BLOG

UBA? – U Decide!

By: Darin Barton CISSP, CISA This was an interesting blog to write. I wanted to discuss the merits of UBA and subtly compare it to the value SIEM provides, but somehow […]

The Endpoint Consensus

By: Darin Barton CISSP, CISA Long Live Endpoint Security In 2011, global leaders in IT security were quite vocal in their belief that endpoint security was dead, and in the […]

Unsecured IoT – A Dangerous Gambit!

By: Darin Barton CISSP, CISA In October 2016, one of the world’s largest and most devastating DDoS attacks occurred through IoT (Internet of Things) devices. This was not a complex […]

Are You Ready for SDN?

By: Darin Barton CISSP, CISA Someone recently referred to SDN (Software Defined Networking)  as “Still Done Nothing” which I found amusing; but it’s true.  While I’ve been touting the merits of […]

DDoS Extortion – Prepare Yourself

By: Darin Barton CISSP, CISA 2016 has seen an increase in DDoS extortions for two simple reasons – it’s low risk and companies are willing to pay.  The question is, what […]

Malware Defense: Up Your Game!

By: Darin Barton CISSP, CISA, ITILv3 In 2016, organizations can no longer hope to successfully quarantine and clean infected systems on a regular basis. Today, our strongest recommendation is to DETECT, ISOLATE and RE-IMAGE; but this is easier said than done without the proper strategy in place. One of the […]

A New Assessment Strategy for 2016

By: Darin Barton CISSP, CISA Vulnerability assessing & penetration testing has long been identified with a mandated once-a-year approach.  The shelf life on this bill-of-goods has long since expired and it is time […]