Issue: Winter 2024

From the Winter 2024 Issue

From the Editor-in-Chief

Author(s):

Adam Firestone, Editor-in-Chief , United States Cybersecurity Magazine

Hello, Over the last several decades the terms information security and cybersecurity have become conflated to the extent that they’re used interchangeably.  Information security is cybersecurity is information security.  For sources that do identify a difference between the two, it’s often two sides of the same coin: Information security speaks to the attributes of security … Read more

From the Winter 2024 Issue

From the Publisher

Author(s):

Karen Austin, CEO, United States Cybersecurity Magazine

Greetings! It is with immense pleasure that I announce the release of the Winter 2024 issue of the United States Cybersecurity Magazine.  As we move forward in the new year, we are thrilled to bring you the latest insights, trends, and developments in the ever-evolving field of cybersecurity. I would personally like to thank our … Read more

From the Winter 2024 Issue

,

The Unintended Consequences of Connectivity: How a Zero Trust Approach Can Shrink the Attack Surface

Author(s):

Tina Gravel, SVP Global Channels and Alliances , Appgate

Robert Metcalfe, co-inventor of Ethernet and considered one of the founding fathers of the modern Internet, is renowned for many things, but perhaps none more so than his namesake law: Metcalfe’s Law. Metcalfe’s Law was initially presented in 1980 to describe the intrinsic value of a telecommunications network and has since been popularized as ‘The … Read more

From the Winter 2024 Issue

,

It’s Time for Intelligence Teams to Recommend Operational Changes

Author(s):

A.J. Nash, Vice President of Intelligence, ZeroFOX

AJ Nash winter 2022

Increased Focus on Configuration Management and Crown Jewels is Vital to Success Many experts​​ in cybersecurity talk about the need for “intelligence-driven security,” but most consumers don’t know what to do with the Intelligence they are paying for​ or how to measure the value of the actions taken as a result of that Intelligence. This may be somewhat expected for … Read more

From the Winter 2024 Issue

,

What is Cyber Leadership?

Author(s):

Diane M Janosek, PhD, Esq, CISSP, CEO, JANOS LLC

What is Cyber Leadership?

The Case Study of the 2021 Hacking of a Florida Water Treatment Plant We often hear “cyber” and often hear “leadership”. So, what is “cyber leadership” and how is it any different than leading any other senior position in business? First, let us define cyber as a noun with both tangible and intangible aspects.  Cyber … Read more

From the Winter 2024 Issue

,

Avoiding Phantom Risk – Chasing Exploitability, Not Vulnerability

Author(s):

Alex Haynes, CISO , IBS Software

exploitability

The gravest warning a pen test report could contain are the words “The host may be vulnerable to remote code execution”.  It is hard to know what that immediately means. Did they get system access on a host? Nope. Was there a public exploit available for that version of software that enabled remote code execution? … Read more

From the Winter 2024 Issue

,

QKD versus PQC: A Quantum Showdown? Part 2

Author(s):

Hilary MacMillan, EVP for Engineering, CyLogic

QKD versus RQC

This is part two of a two-part article on secure key distribution in a post-quantum world.  Part one focused on Quantum Key Distribution (QKD) as a method to securely distribute encryption keys.  This article will focus on Post-Quantum Cryptography (PQC), which seeks new quantum-resistant (i.e., hypothesized, but can’t be proven, to be secure against) cryptographic … Read more

From the Winter 2024 Issue

,

QKD versus PQC: A Quantum Showdown? Part 1

Author(s):

Hilary MacMillan, EVP for Engineering, CyLogic

HilaryMacMilan-feature-wn19

The need for communications confidentiality has existed since humans developed language. Accounts of the Greco-Persian wars in fifth century B.C. described steganography, (hiding the existence of a message). Cryptography, on the other hand, hides a message’s meaning. The cryptographic task of encryption enables a sender to “scramble” a message’s content, rendering it unreadable to anyone … Read more

From the Winter 2024 Issue

,

Information Integrity and National Identity

Author(s):

Adam Firestone, Editor-in-Chief , United States Cybersecurity Magazine

History defines who we are and informs how Americans chart the nation’s future. It underpins representative government. Increasingly, historical records and documents are being converted to digital formats. This promises to make essential information available to more Americans than before. There are also troubling implications. It takes only a cursory examination of recent events to … Read more