ActiveCyber
8Oct

Active Cyber Crosswalks EO 14028

Posted by: CyberSecurityChief Categories: Spotlight Spotlight - Cybersecurity News & Events Spotlight - Research & Standards
1 Comment

In my last article on the EO 14028 I mentioned that I thought there were several parallels between what the EO was calling out and some of the concepts and technologies that I discussed in my interviews and articles over the last 6 years. I constructed this crosswalk to reflect these relationships. I also added […]

Read more
Tags:
4Oct

Active Cyber Reviews Executive Order 14028 – Improving the Nation’s Cybersecurity

Posted by: CyberSecurityChief Categories: Spotlight Spotlight - Cybersecurity News & Events
1 Comment

Early this past summer 2021 a friend of mine was asking me about Executive Order 14028 on Improving the Nation’s Cybersecurity and I had to admit that I had largely ignored it. Frankly, I have experienced many similar bureaucratic moves in the past when it comes to cybersecurity and none seemed to have the impact that was […]

Read more
Tags:
9Jul

What Roles Do Provenance and Reputation Play in “Authentic-By-Design” Approaches to Digital Content?

Posted by: CyberSecurityChief Categories: Authenticity Spotlight - Research & Standards
No comments

People make decisions every day that involve risk and uncertainty. Generally, we reconcile a variety of decision models using risk criteria often provided by organizational policies and/or guided by a variety of personal belief and trust systems. Many times we are forced to address ambiguous situations in uncertain ways, using uncertain terms and with uncertainty […]

Read more
Tags:
16Apr

Enabling Authenticity and Trust in the IoT Age Using Decentralized Systems

Posted by: CyberSecurityChief Categories: Authenticity
No comments

It has been over 30 years since the the web was introduced, and most of us are facing critical problems involving the security and privacy of our digital identity, our personal data, and the authenticity of content on the Internet. These problems include widespread spam, phishing attacks, fraud, abuse, fake news and misinformation. According to […]

Read more
Tags:
11Feb

Authenticity-by-Design: Ensuring the Authenticity of Content and Identity

Posted by: CyberSecurityChief Categories: Authenticity Spotlight Spotlight - Research & Standards
1 Comment

Current Security Trends Reveal Difficulties in Assuring Authenticity Recently I was thinking about some of the major security challenges and problems of 2020 and going forward into 2021 like the ongoing SolarWinds supply chain mitigation issues; election fraud; the problems around disinformation and deepfakes; false flags in cyberattacks and the difficulties in making accurate attribution; […]

Read more
Tags:
5Jan

Orchestration for OT Systems – Is the Time Right?

Posted by: CyberSecurityChief Categories: Articles Automated Orchestration Operational Technology
1 Comment

My journey into OT security has led me to the question of can we safely operate automated security orchestration platforms in an OT environment or a converged OT/IT environment? I mean many OT systems are already highly automated operations. What are the ramifications of providing security responses in a highly automated manner? I learned that […]

Read more
Tags:
10Nov

Using MBSE and Digital Twins to Design and Evaluate Cyber Resilient Systems

Posted by: CyberSecurityChief Categories: Operational Technology
1 Comment

This election year spurred me into researching the cyber resilience of OT / IoT systems, of which electronic election systems are a subset. I discovered there was quite a bit of synergy between cyber resilience and mod-sim. As I explored the relationship I became convinced that any OT or IoT system of consequence could significantly […]

Read more
Tags:
17Jun

Active Cyber Surveys the Standards Landscape for OT and IoT Systems Security

Posted by: CyberSecurityChief Categories: Articles Operational Technology Spotlight - Research & Standards
1 Comment

A Plethora of Standards and Guidance for OT / IoT Security In my research into OT and IoT systems security, I have come across a plethora of guidance and standards from various organizations and standards bodies. To some extent, this wide range of guidance is difficult to get your arms around to figure out what […]

Read more
Tags:
30Apr

Measuring the Cyber Resiliency of OT and IT Systems

Posted by: CyberSecurityChief Categories: Spotlight Spotlight - Research & Standards
3 Comments

Recently, I was talking with my daughter, the engineer, about testing. She is the lead engineer for payload integration and test for a large NASA space telescope. Our discussion got me to thinking about cyber testing and test metrics. From her space telescope perspective, it is very expensive to conduct tests, with some tests requiring […]

Read more
Tags:
« Older posts
Newer posts »