Date De Sortie Casa De Papel

I was watching the TV series, La Casa De Papel (Money Heist) on Netflix, a few weeks ago. I realized that the story of the gang can reveal some best practices we should use while dealing with the security of the products nosotros build.

Beware, the text contains spoilers. If yous haven't seen the show till the end and you lot are planning to, please visit the article on a later day. Or go on with your at your own risk :)

Threat Modeling Can Protect you Against Unexpected Events

First of all, what is threat modeling? Threat modeling, in layman terms, is an analytical procedure. In there, the engineers who build a product coordinate with the security squad. They collaborate towards the security architecture of the production.

More specifically, the model, how someone tin assault the product, and what is worth protecting (avails). They also model what they can exist loose about. Existence loose, not considering they don't care. But considering protecting it can be more costly than the asset itself.

Threat modeling can get y'all a long manner and protect you from events, against the odds. What is threat modeling in our "Money Heist" case? Information technology is Professor's (aka Sergio Marquina's) programme against all potential routes the plan will take. In having alternatives, even for the edgiest scenarios. The assets are clearly, the stolen money or his comrades in the heist.

A Single Point of Failure tin Cause a Chain of Bad Reactions

Threat modeling might help you recover from many security problems that will arise. You can recover from a cyber-attack but things will never be the same. A scissure in the security wall can accept a domino event.

Imagine a lake dam, with a few cracks around, going unnoticed and being exploited by nature. You can ever fix it, just it might take time for the lake visitors to establish trust over again.

Like the Professor, where he lost respect after the gold (temporarily) vanished. Even though his great problem-solving skills, helped resolve the outcome, things got hairy very fast.

Chain reactions

Luck is not a Strategy in the Long Term.

In the show, there are some provocative cases of luck. For example:

Raquel renegading the police organization
Law and army failing plans to invade the bank
Declining to shoot to the target many times. From troops, that are supposed to be professional shooters.

Snitches and beneath-expectations defence might give you some extra time. to move with your plan or escape. But y'all have to take advantage of it. To either move with your plan or escape. Always think your luck might become away, whatsoever time presently.

Never Drop the Weapons

This is not specific to cybersecurity only to life in general.

Pain is temporary, quitting lasts forever. Accept your mistakes, remediate them and acquire from them. As long as your centre is pumping blood, you are not dead yet.

Architectural mistake? Patch it immediately and re-architect the production (yeah, I know...delivery and business constraints)
Beneath expectations monitoring? Fix information technology now. Add more people and see how they tin can be more effective
Serious defects in the code? Train your team insecure practices and code review focused on security. Buy a license to a package similar Snyk or Nessus. Plan some percentage of your capacity to patch the most severe ones

Budget constraints

Even in the Worst of Moments, Keep your Composure

Imagine a ransomware assault. Information technology is there, it is happening. Screaming over people's heads will non solve the problem.

When yous cannot win confronting an attack, you lot still accept to practice your best, to at least not lose. For certain, don't panic. As the Stoics say, you lot have to be your best self on the things you command. And allow the rest, just be. Accept them.

You cannot control the adjacent stage of an attack. But you can exercise your best to forestall it, to not repeat the same mistakes, and to close the open doors that exist now.

Don't lose your temper and articulate mind, Every bit Tamayo lost it when he realized the gang was blackmailing him for various reasons.

He got angry, he got blackmailed, he was even ridiculed in the eyes of the European Cardinal Depository financial institution. And what was the result? He lost, hands down, fifty-fifty though he lied to the media about winning.

Determination

Top-notch cybersecurity is not a complimentary luncheon. And not everyone tin can do it, as the caveats are so many. But with some field of study, retrospection, and humility, you can do wonders. Also, the show is great, if you haven't seen it, please do.

First published here

L O A D I N Thou
. . . comments & more!

Source: https://hackernoon.com/cybersecurity-lessons-from-the-netflix-series-la-casa-de-papel

Posted by: pachecohishoupers.blogspot.com