fbpx

Details
Category: Cybersecurity PRISM

What is UEBA?

 
UEBA stands for User And Entity Behavior Analytics.
 

USER + Entity

Modern cybersecurity solutions strive hard to monitor the behavior of human users (your employees, customers, partners' employees, etc). They go even further and monitor the behavior of non-human 'ENTITIES' too, that means they are capable of monitoring 'machines' also.
 
For example, on day if a given branch office of your company, suddenly starts receiving 1000s more of requests than usual, then there is very high-likelihood that your IT administrator might not notice this, as a potential DDoS attack. But your UEBA would surely recognize this enhanced number of incoming requests and take some pre-defined action.

Read more: What is UEBA? How Does UEBA Work?

Details
Category: Cybersecurity PRISM
 
Since the idea behind this post is to look at the evolution of Firewall, from the point of view of Palo Alto, I wish to introduce you to Nir Zuk, the founder & CTO of Palo Alto. How he looked at the issue or need of firewalls at various points in time...
 

What is a Firewall?

Read more: Evolution of FIREWALL

Details
Category: Cybersecurity PRISM
Most networking guys know that when they create WANs, they rely on actual physical routers to connect their remote or branch-office users to applications which are hosted at corporate data-centers.
 
You already know that each router has a data plane which holds the information, and a control plane which tells the data where to go.
 
 
 
Where this DATA will flow, it is typically determined by a network admin/engineer...They will write some certain RULES and POLICIES for each router on the network. Since this process of defining rules and policies is performed 'manually' most of the time, it is time-consuming and error-prone.
 
Your WANs depends on MPLS, wireless, broadband, VPN, LTE, VPNs and Internet to get connectivity to corporate applications, services and other resources.
-

👉 What is a SD-WAN?

Read more: What is a SD-WAN? How does a SD-WAN work?

Details
Category: Cybersecurity PRISM
The data is at the heart of whole IT and is the chief concern of cybersecurity…
 
Your company data consists of its intellectual property (IP), financial info and personal identifiable information (PII) of your customers and employees. All data that is confidential in nature, it vulnerable to attacks from cyber-attackers. There are so many potential issues which may expose your important data to outside world. 

Read more: What is Enterprise DLP? What are Key Requirements of DLP?

Details
Category: Cybersecurity PRISM
SASE is the new emerging concept in Cybersecurity....
 
In August 2019, Gartner published a report "The Future of Network Security in the Cloud". This report brought a strategic roadmap for SASE convergence. And the term SASE came into being as a new emerging cybersecurity concept.

Read more: What is SASE ? What are 10-Tenets of SASE?

Details
Category: Cybersecurity PRISM

First, let's consider the true picture!

The overall landscape of emerging cybersecurity threats has gone extremely wide and deeper in recent years. Almost every enterprise, large or small-medium, is severely under-pressure to protect its critical information and data. Every organization which has been attacked in recent years, had to pay a huge cost of their cybersecurity vulnerabilities.

Cost of Cybersecurity Damages

More than half, i.e., 53% of all attacks resulted in financial damages of more than US$500,000, including, but not limited to, lost revenue, customers, opportunities, and out-of-pocket costs. 

Read more: Why Should I Become A Cyber Security Professional Now?

Details
Category: Cybersecurity PRISM
What is a Port Scan?
 
A port scan is one of the fundamental technique that is used to identify the open doors or weak-points in a network. Network admins use this to discover the potential vulnerabilities by sending packets to specific ports and analyze response. You can use tools like IP scanning, Nmap, Netcat, etc. to ensure that your network and systems are secure or not.

Read more: What is a Port Scan? What are Major Port Scanning Techniques?

Details
Category: Cybersecurity PRISM
WHAT IS REMOTE ACCESS?
Remote access is the ability for an authorized person to access a computer or a network from a geographical distance through an internet connection. It enables your users to connect to the systems they need when they are physically far away.

Read more: What are Remote Access Protocols? What is the Difference Between IPSec and SSL VPNs?

Details
Category: Cybersecurity PRISM
When IoT technologies appeared on the horizons, the industries such as healthcare, smart cities, building management, public utilities, transportation, and manufacturing etc, picked it up early. Now, IoT is already being used by so many companies.

Read more: What are Top IoT Security Issues? How to Secure IoT Devices in Your Enterprise?

Details
Category: Cybersecurity PRISM
What is QoS?
 
It is Quality of Service.
 
You would always want a kind of guarantee that--your network would be able to run all those applications that you assign as High-priority applications, as efficiently & reliably as possible. You would want that all the traffic to/from those high-priority applications gets first priority, even if your network is facing any type of limitation, e.g., network congestion. You can achieve this virtual guarantee with QoS - a set of technologies which work in tandem for your network.

Read more: What is QoS? How does QoS work in the Networks?

Details
Category: Cybersecurity PRISM
What is Machine Learning?
 
Machine Learning is an application of Artificial Intelligence.
 
The idea of Machine Learning basically is based upon the premise that we can make a machine (usually a computer) to learn from some massive amounts of data, so that it can make predictions when it is presented with new data. 

Read more: Machine Learning - Role of Machine Learning in Cybersecurity

  1. What is URL Filtering? How Does URL Filtering Work?
  2. What are UNKNOWN Cyber-Threats? How Can They Challenge Your Cyber-Resiliency?
  3. What is An Exploit Kit? Why do Cyber-Criminals use Exploit Kits?
  4. What is DNS Tunneling? How Does DNS Tunneling Happen?
  5. What is C&C? How Do Command And Control Operate?
  6. What is PHI? What are 18-Identifiers of PHI?
  7. What is Cloud Encryption? Why Does it Deserve Special Considerations?
  8. Information Security vs Cybersecurity . What is the Difference?
  9. What is Shadow IT? Why is Shadow IT a growing Risk ?
  10. What is Tokenization? How Tokenization is Different from Encryption ?

Page 5 of 27