#fearlessjourney — Public Fediverse posts

Courage Is Found in the Willingness to Release the Anchor of the Past and Set Sail Towards New Horizons. #CourageousSteps #LetGoAndGrow #EmbraceChange #NewBeginnings #FearlessJourney #BraveHeart #MovingForward

The Canadian Centre for Cyber Security has an interesting article on #CybeSecurity #ThreatActors (adversaries) and their motivation.

https://www.cyber.gc.ca/en/guidance/introduction-cyber-threat-environment

The article IMHO leaves out at some threat actors (which might not be that relevant for a commercial or critical infrastructure setting)

• Abusive Partners
• Stalkers
• Kids

while these could be seen as part of insider threats, I believe that their capabilities and opportunities are different from other insiders.
And they are often overlooked when developing consumer products.
Think of the problems with #AirTags or the bike theft "problem" with Strava.

I really like this and are thinking of creating a game around it to raise security awareness (especially within development and designe of systems). #SeriousGames

Idea is to have a collaborative game where you play through threats against your system. Starting with the Threat Actors, their intend, capabilities and opportunities.
Going through techniques used (maybe using a subset of #MitreAttack but also common #SocialEngineering techniques).
And then choosing mitigation and defense options.

A bit of a mixture between #ElevationOfPrivilege/#EoP, #BackdoorsAndBreaches and #FearlessJourney

My thread got slightly derailed as a rather long (detour) post on #FearlessJourney (by @deborahh) got lost and I got frustrated (it isn't a #SecurityGame but I love the game mechanics and would like to see them applied to a security topic. I don't know how yet)

4/n