Rogue One: A Star Wars Story, which opens in theaters this weekend, shows how the Rebel Alliance steals architectural plans for the Death Star in order to eventually destroy it.
According to a cybersecurity expert, there are real-life lessons to learn from Empire’s downfall.
Hsinchun Chen, professor of management information systems at the University of Arizona, has spent 27 years researching cyber security and leads a project called “Hacker Web” to explore international hacker communities, including those in Russia, China, and the United States.
Chen says the theft of architectural plans isn’t just the stuff of fiction and, in fact, “probably the most obvious case for why countries hack each other is intellectual property, or IP. Deliberately stealing information about your drawings or your engineering designs or your scientific instruments, that’s all intellectual property.”
In government, he adds, this kind of theft is virtually inevitable.
“There are only two types of organizations: Those who have lost their data and know it, and those who have lost their data but don’t know it,” Chen says.
While we don’t yet know how the Rebel Alliance managed to succeed, Chen knows exactly what he would have told the Empire to avoid theft of its IP.
1. You’re only as strong as your weakest link.
Within companies, governments, and universities, all it takes is one person to allow a breach. “In a big organization with thousands of employees or more, like a government, you will be breached, and you’re only as strong as your weakest link,” Chen says.
How could the Empire rid itself of weak links? “Education and rigorous information assurance practices help,” Chen says.
2. Know their strengths—and your weaknesses.
“Unfortunately, the adversaries are getting more sophisticated and more interconnected—they’re always exchanging information,” Chen says. “You have to be very diligent in collecting information about your vulnerabilities and your adversaries.”
The Empire should have invested a significant amount of time, money, and effort to understand its enemy’s strengths and its own weaknesses.
3. Protect what matters most.
The Empire may have had masses of data, but not all data is created equal. Chen believes that dedicating your best security resources to your most valuable data—such as the plans for the Death Star—is paramount. “Protect your most important, critical assets,” he says.
4. Don’t just defend, prevent.
“Cybersecurity has changed from a very defensive mentality to a more holistic and more preventative mentality,” Chen says.
While the Empire ends up fighting to protect the Death Star (and losing), Chen recommends taking stronger preventative security measures from the start.
Source: University of Arizona
Studio: Cyber Simplicity Ltd
Label: Cyber Simplicity Ltd
Publisher: Cyber Simplicity Ltd
Manufacturer: Cyber Simplicity Ltd
Cybersecurity – Attack and Defense Strategies: Infrastructure security with Red Team and Blue Team tactics
Studio: Packt Publishing
Label: Packt Publishing
Publisher: Packt Publishing
Manufacturer: Packt Publishing
Enhance your organization's secure posture by improving your attack and defense strategies
- Gain a clear understanding of the attack methods, and patterns to recognize abnormal behavior within your organization with Blue Team tactics.
- Learn to unique techniques to gather exploitation intelligence, identify risk and demonstrate impact with Red Team and Blue Team strategies.
- A practical guide that will give you hands-on experience to mitigate risks and prevent attackers from infiltrating your system.
The book will start talking about the security posture before moving to Red Team tactics, where you will learn the basic syntax for the Windows and Linux tools that are commonly used to perform the necessary operations. You will also gain hands-on experience of using new Red Team techniques with powerful tools such as python and PowerShell, which will enable you to discover vulnerabilities in your system and how to exploit them. Moving on, you will learn how a system is usually compromised by adversaries, and how they hack user's identity, and the various tools used by the Red Team to find vulnerabilities in a system.
In the next section, you will learn about the defense strategies followed by the Blue Team to enhance the overall security of a system. You will also learn about an in-depth strategy to ensure that there are security controls in each network layer, and how you can carry out the recovery process of a compromised system. Finally, you will learn how to create a vulnerability management strategy and the different techniques for manual log analysis.
By the end of this book, you will be well-versed with Red Team and Blue Team techniques and will have learned the techniques used nowadays to attack and defend systems.
What you will learn
- Learn the importance of having a solid foundation for your security posture
- Understand the attack strategy using cyber security kill chain
- Learn how to enhance your defense strategy by improving your security policies, hardening your network, implementing active sensors, and leveraging threat intelligence
- Learn how to perform an incident investigation
- Get an in-depth understanding of the recovery process
- Understand continuous security monitoring and how to implement a vulnerability management strategy
- Learn how to perform log analysis to identify suspicious activities
Who This Book Is For
This book aims at IT professional who want to venture the IT security domain. IT pentester, Security consultants, and ethical hackers will also find this course useful. Prior knowledge of penetration testing would be beneficial.
Table of Contents
- Secure Posture
- Incident Response Process
- Understanding the Cybersecurity Kill Chain
- Compromising the system
- Chasing User's Identity
- Lateral Movement
- Privilege Escalation
- Security Policy
- Network segmentation
- Active sensors
- Threat Intelligence
- Investigating an Incident
- Recovery Process
- Vulnerability management
- Log Analysis
Studio: Addison-Wesley Professional
Label: Addison-Wesley Professional
Publisher: Addison-Wesley Professional
Manufacturer: Addison-Wesley Professional
• Understand the cybersecurity discipline and the role of standards and best practices
• Define security governance, assess risks, and manage strategy and tactics
• Safeguard information and privacy, and ensure GDPR compliance
• Harden systems across the system development life cycle (SDLC)
• Protect servers, virtualized systems, and storage
• Secure networks and electronic communications, from email to VoIP
• Apply the most appropriate methods for user authentication
• Mitigate security risks in supply chains and cloud environments
This knowledge is indispensable to every cybersecurity professional. Stallings presents it systematically and coherently, making it practical and actionable.