Hacked Off

When it comes to software security, prevention is always better than cure. Design flaws can open the door to breaches from the outset and result in millions of pounds worth of losses. It’s vital to have security principles running through the whole software development lifecycle.

To discuss this in more detail we spoke to Adrian Thompson, a Consultant Software Engineer and Chair of the British Computer Society (Preston Branch), about the importance of security in software development. He tells the story of how he got interested in security, after an attempted hack on one of his client’s databases.

0’50 From Accountant to Developer

11’18 Security concerns and consideration with software development

12’30 At what stage should security be considered in software development?

20’39 What is the The British Computer Society (BCS)?

24’16 The benefits of being involved in the BCS

28’34 The BCS Cybercrime Event www.bcs.org/category/19375

31’38 The Cybercrime Hacking Competition for Universities

35’00 Upcoming BCS events

Download on iTunes: apple.co/2Ji61Ek

Listening time: 44 minutes

For more information, follow us on Twitter @secarma or @secarlabs or email us at [email protected]

Hosted by: Paul Mason, Ethical Hacker

Guest: Adrian Thompson – Consultant Software Engineer and Chair of BCS Preston

In 2016 financial fraud losses totalled £768.8 million*. With the ever-growing risk of cybercrime, what can we do as individuals and as a business to reduce the risk to ourselves and others?

Jennie Williams, Cyber Protect Officer for the North West Regional Organised Crime Unit (NWROCU) talks to us about how making small changes and taking simple steps towards cybersecurity can make all the difference.

Key points include:

3’00 – Joining the high-tech crime unit

11’22 – What to do with your device if you’re a victim of cybercrime

16’30 – Recruiting and training Cyber Special police officers

18’00 – Phishing and fraud

21’00 – Reporting fraud and cybercrime

23’18 – Combating indecent images

31’27 – The ‘Take Five’ to stop fraud campaign

For more information about protecting yourself from cybercrime and details on how to report it please see the below links:

http://www.nwrocu.police.uk/protecting-you/cybercrime

https://takefive-stopfraud.org.uk/

https://www.cyberaware.gov.uk/

*Reference: https://takefive-stopfraud.org.uk/about/take-five/

Listening time: 43 minutes

For more information, follow us on twitter @secarma or @secarmalab or email us at [email protected]

Hosted by: Paul Mason, Ethical Hacker

Guest: Jennie Williams, Cyber Protect Officer for the North West Regional Organised Crime Unit

Some say education is the most powerful weapon which you can use to change the world, so we brought together two of the most influential educators in cybersecurity. Manchester University’s Academic Cybersecurity Lead and overall cyber enthusiast, Dr Daniel Gideon Dresner, BSc (Hons), FInstISP and our very own Head of Education at Secarma, Paul Mason to discuss all things cyber.

From Danny’s first memories of ‘computers’, to finding his first job, learning technical skills, developing frameworks for the government and what’s next in bridging the skills gap. Paul hears what many students, educators, all the way up CEOs will find useful when it comes to why ‘cyber’; although complex it is an interesting area to gain a deeper understanding.

This podcast really is for everyone with an interest in cybersecurity.

Some of the key points include:

2’00 My first Commodore 64, Star Trek, Hitchhikers Guide and Dr Who

5’00 Astronomy, applied physics and computer science

11’00 How I got into technical writing

13’00 Lord Robertson of NATO and choosing between civil and military

15’00 The National Computing Centre heritage, building security bodies and certification history

28’00 Fighting the corner for small businesses and the importance of Cyber Essentials

35’00 Risk profiling your business

38’50 How I got into teaching security

44’00 ‘Pimping security’

Links you may be interested in:

ALGOL 68 - https://en.wikipedia.org/wiki/ALGOL

Cyber Essentials - https://www.secarma.com/services/cybersecurity-assessment/cyber-essentials/

Download on iTunes: https://itunes.apple.com/gb/podcast/hacked-off/id1439083220?mt=2

Listening time: 49 minutes

For more information, follow us on Twitter @secarma or @secarmalabs or email us at [email protected]

Hosted by: Paul Mason, Ethical Hacker & Head of Education at Secarma

Guest: Dr Daniel Dresner, Academic Co-ordinator for Cybersecurity at the University of Manchester

The risk of a cybersecurity attack on the UK’s critical infrastructure, like the one that hit Ukraine’s energy grid in 2015 and 2016, is growing. With the threat landscape constantly evolving it’s vital for public sector organisations to adopt a robust approach to defending key targets from cyber-attacks.

In this episode Paul speaks with Stephen Jewell, Director of UKFast Public Sector, which has worked with Government departments and private industry partners, for more than 18 years.

Some of the topics of discussion include:

3’00 Why it’s important to understand the potential damage of a security breach.

7’30 How to make individuals more security aware in the interests of national security.

10’35 The history of Secure Information Assurance (S-IA) and its acquisition by UKFast.

14’55 Pioneering the use of the internet with the Ministry of Defence.

17’04 Developing technology to secure public networks, including the MoD.

29’36 What, or who, are the threats?

30’51 The Norse Threat Map http://www.norse-corp.com/map/

Download on iTunes: apple.co/2Ji61Ek

Listening time: 33 minutes

For more information, follow us on twitter @Secarma or @SecarmaLabs or email us at [email protected]

Hosted by: Paul Mason, Ethical Hacker & Head of Education at Secarma

Guest: Stephen Jewell, Director of UKFast Public Sector

Becoming an Ethical Hacker

The cybersecurity industry is working hard to close the skills gap. But, with increasing advancements in technology and a continuously rising number of attacks, the gap is widening. It’s predicted that, by 2022, there will be a shortage of 1.8 million workers in the information security sector.

Paul is joined by Gordon, a senior consultant at Secarma, to discuss his path into cybersecurity. Warning – he doesn’t take a direct route!

If you're short on time here are some of the key points:

2'46 Hours lost to Command and Conquer!

21'23 What is EternalBlue?

23'41 Metasploit: What type of hacker are you? Run or exploit?

25'41 We all make mistakes, it's how you deal with them that matters.

38'00 Top tips for starting a career in cyber

Download on iTunes: apple.co/2Ji61Ek

Listening time: 40 minutes

For more information, follow us on twitter @Secarma or @SecarmaLabs or email us at [email protected]

Hosted by: Paul Mason, Ethical Hacker & Head of Education at Secarma

Guest: Gordon, Senior Consultant, Secarma

Today, women make up 20% of the global cybersecurity workforce. That figure has increased from 11% in 2013, but the numbers are still desperately low. So, why does cybersecurity have such a gender problem?

To discuss the issue of diversity in cyber and how to encourage more women into the industry, Paul is joined by Noha Amin, Information Security Awareness Manager at TalkTalk.

The key points:

3’00 The main problems with communicating cybersecurity issues with non-technical staff.

12’20 The challenges of being a woman in cybersecurity.

17’50 How does the industry move away from the image of ‘white men in hoodies eating pizza’?

20’35 Why a healthy business ecosystem needs both male and female employees.

24’35 Advice for women wanting to pursue a career in cybersecurity.

Download on iTunes: apple.co/2Ji61Ek

Listening time: 26 minutes

For more information, follow us on twitter @Secarma or @SecarmaLabs or email us at [email protected]

Hosted by: Paul Mason, Ethical Hacker & Head of Education at Secarma

Guest: Noha Amin, Information Security Awareness Manager at TalkTalk

Cyber criminals are constantly looking to exploit the weakest link in your chain. Using social engineering, they’re targeting employees, looking to abuse their trust and willingness to help, in order to gain access to sensitive information.

Paul Mason is joined by Edward Whittingham, founder of the British Fraud Prevention Partnership (BFPP), to understand how companies can best get to grips with the security risk posed by their staff.

Some of the key points of discussion are:

1’48 – The obstacles around staff training

5’00 – What is phishing?

13’37 – The difference between phishing and spear phishing

22’28 – Cybercrime in policing

31’08 – How do you make your employees your strongest defence?

Download on iTunes: apple.co/2Ji61Ek

Listening time: 36 minutes

For more information, follow us on twitter @Secarma or @SecarmaLabs or email us at [email protected]

Hosted by: Paul Mason, Ethical Hacker & Head of Education at Secarma

Guest: Edward Whittingham, Founder the BFPP https://www.thebfpp.org/

When it comes to cybersecurity, can you believe everything you read in the news?

In the opening episode of Hacked Off, Paul Mason and David Quinn dissect the recent Superdrug breach. They explore how the breach was reported by the media and delve a little deeper to uncover the real takeaway lessons that need to be learned.

The discussion then moves on to the issue of password security. What makes a strong password? How can people effectively manage their passwords? There’s even the discussion of what happens to your accounts after you die. It’s more cheery than it sounds, we promise!

In this podcast we discuss:

1.48 - How the media report cybersecurity breaches

10.46 - Password advice

22.56 - What happens when I die? Digitally speaking

The links we mention:

6.13 - Superdrug breach - https://www.bbc.co.uk/news/business-45265601

8.05 - Check your email against breach lists - https://haveibeenpwned.com/

15.55 - xkcd comic - https://xkcd.com/936/

21.35 - Impartial advice on password managers - https://www.techradar.com/uk/news/software/applications/the-best-password-manager-1325845

Download on iTunes: https://apple.co/2Ji61Ek

Listening time: 25 minutes

For more information, follow us on twitter @Secarma or @SecarmaLabs or email us at [email protected]

Hosted by: Paul Mason, Ethical Hacker & Head of Education at Secarma

Guest: David Quinn, Content Marketing Manager at Secarma

Listening time: 25 minutes