INTERNET AND INTRANET SECURITY MANAGEMENT: RISKS AND SOLUTIONS

By H. CAONL

GLOBAL WINDOWS MALWARE INFECTION ANALYSIS REGIONAL WINDOWS MALWARE INFECTION ANALYSIS THE THREAT LANDSCAPE IN THE MIDDLE EAST AND NORTHERN AFRICA 10 YEAR REGIONAL REPORT CARD FOR THE MIDDLE EAST AND NORTHERN AFRICA THE THREAT LANDSCAPE IN THE EUROPEAN UNION AND EASTERN EUROPE 10 YEAR REGIONAL REPORT CARD FOR THE EUROPEAN UNION 10 YEAR REGIONAL REPORT CARD FOR SELECT EASTERN EUROPEAN LOCATIONS THE THREAT LANDSCAPE IN SELECT LOCATIONS IN ASIA AND OCEANIA 10 YEAR REGIONAL REPORT CARD FOR ASIA AND OCEANIA THE THREAT LANDSCAPE IN SELECT LOCATIONS IN THE AMERICAS 10 YEAR REGIONAL REPORT CARD FOR THE AMERICAS REGIONAL WINDOWS MALWARE INFECTION ANALYSIS CONCLUSIONS WHAT DOES THIS ALL MEAN FOR CISOS AND ENTERPRISE SECURITY TEAMS GLOBAL MALWARE EVOLUTION GLOBAL MALWARE EVOLUTION CONCLUSIONS THE EVOLUTION OF RANSOMWARE DELIVERY MECHANISMS EXECUTION MECHANISMS RANSOM PAYMENT METHODS RANSOM DEMANDS AND COMMUNICATIONS BUSINESS MODEL THE GREAT DEBATE ARE ANTI MALWARE SOLUTIONS REALLY WORTHWHILE CHAPTER 5 INTERNET BASED THREATS A TYPICAL ATTACK PHISHING ATTACKS MITIGATING PHISHING DRIVE BY DOWNLOAD ATTACKS MITIGATING DRIVE BY DOWNLOAD ATTACKS MALWARE HOSTING SITES MITIGATING MALWARE DISTRIBUTION POST COMPROMISE BOTNETS AND DDOS ATTACKS CHAPTER 6 THE ROLES GOVERNMENTS PLAY IN CYBERSECURITY THE PURSUIT OF HAPPINESS GOVERNMENTS AS CYBERSECURITY MARKET PARTICIPANTS GOVERNMENTS AS STANDARDS BODIES GOVERNMENTS AS ENFORCERS LAW ENFORCEMENT GOVERNMENTS AS DEFENDERS PUBLIC SAFETY NATIONAL SECURITY CHAPTER 7 GOVERNMENT ACCESS TO DATA UNDERSTANDING GOVERNMENT ACCESS TO DATA THE SIGNALS INTELLIGENCE SCENARIO THE UNLAWFUL GOVERNMENT ACCESS TO DATA SCENARIO THE LAWFUL GOVERNMENT ACCESS TO DATA SCENARIO LAWFUL GOVERNMENT ACCESS TO DATA THE CLOUD ACT AND THE PATRIOT ACT MANAGING THE RISK OF GOVERNMENT ACCESS TO DATA THE VOLUME OF LAW ENFORCEMENT REQUESTS THE PROBABILITY OF US LAW ENFORCEMENT ACCESSING DATA IN THE CLOUD THE GDPR FISA SECTION 702 AND SCHREMS II THE PROBABILITY OF US INTELLIGENCE ACCESSING DATA IN THE CLOUD MITIGATING GOVERNMENT ACCESS TO DATA SETTING AND UNDERSTANDING THE SCOPE SETTING REALISTIC OBJECTIVES PLANNING DATA PROTECTION CONTROLS CHAPTER 8 INGREDIENTS FOR A SUCCESSFUL CYBERSECURITY STRATEGY WHAT IS A CYBERSECURITY STRATEGY OTHER INGREDIENTS FOR A SUCCESSFUL STRATEGY BUSINESS OBJECTIVE ALIGNMENT CYBERSECURITY VISION MISSION AND IMPERATIVES SENIOR EXECUTIVE AND BOARD SUPPORT UNDERSTAND THE RISK APPETITE REALISTIC VIEW OF CURRENT CYBERSECURITY CAPABILITIES AND TECHNICAL TALENT COMPLIANCE PROGRAM AND CONTROL FRAMEWORK ALIGNMENT AN EFFECTIVE RELATIONSHIP BETWEEN CYBERSECURITY AND IT SECURITY CULTURE CHAPTER 9 CYBERSECURITY STRATEGIES MEASURING THE EFFICACY OF CYBERSECURITY STRATEGIES CYBERSECURITY STRATEGIES PROTECT AND RECOVER STRATEGY CFSS SCORE PROTECT AND RECOVER STRATEGY SUMMARY ENDPOINT PROTECTION STRATEGY ENDPOINT PROTECTION STRATEGY SUMMARY PHYSICAL CONTROL AND SECURITY CLEARANCES AS A SECURITY STRATEGY PHYSICAL CONTROL AND SECURITY CLEARANCES STRATEGY SUMMARY COMPLIANCE AS A SECURITY STRATEGY COMPLIANCE AS A SECURITY STRATEGY SUMMARY APPLICATION CENTRIC STRATEGY APPLICATION CENTRIC STRATEGY SUMMARY IDENTITY CENTRIC STRATEGY IDENTITY CENTRIC STRATEGY SUMMARY DATA CENTRIC STRATEGY DATA CENTRIC STRATEGY SUMMARY ATTACK CENTRIC STRATEGY ATTACK CENTRIC STRATEGY SUMMARY ZERO TRUST CYBERSECURITY STRATEGIES SUMMARY DEVOPS AND DEVSECOPS