ISSA Journal Ottobre 2018

la rivista mensile riservata ai Soci AIPSI

I principali articoli del numero di Ottobre 2018 includono:

• Cloud Cryptography and Key Management, by Jeff Stapleton - ISSA member, St. Louis Chapter. This article describes data encryption methods and key management practices. Regardless of the methods or the practices, using an HSM is a best practice for information security procedures.
• Bookworm: A Threat Hunting Story, by Carl Saiyed - ISSA member, Greater Spokane Chapter.This article discusses techniques to embed hunting for an adversary as an addition to routine detection practices and will discuss detailed points of a Windows zero-day vulnerability discovered using these tactics.
• Cloud Security Due Diligence, by Chris Wolski - ISSA member, Delaware Valley (Philadelphia, PA) Chapter. This article discusses the importance of understanding and level of effort required for mitigating risks that third-party cloud services (SaaS, IaaS, and PaaS) represent to an organization. Depending on the service, it may not be possible to conduct a thorough direct assessment of the services, which is necessary to ensure securing the organization's data.
• Security Measures That Help Reduce the Cost of a Data Breach, by Mangaya Sivagnanam - ISSA member, Minnesota Chapter. It is essential to identify and understand key influencing factors that can reduce the cost of a data breach and positively impact the organization's security posture.
• Extracting Timely Sign-in Data from Office 365 Logs, by Mark J. Lucas. Microsoft provides audit logging and alerting tools that can assist system administrators in finding compromised Office 365 accounts. An examination of the efficacy and efficiency of these tools and their shortcomings and advantages provides insight into how to best use the tools to protect individual accounts and an organization as a whole.

 Le rubriche della Rivista:

•  From the President
• Sabett's Brief
• Cloud Security, Two Years Later
• Gray Hat
• The Erosion of Two-Factor Authentication
• Crypto Corner
• The Wild West of Payments
• Security in the News
• Association News
• 2018 ISSA Annual Meeting of the Membership!
• Keyaan Williams: Leadership Reflection and Farewell
• News from the ISSA Education Foundation