Social engineering methods and means for obtaining information have been around for ages.

They seem like simple requests or benign coordinated events, but the truth is that social engineering often exploits your most valuable asset.  Your users.  A compromised user can then be used to wreak havoc or throw deeper hooks into the targeted network.  Most network hacks are incremental in nature with an attack vector that often times leads to a compromised user, admin, or super user.

NIST (National Institute of Standards and Technology) has developed and published a Framework for Improving Critical Infrastructure and a Cybersecurity Framework.  This NIST framework contains a modernized set of standards and best practices that organizations can use to augment their risk management processes.  A complete copy of the NIST Framework in most current Version is available at

http://www.nist.gov/cyberframework

Harden windows servers

Windows Server  has new security features, best practice wizards, and sleeker interfaces to enhance the security posture of the operating system installation.  Windows Server has a major install base and is relevant to cover for server hardening. Most settings are similar and familiar between the different Windows desktop and server versions.

A technically minor attack like a defaced web page may or may not be as devastating as a backend server breach.  What about a multi-vector DDoS (distributed denial of service) attack?  The security management process helps your organization get a better understanding of your attack surface i.e., exposure to risk.  It is important for your organization to perform your own risk analysis to determine how costly a data breach or offline system is.

Let’s get an idea for the size and scope of the cyber security problem. 

Billions of devices, from security cameras to corporate workstations to points-of-sale, are all attached in one way or another via this thing we often refer to as the internet of things.  To add some size to this problem we have billions of people all relying on this every day for work, healthcare, social, and government services amounting to a huge cyber dependent economy.  Projected growth in both population and reach of the internet is going to continue to grow this problem with raw numbers alo

Introduction

Cyber security is both an active and comprehensive undertaking.  There is no firewall, magic antivirus, pop-up blocker, Java update nor VPN client that will protect you from everything.  A comprehensive approach starting with leadership that includes risk management, best practice implementations, and system hardening is needed to best protect your organization’s information assets. 

In previous physics briefs by Jason Jarvis, found at https://JarvisLabs.com/Jupiter, Jarvis illustrates and explains the origin of rocky or icy terrestrial planets from within the gas giants.  Jarvis hypothesizes that the Earth and Moon orbiting pair originated in the Jupiter system and are very close astronomical neighbors of Jupiter's Galileon moons.  This physics brief titled "Back of the Hand Momentum/Velocity Calculations in Support of Jarvis Earth & Moon Origination Theory" was realized when performing and contemplating thought experime

This physics brief was initially authored by Jason Jarvis in June 2013, has lead to other findings and was finally published officially here in this form on April 12th, 2019.

Reality physics,  vacuum potential, the concept of a more perfect vacuum, lift, space propulsion advice, and the big bang never happened.

In order to explore and explain gravity mass momentum physics let's introduce the concept of a vacuum and space vacuum.  In our daily lives we think of a vacuum as a suction machine. 

A network security breach of any kind consists of a series of events that lead to un-authorized access, dissemination of material, or degradation of critical information systems.  It is important to consider the behavior and methods that an attacker may employ to breach your network.  Attackers will leverage anything that presents itself such as a gullable end user, mis-configuration, or a vulnerable system service that is not patched or secured.