An intrusion prevention system, abbreviated IPS, is able to detect attacks on networks or computer systems and to take automatic defensive measures. It provides additional protection compared to conventional firewall systems. An Intrusion Prevention System (IPS) clearly differs from an Intrusion Detection System (IDS) in some functions. Cybersecurity is of utmost importance to protect our … Read more
An intrusion detection system, abbreviated IDS, is able to detect and inform about attacks directed at computers, servers, or networks. Often the Intrusion Detection System complements the usual functions of a firewall. Network security plays a critical role in safeguarding organizations from cyber threats. One essential component of network security is an Intrusion Detection System … Read more
A firewall is a system that is capable of analyzing data traffic. It protects IT systems from attacks or unauthorized access. The firewall can be a dedicated hardware or software component. Literally translated, firewall means “firewall”. The term refers to an IT system that can analyze, forward, or block data traffic. This enables the firewall … Read more
WPA2 (Wi-Fi Protected Access 2) has been the successor to WPA since 2004. Among the most important changes compared to WPA is the use of the AES encryption method. WPA2 eliminates the vulnerabilities of WPA that were discovered and is still considered very secure when a strong password is used, despite known attacks. In our … Read more
BSI Standard 200-1, along with Standards 200-2 and 200-3, is an elementary component of the BSI’s IT-Grundschutz methodology. It defines the general requirements for information security management systems (ISMS – information security management systems) and is compatible with ISO standard 27001. The aim of the BSI standard is to make the business processes of companies … Read more
Stateful Packet Inspection is a dynamic packet filtering technique for firewalls that, in contrast to static filtering techniques, includes the state of a data connection in the inspection of packets. It detects active TCP sessions and can allow or block data packets based on the session state. SPI provides higher security for firewall inspection and … Read more
A wireless intrusion prevention system can detect and defend against attacks and unauthorized access to a WLAN. It provides additional protection for the wireless network environment. The WIPS consists of several components and uses sensors to monitor the wireless network. What is WIPS (Wireless Intrusion Prevention System)? The acronym WIPS stands for Wireless Intrusion Prevention … Read more
Endpoint Security protects the various endpoints in a network from various threats. Technical and organizational measures prevent unauthorized access to devices or the execution of malicious software. Endpoint protection ensures that the end devices achieve the desired level of security. Endpoint security refers to the measures and practices implemented to secure the various endpoints in … Read more
Secure Access Service Edge (SASE) is an architectural concept that provides WAN services and security functions as a combined cloud-based solution. The security functions operate at the network edge. They replace centralized security concepts, for example, via virtual private networks. Identity- and context-based access mechanisms are in place for users, applications, and devices. What is … Read more
Security Information and Event Management (SIEM) provides a holistic view of IT security by collecting and evaluating messages and log files from various systems. Suspicious events or dangerous trends can be detected in real-time. Organizations face increasing threats to their information systems and data security in today’s interconnected digital landscape. As cyberattacks become more sophisticated, … Read more
A CA (Certificate Authority or Certification Authority) is a trusted entity, a certification authority that issues digital certificates. Certificates are used to certify the electronic identity of communication partners. CAs form the core of the public key infrastructure and assume the role of trust centers. In the world of cybersecurity, certificate authorities (CAs) play a … Read more
ISACA is an independent, globally active professional association. It was founded in 1969 as the Information Systems Audit and Control Association and today operates only under the acronym. The professional association is intended for auditors, IT auditors, and professionals working in the areas of IT governance and information security. Currently, the association offers eight different … Read more
A DDoS attack attempts to cause the unavailability of Internet service through a deliberately induced overload. Usually, botnets consisting of a multitude of individual systems are used for the attack. The target of the attack can be servers or other network components. DDoS attacks have become increasingly common in today’s digital landscape, posing significant threats … Read more
In a penetration test, IT systems or networks are subjected to a comprehensive examination designed to determine their susceptibility to attack. A pentest uses methods and techniques that real attackers or hackers use. In today’s digital landscape, where cyber threats are on the rise, organizations need to be proactive in identifying vulnerabilities in their systems … Read more
The abbreviation WEP means Wired Equivalent Privacy and stands for the oldest standard for encryption and authentication in a WLAN according to IEEE 802.11. It dates back to 1999 and is now considered technically outdated and insecure. What is WEP? Wired Equivalent Privacy, or WEP for short, is a protocol for WLAN encryption that offers … Read more
An exploit reveals security vulnerabilities in software and enables their exploitation. Exploits provide a tool for hackers to penetrate and manipulate computer systems. They can also be used to eliminate vulnerabilities. In the realm of cybersecurity, understanding the concept of an exploit is paramount. Exploits play a significant role in both offensive and defensive strategies, … Read more
To detect and defend against cyberattacks earlier, you need to understand the attackers’ objectives and approach and build defenses accordingly. The Lockheed Martin Cyber Kill Chain is a multi-step model for analyzing attacks and building defenses along with the attack steps. Cyber attacks have become increasingly sophisticated and prevalent. Understanding the methods employed by attackers … Read more
Air Gap is a security concept that meets the highest security requirements. It describes the complete physical and logical isolation of computers from each other and from networks. Information exchange between systems is possible, for example, via transportable storage media. Methods such as side-channel attacks exist to overcome an air gap. What is Air Gap? … Read more
Endpoint Detection and Response is a technology concept and solution to protect and defend against cyber threats from endpoints such as PCs, laptops, tablets, and smartphones or servers. EDR records the behavior of endpoints and analyzes this data. When suspicious behavior is detected, Endpoint Detection and Response provides automated responses to defend against it, such … Read more
The acronym LOLBAS stands for a method that misuses existing programs on a computer, for example, programs of the operating system, for malicious functions, or for malware. The LOLBAS project collects information about usable binaries, scripts, or libraries and makes them publicly available on the Internet. Defending against such attacks on computers can be difficult. … Read more