Re:U.S. Treasury breached by hackers backed by foreign gover...
by unethical_ban on Monday December 14, 2020 @12:19AM
(#25413847)
MITM is getting harder due to TLS improvements. Most traffic is TLS encrypted over a handful of destination ports.
I don't want to oversimplify, because there is of course an uncountable number of software packages and a lot of noise on any network. However, "super simple FPGA network firewall" is not going to save us. Trustworthy logging, least-privilege account credentials and a competent SOC, among a number of other things, are critical.
Many orgs know how to be secure, they just can't or won't be due to some financial or usability constraint.
I don't want to oversimplify, because there is of course an uncountable number of software packages and a lot of noise on any network. However, "super simple FPGA network firewall" is not going to save us. Trustworthy logging, least-privilege account credentials and a competent SOC, among a number of other things, are critical.
Many orgs know how to be secure, they just can't or won't be due to some financial or usability constraint.
https://www.cm-alliance.com/consultancy/compliance-gap-analy...
https://blog.cipher.com/hs-fs/hubfs/NIST%20Cybersecurity%20F...