Cybersecurity

1.1.1

Security Landscape

In today's world, cybercriminals are a real and dangerous threat. Information security is a never-ending arms race; attacker sophistication grows exponentially.

Attacker Perspective

Security professionals must look at systems through the eyes of an attacker and stay one step ahead. The threat landscape includes script kiddies, organized crime, hacktivists, nation-states, and more. The goal is to defend against these actors and, often, to think like them.

Limitations and Goals

Eliminating all attacks is impossible. If a system is connected to the Internet, complete protection is unattainable. Instead, aim to minimize the occurrence of attacks and the damage from breaches, and to identify and stop breaches quickly.

Proactive Security Approach

Adopt a proactive stance: keep systems up to date, implement proper policies and procedures, and harden systems and networks. A key but often neglected aspect is being informed about the latest vulnerabilities, exploits, and defense techniques.

Staying Informed

The security landscape is constantly changing. Stay up to date by consuming credible sources: blogs, news outlets, forums, podcasts, and other information channels. Use the Internet as an endless information source to stay ahead.

Takeaways

As a security professional, your job is to stay one step ahead of an attacker, pursue proactive protection, stay informed, know your systems, and understand that breaches can occur. Your objective is to minimize exposure and to detect and stop an attack as fast as possible.