Episode 48: S2E1 - Information Security

Topics discussed:

• IOT security
• Information Security is a People Problem, not a process or technical problem, most often
• YOU are part of security!
• Usable Security
  • Policy is Key
    • Balanced, Reasonable, understandable
• Deployment method: Secure first!
• Security Certification: CISSP & Security+
  • Security+ is an appetizer but may get the attention of a hiring manager
• Breaches discussed: Solarwinds & Cisco
• Tales from the FrontLine: FUD never works

Links mentioned in this episode:

• ZDnet on Solarwinds breach
• Krebs on Security - VMware flaw vector in Solarwinds breach
• Comic mentioned by Nathan
• Shodan
• Cisco Router Code Injection