Artwork

内容由Andrew Morgan提供。所有播客内容(包括剧集、图形和播客描述)均由 Andrew Morgan 或其播客平台合作伙伴直接上传和提供。如果您认为有人在未经您许可的情况下使用您的受版权保护的作品,您可以按照此处概述的流程进行操作https://zh.player.fm/legal
Player FM -播客应用
使用Player FM应用程序离线!

CIS Control 6 - Access Control Management - sponsored by Appgate

52:06
 
分享
 

Manage episode 307770314 series 2935158
内容由Andrew Morgan提供。所有播客内容(包括剧集、图形和播客描述)均由 Andrew Morgan 或其播客平台合作伙伴直接上传和提供。如果您认为有人在未经您许可的情况下使用您的受版权保护的作品,您可以按照此处概述的流程进行操作https://zh.player.fm/legal

Abstract: It is easier for an external or internal threat actor to gain unauthorized access to assets or data through using valid user credentials than through "hacking" the environment. There are many ways to covertly obtain access to user accounts, including: week passwords, accounts still valid after a user leaves the organization, dormant or lingering test accounts, shared accounts that have not been changed in months or years, service accounts embedded in applications for scripts, a user having the same password as the one they use for an online account which was compromised in a public password dump. Listen as our hosts break down the people, process and technology to implement effective and secure account management.
Sponsor: Appgate interview with Tina Gravel, SVP Channels and Alliances at minute 37:20.
Learn more here: https://www.appgate.com/
Tina Gravel: https://www.linkedin.com/in/tinagravel/
Co-hosts:
Ryan Weeks: https://www.linkedin.com/in/ryanweeks/
Phyllis Lee: https://www.linkedin.com/in/phyllis-lee-21b58a1a4/
Wes Spencer: https://www.linkedin.com/in/wesspencer/

  continue reading

19集单集

Artwork
icon分享
 
Manage episode 307770314 series 2935158
内容由Andrew Morgan提供。所有播客内容(包括剧集、图形和播客描述)均由 Andrew Morgan 或其播客平台合作伙伴直接上传和提供。如果您认为有人在未经您许可的情况下使用您的受版权保护的作品,您可以按照此处概述的流程进行操作https://zh.player.fm/legal

Abstract: It is easier for an external or internal threat actor to gain unauthorized access to assets or data through using valid user credentials than through "hacking" the environment. There are many ways to covertly obtain access to user accounts, including: week passwords, accounts still valid after a user leaves the organization, dormant or lingering test accounts, shared accounts that have not been changed in months or years, service accounts embedded in applications for scripts, a user having the same password as the one they use for an online account which was compromised in a public password dump. Listen as our hosts break down the people, process and technology to implement effective and secure account management.
Sponsor: Appgate interview with Tina Gravel, SVP Channels and Alliances at minute 37:20.
Learn more here: https://www.appgate.com/
Tina Gravel: https://www.linkedin.com/in/tinagravel/
Co-hosts:
Ryan Weeks: https://www.linkedin.com/in/ryanweeks/
Phyllis Lee: https://www.linkedin.com/in/phyllis-lee-21b58a1a4/
Wes Spencer: https://www.linkedin.com/in/wesspencer/

  continue reading

19集单集

所有剧集

×
 
Loading …

欢迎使用Player FM

Player FM正在网上搜索高质量的播客,以便您现在享受。它是最好的播客应用程序,适用于安卓、iPhone和网络。注册以跨设备同步订阅。

 

快速参考指南