Moving Up the Stack — Security Take

Moving up the stack, our security posture changes. The concepts stay the same, but the posture changes. The concepts of least privilege, limited access, etc. all apply. How we implement those controls changes. In the past, we could rely on a firewall at the edge. Yet, as we move up the stack, the edge has …

The Data Dilemma: Part 2

As I search around YouTube for movies, presentations, etc., I begin to realize that with a bit of judicious use of Google, I can find nearly anything. That is, anything about businesses, personnel, corporate structures, and even personal information. Yes, even without spending money, there is data available about every conceivable part of your corporate …

The Data Dilemma: Part 1

A growing data dilemma is brewing. Businesses are caught between the need to have data available to improve the business and the need to keep that data private—and not only private, but secure, nonvolatile, protected, and available. At the same time, our data is neither invulnerable, nor, apparently, private. Organizations that collect data cannot keep …

Using Security for Networking

In the July 20 Virtualization and Cloud Security Podcast, we were joined by Kevin Myers. Kevin is a network architect for IP ArchiTechs. Kevin and I had an interesting conversation about the convergence of networking and security. It started out as an offhand comment about how firewalls can act as routers. They have always been …

Do We Control Our Data?

Data management is a must as we move up the stack. Data management includes data locality, integrity, confidentiality, availability, and protection. In other words, the old concepts of data security, protection, and classification still apply. However, with the advent of virtualization, our data sources changed. As we moved into the cloud, they changed once more. …

NotPetya: First Strike in a Cyber War?

The law of international conflict is clear on when and how a state may invoke a state of armed conflict between sovereign nations. For example, in the US, the power to declare war is reserved for Congress, regardless of the President’s position as head of the US Armed Forces. It also dictates the reasons for …