Thursday, October 5, 2023

Cloud Security: Acronym Key and Glossary Terms

CASB Cloud access security broker
CIEM Cloud infrastructure entitlement management
CIPS Cloud infrastructure and platform services
CSPM Cloud security posture management
CWPP Cloud workload protection platform
GDPR General Data Protection Regulation
IaaS Infrastructure as a service
IAM Identity and access management
IGA Identity governance and administration
JIT Just in time
ML Machine learning
PaaS Platform as a service
PAM Privileged access management
PCI Payment Card Industry
RBAC Role-based access control
SOD Segregation of duties
SOX Sarbanes-Oxley Act
SSPM SaaS security posture management

Wednesday, August 16, 2023

What is the difference between Level 1 and Level 2 CIS benchmarks?

The Level 1 profile is considered a base recommendation that can be implemented fairly promptly and is designed to not have an extensive performance impact. The intent of the Level 1 profile benchmark is to lower the attack surface of your organization while keeping machines usable and not hindering business functionality.

The Level 2 profile is considered to be “defense in depth” and is intended for environments where security is paramount. The recommendations associated with the Level 2 profile can have an adverse effect on your organization if not implemented appropriately or without due care.


Tenable Security Center: What do BL and NG mean that?

BL is for BitLocker audit

NG is for Microsoft Next Generation Windows Security audit

For example:

CIS Level 1 (L1) + BitLocker (BL)

CIS Level 1 (L1) + BitLocker (BL) + Next Generation Windows Security (NG)

Reference:

https://www.cisecurity.org/cis-benchmarks/cis-benchmarks-faq

Wednesday, June 7, 2023

ut8mb3 ve utf8mb4 arasındaki fark nedir?

utf8mb3 ve utf8mb4, karakter kodlaması olarak UTF-8'i kullanan MySQL veritabanı sütunlarının karakter setini belirtmek için kullanılan terimlerdir.

utf8mb3: UTF-8 Multibyte 3, 3 baytlık bir karakter kodlamasıdır. Bu karakter seti, UTF-8'in eski bir sürümüdür ve maksimum 3 baytlık karakterleri destekler. Bu, Unicode karakterlerinin birçoğunu kapsar, ancak bazı nadir karakterleri veya emoji gibi yeni eklenen karakterleri desteklemez.


utf8mb4: UTF-8 Multibyte 4, 4 baytlık bir karakter kodlamasıdır. Bu karakter seti, UTF-8'in güncel bir sürümüdür ve Unicode karakter setinin tamamını destekler. Bu nedenle, daha geniş bir karakter yelpazesini kapsar ve özellikle emoji gibi daha yeni veya nadir kullanılan karakterlerin depolanması için gereklidir.Pratik olarak, utf8mb4 karakter seti, daha geniş bir karakter yelpazesini desteklediği için genellikle tercih edilir. Özellikle web ve uygulama geliştirme gibi alanlarda, kullanıcıların emoji ve farklı dil ve alfabedeki karakterleri girebilmesi önemli olabilir

Friday, March 17, 2023

Create shorten urls for listing vulnerabilities with a specific query on Tenable Security Center

Create shorten urls for listing vulnerabilities with a specific query on Tenable Security Center

 Example:

https://<tenable-sc-address>/#loadQuery/10443