検索キーワード： セキュリティ・暗号化

The National Institute of Standards and Technology (NIST) develops cybersecurity standards, guidelines, best practices, and other resources to meet the needs of US industry, federal agencies, and the broader public. Our work ranges from specific information that can be put into practice immediately to longer-term research that anticipates advances in technologies and future challenges.

General efforts to help prevent ransomware attacks include maintaining offline, encrypted backups of data and regularly testing your backups; creating, maintaining, and exercising a basic cyber incident response plan, resiliency plan, and associated communications plan, and more.

The NFT Handbook is a detailed guide on how to create, sell, and buy non-fungible tokens without the need for a technical background. Learn exactly what NFTs are, how they evolved, and why they have value.

Digital transformation and cyber insecurity are two global trends that converged in 2020. The COVID-19 pandemic has accelerated these global challenges into paradigm-changing realities that threaten to destroy every company, government, network, and individual. But what can be done to embrace the accelerating digital disruption and at the same time manage the explosion of vulnerabilities, cyber threats, and business risks?

Ransomware will cost companies around the world $20 billion in 2021. Prepare for, recognise, and survive ransomware attacks with this essential guide, which sets out clearly how ransomware works, to help business leaders better understand the strategic risks, and explores measures that can be put in place to protect the organisation.

This audiobook is a comprehensive cyber security implementation manual which gives practical guidance on the individual activities identified in the IT Governance Cyber Resilience Framework (CRF) that can help organisations become cyber resilient and combat the cyber threat landscape.

We all get the calls. We all get the emails. But can you tell the difference between a legitimate call or email...and a scam? Scammers are working harder than ever before to take advantage of you, your identity, and your money. With some guidance and perspective, A Cure for the Common Scam will help walk you through steps you can take to protecting yourself against the common scams of today. Explained in nontechnical, straightforward, and practical terms. You do not have to fall victim to the schemes of scammers.

In The Art of Attack: Attacker Mindset for Security Professionals, Maxie Reynolds untangles the threads of a useful, sometimes dangerous, mentality. The book shows ethical hackers, social engineers, and pentesters what an attacker mindset is and how to and how to use it to their advantage. 

This book gives a complete insight into how data and privacy work in the modern world, and how automation can threaten your livelihood. With the development of more and more technology, we must be more cautious about how it influences our personal, social, and work lives.

In 8 Steps to Better Security: A Simple Cyber Resilience Guide for Business, cybersecurity researcher and writer Kim Crawley delivers a grounded and practical road map to cyber resilience in any organization. Offering you the lessons she learned while working for major tech companies like Sophos, AT&T, BlackBerry Cylance, Tripwire, and Venafi, Crawley condenses the essence of business cybersecurity into eight steps.    

The reach of Corporations into our lives via cards and apps has never been greater; many of us rarely use cash these days. But what we’re told is a natural and inevitable move is actually the work of powerful interests. And the great battle of our time is the battle for ownership of the...

The vast US network of natural gas, crude oil, and refined product pipelines is integral to US energy supply and also has vital links to other critical infrastructure such as power plants and airports. This network is vulnerable to cyberattacks. Pipeline companies employ technologies which enable them to achieve business and operational efficiencies, but these technologies are susceptible to cybersecurity risks - and these risks have been growing. The May 2021 ransomware attack against the Colonial Pipeline, which disrupted gasoline supplies throughout the East Coast.

Protecting an MSP is hard work. But having an easy process to evaluate your security, be more effective, and grow your business all at the same time is indispensable to growing your MSP. Too many MSPs often focus on only a small piece of the problem (hiring a guru or shiny new tools) and miss out on the critical fundamentals keeping them and their clients vulnerable to major attacks and network breaches.

The Federal Bureau of Investigation (FBI) and the Cybersecurity and Infrastructure Security Agency (CISA) have observed an increase in highly impactful ransomware attacks occurring on holidays and weekends - when offices are normally closed - in the United States, as recently as the Fourth of July holiday in 2021. The FBI and CISA are sharing the below information to provide awareness to be especially diligent in your network defense practices in the run up to holidays and weekends.

Facebook lleva varios años en el ojo del huracán. Desde que estalló el escándalo de Cambridge Analytica y la campaña de desinformación rusa intenta esquivar una avalancha de controversias y demandas relacionadas con su estrategia empresarial. Mientras el gigante tecnológico presume de crear un mundo interconectado en el que poder expresarse con libertad, viola la privacidad de sus usuarios y propaga una epidemia de desinformación tóxica y dañina.

Todo lo que no quieres pero necesitas saber sobre el poder, la economía, la sociedad y las telecomunicaciones en la era de la información.

From the former news policy lead at Google, an “informative and often harrowing wake-up call” (Publishers Weekly) that explains the high-stakes global cyberwar brewing between Western democracies and the authoritarian regimes of China and Russia that could potentially crush democracy. From...

You have seen Robert A. Jensen—you just never knew it. As the owner of the world’s largest disaster management company, he has spent most of his adult life responding to tragedy. From the Oklahoma City bombing, 9/11, and the Bali bombings, to the 2004 South Asian Tsunami, Hurricane Katrina, the 2010 Haitian Earthquake, and the Grenfell Tower Fire, Jensen has been at the practical level of international incidents, assisting with the recovery of bodies, identifying victims, and repatriating and returning their personal effects to the surviving family members.

An expert on China’s global infrastructure expansion provides an urgent look at the battle to connect and control tomorrow’s networks. From the ocean floor to outer space, China’s Digital Silk Road aims to wire the world and rewrite the global order. Taking readers on a journey inside...

Summer 2017: computer screens go blank in 150 countries. The NHS is so affected that hospitals can only take in patients for A&E. Ambulances are grounded. Computer screens turn on spontaneously and warnings appear. Employees who desperately pull the plugs are too late. Restarting is pointless; the computers are locked. And now the attackers ask each victim for money. This is hijack software. It is just one example of how vulnerable the digital world has made us.

The National Security Agency (NSA), Cybersecurity and Infrastructure Security Agency (CISA), and Federal Bureau of Investigation (FBI) assess that People’s Republic of China's state-sponsored malicious cyberactivity is a major threat to the US and allied cyberspace assets.

The National Institute of Standards and Technology (NIST) develops cybersecurity standards, guidelines, best practices, and other resources to meet the needs of US industry, federal agencies, and the broader public. Our work ranges from specific information that can be put into practice immediately to longer-term research that anticipates advances in technologies and future challenges.

The following information is being provided by the FBI, with no guarantees or warranties, for potential use at the sole discretion of recipients in order to protect against cyber threats. This data is provided to help cybersecurity professionals and system administrators guard against the persistent malicious actions of cyber actors.

As a leader, you need to drive your organization’s approach to cybersecurity as you would any other hazard (e.g. how you identify risk, reduce vulnerabilities, and plan for contingencies). This requires an investment of time and money, as well as the collective buy-in of your management team. Your investment drives actions and activities, and these build and sustain a culture of cybersecurity.

ERISA-covered plans often hold millions of dollars or more in assets and maintain personal data on participants, which can make them tempting targets for cyber-criminals. Responsible plan fiduciaries have an obligation to ensure proper mitigation of cybersecurity risks.

Reducing your organization’s cyber risks requires a holistic approach - similar to the approach you would take to address other operational risks. As with other risks, cyber risks can threaten. Managing cyber risks requires building a culture of cyber readiness.

Determine how much of your organization’s operations are dependent on IT. Consider how much your organization relies on information technology to conduct business and make it a part of your culture to plan for contingencies in the event of a cyber incident. Identify and prioritize your organization’s critical assets and the associated impacts to operations if an incident were to occur.

Ransomware is a type of malicious software, or malware, that encrypts data on a computer making it unusable. A malicious cyber criminal holds the data hostage until the ransom is paid. If the ransom is not paid, the victim's data remains unavailable. Cyber criminals may also pressure victims to pay the ransom by threatening to destroy the victim's data or to release it to the public.

As the times have shifted in the last decade or so, we have started to depend more and more upon our computers, as well as other electronic devices for our needs. Our bank account information to our zip code, social security numbers, and so much more have all been encrypted into the depths of our tech devices. So it’s only natural for you to worry about your own safety when you know the extent of your vulnerability and dependency upon the technology around you.

If you don't fix your security vulnerabilities, attackers will exploit them. It's simply a matter of who finds them first. If you fail to prove that your software is secure, your sales are at risk too. Whether you're a technology executive, developer, or security professional, you are responsible for securing your application.