponents of bumper sticker-style solutions love to cite as a reason not to do something: unintended consequences.

While allowing systems to auto update seems like a cheap way to solve a difficult IT problem, the unintended consequences can be devastating. There are reasons to do automatic updates in limited circumstances, but it’s easy to cause bigger problems than you solve.

Read more

What do Home Depot prices mean? How to decode them

What do Home Depot prices mean? How to decode them

Retailers can and do use prices to manipulate you. But rumors of hidden codes in prices also abound. Home Depot is no exception to that. So what do Home Depot prices mean? Here’s how to find the hidden meaning in prices so you know when you might have found a bargain, and how long that bargain might last.

There are rumors that you can tell how long an item will be on sale from the numbers in the price, but those numbers don’t match what I found at my local store. Still, there are tricks for finding closeouts and other sale items.

Read more