Sunday, May 22, 2022
  • BSides Prishtina 2022 – Isuf Deliu’s ‘Ransomware-As-A-Service: Demystifying A Multi-Billion Dollar Industry’
  • Cloud computing concentration and systemic risk
  • XKCD ‘Mainly Known For’
  • BSides Prishtina 2022 – Chris Davis’ ‘LeXSS – Bypassing Lexical Parsing Security Controls’
  • US Lawmakers Seek Uniform Policy on Nation-State Cyberattacks

Security Boulevard Logo

Security Boulevard

The Home of the Security Bloggers Network

Community Chats Webinars Library
  • Home
    • Cybersecurity News
    • Features
    • Industry Spotlight
    • News Releases
  • Security Bloggers Network
    • Latest Posts
    • Contributors
    • Syndicate Your Blog
    • Write for Security Boulevard
  • Events
    • Upcoming Events
    • Upcoming Webinars
    • On-Demand Events
    • On-Demand Webinars
  • Chat
    • Security Boulevard Chat
    • Marketing InSecurity Podcast
  • Library
  • Related Sites
    • Techstrong Group
    • Container Journal
    • DevOps.com
    • Security Boulevard
    • Techstrong Research
    • Techstrong TV
    • Devops Chat
    • DevOps Dozen
    • DevOps TV
    • Digital Anarchist
  • Media Kit
  • About Us

  • Analytics
  • AppSec
  • CISO
  • Cloud
  • DevOps
  • GRC
  • Identity
  • Incident Response
  • IoT / ICS
  • Threats / Breaches
  • More
    • Blockchain / Digital Currencies
    • Careers
    • Cyberlaw
    • Mobile
    • Social Engineering
  • Humor
Security Bloggers Network 

Home » Security Bloggers Network » What Is Passive Asset Discovery, and Is It That Important?

SBN

What Is Passive Asset Discovery, and Is It That Important?

by Dean Ferrando on July 31, 2018

Let’s first talk about asset discovery in general and why it is useful, even critical, to most organisations.

Cybersecurity Live - Boston

What Is Asset Discovery?

Asset discovery is the ability to provide visibility of all devices located within an organisation with limited or no human interaction. Most organisations would start off manually maintaining a list of their devices or assets in a shared document such as an Excel spreadsheet, making changes whenever a new device is either acquired or depreciated.

This process is manageable when organisations are relatively small and not that complex. However, this method becomes very flawed when organisations or networks begin to grow. One of the main pain points with this methodology is time. Keeping these lists updated can become a full-time job in some cases.

However, most organisations have caught on to the fact that device management is a critical part of not only their operations process but also their security process, and not having visibility or knowledge of devices on their network could open them up to potential security week points. For example, how do you know which devices need to be patched if you don’t know they are there?

With all that being said, there are a few methods organisations can adopt to assist in this regard, and to be honest, most organisations most probably have already purchased software solutions that could assist.

A good example of this would be along the lines of a SIEM or log management solution. Most mid- to large-size organisations would or should have some form of log management solution in place for either fulfilling a compliance requirement or maintaining good security practices. These tools can usually provide some form of asset discovery functionality without any additional cost. The difference being what level they provide out-of-the-box and how much they can be (Read more...)

*** This is a Security Bloggers Network syndicated blog from The State of Security authored by Dean Ferrando. Read the original post at: https://www.tripwire.com/state-of-security/ics-security/what-passive-asset-discovery/

July 31, 2018July 31, 2018 Dean Ferrando asset discovery, ICS, ICS Security, log management, Log Management and SIEM, Passive Asset Discovery, security
  • ← CISSP Domain 7 Refresh: Security Operations
  • Disruption: The True Cost of an Industrial Cyber Security Incident →

TechStrong TV – Live

Click full-screen to enable volume control
Watch latest episodes and shows

Subscribe to our Newsletters

Get breaking news, free eBooks and upcoming events delivered to your inbox.
  • View Security Boulevard Privacy Policy
  • This field is for validation purposes and should be left unchanged.

Most Read on the Boulevard

Cybersecurity in the Boardroom: How to Report Risk to Leadership
3 Keys to an Effective Kubernetes Disaster Recovery Plan
Botnets, Telegram Helped Criminals Steal $163B in COVID Aid
‘Incompetent’ Tesla Lets Hackers Steal Cars — via Bluetooth
Red Flags That Your Environment Is Ripe for a Ransomware Attack
X-Cart Skimmer with DOM-based Obfuscation
Ransomware Attacks are Inevitable: How to Prepare, Respond, and Minimize Fallout
Radware Mitigates 1.1Tbps DDoS Attack
It’s Time to Put AI to Work in Security
Securing Your Cloud with Zero Trust and Least Privilege

Upcoming Webinars

Mon 23

Defending Against Emerging Ransomware Threats

May 23 @ 1:00 pm - 2:00 pm
Thu 26

Challenges and Opportunities for Improving Secure Coding Practices

May 26 @ 3:00 pm - 4:00 pm
Tue 31

Leveraging a Cloud Data Platform to Respond to Cybersecurity Events

May 31 @ 11:00 am - 12:00 pm
Jun 01

The 2022 Guide to API Security

June 1 @ 11:00 am - 12:00 pm
Jun 01

Security From Code to Cloud and Back to Code

June 1 @ 1:00 pm - 2:00 pm
Jun 08

Beyond Unification: How CNAP Should Reduce Cloud Security Risk

June 8 @ 11:00 am - 12:00 pm
Jun 08

When Less Is More: Full Life Cycle Serverless Security

June 8 @ 1:00 pm - 2:00 pm
Jun 15

Top 5 Reasons Why Effective SDLC Security Controls Are So Difficult

June 15 @ 1:00 pm - 2:00 pm
Jun 21

Why Cloud-Native Applications and APIs Are at Risk

June 21 @ 1:00 pm - 2:00 pm
Jun 28

CISO Talk Master Class Episode: Catch Lightning in a Bottle – The Essentials: Bringing It All Together

June 28 @ 1:00 pm - 2:00 pm

More Webinars

Download Free eBook

The State of Cloud Native Security 2020

Industry Spotlight

Establishing a Root of Trust in Embedded Linux and IoT
Cybersecurity Endpoint Industry Spotlight IoT & ICS Security Security Boulevard (Original) Vulnerabilities 

Establishing a Root of Trust in Embedded Linux and IoT

April 18, 2022 Anita Buehrle | Apr 18 Comments Off on Establishing a Root of Trust in Embedded Linux and IoT
Attorney-Client Privilege and Email Privacy
Cybersecurity Data Security Identity & Access Industry Spotlight Network Security Security Boulevard (Original) 

Attorney-Client Privilege and Email Privacy

April 7, 2022 Mark Rasch | Apr 07 Comments Off on Attorney-Client Privilege and Email Privacy
How MSPs can Fill the Cybersecurity Skills Gap
Cybersecurity Endpoint Industry Spotlight Network Security Security Awareness Security Boulevard (Original) 

How MSPs can Fill the Cybersecurity Skills Gap

February 17, 2022 Mike Adler | Feb 17 Comments Off on How MSPs can Fill the Cybersecurity Skills Gap

Top Stories

US Lawmakers Seek Uniform Policy on Nation-State Cyberattacks
Analytics & Intelligence Cyberlaw Cybersecurity Featured Governance, Risk & Compliance News Security Boulevard (Original) Threats & Breaches 

US Lawmakers Seek Uniform Policy on Nation-State Cyberattacks

May 20, 2022 George V. Hulme | 1 day ago 0
‘Incompetent’ Tesla Lets Hackers Steal Cars — via Bluetooth
Analytics & Intelligence Application Security Cybersecurity DevOps Endpoint Featured Governance, Risk & Compliance Identity & Access Incident Response IoT & ICS Security Mobile Security Most Read This Week Network Security News Popular Post Security Awareness Security Boulevard (Original) Social Engineering Spotlight Threat Intelligence Threats & Breaches Vulnerabilities 

‘Incompetent’ Tesla Lets Hackers Steal Cars — via Bluetooth

May 19, 2022 Richi Jennings | 2 days ago 0
Conti Ransomware Gang Threatens Costa Rica’s Government
Cybersecurity Data Security Featured Governance, Risk & Compliance Malware News Security Boulevard (Original) Spotlight Threat Intelligence Vulnerabilities 

Conti Ransomware Gang Threatens Costa Rica’s Government

May 19, 2022 Nathan Eddy | 2 days ago 0

Security Humor

XKCD 'Mainly Known For'

XKCD ‘Mainly Known For’

Security Boulevard Logo White

DMCA

Join the Community

  • Add your blog to Security Bloggers Network
  • Write for Security Boulevard
  • Bloggers Meetup and Awards
  • Ask a Question
  • Email: [email protected]

Useful Links

  • About
  • Media Kit
  • Sponsors Info
  • Copyright
  • TOS
  • DMCA Compliance Statement
  • Privacy Policy

Related Sites

  • Techstrong Group
  • Container Journal
  • DevOps.com
  • Techstrong Research
  • Techstrong TV
  • DevOps Chat
  • DevOps Dozen
  • DevOps TV
  • Digital Anarchist
Powered by Techstrong Group
Copyright © 2022 Techstrong Group Inc. All rights reserved.