Security and audit in a cloud-native world

A co-creation with my colleague Janot van Wegen, Risk Officer.

Before the cloud era, you had your own IT organization as a reliable gatekeeper to make your company a cyber fortress. With a strong gateway, your data and applications were kept in house and in good hands. Nowadays a Fort Knox stance on cyber security is unrealistic. Applications that are designed to make the best use of the functionality of all aspects of the cloud are distributed and therefore cannot be captured in the traditional Fort Knox paradigm. With the rise of cloud-native computing, expertise in security and compliance is a must for everyone in the chain

Door |2024-02-17T12:41:36+00:00mei 10, 2018|Article, Artikel, Engels, Nederlands|Reacties uitgeschakeld voor Security and audit in a cloud-native world

My take on Meltdown and Spectre

It’s not just nasty names…

Introduction

For the past few days there has been a lot of speculation on why certain Linux kernel patches were rushed through.

Somewhere last night, researchers from various origins lifted the shroud and released the so called ‘Meltdown’ and ‘Spectre’ attacks via https://meltdownattack.com.

In this blog post I will try to give you my take on these two attacks and what they mean to defenders and users of CPUs (yes, that’s you).

Door |2024-02-17T13:13:30+00:00januari 11, 2018|Article, Artikel, Engels, Nederlands|Reacties uitgeschakeld voor My take on Meltdown and Spectre
Ga naar de bovenkant