Information/ Cyber Security by Skyler Seybold

Group A: Hacking

skse7891 — 2024-04-05 04:56:39 UTC

"When a white hat hacker discovers a vulnerability, they will exploit it only with permission and not tell others about it until it has been fixed. In contrast, the black hat will illegally exploit it or tell others how to do so. The gray hat will neither illegally exploit it nor tell others how to do so."

Group A: Hacking

skse7891 — 2024-04-05 04:59:45 UTC

Motivations/ target/ methods of operations of a white hat hacker: they have the permission of the system owner first, which makes the process completely legal. Instead of exploiting vulnerabilities to spread code, white hat hackers work with network operators to help fix the issue before others discover it.

Motivations/ target/ methods of operations of a black hat hacker: criminals who break into computer networks with malicious intent.

Motivations/ target/ methods of operations of a grey hat hacker: believe that the internet is not safe for business, and they consider it their mission to make it safer for individuals and organizations.

Group B: Authentication

skse7891 — 2024-04-05 05:05:39 UTC

"The goal of MFA is not just to add layers of security, but to also implement them in such a way that they work seamlessly in the background, protecting users without causing undue convenience." Organizations can use this to leverage multi-factor identification because it appears simple, useful, and effective.

Best Practices to implement MFA solutions:

educate users on MFA
implement conditional access
avoid using SMS authentication (not very secure)
choose phishing-resistant MFA methods when possible
use password-less phone authentication when unphishable credentials are not available

Group B: Authentication

skse7891 — 2024-04-05 05:12:25 UTC

What are the challenges and ethical implications of using biometrics for authentication, and how can organizations balance security with privacy concerns

Group A: Hacking

skse7891 — 2024-04-05 05:15:48 UTC

Cybersecurity vs Information Security

skse7891 — 2024-04-05 05:19:03 UTC

Cybersecurity focuses entirely on computer and web-related security meanwhile information security relates to every form of security regarding information.

Some similarities begin with the fact that cybersecurity is a subset of information security. Both aim to secure safety and privacy for all.

Emerging Trends and Threats

skse7891 — 2024-04-05 05:24:16 UTC

What are the emerging trends and threats in the field of information security, and how can organizations prepare for them

Security and Productivity

skse7891 — 2024-04-05 05:31:48 UTC

By communicating the importance of security and its impact on on productivity an organization can both promote security while also promoting productivity.

Offering ongoing trainings not only is necessary for helping all within an organization to actually learn about cyber security but also to apply it. This supports employees to ensure they are up to date on security protocols and the best possible practices.

Overall, a security-aware workplace can enhance both productivity and that overall security.