Winn Schwartau is a security, privacy, infowar, and cyber-terrorism expert who has been paving the way in cybersecurity since 1983. He is often referred to as the “Civilian Architect of Information Warfare” and is known for his straight-shooting, no-BS originality. In this episode, Winn joins the No Password Required team to talk about how he went from the world of rock-and-roll to cybersecurity, times when he pissed off the CIA, and why Louis Armstrong wasn't the best teacher he ever had (you read that right!) Ernie, Clabby, and Pablo talk about the reality of cybersecurity policies and employee training. In the Positively Cyber segment, Pablo introduces Snoop Dogg as the Dark Net Intelligence Analyst of our fictitious organization.

No Password Required

Winn Schwartau – an infowar expert who was almost certainly the first to pave the path from rock-and-roll to cybersecurity

Charity Wright is a Cyber Threat Intelligence Analyst at Recorded Future who specializes in Chinese threats and disinformation. Charity is a Super Mario-loving extrovert who utilizes her research and inferencing skills in both of her full-time jobs; threat analyst and mom. Charity is a Chinese Linguist who often spends her workdays scrolling through social media searching for trolls and Chinese disinformation/propaganda. In this episode, Charity joins the No Password Required team to talk about how she came to be a linguist in the U.S. military, possibilities of where China will go in the future, and why curiosity has been one of the most essential aspects of her career. Ernie, Clabby, and Pablo talk about Clabby’s “Yahoo! news rule” and the channels they use to stay informed in the ever-changing cyber industry. In the Positively Cyber segment, Pablo introduces the sophisticated, yet mysterious, Jay Gatsby as the Chief Financial Officer of our fictitious cybersecurity organization.

Charity Wright - a Cyber Threat Intelligence Analyst who is an expert on social media trolls and Super Mario

Dr. Greg Hall is a Research Scientist at the Institute for Human-Machine Cognition and the University of West Florida. Dr. Hall is a Corvette-driving car lover who considers ALF to be one of the classics and has great taste in hats. He also does research in full-spectrum cyber operations and contributes to the Florida Cyber Range, a digital platform that provides training and testing solutions for academic, government, military, and industry. In this episode, Dr. Hall joins the No Password Required team to discuss his research in full-spectrum cyber operations, why the sit-and-spin has made a place in history as the best (and possibly most dangerous) childhood toy, and more. Ernie, Clabby, and Pablo discuss the government’s Rewards for Justice Program and the new $10 million reward for information. In the “Positively Cyber” segment, Pablo challenges Clabby by welcoming Harvey Specter to our fictitious cybersecurity organization as a Privacy and Cybersecurity Lawyer.

Dr. Greg Hall - a Corvette-driving Research Scientist who built his own video games because his dad knew that the Atari 800 was the beginning of the computer revolution

Dan Burke is the Cyber Practice Leader at Woodruff Sawyer, one of the largest insurance brokerage and consulting firms in the US. Dan is a natural optimist and family man who believes every day is going to be the best day and the next shot will always be his greatest golf shot. In this episode, Dan joins the No Password Required team to talk about his personal connection to Colby-jack cheese, the most misunderstood things about cyber risk and insurance, and his bucket-list golfing spots. Ernie, Clabby, and Pablo discuss the recent Colonial Pipeline/Bitdefender controversy and the pros and cons of publicizing intelligence that could help ransomware victims. In the “Positively Cyber” segment, Pablo introduces the iconic Winston Wolfe to our fictitious cybersecurity organization as a Data Loss Prevention freelancer.

Dan Burke - a Cyber Practice Leader and natural optimist who believes every day is the best day

Phillip Tarrant is the SOC Technical Manager at Compuquip Cybersecurity who is passionate about many things in life, including his pet chickens, building things both with and without a keyboard, disconnecting in nature, and welcoming people into the field of cybersecurity. In this episode, Phillip joins the No Password Required team to talk about his unique journey into the field of cybersecurity, why chicken diapers are crossing the line, why the Empire is in serious need of some data protection policies, and more. Ernie, Clabby, and Pablo discuss the presidential administration’s new cybersecurity initiatives in response to the SolarWinds attack and what they mean for the future. In the “Positively Cyber” segment, Pablo compares two members of the Mystery Incorporated gang and analyzes whether Scooby-Doo or Velma would be the better fit for our fictitious cybersecurity organization.

Phillip Tarrant — a SOC Technical Manager who builds things with keyboards and blowtorches and thrives when things go "fowl"

Rachel Tobac is the CEO and co-founder of Social Proof Security who hopes to one day work herself out of a job by improving education and awareness of social engineering attacks. In this episode, Rachel joins the No Password Required team to talk about her path from studying behavioral psychology to starting a successful cybersecurity company, why Shih Tzu’s would be the best canine cybersecurity professional, how her quirky skills serve as an asset to her company, her passion for improving diversity in the cyber and technology industries, and more. BONUS: she sings an info-sec sea shanty that is as catchy as it is informative. Clabby and Ernie talk about the recent hack on the Molson Coors Beverage Company, and in the “Positively Cyber” segment, Pablo analyzes why the Mandalorian would be the perfect fit for showing our new recruits “the way” in our fictitious cybersecurity organization. You should check this episode out soon; if Rachel is correct about the time travel butterfly effect, you may never get another chance...

Rachel Tobac — an OSINT expert who credits much of her success to her improv comedy skills and her childhood mentor, Harriet the Spy

Roger Grimes is the defense-driven evangelist at KnowBe4 who confidently defines himself as the best in the world at defending against hackers. In this episode, Roger joins the No Password Required team to discuss how being a terrible accountant led him to the world of cybersecurity, why octopi cannot be trusted, and why music is the best way to create powerful connections. Additionally, Clabby and Pablo discuss insights from the National Security Agency’s 2020 cybersecurity year in review. In the “Positively Cyber” segment, Pablo analyzes why Hermione Granger’s work ethic and determination would make her the perfect fit for Senior Director of Threat Intelligence in our fictitious cybersecurity organization.

Roger Grimes — a believer that the key to internet safety is simple, however, having an octopus as a pet is much more complex and scary

Shane Young is a penetration tester at Rapid7 whose real-life acting and cyber skills would have been a great addition to the “Oceans 11” team. In this episode, Shane joins the No Password Required team to share some of his exciting stories as a penetration tester, how hacking his high school's network got him into the world of cybersecurity, and why LEGO bricks are really made for adults, not kids. Additionally, Shane, Ernie, and Clabby discuss The Mandalorian and the Star Wars universe (no spoilers!) Clabby and Ernie explore the controversial GoDaddy phishing campaign and the ethical ramifications of company phishing tests. In the “Positively Cyber” segment, Pablo Torres analyzes why Mulan has the skills and dedication to be a savvy network defender in our fictitious cybersecurity organization. LEGO® is a trademark of the LEGO Group of companies, which doesn't sponsor, authorize, or endorse this podcast.

Shane Young — a pen tester at Rapid7 with a passion for LEGO bricks, Star Wars, and sometimes LEGO Star Wars

Melinda Lemke is the Head of Information Security at King & Spalding with a decade of leadership experience in the cyber industry. In this episode, Melinda joins the No Password Required team to talk about her experience as a woman and leader in this field, how professional mentors can enhance success, and the best yacht-rock bands of all time. Maybe most importantly, the team discusses the John Hughes movie universe and why Kevin McAllister is a better problem-solver than Ferris Bueller. Additionally, Ernie and Clabby explore the importance of password security and real-world ransomware attacks, including the ransomware attacks on Miami-Dade county schools. In the “Positively Cyber” segment, Pablo Torres explores the reasons why John Wick would be the perfect candidate for an elite penetration-tester position in our fictitious cybersecurity organization.

Melinda Lemke — an inherently trusting person in an inherently distrusting profession

Stephen “Scuba” Gary is a cyber intelligence professor at the University of South Florida with over 15 years of experience in the cybersecurity industry. In this episode, Scuba joins the No Password Required team to discuss his journey in the field of cybersecurity, how one gets the nickname Scuba without scuba diving, and why math nerds throw the best parties. Scuba, Ernie, and Clabby analyze ransomware attacks in Florida, security lessons to be learned from the 2020 elections, and more. In the “Positively Cyber” segment, Pablo Torres explores why Peter Quill, aka the Star Lord, aka the leader of the Guardians of the Galaxy, would be a perfect fit for Chief Technology Officer in a fictitious cybersecurity organization.

"Scuba" Steve Gary — a journey from math camp to cyber intelligence

With the rise of cybercrime comes the need for cyber forensics, and this episode’s guest, Dr. LeGrande Gardner has been in the field of digital evidence for more than 30 years. Currently, he is an instructor in the Criminology Department at the University of South Florida, where he also serves as the Director of the MS in Cybercrime degree program and administrates the Graduate Certificate Program in Digital Forensics.  Co-hosts Bill McQueen and Ernie Ferraresso joined Dr. Gardner for a discussion about digital evidence, its role in the justice community, and opportunities for the future. The field of cyber forensics started rather simply, as a way to detect and connect the pieces of a crime.  As evidence was being submitted into the justice system, a need for increased scientific methodologies and protocols grew to preserve legal integrity and the rights of the accused.  Cyber forensic professionals are able to examine a range of devices, networks--even the cloud--to uncover criminal activity and gather evidence that can lead to legal prosecution. Dr. Gardner discusses how advances in computer science have made an impact in the ability to locate criminals. In his first example, he shares how hash algorithms are used to catch pedophiles and provide a digital footprint to catch larger pedophile rings. Next, he details the Target breach, where criminals were able to hack the nationwide retailer via their air conditioning’s computerized system. Then, he talks about how search warrants involving cybercrime uncovered how criminals were using their neighbor’s open IP addresses, putting routers unknowingly in their attics, and other deviousness that thwarted detection and capture. Unfortunately, Dr. Gardner reveals, international criminals are even more elusive, but that having solid cyber forensics can help law enforcement agencies from multiple countries coordinate efforts.Cyber forensics now has several sub-specialties, such as cloud forensics, network forensics, malware forensics, IoT forensics, and vehicle forensics.  Many colleges and universities are developing programs and training around these expanding and evolving sub-specialties. Dr. Gardner points out that this is a great time to be a cybercriminal and there will be an increased need for cyber forensic technicians and digital evidence specialists to combat the widespread crime.  There is a push for law enforcement officers to receive training in cyber forensics to facilitate crime scene collections, recognize patterns, and maintain protocols.  Dr. Gardner’s history in law enforcement and as a Task Force Agent with the FBI’s Cyber Crime Unit gave him a special insight to device and data collection at crime scenes and he shares his thoughts on training opportunities in police academies.  Hackers and cyber criminals aren’t the only reasons the field of cyber forensics is growing.  Corporations are also employing their own forensic teams. Companies use digital evidence to substantiate their security and to protect themselves if a situation with an employee requires documentation.  Civil matters are increasingly including digital evidence, and professionals are being called upon to provide expert testimony.The need for cyber forensics professionals is growing exponentially, according to Dr. Gardner. There is no end in sight for the potential of this field and the importance it will play in protecting our security and stopping crime.TIME STAMPS00:43  Meet Our New Co-host: Ernie Ferraresso, Associate Program Director of Cyber Florida02:43 Who is Dr. LeGrande Gardner, Director of the MS in Cybercrime Degree Program, University of South Florida03:15  What is Cyber Forensics and Digital Evidence?04:47  Recognizing the field of Cyber Forensics05:59  Following the Rules of Evidence and Procedure06:33  The Growing Impact of Digital Evidence and Digital Exploitation  07:35  Evolving Field of Cyber Forensic Careers08:58  Collecting Cyber Forensic Data  09:51  Digital Evidence as a Science12:52 Components of Digital Evidence13:45 Hash Algorithms, Digital DNA14:25 Child Pornography Hash Algorithms14:55  Hash Algorithms are like Fingerprints  16:37  Verifying and Preserving Digital Evidence Using Scientific Protocols18:29  Training to be a Cyber Forensic Technician or Specialists21:34  Specialized Cyber Forensic Fields24:01 Criminals, Digital Evidence & Law Enforcement26:30 Training Law Enforcement for Digital Evidence Collection28:24 Finding Breaches and Identifying Vulnerabilities31:00 How to Start a Cyber Forensic Investigation31:29 Cyber Forensic Incident Response34:38  Cyber Police of the Future35:35  Trends in Cyber Forensic Prosecutions37:05 International Cyber Criminals and Cyber Forensics38:19 Every Cop as a Cyber Cop38:39 How is Cybercrime Changing  41:26 The Future of the Cyber Forensic Field42:24  Corporate Digital Forensic Units and Civil Courts44:43  Cyber Forensic Academics, Digital Certifications and Careers

Cyber Forensics – Fighting Cybercrime with Digital Evidence

Kerry Long’s role at IARPA is to make the Intelligence Community more secure in the tech world. His vision of the future of cloud computing is to fundamentally change the way we use computers to be more secure. His hope is to redesign how all of us interact with computers to get ahead of hackers and breaches. His program, VirtUE, will soon be released to the world as open source code to promote cloud security and ingenuity. He also philosophizes about what cyber space really means as the only truly human-created domain.When asked what is the most critical aspect of cloud security, Mr. Long answered, “Depending on users to secure their environment.” The current shared service model has cloud hosts providing a hypervisor (or virtual machine monitor [VMM]) and physical security of the data center while the user is responsible for their own data security. Most users are not security experts and they shouldn’t be, as Long argues that the cloud providers need to take on more security responsibilities. He points out that small-to-medium-sized businesses rarely have adequate IT resources to properly secure their own servers and, therefore, the cloud is a much more secure option because of hypervisors and other systems being updated nearly every day.Long goes on to detail how we build things without knowing the ramifications because engineers can’t fathom every possible way a user would or could use it. The problem with pre-cloud computing is that we were stuck with those decisions for decades. “What I love about the cloud is it constantly gives you a chance to do-over.The cloud is anything that we want it to be. The cloud providers change out their infrastructure every 18 months to two years with brand new hardware. They are innovating and adding new things every week, every two weeks, and taking things out that don’t work. It’s an amazing opportunity as an engineer to say ‘hey, actually I thought I was smart, but I’m smarter now.’VirtUE (Virtuous User Environment) is an IARPA program managed by Mr. Kerry Long that is an example of using the cloud and re-engineering it to be more secure for tomorrow. Traditional memory computers are running too many roles at once while in comparison cloud computing can separate roles. VirtUE is trying to engineer ways to make the separate environments function seamlessly for users while maintaining the security. This program is coming to an end soon, and will be released as open source code for the world to examine and work on.VirtUE is related to SCITE (Scientific advances to Continuous Insider Threat Evaluation)Link to IARPA: www.iarpa.gov IARPA facilitates the transition of research results to their Intelligence Community customers for operational application.Link to IARPA profile for Kerry Long: https://www.iarpa.gov/index.php/20-program-managersMr. Kerry Long’s Research Areas at IARPA: Cloud security, evolving security using the technologies of the Cloud, hypervisor security and instrumentation, novel operating system monitoring techniques, malicious cyber behavior detection analytics, edge computing TIME STAMPS00:07 Cloud Computing01:11 Who is Kerry Long, IARPA, Cybersecurity02:00 Mission of IARPA02:45 Cloud Security and Potential of Cloud Computing03:59 Getting Ahead of Security Breaches05:35 What is the most critical aspect of cloud security?07:11 Cloud security options for businesses and individuals09:58 What data is at risk of being stolen?12:38 Cyber Engineering13:50 Cloud Engineering & Infrastructure15:18 What is a VirtUE – Virtuous User Environment?18:59 How Safe is our Cyber Community?21:00 Redesigning Computing with the Cloud23:22 The Future of Computing24:18 VirtUE as Open Source

Securing the Cloud, VirtUE, and “Cyber Space” – the Truly Human Domain

This is part two of a two-part special edition that was recorded at the 2019 Cyber Florida Conference. In the first part, a panel of cybersecurity experts discussed “Cybersecurity and the C-Suite,” while the second part discusses partnerships and opportunities that bridge the gap for qualified cybersecurity personnel and our interconnected cyber ecosystem. The panel was moderated by Sprint’s Chief Information Security Officer Mark Clancy. On the panel sat three cybersecurity professionals who have years of expertise: Diane Janosek, Commandant of NSA's National Cryptologic School; Andy Zolper, SVP, CISO, and Head of Technology at Raymond James Financial; and Terry Roberts, CEO and Founder of WhiteHawk, Inc. (To learn more about Janosek, Zolper, and Roberts, listen to the The No Password Required Podcast episode titled “Cybersecurity in the C-Suite.”)This No Password Required episode began with the question, “What can the big guy do to help the small guy?” and panelists discussed the role of large corporations and technology service providers. Often small-to-mid-sized organizations are understaffed when it comes to their IT department and/or they are solely reliant on external providers for their security. Many larger organizations and service providers are making the investment to provide advanced security protocols because it impacts their products and, for some, it gives them a competitive edge in the marketplace. Larger corporations and service providers are carrying the responsibility of protecting smaller organizations, but it is a symbiotic relationship. Smaller organizations must do their part to have good cyber hygiene and understand their risks and their roles in preventing those risks.Motivating smaller organizations to have a proactive cyber culture is often dependent on two things: communication and risk. A panelist emphasizes that the success of motivation revolves around language. The key to communicating with C-level executives and business stakeholders is to provide information as it relates to them, using their industry-specific lingo, demonstrating their profit and loss potentials, and illustrating how it impacts their community. By answering “how can we partner in a way that shows that we want to mitigate risks to a point that we’re a stronger business partner” can solve some of the gaps in cybersecurity. “Don’t wait for someone to offer, ask,” is the advice of Andy Zolper when it comes to mitigating risks.Mark Clancy asked the panel, “How do you cyberize the CEO?” Cyberizing the CEO often begins with a review of their cybersecurity risk profile. By mapping risks to reputation and quantifying revenue to business impact can be the necessary wake-up call. “Cyberizing” was a phrase coined in part 1 of this series that is interpreted as educating/training C-level professionals to understand their company’s tech, their role in cybersecurity and operations, and their leadership in corporate cyber culture. “Cyberizing” encourages insight that helps build an adequate IT team or relationship with technology service providers. Cyberizing naturally encourages investing in employees as the greatest assets. It holds the belief that employees are responsible for maintaining good cyber hygiene, managing customer and partner relationships, and evolving with technology.Another solution offered is “cyberizing the principal.” This involves instilling the value of cybersecurity as soon as a child is handed technology. One panelist advocates for developing educational programs that incorporate cybersecurity in programs from elementary to college, with her belief that it will carryover good cyber hygiene from the home to the public and business sectors.Another component of closing the cybersecurity personnel gap is by encouraging information sharing in new ways, as well as, encouraging IT professionals to transition through various sectors and educational opportunities to keep their experience fresh and relevant. The panel discussed some of the current issues and possible solutions that involve sharing information, the importance of nonprofit interlocutors, the problem with classified versus unclassified information sharing, zero trust, and more. The cybersecurity experts also discussed educational opportunities, crossover through sectors and the role of leveraging academia and cyber labs to find solutions.In the final segment of the podcast, the guests discuss some of the highlights of the 2019 Cyber Florida Conference and list topics that they would like explored at the future conferences.You can find part 1 and 2, as well as other episodes of No Password Required Podcast, on our website at https://cyberflorida.org/podcast/. This special edition was recorded at the 2019 Cyber Florida Conference in Tampa, Florida. Learn about upcoming Cyber Florida events, including the Annual Conference, at cyberflorida.org or follow us on social media.TIME STAMPS01:30 Partnering Competitively & Cyber Ecosystem07:17 Cyberizing the CEO10:43 Cyberizing the Principal13:48 Public-Private Partnerships15:51 Nonprofit Interlocutor & Scaling Partnerships17:32 Collaborating for Information Sharing19:00 Zero Trust24:42 Classified vs Unclassified Sharing25:30 Surprises from the Cyber Florida Conference

Solutions to the Cybersecurity Personnel Gap

During Cyber Florida Conference 2019, a panel of respected cybersecurity experts gathered to share their insights on how cybersecurity impacts the C-level professional, changes in accountability and business models, and what it means to build a cyber-strong workforce. The panel was moderated by Mark Clancy, Chief Information Security Officer (CISO) for Sprint. The esteemed guests on the panel were Diane Janosek, NSA Commandant of the National Cryptologic School; Andy Zolper, SVP, CISO, and Head of Technology Infrastructure for Raymond James Financial; and Terry Roberts, Founder and President of WhiteHawk, Inc.C-level professionals have been a driving force in developing business and securing infrastructures. Recent breaches resulting in CEO firings and similar repercussions are impacting the way many C-level leaders are engaging with technology and their workforce’s cyber culture. Cyber Florida took the opportunity at the conference to help both the C-level professionals and stakeholders who are part of their decision-making process with a discussion titled “Cybersecurity and the C-Suite.” The panelists discussed why it is vital for C-level executives to embrace cybersecurity education and innovation. The experts spoke to what factors C-level leadership face in their organization and workforce in relation to security, networking, and data fundamentals. A large portion of the conversation focused on identifying what it takes to onboard a workforce in this computer-centric modern life (with the phrase “cyberize” being coined to discuss the process), and understanding the crossover that is occurring because of the inter-connectivity of roles and risks.Panelists discussed case studies and resources, such as cyber executive programs, where C-level professionals can:learn the basics of cybersecurity,embrace accountability at the C-level,identify the risks and opportunities of current infrastructure and future tech,learn how certain business models are changing as a response to technology,establish pillars for a robust cyber culture,understand independent cyber risk ratings as a commodity,develop a cyber-strong workforce, andcreate a constructive response plan to cybersecurity attacks and cybercrimes.This is a two-part edition with the second part discussing the personnel gap in cybersecurity and what can be done about it. You can find parts 1 and 2, as well as other episodes of No Password Required podcast, on our website at https://cyberflorida.org/podcast/. This special edition was recorded at Cyber Florida Conference 2019 in Tampa, Florida. Learn about upcoming Cyber Florida events, including the annual conference, at cyberflorida.org or follow us on social media.TIME STAMPS00:42 Who is Diane Janosek, Cybersecurity Expert, Cyber Security Woman of the Year02:03 Who is Andy Zolper, CISO at Raymond James Financial02:45 Who is Terry Roberts, Cybersecurity Exchange03:58 How to Communicate Cybersecurity to Leadership07:25 C-Level Accountability, Cyber Risk Ratings are a Commodity, Cyber Executive Program09:53 Hiring a Cybersecurity Workforce and Training a Cybersecurity Culture15:55 Innovation in Education for Cybersecurity and Cyber Risk Training18:50 Identifying, Leading and Managing Critical Skills21:54 Cyberize Your Team, Workforce Crossovers, and Cyber Defense Ecosystem26:07 Business Interruption and Constructive Actions to Address Cyber Crimes27:35 Cyber Executive Programs and Case Management

Cybersecurity and the C-Suite

Cyber threat intelligence is a conceptual term with an international impact. Agencies around the world are racing to identify and stop cybercriminals from infecting and infiltrating networks to use our data against us. In this episode of No Password Required, Dr. Sagar Samtani, assistant professor of information systems and decision sciences at the University of South Florida, explains the cyber threat intelligence (CTI) life cycle and what you and/or your organization should do to help protect data assets and prevent cyberattacks.Data is the prime target of many cybercriminals, yet what data they are searching depends on their goals. Are they scraping for social security numbers? Obtaining passwords? Collecting credit card numbers? Or worse? And why? It’s hard to imagine all the ways that data can be exploited.Your data is widely available depending on where and how you store your data and whom you give permission to access that information. Personal choices, like having a smartphone, can be a gateway to someone collecting your data. Being on the grid with a social security number, health insurance, financial accounts, all these bits of information are housed somewhere, and cybercriminals know this. With the help of artificial intelligence (AI), cybercriminals are able to scrape data faster than ever before and with the launch of quantum machines, our security choices will be paramount to protecting our identity and data assets.Cyber threat intelligence is helping individuals and industries protect themselves by understanding what is important, what are the exploits, and how to effectively respond. It is also helping to refine artificial intelligence algorithms to better assist in threat analytics. Dr. Samtani describes how industries are responding to industry-specific cybercrimes and developing response standards, protocols, and frameworks. He gives the example of the healthcare industry and HIPAA compliance as well as financial institutions and their evolving PCI compliance protocols. Understanding why a data asset is a target is a key facet to the cyber threat intelligence life cycle. What are the Four Phases of Cyber Threat Intelligence?Identify what assets you (an organization) possess that hold value, e.g., a social security number, and how to protect those assetsData collection that is relevant to those critical cyber assetsThreat analytics – whether traditional or AI techniques are being utilizedOperational Intelligence – how is the compromised data actually used or exploitedDr. Samtani explains there are two basic types of cyber threat intelligence analytics. First are the traditional threats, such as malware analysis. The second category is quickly changing as artificial intelligence evolves: data mining, text mining, and natural language processing based on pattern and techniques. Building systems that are designed to log and report data is crucial to discovering breaches and reporting them to prevent further penetration. Once Data is Stolen, Where Does it Go?Dr. Samtani discusses how hackers, cybercriminals, even geopolitical threat actors are using the data. He explains how the Dark Web is playing a role as a marketplace and toolbox for hackers. He details the four basic platforms--forums, Dark Web marketplaces, darknet carding shops, and internet relay chat--that cybercriminals use to complete their tasks and possibly grow their notoriety. Hacker behavior on the Dark Web is unlike traditional crime circuits where anonymity is preferred. There are tiers of hacker and they can use their screen names to build their reputation for monetization, credibility, and recognition. Artificial intelligence is being fine-tuned to help detect cybercriminals through intelligent predictions. Security Protocols and the Danger of OversharingIndividuals, organizations, developers, and even marketers play a role in security. Developers who were once tasked in racing product to market are now evolving to build-in and protect against exploits. Cultures are changing to bring awareness of the dangers of oversharing and learning from other’s breaches and incidents. Dr. Samtani and No Password Required host Bill McQueen discuss how oversharing can be as simple as a phone call asking what version a software is on and divulging that information, likening that to handing over the keys to a car. The Study of Cybersecurity ScienceAs computing evolves, so do the crimes; the cybersecurity field is in the infancy of where it will be potentially. Developing talented professionals to stop cybercriminals, building frameworks and protocols, and advocating for strong cyber cultures at home and in the workplace will be essential to the future. There is ample opportunity for employment and research in the field of cybersecurity, cyber threat research, and cyber threat intelligence. TIME STAMPS1:12 Who is Dr. Sagar Samtani1:30 How Does AI Automate Cybercrime and Cyber Threat Intelligence3:08 The Four Phases of the Cyber Threat Intelligence Life Cycle7:43 How Do You Rate and Respond to a Cyber Threat10:03 Industry Specific Frameworks for Threat Identification and Mitigation10:24 Data Characteristics in Cybersecurity11:20 Defcon and AI Village11:48 Tuning Algorithms for Cybersecurity12:54 How are Hackers Fighting Against AI Detection13:53 Developing Organizational Strategies to Counter Cybercrime15:19 Cybersecurity/AI Ethics and Rules18:40 Dark Web & Data19:38 Dark Web Platforms22:53 Access to Dark Web Platforms23:50 Hacker Notoriety – Reputation, Monetization and Detection27:40 Developers & Cyber Security Protocols29:35 Double-Edged Sword of Sharing Cybersecurity Capabilities30:40 Operational Intelligence and Risk Management31:58 Hacker Behavior on the Dark Web/Darknet33:40 What Can We Do to Protect Ourselves? Following the CTI Lifecycle35:44 Cybersecurity Science as a Legitimate Field

How is Artificial Intelligence Changing Cyber Crime?

The No Password Required Podcast connects with the cybersecurity industry’s most interesting professionals and shares their stories. No Password Required covers a variety of tech topics, from the cyber-related challenges facing law enforcement to the advent of quantum computing, this podcast explores the people and topics at the forefront of the field.

hubhopper

No Password Required

hubhopper