Category: cybersecurity - Page 2

No One is Liable for My Stolen Personal Information

By Dudu Mimran | April 6, 2015September 29, 2020 by Dudu Mimran

The main victims of any data breach are actually the people, the customers, whom their personal information has been stolen and oddly?they don?t get the deserved attention. Questions like what was the impact of the theft on me as a customer, what can I do about it?and whether I deserve some compensation are rarely dealt with publicly. Customers face several key problems when their data was?stolen, questions such as: Was their data stolen at all?…

Cyber Tech 2015 – It’s a Wrap

By Dudu Mimran | March 26, 2015September 29, 2020 by Dudu Mimran

It has been a crazy two days at Israel?s Cyber Tech 2015?in a good way! The exhibition hall was split into three sections: the booths of the established companies, the startups pavilion and the Cyber Spark arena. It was like examining an x-ray of the emerging cyber industry in Israel, where on one hand you have the grown-ups whom are the established players, the startups/sprouts seeking opportunities for growth, and an engine which generates such…

cybersecurity

A Brief History on the Emerging Cyber Capital of the World: Beer-Sheva, Israel

By Dudu Mimran | March 11, 2015September 29, 2020 by Dudu Mimran

The beginning of the cyber park There are very few occasions in life where you personally experience a convergence of unrelated events that lead to something?something BIG! I am talking about Beer-Sheva, Israel?s desert capital. When I started to work with Deutsche Telekom Innovation Laboratories at Ben-Gurion University 9 years ago it was a cool place to be, though still quite small. Back then, security?which was not yet referred to as cybersecurity?was one of the…

cybersecurity

Distributed Cyber Warfare

By Dudu Mimran | March 8, 2015September 29, 2020 by Dudu Mimran

One of the core problems with cybercriminals and attackers is the lack of a clear target. Cyber attacks are digital in nature and as such, they are not tied to specific geography, organization, and or person – finding the traces to the source is non-deterministic and ambiguous. In a way, it reminds me of real-life terrorism as an effective distributed warfare model which is also difficult to mitigate. The known military doctrines always assumed a…

cybersecurity

Taming The Security Weakest Link(s)

By Dudu Mimran | February 26, 2015September 29, 2020 by Dudu Mimran

Overview The security level of a computerized system is as good as the security level of its weakest links. If one part is secure and tightened properly and other parts are compromised, then your whole system is compromised, and the compromised ones become your weakest links. The weakest link fits well with attackers? mindset which always looks for the least resistant path to their goal. Third parties in computers present an intrinsic security risk for…

cybersecurity

The Emergence of Polymorphic Cyber Defense

By Dudu Mimran | February 10, 2015September 29, 2020 by Dudu Mimran

Background Attackers are Stronger Now The cyber-world is witnessing a fast-paced digital arms race between attackers and security defense systems, and 2014 showed everyone that attackers have the upper hand in this match.? Attackers are on the rise due to their growing financial interest?motivating a new level of sophisticated attacks that existing defenses are unmatched to combat. The fact that almost everything today is connected to the net and the ever-growing complexity of software and…

cybersecurity

To Disclose or Not to Disclose, That is The Security Researcher Question

By Dudu Mimran | January 12, 2015September 29, 2020 by Dudu Mimran

Microsoft and Google are?bashing each other on the zero-day exploit in Windows 8.1 that was disclosed by Google last week following a 90 days grace period. Disclosing is a broad term when speaking about vulnerabilities and exploits – you can disclose to the public the fact that there is a vulnerability and then you can disclose how to exploit it with an example source code. There is a big difference between just telling the world…

cybersecurity

Google Releases Windows 8.1 Exploit Code – After 90 Days Warning to Microsoft

By Dudu Mimran | January 4, 2015September 29, 2020 by Dudu Mimran

Google Project Zero has debuted with the aim of solving the vulnerabilities problem by identifying zero-day vulnerabilities, notifying the company which owns the software, and giving them 90 days to solve the problem. After 90 days they publish the exploit. And they just did it to Microsoft. I remember quite a while ago when we decided at the cyber labs at Ben-Gurion University to adopt such a policy following our discovery of a vulnerability in…

cybersecurity

Counter Attacks – Random Thoughts

By Dudu Mimran | January 2, 2015September 29, 2020 by Dudu Mimran

The surging amount of cyber attacks against companies and their dear consequences pushes companies to the edge. Defensive measures can go only so far in terms of effectiveness, assuming they are fully deployed which is also far from being the common case. Companies are too slow to react to this new threat which is caused by a fast-paced acceleration in the level of sophistication of attackers. Today companies are at a weak point. From a…

cybersecurity

Cutting Down North Korea’s Internet

By Dudu Mimran | December 28, 2014December 28, 2019 by Dudu Mimran

Could be interesting to understand whether cutting down North Korea from the internet was a defensive measure due to a huge amount of ongoing attacks or was it just a preventive measure. Definitely cutting down the internet has become another weapon in the war chest of the US. The question is now: do other countries have such power of cutting down areas? The net infrastructure should be evaluated for such attack vector.

cybersecurity

A Tectonic Shift in Superpowers or What Sony Hack Uncovered to Everyone Else

By Dudu Mimran | December 24, 2014September 29, 2020 by Dudu Mimran

Sony hack has flooded my news feed in recent weeks, everyone talking about how it was done, why, whom to blame, the trails which lead to North Korea, and the politics around it. I?ve been following the story from the first report with an unexplained curiosity and was not sure why since I read about hacks all day long. A word of explanation about my “weird” habit of following hacks continuously, being a CTO of…

cybersecurity

Why CEO should blog – my personal experience

By Dudu Mimran | May 19, 2005September 29, 2020 by Dudu Mimran

Amanda Watlington relates to USAToday article on Blogging and CEO on a post Blogs and Feeds: CEO Blogs — Where Angels(?) Fear to Tread. I am a CEO of a new venture company and a blogger for the last four months and I wanted to write down what do I get from it: 1) Feedback on my thoughts – As a CEO and a person in general I have different opinions on various subjects related…

cybersecurity

Is Microsoft the Big Bad Wolf?

By Dudu Mimran | May 19, 2005January 13, 2019 by Dudu Mimran

I am writing many times on strategies and competition related to Microsoft and I wanted to clear the reason why I relate to this company a lot and why I am not on their side with my advice especially when it comes to competition with new ventures: 1) To put it up front I think that Microsoft is an excellent company with many strong core capabilities and deep strategic thinking that makes them a very…