Sunday, December 3, 2023

Security Boulevard

The Home of the Security Bloggers Network

Community Chats Webinars Library

Home
Security Bloggers Network
Webinars
Events
- Upcoming Events
- On-Demand Events
Sponsored Content
Chat
Library
Related Sites
Media Kit
About
Sponsor

Analytics
AppSec
CISO
Cloud
DevOps
GRC
Identity
Incident Response
IoT / ICS
Threats / Breaches
More
Humor

Hot Topics

China continues Pig-Butchering Crack-down
How Kasada Counters Toll Fraud and Fake Account Creation for Enterprises
How to Build a Phishing Playbook Part 1: Preparation
Cooking Intelligent Detections from Threat Intelligence (Part 6)
DEF CON 31 - Renderman’s, Tom Dang’’s ‘War Stories - The Risks Of Pointing Out The Emperor Is Buck Naked’

Events Security Bloggers Network

Home » Cybersecurity » Events » Circle City Con 2018, Itzik Kotler’s ‘Backdooring With Metadata’

Circle City Con 2018, Itzik Kotler’s ‘Backdooring With Metadata’

by Marc Handelman on July 21, 2018

Sponsorships Available

*** This is a Security Bloggers Network syndicated blog from Infosecurity.US authored by Marc Handelman. Read the original post at: https://youtu.be/vMxEKjx0UEk

July 21, 2018July 21, 2018 Marc Handelman CircleCity Con, Conferences, education, Information Security

← Questionable Signal Interception Use (Stingray) & Hardware Search Leads Magistrate To Chastise FBI
XKCD, Sports Champions →

Techstrong TV – Live

Click full-screen to enable volume control

Watch latest episodes and shows

Upcoming Webinars

Thu 07

Improved Patient Experience: What That Means for Your Cybersecurity Posture

December 7 @ 1:00 pm - 2:00 pm

Mon 11

How Boundless Software Accelerated Customer Onboarding With Calico Cloud and Amazon EKS

December 11 @ 11:00 am - 12:00 pm

Mon 11

API Security

December 11 @ 1:00 pm - 2:00 pm

Thu 14

AWS Immersion Day: Securing Your Infrastructure-as-Code With Snyk and HashiCorp

December 14 @ 1:00 pm - 3:00 pm

Tue 19

Optimizing Application Security Effectiveness – Key Findings From the ESG Report

December 19 @ 9:00 am - 10:00 am

Feb 12

Ransomware

February 12, 2024 @ 1:00 pm - 2:00 pm

Mar 11

Securing Open Source

March 11, 2024 @ 1:00 pm - 2:00 pm

May 20

Zero-Trust

May 20, 2024 @ 1:00 pm - 2:00 pm

Subscribe to our Newsletters

Most Read on the Boulevard

Okta Screws Up (Yet Again) — ALL Customers’ Data Hacked, not just 1%

Ringleader of Ransomware Group in Ukraine Arrested: Europol

3 Reasons to Consider Reskilling to a Role in Cybersecurity

The Necessity of Security Best Practices When Implementing Generative AI

TikTok Ban Banned — Montana Loses in US Court

SEO Poisoning Brings Users to Attackers’ Doors

A Platform Engineer’s Guide: How to Manage Complexity in Kubernetes

Ddostf DDoS Botnet Malware Targets MySQL Servers

Another Look at Accountability in Cybersecurity

Intel Reptar Flaw Patch For CPU Vulnerability Released

Download Free eBook

The Dangers of Open Source Software and Best Practices for Securing Code

Industry Spotlight

AI and Machine Learning in Security AI and ML in Security Analytics & Intelligence Application Security AppSec Cloud Security Cloud Security Cyberlaw Cybersecurity Data Privacy Data Security Deep Fake and Other Social Engineering Tactics DevOps DevSecOps Digital Transformation Editorial Calendar Endpoint Featured Governance, Risk & Compliance Humor Industry Spotlight Malware Mobile Security Most Read This Week Network Security News Popular Post Regulatory Compliance Securing the Cloud Securing the Edge Security at the Edge Security Boulevard (Original) Security Challenges and Opportunities of Remote Work Security Operations Social - Facebook Social - LinkedIn Social - X Social Engineering Spotlight Threat Intelligence Threats & Breaches Vulnerabilities Zero-Trust

TikTok Ban Banned — Montana Loses in US Court

December 1, 2023 Richi Jennings | 1 day ago 0

Cybersecurity Data Privacy Data Security DevOps Featured Industry Spotlight Malware Mobile Security Network Security News Security Boulevard (Original) Spotlight Threat Intelligence Threats & Breaches

VirusTotal: Generative AI is Great at Detecting, Identifying Malware

December 1, 2023 Jeffrey Burt | 1 day ago 0

Cybersecurity Featured Industry Spotlight IoT & ICS Security Malware Network Security News Security Boulevard (Original) Social - Facebook Social - X Spotlight Threat Intelligence Threats & Breaches

CISA: Threat Groups are Targeting Unitronics PLCs in Water Systems

November 30, 2023 Jeffrey Burt | 2 days ago 0

Top Stories

Analytics & Intelligence Application Security Cloud Security Cybersecurity Featured Incident Response News Security Boulevard (Original) Social - X Spotlight Threat Intelligence Threats & Breaches Vulnerabilities

Trend Micro Adds AI Tool While Extending CNAPP Reach

November 30, 2023 Michael Vizard | 2 days ago 0

Blockchain Cloud Security Cybersecurity Data Security Digital Currency Featured Industry Spotlight Malware Network Security News Security Boulevard (Original) Social - Facebook Social - X Spotlight Threat Intelligence Threats & Breaches

Black Basta Extortion Group Racks Up $107 Million in Ransom Payments

November 30, 2023 Jeffrey Burt | 2 days ago 0

Analytics & Intelligence API Security Application Security AppSec Cloud Security Cloud Security Cybersecurity Data Privacy Data Security Deep Fake and Other Social Engineering Tactics DevOps DevSecOps Editorial Calendar Endpoint Featured Governance, Risk & Compliance Humor Identity & Access Identity and Access Management Incident Response Industry Spotlight Insider Threats IOT Mobile Security Most Read This Week Network Security News Popular Post Regulatory Compliance Securing Open Source Securing the Cloud Securing the Edge Security at the Edge Security Awareness Security Boulevard (Original) Social - Facebook Social - LinkedIn Social - X Social Engineering Spotlight Threat Intelligence Threats & Breaches Vulnerabilities Zero-Trust

Okta Screws Up (Yet Again) — ALL Customers’ Data Hacked, not just 1%

November 29, 2023 Richi Jennings | 3 days ago 0

Security Humor

Randall Munroe’s XKCD ‘X Value’

Randall Munroe’s XKCD ‘X Value’

Join the Community

Add your blog to Security Bloggers Network
Write for Security Boulevard
Bloggers Meetup and Awards
Ask a Question
Email: [email protected]

Useful Links

About
Media Kit
Sponsor Info
Copyright
TOS
DMCA Compliance Statement
Privacy Policy

Related Sites

Techstrong Group
Cloud Native Now
DevOps.com
Digital CxO
Techstrong Research
Techstrong TV
Techstrong.tv Podcast
DevOps Chat
DevOps Dozen
DevOps TV

Powered by Techstrong Group

Copyright © 2023 Techstrong Group Inc. All rights reserved.

Cloud Workload Resilience PulseMeter

Step 1 of 8

12%

How do you define cloud resiliency for cloud workloads? (Select 3)(Required)

The ability to recover from failures, high loads and cyberattacks.

Continue servicing workload requests during the recovery of failed components or services.

Implementing security measures to protect cloud workloads from cybersecurity threats like DDoS.

Maintaining uninterrupted service in the face of software, infrastructure and network failures or disruptions.

Designing cloud workloads to adapt to sudden changes in demand automatically.

Regularly performing backups to prevent data loss and enable quick recovery in case of failures.

Designing cloud workloads so they can more easily move between cloud locations and service providers.

Using geographically distributed or redundant cloud data centers.

Resiliency is just another marketing buzzword.

In what ways does cloud-native architecture improve the resiliency of workloads deployed in the cloud? (Rank order)

Smaller, self-contained microservices fail independently without impacting overall availability.
Containerized software provides isolation and consistency, making it easier to scale and recover from failure.
Stateless design patterns increase scalability and can fail independently without impacting other parts of cloud applications.
Serverless design pattern allows events to initiate the operation of the discrete functions as needed.
Cloud-native architecture significantly influences the resiliency of cloud-deployed applications.
Cloud-native architecture provides limited or no resiliency improvement.

How important is improving the resiliency of cloud workloads for your organization in 2024? (Select 1)(Required)

The number-one priority

In the top three priorities

In the top 10 priorities

Important but not a priority

Not important

Which of the following do you use to improve the resiliency of cloud workloads? (Select all that apply)(Required)

Containers

Microservices

Container orchestration

Serverless

Multiple cloud providers

Infrastructure-as-code (IaC)

Data distribution or replication

Observability tools based on OpenTelemetry

Failure testing

What factors in cloud-native (microservices) workloads increase resiliency? (Rank order)

Distribute workloads
Portable workloads across multiple cloud providers
Move some workloads to the edge
Kubernetes clusters for failover and load distribution
Stateless software design
Increased security posture
Setting meaningful and achievable resiliency goals

What are the most significant challenges to improving the resiliency of cloud workloads or cloud-native applications? (Select all that apply)(Required)

Lack of skills and knowledge

Legacy or existing architecture of applications

Large amount of technical debt

Multiple or conflicting definitions of resiliency

Inability to gain executive support

Ability to test resiliency without impacting service levels

Insufficient funding

Other

How much of your cloud workload is cloud-native today? (Select 1)(Required)

100% - all cloud-native

Greater than 50%

25-50%

Under 25%

0% - No cloud-native

What is your business or organization's size (# employees)? (Select 1)(Required)

1 - 100

101 - 500

501 - 1000

1001 - 5000

Over 5000

Δ