In one of my previous roles, I had the great opportunity to travel around the world meeting customers to understand their challenges in vulnerability management. The two biggest challenges they wanted solved were: Help me prioritize which of these vulnerabilities are most critical, and Help me close the loop with my patching solutions to remediate […]
There are numerous security use cases where the integration of network packet data provides additional contextual information for better actionability. Free and open source packet capture tools do a great job capturing packets, but how do you collect, aggregate, and analyze that data at scale? Let’s start with a quick review of packet capture tools, […]
Data breaches are becoming more costly. According to the 2019 Cost of a Data Breach Report, the average total cost of a data breach is $3.92 million, up 12% over the past five years. The average size of a data breach is 25,575 records, up 3.9% from the previous year. With these continued increases, how […]
We’re all familiar with the Open Web Application Security Project (OWASP) Top 10 Web Application Security Risks. Not only have organizations used this list to adopt new development practices to produce more secure code, but security vendors have built products to detect and prevent these top attacks. But what happens when an attacker uses your […]
We’ve all heard the phrase “the network never lies”, but as more organizations adopt cloud computing, getting access to the network in the cloud has been challenging. Initially, cloud services, such as AWS CloudWatch and AWS CloudTrail, allowed you to collect logs, events, and metrics from your cloud environment, but not network packets or flows. […]
We’ve been scanning for vulnerabilities for a very long time (over 20 years for me), but the shift away from device vulnerabilities to application vulnerabilities creates some new challenges. Applications in the modern, digitally transformed world are much more complex. They include open source components and custom code, are deployed in containers, and run in […]
(This post provides an overview of vulnerability assessment and penetration testing activities. For a deeper dive into advanced penetration testing techniques and the latest security research tune-in to Paul’s Security Weekly.) Over the decades, many have inaccurately described vulnerability assessments as penetration tests. What is the difference between a vulnerability assessment and a penetration test? […]
The integration of development, security, and operations, known as DevSecOps, has been a hot topic over the past few years. The benefits of implementing DevSecOps, such as better code quality, increased velocity, and reduced risk, has its advantages, but how do you effectively integrate security into the existing DevOps process? Shifting security left is easier […]
“Hacking is satisfying one’s curiosity. Hacking is finding a way to accomplish a goal, never accepting no for an answer, and being more persistent and patient than anyone else. Hacking is pushing technology to its limits and making technology more resilient through testing, tinkering, and exploration. Hacking is a mindset, a culture, a spirit, and […]
While everyone else talks about 2020 predictions and New Year’s resolutions, let’s start the year with some practical and useful information…
