3个针对Linux/IoT平台的APT攻击案例分享
每年网络安全行业都会有新的名词出现,中文一般都是4个字,每个名词听起来都很美,给人巨大的想象空间。
网络安全行业内还有些说法,“不能指望一个系统不出漏洞,也不能指望一个安全系统解决所有问题”
Monte Carlo simulations can be a useful tool to uplevel your red teaming skills and provide a different and fresh perspective for highlighting, discussing and presenting findings.
Red teaming is about challenging an organization. This includes analyzing business processes and methodologies, including our own.
Obviously, using Monte Carlo simulations in the security realm is not my idea. I first ran across the idea in Hubbard’s book about measuring cybersecurity risk. Since then I have been thinking and playing around with applying these methods to security program’s, especially red teaming and threat modeling.