A Piece of Cake

David Johnson

05 Apr 2023 — 1 min read

Security is a piece of cake. Just imagine a piece of cake sitting there, all
delicious looking. You want that piece of cake, but you have to study first.
You want to keep this cake secure. You don't want anyone finding, eating, or
stealing it. You don't want a fly landing on it and getting its gross fly goo
all over it! So, what do you do? Well, to start, you don't tell anyone. You
keep it Confidential. But that's not enough. You want to ensure no one touches
or gets any gross fly goo on it. You want it to maintain its Integrity, so they
say. Whoever they are. I digress; back to this delightful-looking cake. It
would look a lot better up close. And for that, it would have to be Available.
Where is it?! Ah, there it is. That tasty, confidential piece of cake has kept
its Integrity and is available to eat. So, let's eat!

This is the essence of the CIA triad Confidentiality, Integrity, and
Availability. As you witnessed, this can apply to all sorts of things. So now,
when your kid asks you where their piece of cake went, you can tell them they
should have thought about the CIA when they created their security policy.

Hope you enjoyed!

Supporting the Security Parthenon: How the Five Pillars of Information Security Work Together and Why Authorization Deserves Its Place

Like the pillars of the great Parthenon the five pillars of information security hold up and support a comprehensive security program. In this essay I will discuss the five pillars and how they are connected by providing specific examples of how they support and rely on each other within a

Firewalls, IDS, IPS and Nmap

To prevent unathorized access and malitious attacks on a network system administrators have a few options in their arsinal. Firewalls and Intrusion Detection/Prevention Systems are the main line of defense in this situation. These defenses are effective when configured properly. However, every defense has its weakness. Understanding the limitations

Golden Ticket

Golden Ticket This document covers how to create a Golden Ticket. An Active Directory Domain server is required for this to work. Connected clients are useful but not required. Creating the Ticket To create a Golden Ticket the NT Hash for KRBTGT will need to be aquired as well as

Bash Breakout

Breaking out of a restricted shell is a significant step in ethical hacking and penetration testing. However, sometimes you find yourself in a limited or non-interactive shell environment where essential features like command history navigation and screen clearing don't work. In such cases, upgrading to a fully interactive

Read more

Supporting the Security Parthenon: How the Five Pillars of Information Security Work Together and Why Authorization Deserves Its Place

Firewalls, IDS, IPS and Nmap

Golden Ticket

Bash Breakout