To detect and defend against cyberattacks earlier, you need to understand the attackers’ objectives and approach and build defenses accordingly. The Lockheed Martin Cyber Kill Chain is a multi-step model for analyzing attacks and building defenses along with the attack steps. Cyber attacks have become increasingly sophisticated and prevalent. Understanding the methods employed by attackers … Read more
Air Gap is a security concept that meets the highest security requirements. It describes the complete physical and logical isolation of computers from each other and from networks. Information exchange between systems is possible, for example, via transportable storage media. Methods such as side-channel attacks exist to overcome an air gap. What is Air Gap? … Read more
Endpoint Detection and Response is a technology concept and solution to protect and defend against cyber threats from endpoints such as PCs, laptops, tablets, and smartphones or servers. EDR records the behavior of endpoints and analyzes this data. When suspicious behavior is detected, Endpoint Detection and Response provides automated responses to defend against it, such … Read more
Simultaneous Authentication of Equals (SAE) is based on the Dragonfly handshake protocol and enables the secure exchange of keys of password-based authentication methods. In WPA3, SAE replaces the previous methods of negotiating session keys using pre-shared keys and is also used in WLAN mesh implementations. Welcome to the world of Wi-Fi, where we connect to … Read more
A pre-shared key is a key that is used for symmetric encryption methods. In order to encrypt and decrypt data, the pre-shared keys must first be exchanged between the participants involved. Whoever is in possession of the pre-shared key can use the same key to encrypt and decrypt data. Are you tired of your neighbors … Read more
The Point-to-Point Tunneling Protocol (PPTP) can be used to implement virtual private networks over IP-based networks such as the Internet. It is an extension of the Point-to-Point Protocol and is implemented in many operating systems. Due to known vulnerabilities, PPTP is no longer considered secure today. Secure communication plays a vital role in safeguarding our … Read more
Security by Design is a design concept applied in hardware and software development. The security of hardware or software is already considered in the development process and integrated into the complete life cycle of a product. Design criteria include, for example, minimizing the attack surface, using encryption and authentication, and isolating security-relevant areas. Security is … Read more
Common Vulnerabilities and Exposures (CVE) is a standardized list of vulnerabilities and security risks of computer systems. Thanks to the unique naming, the exchange of data about vulnerabilities and security risks is simplified. Sequential numbers uniquely identify the various entries. In the ever-evolving landscape of cybersecurity, vulnerabilities pose a significant threat to the integrity and … Read more
The Common Vulnerability Scoring System (CVSS) is a standard that can be used to uniformly assess the vulnerability of computer systems using a point system from 0 to 10. CVSS is currently available in version 3.1 and recognizes the vulnerability classifications “none”, “low”, “medium”, “high” and “critical”. In cybersecurity, it is crucial to assess the … Read more
IT governance is an essential part of corporate governance and is the responsibility of management. IT governance is used to ensure that IT optimally supports corporate goals and corporate strategy. Information technology (IT) plays a crucial role in the success and efficiency of businesses. However, the increasing reliance on technology also brings forth various challenges … Read more
Information security aims to ensure the confidentiality, integrity, and availability of information. This allows information to be protected against threats such as unauthorized access or manipulation. In the corporate environment, the economic damage is prevented. Information Security is a vital aspect of our increasingly digital world. With the exponential growth of data and the widespread … Read more
Kerberos is a distributed, ticket-based authentication service. It can be used for secure authentication in TCP/IP networks and provides users with tickets to use services. Passwords no longer need to be transmitted over the network. Microsoft uses Kerberos as the default authentication method in Windows-based networks. Kerberos was developed at the Massachusetts Institute of Technology. … Read more
Kali Linux is a Linux distribution specialized in security and penetration testing of IT systems. The distribution includes numerous tools and utilities for performing a wide variety of testing methods. In the ever-evolving cybersecurity landscape, Kali Linux has emerged as a powerful and widely-used operating system designed for penetration testing and ethical hacking. With its … Read more
Wi-Fi Protected Setup (WPS) is a standard of the Wi-Fi Alliance that simplifies the registration process of end devices in an encrypted WLAN. Thanks to WPS, the WLAN password does not have to be configured on the client. There are four different WPS methods. In today’s hyperconnected world, where wireless networks have become an indispensable … Read more
Unified Threat Management refers to a security solution that provides multiple security systems and functions in a single appliance. Components of UTM include firewalls, IDS and IPS systems, antivirus protection, gateways, VPNs, spam filters, and content filters. What is Unified Threat Management? Unified Threat Management (UTM) refers to a comprehensive approach to network security that … Read more
User management is an important task of the administrator. He or she sets up users and user IDs and assigns or revokes access authorizations for IT systems or applications. User administration can be performed directly locally in the system concerned or via an externally connected, centralized database solution. In today’s digital age, user management plays … Read more
The WLAN encryption standard WPA3 (Wi-Fi Protected Access 3) was adopted in June 2018 as an addition to the existing standard WPA2. WPA3 brings significant improvements in authentication and encryption. It is also expected to simplify the configuration of WLAN devices and increase security at public hotspots. In an increasingly interconnected world, securing our digital … Read more
Active Directory is a directory service from Microsoft. With the help of the service, objects and resources in a Windows network can be managed centrally and access can be controlled. The structure of a company or an organization can be reproduced logically with an Active Directory. The delimitation of the different areas is realized via … Read more
Welcome, fellow digital explorers! Have you ever wondered about those secret digital chinks that mischievous hackers exploit? Well, you’re in for a treat! Today, we’re diving headfirst into the fascinating world of security vulnerabilities. Buckle up and get ready for a wild ride as we uncover the hidden truths behind these sneaky weak spots that … Read more
A Threat Intelligence Service provides up-to-date information on the threat situation of IT security due to cyber attacks and other threats. For this purpose, the service collects data from various sources and makes it available in processed form. In today’s complex and rapidly evolving security landscape, ensuring the safety and protection of nations and their … Read more