Clik here to view.
Our Favorite Subject: [It's all about] Risk
Some days ago my old friend Pete Herzog from ISECOM posted a blog entry titled “Hackers May Be Giants with Sharp Teeth” here which – along with some quite insightful reflections on the way kids...
View ArticleClik here to view.
The OSSTMM 3 – What I like about it
Given the upcoming public release of ISECOM‘s Open Source Security Testing Methodology Manual (OSSTMM) version 3, I took the opportunity to have a closer look at it. While we at ERNW never adopted the...
View ArticleClik here to view.
A Structured Approach to Handling External Connections, Part 1
I’m currently involved in creating an up to date approach to handling external connections (read: temporary/permanent connections with external parties like business partners) of a very large...
View ArticleThe Case For/Against Split Tunneling
Once again, in some customer environment the question of allowing/prohibiting split tunneling for (in this case: IPsec) VPN connections popped up today. Given our strict stance when it comes to...
View ArticleERNW Rapid Risk Assessment (RRA), Some Additional Notes, Part 1
At several occasions we’ve been asked to provide some background on the Rapid Risk Assessment (RRA) methodology we frequently use for a transparent (and documented) understanding of risks in certain...
View ArticleERNW Rapid Risk Assessment (RRA), Some Additional Notes, Part 2
This is the second part of the series (part 1 here) providing some background on the way we perform risk assessments. It can be seen as a direct continuation of the last post; today I cover the method...
View ArticleReflections on the vulnerability factor (notes on RRA, part 3)
Today I’m going to discuss the (presumably) most complex and difficult-to-handle of the three parameters contributing to a risk (as of the RRA), that is the “vulnerability [factor]”. First it should be...
View ArticleCarriers Converge Their Internet and MPLS Infrastructure: Time to Redo Your...
The above is the exact title of a Gartner research note published some days ago. Its main thesis is that an increased convergence of carriers’ MPLS and Internet infrastructures onto shared IP...
View Article
