My GWU Discussion – Part 3 – What to do About Cybersecurity
This is my third (and thankfully to most readers, last) post about a class at I gave at George Washington University earlier this year. The professor, Dr. Robert McCreight, invites me to be a guest lecturer on cyber-security from time to time. I posted a copy of my slides in the previous two posts and do so again here:
George Washington University Slides on Cyber-Security
In the last post I returned as I often do to the question “How to be secure when each component of your solution is itself insecure?”. I find that most practitioners, and in particular their management, are in denial on this issue. While my first suggested step which is to practice security hygiene is useful it does not help against a determined attacker.
While I am not sure if anything short of not connecting to anyone will work all the time, two possible approaches seem promising.