Information Security Blog

What Seinfeld and Operation Aurora Have in Common

Much Ado About “nothing” … A Very Significant “nothing”

Unless you have been living under a rock for the last few weeks you are likely aware of “Operation Aurora” – the Chinese state sponsored cyber attack on Google and at least 20 other prominent US firms (Adobe, Juniper, Rackspace, Yahoo, Symantec, Northrop Grumman and Dow Chemical). It’s a big enough story that our clients have enquired as to why we have not blogged about it to this point.

What Seinfeld and Operation Aurora Have in Common

Honestly, in much the same way that Seinfeld was a show about “nothing” (the Chinese Restaurant episode where the entire episode is them waiting for a table, is perhaps the best example), I look at the Operation Aurora story the same way (the irony of using the Chinese Restaurant episode is not lost on me.)

The only thing surprising about state sponsored cyber attacks against key US companies is that people were surprised by it.

Over the last five or six years we have seen a steady increase in the number of projects where we have helped defend our clients against industrial espionage, insider attacks, and cyber-attacks by organized groups. Even more “telling”, we have been approached by “potential clients” with malicious project opportunities: hacking into Gmail, industrial espionage, eradicating evidence of criminal activities in advance of an FBI forensic investigation, etc. (needless to say our hats are white and these potential clients were rebuffed.

Seinfeld was significant in that a show about “nothing” was really something, and that “nothing” became part of our collective cultural consciousness. Operation Aurora is significant in that “nothing new” has been escalated in the media to a point where it may become part of our collective information security consciousness. For that reason … it was a very significant “nothing” – and will hopefully have a positive impact on our understanding of evolving information security risks.

Free Whitepaper: Five Best Practices for SIEM

The promise of SIEM is the consolidation of all relevant Security Event Logs from disparate sources into a single unified and normalized data store.

Simplify compliance monitoring/reporting
Vastly improve Incident Detection & Incident Response
Contextualize event information with other business relevant information

Free Download: ISO 27001 Implementation Roadmap

Have no fear – our “roadmap” will guide you, step by step, through the entire ISO 27001 process.

Getting to ISO 27001 certification is a process made up of things you already know – and things you may already be doing!

Free Download: A Best Practices Guide to Database Security

Because data is only as secure as the systems & processes it relies on – a holistic approach to data security is essential. This roadmap is not meant to be exhaustive but rather to stimulate the necessary thought process to put you on the path to good data security.

Is ISO 27001 Right for (Y)our Organization?

Thinking about ISO 27001 Certification? View our free On-Demand ISO 27001 Webinar

How to deal with increasing threats
How to manage multiple regulatory requirements
How to handle client requests for attestation
To validate that significant changes did not have unanticipated results

Best Practices for Firing A Network Security Administrator

Want to know how to fire a Network Admin? Need to know what precautions to take? Firing any employee can be a stressful event. Firing one who has significant knowledge of and privileged access to your Information Technology/Security infrastructure is even more stressful, as the risks are so notable.

Free Whitepaper: Stop Wasting Money on Penetration Testing

Penetration Testing is most frequently performed to:

Substantiate the net effectiveness of a mature control environment
Prove to a third party that an environment is secure/trustworthy
Quickly assess the security of a less mature control environment (in a sense a technical risk assessment)
To validate that significant changes did not have unanticipated results