If you read the first blogs of this series, you know what misattribution is, why it’s important, and the various technical and non-technical elements that go into it. You know when to manage your attribution, why that’s often a better choice than being anonymous, and some kinds of tools available to...
In part three of four of our series on misattribution, I’ll explore non-technical misattribution: basically, everything that identifies someone online other than the information that computers and networks reveal.
Technical misattribution is the process of masking the identifying information that computers and networks reveal. In part two of this four-part series, I will take a look at technical misattribution specifically.
On Thursday, April 18, The Weather Channel (TWC) became the latest victim of a cyber-attack. This event should serve as a reminder that any company—no matter how innocuous—could be targeted with technology-based attacks.
Misattribution is a term used mostly within the national security community to refer to activities conducted under some kind of assumed identity. In this four-part series, I will go into detail about digital misattribution, operational misattribution, and misattribution challenges.
Find out how the internet has changed from its inception to now, and what privacy considerations these changes create.
Many criminal investigations now take place online. Online investigators require different tools, skills, and best practices than in traditional investigations.
Open Source Intelligence, or OSINT, is intelligence developed from sources that are free, public, and legal to access. In the linked video, I discuss the history of OSINT, how OSINT is used and collected, and some examples of how OSINT has been used to great effect.
Don't spend your time trying to mitigate extreme attacks against your organization. It is often failures in security basics that take down major organizations. Focus on the countless manageable vulnerabilities that you can control and protect against.
Creating a strong Security Advisory Board (SAB) for your organization can be a challenge, but it has the potential to yield a significant reward. In a two-part SecurityWeek article series, I discuss my recent experience assembling an advisory board and explore the various ways to ensure that yours brings value...
