Technically Speaking

Got breach fatigue yet? Yes, it’s been another bad year for computer security. 2016 saw the announcement of the biggest breach ever – the Myspace hack. But, that was quickly eclipsed by the September Yahoo data breach which resulted in the exfiltration of extensive account information, included passwords, from 500 million users.

Thanks to the increase in frequency of digital design data exchange between public sector agencies and outside firms, the adoption of CAD standards has grown exponentially in recent years.

The OPM breach of 2014/2015, the largest government cybersecurity breach in history, was easily preventable. That’s according to a report released by The House Committee on Oversight and Government Reform published on September 7th, 2016. The report, titled: “How the Government Jeopardized Our National Security for More than a Generation” urges federal CIOs to act:

When your agency detects a network attack, you need to act fast to understand what’s going on. But getting the insights and analytics you need takes time and often doesn’t trace threats back to the source.

We’ve written quite a lot about BIM lately, most notably its spotty adoption in government for civil engineering projects, airport infrastructure, and construction and facilities management.

Security Information Event Management (SIEM) tools have been around for quite some time. SIEMs are great for aggregating log files, parsing them, and using real-time correlation rules to spot security incidents. But more advanced incidents can evade detection by your SIEM. Finding those evasive threats becomes a lot easier if you employ threat hunting.