Encryption

Devi fare il budget sulla sicurezza informatica? Se sei stato fortunato: ti sei preso un ransomware

antonio.ierano@ierano.it 01/11/2017 Editoriali in Italiano, Editorials

ho pensato che sia cosa utile fare seguito ad un mio precedente post che si chiedeva se era paperino a fare i budget di sicurezza. Diciamolo, uno dei problemi che affliggono il mondo della sicurezza è che in pochi hanno una vaga idea di come costruire un budget che copra questi bisogni e lamentarsi sempre non aiuta a risolvere il problema, ho quindi pensato di scrivere un suggerimento su come venire incontro alla determinazione del valore economico della stesura di un budget di sicurezza informatica. Il problema di costruire il budget della sicurezza è, notoriamente, che chi lo fa deve…

Pretty Good Privacy (PGP)

antonio.ierano@ierano.it 12/13/2016 AI Tech Update, Tech Update in English

Pretty Good Privacy (PGP) Pretty Good Privacy or PGP is a popular program used to encrypt and decrypt email over the Internet, as well as authenticate messages with digital signatures and encrypted stored files. Previously available as freeware and now only available as a low-cost commercial version, PGP was once the most widely used privacy-ensuring program by individuals and is also used by many corporations. It was developed by Philip R. Zimmermann in 1991 and has become a de facto standard for email security. How PGP works Pretty Good Privacy uses a variation of the public key system. In this…

Cryptography, keeping on the big lie

antonio.ierano@ierano.it 03/13/2016 AI Tech Update, Editorials, Editorials in English, Personal, Sic Transit Gloria Mundi, Tech Update in English

So Cryptography would be a National Security Issue? I’m tired to be polite and politically correct when talking about encryption. Let us be clear and honest, all those crypto_war is a pile of crap. Every time I heard someone claiming that we should not enforce strong cryptography I wonder: to they have the slightest idea what they are talking about? Probably not, considering also most of the objections against cryptography I heard. Listening to those “enlighten” minds it seems that without cryptography the world be a sort of heaven where intelligence could have the possibility to solve any criminal case. And…

ransomware again, really?

antonio.ierano@ierano.it 10/29/2015 AI Tech Update, Tech Update in English

Some days ago a friend of mine reported me that his company has been affected by a ransomware cryptoloker style. I keep hearing people infected by this kind of infection and I am starting to wonder if people has really understood what a cryptomalware really is and how it works. here from Wikipedia: ” Ransomware is a type of malware that restricts access to a computer system that it infects in some way, and demands that the user pay a ransom to the operators of the malware to remove the restriction. Some forms of ransomware systematically encrypt files on…

Il ventre molle dell’IT italiana: la sicurezza

antonio.ierano@ierano.it 11/27/2014 Aggiornamenti tecnici in Italiano, AI Tech Update, Editoriali in Italiano, Editorials, News From The World, Notizie in Italiano

Ultimamente sono stato coinvolto in alcuni casi di attacchi ransomware nei confronti di aziende italiane, e la cosa mi ha preoccupato abbastanza, non tanto per la pericolosità in se dell’attacco ma per la imbarazzante mancanza di implementazione di processi di sicurezza all’interno delle varie realtà aziendali. Una mancanza di sicurezza che copre non solo gli aspetti meramente tecnici, ma anche quelli procedurali e persino legali. Una infezione di tipo cryptoloker, kryptowall o simili, infatti, è una buona occasione per testare i meccanismi implementati di difesa, o, purtroppo, la loro totale mancanza. Generalmente la copertura di sicurezza nelle strutture italiane è…

Attenzione! run di attacchi ransomware in Italia

antonio.ierano@ierano.it 11/26/2014 Aggiornamenti tecnici in Italiano, AI Tech Update, News From The World, Notizie in Italiano

Sono già due giorni che ricevo notifiche di aziende e soggetti colpiti da diverse versioni di Kryptoloker ed altri ransomware. Evidentemente c’è una recrudescenza di questi attacchi nel nostro paese in questi giorni. Alcune versioni sono rimaste “undetected” anche dai maggiori antivirus che stanno provvedendo a emettere patch specifiche (kudos a Sophos per la rapidità ed efficienza di intervento in un caso da me incontrato). Per i non addetti al settore, questi malware si installano in macchine ospiti infettate ed iniziano a procedere alla encryption di documenti, files e cartelle. Se la macchina ha accesso a share remoti anche questi…

Cyber Security Market (IAM, Encryption, DLP, Risk and Compliance Management, IDS/IPS, UTM, Firewall, Antivirus/Antimalware, SVM/SIEM, Disaster Recovery, DDoS Mitigation, Web Filtering, Security Services) – Global Advancements, Forecasts & Analysis (2014-2

antonio.ierano@ierano.it 05/05/2014 News From The World

NEW YORK, May 5, 2014 /PRNewswire/ — Reportlinker.com announces that a new market research report is available in its catalogue: Cyber Security Market (IAM, Encryption, DLP, Risk and Compliance Management, IDS/IPS, UTM, Firewall, Antivirus/Antimalware…

E-mail requirements change for a safe use in the post PRISM internet

Antonio Ieranò 08/21/2013 AI Tech Update, Editorials, My Best Articles, News From The World, News in English, Tech Update in English

Recently is mounting a serious concern about e-mail use and misuse, after PRISM the question is if e-mail can still be used as a safe communication media both for personal and enterprise use. This is a difficult question since e-mail has always been a low security- high risk area in the enterprise as well as in the private world. When talking about mail we should remember what email really is: Email is a simple method to transfer information from a computer to another, the used protocol SMTP is a plain text protocol that pass all the information in clear text….

antonio ierano

Antonio Ieranò Evangelist, Manager, BDM, Advisor, Writer, Speaker, Coach HOME: Via Gabriele D'Annunzio, 29, 27010 Vistarino (Pavia) Italy. Mobile phone: +39 347 9293757 E-mail: antonio.ierano@ierano.it; Twitter: @ antonioierano @thepuchiherald Web: http://ierano.it I am an IT professional Manager, BDM, marketing specialist, and tech evangelist with over 16 years of experience serving as a community liaison, subject matter expert, and high-profile trainer for key technologies and solutions. My experience includes acting as the public face of Cisco security technologies; leading pan-European technical teams in development of new Cisco security products; and serving as a key public speaker and trainer on behalf of new high-tech products. My expertise spans IT development and implementation, marketing strategy, legal issues, and budget / financial management. Specialties and Executive Expertise IT Strategy, Technical Audits, Enterprise Architecture & Applications, Technical Sales Liaison, Solution Architecture, Network Design, Architecture, & Security, Vulnerability Assessment & Management, Systems Engineering, TCP / IP, Data Privacy, Cloud Computing, Marketing Strategy, Budget Management, Consultative Sales, Social Media Marketing, High-Impact Presentations, Security and Technical Advisor: I have a strong experience and knowledge in the technology and security areas, I can provide the needed expertise to better direct technical needs, giving indication for cost effective, solid and efficient solutions. Project Management: with a solid background with project delivered with success in different areas I can provide a key support to drive customer projects to success. With a Microsoft Solution Framework background and PMI solid knowledge mixed with communication skills at any level i can lead the project group and it's stakeholders to achieve the desired goals. Business Developement and Marketing: With a deep knowledge of the extended EMEA technology market needs a focus on worldwide security I can drive business developement to a solid and reliable growth being able to relate with all the stakeholders, from production to sales and channel and, of course, customers.