Google Security

DECEMBER 8, 2022

Let us show you our work The publicly-verifiable architectures in PCC demonstrate how we strive to deliver confidentiality and control, and do it in a way that is verifiable and visible to users. To explain in even more detail, we’ve published a technical whitepaper for researchers and interested members of the community.

Data privacy 86

Data privacy Architecture Encryption Technology 86

McAfee

NOVEMBER 16, 2021

Instead, the best of breed functionality was purposefully reconstructed for SSE, using a microservices architecture that can scale elastically, and built on a platform-neutral stack that can run on bare metal and public cloud, equally effectively. From the start, the architecture was designed with zero trust in mind.

Architecture 90

Architecture Data privacy Software Engineering 90

Security Boulevard

JULY 21, 2022

NIST has developed a whitepaper which outlines the steps for migration to post-quantum cryptography. Prepare a quantum-safe architecture now. How will we respond if certain systems have updates while others have not? How can we cancel expired certificates? Crypto-agility. To overcome these challenges, careful planning is required.

Encryption 114

Encryption Authentication Backups Architecture 114

McAfee

DECEMBER 9, 2020

Companies have moved quickly to embrace cloud native applications and infrastructure to take advantage of cloud provider systems and to align their design decisions with cloud properties of scalability, resilience, and security first architectures.

Architecture 87

Architecture Risk Technology Penetration Testing 87

Security Boulevard

DECEMBER 19, 2023

Apparently, an employee at Company X used an LLM to help them finish a whitepaper. We need to remove biases about cybersecurity, particularly the false idea that security architecture, tools and systems we build are effective walls. They did something innocuous at first blush: Ask the AI to write an executive summary and a conclusion.

Cybersecurity 126

Cybersecurity Encryption Ransomware Backups 126

Security Boulevard

JANUARY 10, 2022

We published a whitepaper about Tactics, Techniques, and Procedures (TTPs) and also tools utilized by the DarkSide threat actors. . Most notably, US-based Colonial Pipeline Company paid 4.4 million USD after its operations were brought to a halt by this ransomware campaign in May 2021. Lessons Learned: 3. Lessons Learned: 5.

Cyber threats 141

Cyber threats Ransomware Risk Architecture 141

Google Security

FEBRUARY 25, 2025

Technologies like ARM's Memory Tagging Extension (MTE) and the Capability Hardware Enhanced RISC Instructions (CHERI) architecture offer a complementary defense, particularly for existing code. Looking forward, we're also seeing exciting and promising developments in hardware. This commitment is also reflected in our internal efforts.

Software 71

Software Technology Government Manufacturing 71

Thales Cloud Protection & Licensing

MAY 6, 2021

While NIST has developed a blueprint for Zero Trust - you can read about it in this whitepaper - which can serve as a great start for your journey, organizations need to understand that Zero Trust is above all a mindset. Just like Hercules and the road of Virtue, Zero Trust is a path leading to better security.

Social Engineering 96

Social Engineering Authentication Passwords Technology 96

McAfee

APRIL 20, 2020

In this blog we set out to see how choosing the correct security controls framework can go a long way in establishing a secure foundation, which then allows Enterprise security designers/decision makers to make more informed solution choices while selecting the controls and vendor architectures.

Architecture 54

Architecture Risk Data breaches Cyber threats 54

SecureList

JUNE 23, 2021

For a more detailed overview of the various adversarial attacks on malware classifiers, see our whitepaper and “ A survey on practical adversarial examples for malware classifiers “ Our goal. We created a number of new models with different architectures. They can also scan any files using the anti-malware product.

Malware 145

Malware Technology Architecture Cybersecurity 145

ForAllSecure

APRIL 3, 2019

To learn more about the synergistic power of symbolic execution and fuzzing, download the “What is Behavior Testing” whitepaper here. We found that the key for effective dynamic testing is to use these two techniques together: use deep reasoning of symbolic execution on some runs, while continuously fuzzing in the background.

Technology 52

Technology Software Marketing CISO 52

ForAllSecure

APRIL 3, 2019

To learn more about the synergistic power of symbolic execution and fuzzing, download the “What is Behavior Testing” whitepaper here. We found that the key for effective dynamic testing is to use these two techniques together: use deep reasoning of symbolic execution on some runs, while continuously fuzzing in the background.

Technology 40

Technology Software Marketing CISO 40

ForAllSecure

APRIL 3, 2019

To learn more about the synergistic power of symbolic execution and fuzzing, download the “What is Behavior Testing” whitepaper here. We found that the key for effective dynamic testing is to use these two techniques together: use deep reasoning of symbolic execution on some runs, while continuously fuzzing in the background.

Technology 40

Technology Software Marketing CISO 40

Security Boulevard

FEBRUARY 27, 2023

Our imaginary supermarket architecture consists of: A main supermarket store. Check out the whitepaper on “ 5 Questions to Ask About Your EDR ” to help you make an informed decision. The core of our analogy will be comparing supermarket stock to a business’s data. A 24-hour convenience store. A distribution center.

InfoSec 52

InfoSec Cybersecurity Risk Technology 52

Security Boulevard

APRIL 5, 2022

Their project README has some information on the background of the project in their own words, and the following resources give some more information on this awesome project: blog post , whitepaper , Black Hat USA slides , BlackHat USA presentation. Revoke-Obfuscation and this post stick purely to the obfuscation detection problem.

Architecture 69

Architecture InfoSec Risk Information Security 69

Cisco Security

NOVEMBER 18, 2021

Also cited is the directive to follow the National Institute of Standards and Technology (NIST) guidance when modernizing networks within a zero-trust architecture (see NIST Special Publication 800-207 ). But organizations did not receive the same level of prescriptive guidance across the entirety of the order.

Threat Detection 145

Threat Detection Encryption Government Technology 145

Adam Shostack

JANUARY 2, 2025

Bertram Dorn and Paul Vixie of AWS have a new whitepaper, Building security from the ground up with Secure by Design. Michael Nygard has a nice write up on using Architecture Decision Records in Documenting Architecture Decisions that I hadnt seen before. MITRE released a mini-site titled Threat Modeling with ATT&CK v1.0.0.

Architecture 130

Architecture 130