threat management on Much Ado About IThttps://it.knightnet.org.uk/tags/threat-management/ Recent content about threat management from Much Ado About IT | Ramblings and rantings from IT Architect & Designer, Julian KnightHugo | gohugo.io | Theme twenty-sixteenen-gbThis work is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License.Mon, 24 Apr 2023 21:27:28 +0000Cloudflare Now Activehttps://it.knightnet.org.uk/2014/10/cloudflare-now-active.htmlhttps://it.knightnet.org.uk/2014/10/cloudflare-now-active.htmlFri, 17 Oct 2014 08:50:05 +0000https://it.knightnet.org.uk/2014/10/cloudflare-now-active.html
<p>After the recent high-profile vulnerabilities, I decided to turn on the free version of <!-- raw HTML omitted -->CloudFlare<!-- raw HTML omitted --> for this domain.</p> <p>CloudFlare provides a reverse proxy service that sits in front of your domain. It will serve content where it can on your behalf (caching), optimise content where it can (e.g. minimising JavaScript, HTML, CSS, etc.). But even more important from my perspective is their ability to protect against a number of vulnerabilities.</p> <p>The most obvious protection – because this is where CloudFlare started – is DDOS protection. DDOS is a way of throwing very large numbers of requests at your domain, preventing legitimate access. But CloudFlare also now provide protection against other threats and it is interesting to look at the dashboard and seeing a bunch of threats being filtered out every few days.</p> <p>A recent add-on, especially to the free service, is the ability for CloudFlare to provide <!-- raw HTML omitted -->SSL security for free<!-- raw HTML omitted -->. This means that your whole site can present as HTTPS (encrypted HTTP) &amp; you can even enforce this so that visitors cannot connect without encryption. This is easily done without the hassle normally associated with creating and maintaining SSL security.</p> <p>Kudos to CloudFlare for providing this excellent service and for providing a useful free version. I’m happy to recommend it to everyone who runs a web site or service.</p> <h2 id="update-2018-05-04">Update 2018-05-04</h2> <p>I still use CloudFlare for most of my published endpoints.</p> <p>However, this blog has now been moved from self-hosted WordPress to a Hugo-based site hosted by Netlify. Netlify allows me to set all manner of security headers and has inbuilt support for Let&rsquo;s Encrypt certificates.</p> <p>So Cloudflare protection is no longer required for this blog.</p>
Julian KnightBloggingDevelopmentSecuritysecurity threatsthreat managementvulnerabilitiesWebStay Secure! The Latest Recommendations for IT Securityhttps://it.knightnet.org.uk/2013/08/stay-secure-the-latest-recommendations-for-it-security.htmlhttps://it.knightnet.org.uk/2013/08/stay-secure-the-latest-recommendations-for-it-security.htmlTue, 27 Aug 2013 21:07:14 +0000https://it.knightnet.org.uk/2013/08/stay-secure-the-latest-recommendations-for-it-security.html
Individuals and enterprises do not understand the value of their Information nor how to protect it. This article attempts to reveal simple and practical ways to protect IT assets and outlines some of the latest thinking and tools from industry experts.
<p>IT Security changes over time and it is important to stay abreast. New threats are appearing all the time and so threat management also needs to change.</p> <p>Here are some tips and pointers to the current thinking in IT Security.</p> <p>Back in February of this year (2013), the <!-- raw HTML omitted -->Centre for Strategic and International Studies (CSIS) in the USA published a short but to the point paper<!-- raw HTML omitted --> on how to successfully combat the majority of current cyber security threats. The paper gives an excellent background to the latest threats without getting too technical. But the great thing is the 4 steps that they give to combating the majority of current threats.</p> <p>These are summarised as:</p> <!-- raw HTML omitted --> <pre><code>&lt;li&gt; &lt;div dir=&quot;ltr&quot; data-font-name=&quot;g_font_p0_1&quot; data-canvas-width=&quot;152.32256276321408&quot;&gt; &lt;em&gt;Patch operating system vulnerabilities, for the same reasons discussed above&lt;/em&gt;. &lt;/div&gt; &lt;/li&gt; &lt;li&gt; &lt;div dir=&quot;ltr&quot; data-font-name=&quot;g_font_p0_1&quot; data-canvas-width=&quot;613.1027311220175&quot;&gt; &lt;em&gt;Minimize the number of users with administrative privileges, the highest level of authority to make changes or undertake actions on a network&lt;/em&gt;.&lt;br /&gt; Users with administrative privileges are the goldmine for the bad guys. They are the easy back door into the heart of your enterprise systems. &lt;/div&gt; &lt;/li&gt; </code></pre> <!-- raw HTML omitted --> <!-- raw HTML omitted --> <!-- raw HTML omitted -->
Julian KnightGeneralanti viruscyber securityEnterprise SystemspatchingSecuritysecurity threatssoftwarethreat managementvulnerabilitieswhitelisting