Episode 10 - Testing cyber security: Pentests and cyber exercises

We will cover - Why you want to test your cyber security. How to do test your security. Different types of test / engagement, and when to use them.

Further reading:

NCSC pentesting guidance:

https://www.ncsc.gov.uk/guidance/penetration-testing

Cyber exercises:

https://clearcutcyber.com/exercising-overview/

Info on bug bounties vs pentests:

https://soroush.secproject.com/blog/2018/02/bug-bounty-vs-penetration-testing-simple-unbiased-comparison/

Music by Jahzzar and used under CC BY-SA 4.0 license: creativecommons.org/licenses/by-sa/4.0/

Episode 8 - VPNs - Virtual Private Networks

We will cover - What is a VPN. Why you might want to use them. How they keep you secure on the internet. Privacy considerations. How to choose a good VPN.

Further reading:

NCSC guide to VPNs (excellent):

https://www.ncsc.gov.uk/collection/end-user-device-security?curPage=/collection/end-user-device-security/eud-overview/vpns

Wikipedia info on VPNs

https://en.wikipedia.org/wiki/Virtual_private_network

Music by Jahzzar and used under CC BY-SA 4.0 license: creativecommons.org/licenses/by-sa/4.0/

Episode 8 - DDOS and DOS (Denial of Service)

We will cover - What is a DOS and DDOS. What is the difference. Why attackers might use them. How to protect against them.

Further reading:

NCSC blog on DOS:

https://www.ncsc.gov.uk/collection/denial-service-dos-guidance-collection

Wikipedia info on DDOS - includes history of and large attacks

https://en.wikipedia.org/wiki/Denial-of-service_attack

Cloudflare info on DDOS:

https://www.cloudflare.com/en-gb/learning/ddos/what-is-a-ddos-attack/

Attack map showing attacks and research on costs etc:

https://www.digitalattackmap.com/understanding-ddos/

LOIC!:

https://en.wikipedia.org/wiki/Low_Orbit_Ion_Cannon

Music by Jahzzar and used under CC BY-SA 4.0 license: creativecommons.org/licenses/by-sa/4.0/

Episode 7 - Home Security Part 2 - IOT

We will cover - What is IOT (Internet of Things). What are these things? How can they be attacked /abused. What to think about when buying / using them. How to secure them.

Further reading:

UK Goverment advice:

staysafeonline.org/stay-safe-onlin…g-home-network/

www.cyberaware.gov.uk/

NCSC blog on how to fix all the things:

https://www.ncsc.gov.uk/blog-post/fixing-all-things

Music by Jahzzar and used under CC BY-SA 4.0 license: creativecommons.org/licenses/by-sa/4.0/

Episode 6 - Home Security Part 1

We will cover - What is a router and why it is important, how to connect to it, what settings on it to change, how to protect it, and how to keep it up to date.

Music byJahzzar and used under CC BY-SA 4.0 license: creativecommons.org/licenses/by-sa/4.0/

Further reading:

UK Goverment advice:

https://staysafeonline.org/stay-safe-online/securing-key-accounts-devices/securing-home-network/

https://www.cyberaware.gov.uk/

Norton info page on Routers:

https://us.norton.com/internetsecurity-iot-smarter-home-what-is-router.html

Understanding Cyber - Episode 5 - Social Engineering

Today's show we explain what social engineering is, how it works, a small part of the science behind it, how to recognise when you are being social engineered, and how to protect yourself from it.

Music byJahzzar and used under CC BY-SA 4.0 license: https://creativecommons.org/licenses/by-sa/4.0/

Further reading:

Wiki on Robert Cialdine

https://en.wikipedia.org/wiki/Robert_Cialdini

Amazon link for his book on influence

https://www.amazon.co.uk/Influence-Psychology-Robert-Cialdini-PhD/dp/006124189X

A good explanation of the principals of persuasion

https://www.influenceatwork.com/principles-of-persuasion/

Social Engineer Inc Podcast

https://www.social-engineer.org/category/podcast/

Episode 4 - Anti Virus

We will cover - What is Anti Virus, what does it protect from (more than just viruses). How does AV work - traditional and next generation. Why it is important to update your AV. Top Tips for using AV.

Music byJahzzar and used under CC BY-SA 4.0 license: https://creativecommons.org/licenses/by-sa/4.0/

Further reading:

Different types of scanning, false positives and other info: https://www.howtogeek.com/125650/htg-explains-how-antivirus-software-works/

Wikipedia:

https://en.wikipedia.org/wiki/Antivirus_software

Next Gen AV (by a next gen AV vendor):

https://www.carbonblack.com/2016/11/10/next-generation-antivirus-ngav/

Episode 3 - How to hack

We will cover - what is hacking, stages of hacking (gather info, get access, get to right place, do badness). Today is not how to protect yourself, because as we will see there are lots of different ways to attack, and therefore defend.

Sorry, the audio quality is echoey - we had this problem for episodes 1 and 3, all others should be much better quality.

Music byJahzzar and used under CC BY-SA 4.0 license: https://creativecommons.org/licenses/by-sa/4.0/

Understanding Cyber - Episode 2 - Passwords

Why passwords are important, how a password might be attacked, how to create a good password, how attackers capitalise on bad passwords, how to store passwords and finally how to add extra security with 2 Factor Authentication - 2FA.

Music byJahzzar and used under CC BY-SA 4.0 license: https://creativecommons.org/licenses/by-sa/4.0/

Understanding Cyber - Episode 1 - What is Cyber?

We introduce the show, define cyber and cyber security, and take a look at what will be covered in the podcast.

Sorry the audio quality is echoey - we had this problem for episodes 1 and 3, all others should be much better quality.

Music byJahzzar and used under CC BY-SA 4.0 license: https://creativecommons.org/licenses/by-sa/4.0/

Further reading:

Academic discussion and definition of cyber: https://commons.erau.edu/jdfsl/vol12/iss2/8/