research/culture-around-logging Logging Is Not an Afterthought: What Developers Told Us About Secure Log Design Logs leak what they should protect and miss what investigators need. Our developer survey shows why, and what forensic-ready logging requires. I have written before about logging debt: the slow build-up of poor logging decisions that…
Blog Posts
-
-
Meet Nordvakt
It is Monday morning and fifty alerts are waiting for you. A few of them matter a great deal. Some are the same event reported twice by two different sensors. Some are nothing at all. Nobody is going to tell you which is which. That is the job of a…
-
Behaviorism: A Double-Edged Sword in Education
teaching/reflections Behaviourism in Teaching: Tool or Weapon? It is not just what we use in teaching that matters, but how we use it. As teachers we explore many pedagogical approaches, but one that often raises questions is behaviourism. My recent reflections have led me to ask whether behaviourism, a method…
-
If you only knew the power of the log side
This article focuses on a topic that is near and dear to my heart: logs. Whether the logs are application, infrastructure or device logs they are all important; critical even, I would argue and I’d hope you’d agree. Have you ever considered logs to potentially accumulate debt much the same…
-
The five philosophies of designing logs
TL;DR: Your logs should be simple, and structured, they should also contain enough information without disclosing sensitive data. Often accidental information disclosure within the logs can lead to future breaches. 1. The first philosophy: Keep it simple, structured and detailed enough: The first part of our first key philosophy when…
-
Why are we getting it so wrong in Healthcare and Medical Device Security?
Authors : Veronica Schmitt and Nina Alli We have observed the state of cyber-security in terms of healthcare and medical devices. We have been part of these industries as patients, dealing with digital forensics and incidents within these industries, as biohackers and researchers. We have seen the threat landscape and…
-
Medical device versus Healthcare device
Since becoming more active in the Biohacking and Healthcare Security field, I have noticed many terms used interchangeably (and incorrectly!) to describe devices within a Hospital or other Health Care settings. For example: all devices within healthcare and medical are seen as a medical device and they are all equal…
-
The story of a Patient
I am sitting here at a loss for words. There are simply too many thoughts going around in my head. Yes, most of them are nerves. You see tomorrow I will wake up, and head to hospital. Tomorrow, January the 14th I will have my old leads removed, and my…
-
Patient to Researcher
My journey to becoming an Independent Researcher with Medtronic When I received my implant 13 years ago, I became fascinated with the technology that kept me alive. I wanted to know more, and as any curious Hacker would do I researched my device. However I took a detour on my…
-
DEF CON Group DC2711 Event
This past weekend I had the privilege of attending the inaugural event for the DEF CON Group Johannesburg DC2711. The event saw a line up of both international and local speakers. I personally got to share the stage with fellow Goon and friend Jayson Street. The event saw an emotional…