Cybersecurity – FennSec

Implementing security requirements: examples from the NIST 1800 series

By Lamine Aouad June 11, 2024CybersecurityNo Comments

I have recently developed a newfound appreciation for reading cybersecurity standards and guidelines. Their lack of practical examples and real-world scenarios, however, is a bit of a disappointment. There is…

How do you navigate the cyber framework landscape?

By Lamine Aouad September 26, 2023CybersecurityNo Comments

Although I always had a keen interest in cybersecurity frameworks and standards, I didn't get down to the meat of it until recently, and goodness gracious, I was (and still am)…

The Tip of the Iceberg

By Lamine Aouad May 18, 2023CybersecurityNo Comments

Verizon’s DBIR (Data Breach Investigations Report) has an interesting data point about the time to discover breaches. Up to 2019, DBIR has consistently reported that the majority of breaches took…

The curse of missing context in cybersecurity

By Lamine Aouad December 7, 2022CybersecurityNo Comments

Over the years, I have come to realize that context is everything in cybersecurity. Way too often, we rely on just a single piece of information (or very few) to…

MITRE ATT&CK for E/E architectures

By Lamine Aouad June 21, 2022CybersecurityNo Comments

MITRE ATT&CK (Adversarial Tactics, Techniques, and Common Knowledge) is a knowledge base that models adversaries in the wild. It's been widely adopted by the community and has become, in a…

Never too late for risk assessment

By Lamine Aouad June 10, 2022CybersecurityNo Comments

Some say "timing is everything", which I don't necessarily agree with. It could sometimes make the difference between a useful effort or a wasted one, especially if it's a business…

The convergence of compliance and good security. Will it happen?

By Lamine Aouad March 9, 2022CybersecurityNo Comments

I am genuinely interested in how can compliance efforts translate into effective cyber security programs that actually result in improved postures. Most cyber security professionals consider standards and regulations only…

In cybersecurity, get the foundation right, the details will always be a moving target

By Lamine Aouad October 19, 2021CybersecurityNo Comments

I've always had an interest in humanities and social sciences, and how they affect other domain areas, through us, people. Science nowadays says that making mistakes is not only an…

Machine learning in offensive security

By Lamine Aouad September 4, 2021Cybersecurity, Data scienceNo Comments

At Symantec, I worked on implementing machine learning techniques to strengthen defenses capabilities and enhance the ATP product with advanced detections and protections. It certainly has increased the cost and…

Wrong priorities, increased risk

By Lamine Aouad May 11, 2021CybersecurityNo Comments

Setting up priorities can be hard and challenging, and cybersecurity (like almost everything else in life) is a prioritization issue. Beyond treating cybersecurity as a business priority and setting up…