home.social

#fearlessjourney — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #fearlessjourney, aggregated by home.social.

fetched live
  1. The Canadian Centre for Cyber Security has an interesting article on #CybeSecurity #ThreatActors (adversaries) and their motivation.

    cyber.gc.ca/en/guidance/introd

    The article IMHO leaves out at some threat actors (which might not be that relevant for a commercial or critical infrastructure setting)

    • Abusive Partners
    • Stalkers
    • Kids

    while these could be seen as part of insider threats, I believe that their capabilities and opportunities are different from other insiders.
    And they are often overlooked when developing consumer products.
    Think of the problems with #AirTags or the bike theft "problem" with Strava.

    I really like this and are thinking of creating a game around it to raise security awareness (especially within development and designe of systems). #SeriousGames

    Idea is to have a collaborative game where you play through threats against your system. Starting with the Threat Actors, their intend, capabilities and opportunities.
    Going through techniques used (maybe using a subset of #MitreAttack but also common #SocialEngineering techniques).
    And then choosing mitigation and defense options.

    A bit of a mixture between #ElevationOfPrivilege/#EoP, #BackdoorsAndBreaches and #FearlessJourney

  2. The Canadian Centre for Cyber Security has an interesting article on #CybeSecurity #ThreatActors (adversaries) and their motivation.

    cyber.gc.ca/en/guidance/introd

    The article IMHO leaves out at some threat actors (which might not be that relevant for a commercial or critical infrastructure setting)

    • Abusive Partners
    • Stalkers
    • Kids

    while these could be seen as part of insider threats, I believe that their capabilities and opportunities are different from other insiders.
    And they are often overlooked when developing consumer products.
    Think of the problems with #AirTags or the bike theft "problem" with Strava.

    I really like this and are thinking of creating a game around it to raise security awareness (especially within development and designe of systems). #SeriousGames

    Idea is to have a collaborative game where you play through threats against your system. Starting with the Threat Actors, their intend, capabilities and opportunities.
    Going through techniques used (maybe using a subset of #MitreAttack but also common #SocialEngineering techniques).
    And then choosing mitigation and defense options.

    A bit of a mixture between #ElevationOfPrivilege/#EoP, #BackdoorsAndBreaches and #FearlessJourney

  3. The Canadian Centre for Cyber Security has an interesting article on #CybeSecurity #ThreatActors (adversaries) and their motivation.

    cyber.gc.ca/en/guidance/introd

    The article IMHO leaves out at some threat actors (which might not be that relevant for a commercial or critical infrastructure setting)

    • Abusive Partners
    • Stalkers
    • Kids

    while these could be seen as part of insider threats, I believe that their capabilities and opportunities are different from other insiders.
    And they are often overlooked when developing consumer products.
    Think of the problems with #AirTags or the bike theft "problem" with Strava.

    I really like this and are thinking of creating a game around it to raise security awareness (especially within development and designe of systems). #SeriousGames

    Idea is to have a collaborative game where you play through threats against your system. Starting with the Threat Actors, their intend, capabilities and opportunities.
    Going through techniques used (maybe using a subset of #MitreAttack but also common #SocialEngineering techniques).
    And then choosing mitigation and defense options.

    A bit of a mixture between #ElevationOfPrivilege/#EoP, #BackdoorsAndBreaches and #FearlessJourney

  4. The Canadian Centre for Cyber Security has an interesting article on #CybeSecurity #ThreatActors (adversaries) and their motivation.

    cyber.gc.ca/en/guidance/introd

    The article IMHO leaves out at some threat actors (which might not be that relevant for a commercial or critical infrastructure setting)

    • Abusive Partners
    • Stalkers
    • Kids

    while these could be seen as part of insider threats, I believe that their capabilities and opportunities are different from other insiders.
    And they are often overlooked when developing consumer products.
    Think of the problems with #AirTags or the bike theft "problem" with Strava.

    I really like this and are thinking of creating a game around it to raise security awareness (especially within development and designe of systems). #SeriousGames

    Idea is to have a collaborative game where you play through threats against your system. Starting with the Threat Actors, their intend, capabilities and opportunities.
    Going through techniques used (maybe using a subset of #MitreAttack but also common #SocialEngineering techniques).
    And then choosing mitigation and defense options.

    A bit of a mixture between #ElevationOfPrivilege/#EoP, #BackdoorsAndBreaches and #FearlessJourney

  5. The Canadian Centre for Cyber Security has an interesting article on #CybeSecurity #ThreatActors (adversaries) and their motivation.

    cyber.gc.ca/en/guidance/introd

    The article IMHO leaves out at some threat actors (which might not be that relevant for a commercial or critical infrastructure setting)

    • Abusive Partners
    • Stalkers
    • Kids

    while these could be seen as part of insider threats, I believe that their capabilities and opportunities are different from other insiders.
    And they are often overlooked when developing consumer products.
    Think of the problems with #AirTags or the bike theft "problem" with Strava.

    I really like this and are thinking of creating a game around it to raise security awareness (especially within development and designe of systems). #SeriousGames

    Idea is to have a collaborative game where you play through threats against your system. Starting with the Threat Actors, their intend, capabilities and opportunities.
    Going through techniques used (maybe using a subset of #MitreAttack but also common #SocialEngineering techniques).
    And then choosing mitigation and defense options.

    A bit of a mixture between #ElevationOfPrivilege/#EoP, #BackdoorsAndBreaches and #FearlessJourney

  6. This is your reminder that every great achievement in history began with someone taking a chance. So, take that first step - no matter how small it may seem. Choose to be brave, curious, and open to the endless possibilities that life has to offer.

    And then see what happens 💫 After all, if you never try, you'll never know what amazing reality you might have been able to create for yourself 🫶🏼

    #DareToExplore #NewBeginnings #FearlessJourney #Courage #GrowthMindset

  7. My thread got slightly derailed as a rather long (detour) post on #FearlessJourney (by @deborahh) got lost and I got frustrated (it isn't a #SecurityGame but I love the game mechanics and would like to see them applied to a security topic. I don't know how yet)

    4/n

  8. My thread got slightly derailed as a rather long (detour) post on #FearlessJourney (by @deborahh) got lost and I got frustrated (it isn't a #SecurityGame but I love the game mechanics and would like to see them applied to a security topic. I don't know how yet)

    4/n

  9. My thread got slightly derailed as a rather long (detour) post on #FearlessJourney (by @deborahh) got lost and I got frustrated (it isn't a #SecurityGame but I love the game mechanics and would like to see them applied to a security topic. I don't know how yet)

    4/n

  10. My thread got slightly derailed as a rather long (detour) post on #FearlessJourney (by @deborahh) got lost and I got frustrated (it isn't a #SecurityGame but I love the game mechanics and would like to see them applied to a security topic. I don't know how yet)

    4/n

  11. My thread got slightly derailed as a rather long (detour) post on #FearlessJourney (by @deborahh) got lost and I got frustrated (it isn't a #SecurityGame but I love the game mechanics and would like to see them applied to a security topic. I don't know how yet)

    4/n