1
00:00:00,000 --> 00:00:02,680
All right, let's jump right into this cyber security deep dive.

2
00:00:02,680 --> 00:00:05,800
You've sent us some really interesting stuff on firewalls

3
00:00:05,800 --> 00:00:08,280
and then intrusion detection and prevention systems.

4
00:00:09,560 --> 00:00:11,640
Tell the security to get serious about security, huh?

5
00:00:11,640 --> 00:00:12,480
Definitely.

6
00:00:12,480 --> 00:00:14,320
And it's more important now than ever.

7
00:00:14,320 --> 00:00:17,000
We're talking about really understanding how to keep systems

8
00:00:17,000 --> 00:00:18,400
and data safe.

9
00:00:18,400 --> 00:00:21,320
And that goes way beyond just the basics these days.

10
00:00:21,320 --> 00:00:25,120
Totally. So firewalls, everyone's heard of them.

11
00:00:25,120 --> 00:00:28,080
But it's kind of even more than just a wall between you and the bad guys, right?

12
00:00:28,080 --> 00:00:29,960
Yeah, it's way more complex than that.

13
00:00:29,960 --> 00:00:34,000
Think of it like a really, really good bouncer for your network.

14
00:00:34,000 --> 00:00:35,840
They decide what gets in and what stays out,

15
00:00:35,840 --> 00:00:38,360
keeping a close eye on everything that passes through.

16
00:00:38,360 --> 00:00:40,760
We used to just block traffic based on simple things.

17
00:00:40,760 --> 00:00:44,400
Like IP addresses, you know, kind of like checking IDs at the door.

18
00:00:44,400 --> 00:00:46,880
But now that kind of basic security approach

19
00:00:46,880 --> 00:00:48,960
wouldn't work against the hackers of today.

20
00:00:48,960 --> 00:00:50,840
They're way too sophisticated for that now.

21
00:00:50,840 --> 00:00:51,480
Exactly.

22
00:00:51,480 --> 00:00:54,440
Cyberthreads got smarter so firewalls had to level up too.

23
00:00:54,440 --> 00:00:56,640
That's where next generation firewalls come in.

24
00:00:56,640 --> 00:00:58,200
The NGFW is for short.

25
00:00:58,200 --> 00:00:59,480
NGFW is okay.

26
00:00:59,480 --> 00:01:01,200
What makes them so next, Jen?

27
00:01:01,200 --> 00:01:04,200
They're like having a whole security team built right in.

28
00:01:04,200 --> 00:01:06,200
They're analyzing everything in real time,

29
00:01:06,200 --> 00:01:08,000
not just looking at surface stuff.

30
00:01:08,000 --> 00:01:10,760
We're talking deep packet inspection,

31
00:01:10,760 --> 00:01:13,280
checking out data from outside sources,

32
00:01:13,280 --> 00:01:14,240
the works.

33
00:01:14,240 --> 00:01:18,000
It's having a bodyguard for your data ready to intercept a punch before it

34
00:01:18,000 --> 00:01:18,840
even lands.

35
00:01:18,840 --> 00:01:20,600
So not just keeping get guys out,

36
00:01:20,600 --> 00:01:23,760
but actually disarming them at the door, basically.

37
00:01:23,760 --> 00:01:28,760
Can you give us an example how would an NGFW actually stop an attack?

38
00:01:28,760 --> 00:01:28,960
Sure.

39
00:01:28,960 --> 00:01:31,720
Imagine someone clicks a fishing link right.

40
00:01:31,720 --> 00:01:34,640
A normal firewall might just see a website loading.

41
00:01:34,640 --> 00:01:38,640
But an NGFW, it can look inside that web page at the actual code.

42
00:01:38,640 --> 00:01:39,560
It can be like hold on.

43
00:01:39,560 --> 00:01:41,520
That's a malicious script hiding in there

44
00:01:41,520 --> 00:01:43,200
and shut it down for it can do anything.

45
00:01:43,200 --> 00:01:43,920
That's wild.

46
00:01:43,920 --> 00:01:46,600
So you're stopping the attack before it even really starts.

47
00:01:46,600 --> 00:01:46,800
Yeah.

48
00:01:46,800 --> 00:01:49,760
I'm guessing there's like a whole bunch of different firewall types, right?

49
00:01:49,760 --> 00:01:50,520
Absolutely.

50
00:01:50,520 --> 00:01:52,560
You've got your classic network firewalls,

51
00:01:52,560 --> 00:01:55,960
applications, specific ones, even circuit-level gateways.

52
00:01:55,960 --> 00:01:59,120
He turns like adding another layer of armor to your defenses.

53
00:01:59,120 --> 00:02:02,760
Like a digital fortress with walls within walls.

54
00:02:02,760 --> 00:02:06,160
We've got a table by the way in the show notes called Firewall types.

55
00:02:06,160 --> 00:02:09,160
It really breaks down all the different types and what they do.

56
00:02:09,160 --> 00:02:11,400
Definitely worth checking out.

57
00:02:11,400 --> 00:02:16,160
OK, so we've got these firewalls, but it sounds like even the best ones.

58
00:02:16,160 --> 00:02:18,640
You can't just assume you're totally safe, can you?

59
00:02:18,640 --> 00:02:20,960
There's always a way in if someone's determined enough.

60
00:02:20,960 --> 00:02:23,720
Exactly, you're never going to stop every single attack, right?

61
00:02:23,720 --> 00:02:28,240
It's like, yeah, you could build a fortress, but someone might find a way to tunnel

62
00:02:28,240 --> 00:02:29,960
into the walls if they really want to.

63
00:02:29,960 --> 00:02:32,560
So you need more layers, not just the firewall.

64
00:02:32,560 --> 00:02:33,280
What else is there?

65
00:02:33,280 --> 00:02:34,120
You got it.

66
00:02:34,120 --> 00:02:35,200
Think about a house.

67
00:02:35,200 --> 00:02:37,400
You wouldn't just have a lock on the front door.

68
00:02:37,400 --> 00:02:37,760
Right.

69
00:02:37,760 --> 00:02:39,560
Yeah, you probably want an alarm system.

70
00:02:39,560 --> 00:02:41,760
Maybe some security cameras to just in case.

71
00:02:41,760 --> 00:02:42,560
Definitely.

72
00:02:42,560 --> 00:02:46,040
So what are those extra security measures in like this

73
00:02:46,040 --> 00:02:47,240
Fribe security world?

74
00:02:47,240 --> 00:02:50,680
Intrusion detection systems, IDS, and intrusion prevention

75
00:02:50,680 --> 00:02:51,680
systems, IPS.

76
00:02:51,680 --> 00:02:56,160
Think of those as your cameras and your like security guards.

77
00:02:56,160 --> 00:03:01,000
OK, so IDS is watching for anything suspicious like the security cameras.

78
00:03:01,000 --> 00:03:03,800
What kind of things would set off an IDS?

79
00:03:03,800 --> 00:03:05,480
Anything out of the ordinary?

80
00:03:05,480 --> 00:03:10,040
Could be a sudden flood of traffic from a weird location that could be a de-doss attack,

81
00:03:10,040 --> 00:03:12,440
or someone trying to get into files they shouldn't.

82
00:03:12,440 --> 00:03:14,440
That could be data theft about to happen.

83
00:03:14,440 --> 00:03:16,840
So it's like detective work, basically.

84
00:03:16,840 --> 00:03:18,720
Looking for clues that something's wrong.

85
00:03:18,720 --> 00:03:19,720
Yeah.

86
00:03:19,720 --> 00:03:21,520
The IPS comes in, right?

87
00:03:21,520 --> 00:03:26,840
Like the IDS spots something raises the alarm and the IPS is the one that jumps into action.

88
00:03:26,840 --> 00:03:28,720
The IPS is the guard then.

89
00:03:28,720 --> 00:03:31,480
They see the problem and actually do something about it.

90
00:03:31,480 --> 00:03:36,200
Right on, they can block the bad traffic, cut off the connection, whatever it takes to

91
00:03:36,200 --> 00:03:37,800
stop the attack right there.

92
00:03:37,800 --> 00:03:40,400
But that's got to be tricky, right?

93
00:03:40,400 --> 00:03:43,960
What if it blocks something legitimate by mistake?

94
00:03:43,960 --> 00:03:47,200
For sure, you don't want to block real users by accident.

95
00:03:47,200 --> 00:03:49,280
That's why setting it upright is super important.

96
00:03:49,280 --> 00:03:52,480
You got to tell it what's normal and what's not, so we can tell the difference between

97
00:03:52,480 --> 00:03:55,160
a false alarm and a real threat.

98
00:03:55,160 --> 00:03:58,200
And where you put these systems in the network must matter, too, right?

99
00:03:58,200 --> 00:04:01,200
Like I wouldn't just put a security camera anywhere.

100
00:04:01,200 --> 00:04:03,080
Some spots are more important than others.

101
00:04:03,080 --> 00:04:05,440
100% you got to be strategic about it.

102
00:04:05,440 --> 00:04:09,880
Think of it, like, you know how they monitor traffic on the busiest roads?

103
00:04:09,880 --> 00:04:14,880
You want to put your IDSs and IPSs at those key points in the network, where the most important

104
00:04:14,880 --> 00:04:18,320
data is flowing, catch the bad stuff early.

105
00:04:18,320 --> 00:04:20,720
Make sense, those are your high traffic areas.

106
00:04:20,720 --> 00:04:25,040
So we've got the walls, the guards, what else should people know about?

107
00:04:25,040 --> 00:04:31,280
Okay, so we've got our firewalls up, IDS and IPS are watching everything.

108
00:04:31,280 --> 00:04:32,720
It sounds like we're pretty much set, right?

109
00:04:32,720 --> 00:04:35,840
You're getting there, but here's the thing, cybersecurity.

110
00:04:35,840 --> 00:04:37,800
It's not just about having the fanciest tech.

111
00:04:37,800 --> 00:04:39,640
You gotta think like the bad guys, too.

112
00:04:39,640 --> 00:04:43,520
You mean, like, finding those weak spots they're going to target, even with all the defenses?

113
00:04:43,520 --> 00:04:46,600
Right, like, yeah, you lock the front door, but what about that little window in the

114
00:04:46,600 --> 00:04:47,600
back?

115
00:04:47,600 --> 00:04:49,760
This is those little things matter.

116
00:04:49,760 --> 00:04:51,040
So what else do we need to think about?

117
00:04:51,040 --> 00:04:53,200
What are those easy to miss security holes?

118
00:04:53,200 --> 00:04:56,000
Well, you don't just let anyone into your house, right?

119
00:04:56,000 --> 00:04:59,560
You want to control who has access, keep an eye on things.

120
00:04:59,560 --> 00:05:02,280
So it's about more than just keeping things out.

121
00:05:02,280 --> 00:05:07,000
It's about controlling what's allowed in even if it's past the walls.

122
00:05:07,000 --> 00:05:09,680
That's where white listing and black listing come in, right?

123
00:05:09,680 --> 00:05:11,840
Like a guest list, but for your network.

124
00:05:11,840 --> 00:05:12,840
Exactly.

125
00:05:12,840 --> 00:05:16,400
White list means only these things are allowed in period.

126
00:05:16,400 --> 00:05:18,800
Black list is like, if I see this, it's getting blocked.

127
00:05:18,800 --> 00:05:20,320
No questions asked.

128
00:05:20,320 --> 00:05:21,640
Really tightens up control.

129
00:05:21,640 --> 00:05:23,880
And that goes for anything, not just whole computers, right?

130
00:05:23,880 --> 00:05:26,200
Like, what about all the apps on our phones?

131
00:05:26,200 --> 00:05:28,200
Do you even know what those are doing half the time?

132
00:05:28,200 --> 00:05:29,200
Good point.

133
00:05:29,200 --> 00:05:34,040
Most people just hit accept on those permissions without thinking twice.

134
00:05:34,040 --> 00:05:39,160
But that's why listing too in a way, choosing which apps get to use your camera, your microphone.

135
00:05:39,160 --> 00:05:41,720
Right, it's easy to forget how much access we're giving them.

136
00:05:41,720 --> 00:05:44,080
So control access is super important.

137
00:05:44,080 --> 00:05:46,480
What it goes beyond our own devices, right?

138
00:05:46,480 --> 00:05:48,720
What about all this third party services we use?

139
00:05:48,720 --> 00:05:49,720
Absolutely.

140
00:05:49,720 --> 00:05:52,160
We rely on so many other companies now.

141
00:05:52,160 --> 00:05:55,240
Payment processing, cloud storage, all that stuff.

142
00:05:55,240 --> 00:05:57,840
If they're a security's week, it's a problem for us too.

143
00:05:57,840 --> 00:06:01,800
Yeah, like that saying, a chain is only as strong as its weakest link.

144
00:06:01,800 --> 00:06:03,200
It all has to work together.

145
00:06:03,200 --> 00:06:04,200
Exactly.

146
00:06:04,200 --> 00:06:06,320
That's why you've got regulations like PCIDSS.

147
00:06:06,320 --> 00:06:11,280
They make sure anyone handling your credit card info, they're following strict rules.

148
00:06:11,280 --> 00:06:12,280
Makes sense.

149
00:06:12,280 --> 00:06:13,520
Okay, under a couple more things.

150
00:06:13,520 --> 00:06:14,520
What about sandboxing?

151
00:06:14,520 --> 00:06:16,120
Sounds kind of fun, actually.

152
00:06:16,120 --> 00:06:17,640
It is a cool concept.

153
00:06:17,640 --> 00:06:20,800
Basically, it's a safe space for testing risky stuff.

154
00:06:20,800 --> 00:06:24,760
Like imagine you download a file and you're not sure if it's safe.

155
00:06:24,760 --> 00:06:25,760
Sandbox it.

156
00:06:25,760 --> 00:06:27,680
So it's like a little digital quarantine zone.

157
00:06:27,680 --> 00:06:28,680
Something's bad.

158
00:06:28,680 --> 00:06:30,760
You can't escape and infect everything else.

159
00:06:30,760 --> 00:06:31,760
Smart.

160
00:06:31,760 --> 00:06:32,760
You got it.

161
00:06:32,760 --> 00:06:35,160
And last but not least, honey pots.

162
00:06:35,160 --> 00:06:36,960
This is where it gets sneaky.

163
00:06:36,960 --> 00:06:38,840
Okay, I'm intrigued.

164
00:06:38,840 --> 00:06:40,200
Sneaky in what way.

165
00:06:40,200 --> 00:06:41,840
Imagine setting a trap.

166
00:06:41,840 --> 00:06:43,960
Just to catch, like, a mouse.

167
00:06:43,960 --> 00:06:44,960
But a hacker.

168
00:06:44,960 --> 00:06:45,960
That's a honey pot.

169
00:06:45,960 --> 00:06:48,400
Attempting target looks vulnerable, but it's all controlled.

170
00:06:48,400 --> 00:06:51,520
So you can see how they operate, would tricks they try that kind of thing.

171
00:06:51,520 --> 00:06:52,520
Exactly.

172
00:06:52,520 --> 00:06:55,000
It gives you intel, helps you build better defenses for the real deal.

173
00:06:55,000 --> 00:06:56,400
Oh, it's like a whole spy game.

174
00:06:56,400 --> 00:06:57,920
Okay, so we've covered a lot.

175
00:06:57,920 --> 00:07:00,480
Firewalls, intrusion detection, even AI.

176
00:07:00,480 --> 00:07:02,080
It's a lot to keep track of.

177
00:07:02,080 --> 00:07:04,080
It is, but that's the thing about cyber security.

178
00:07:04,080 --> 00:07:05,480
It's always evolving.

179
00:07:05,480 --> 00:07:07,680
But hopefully this gives everyone a good starting point.

180
00:07:07,680 --> 00:07:08,680
Totally.

181
00:07:08,680 --> 00:07:10,720
So to wrap things up.

182
00:07:10,720 --> 00:07:15,360
And then with all the tools in tech, the biggest thing is awareness, right?

183
00:07:15,360 --> 00:07:19,080
Knowing what's out there and staying informed about the latest threats.

184
00:07:19,080 --> 00:07:20,080
100%.

185
00:07:20,080 --> 00:07:21,400
It's a constant game of cat mouse.

186
00:07:21,400 --> 00:07:23,600
The more you know, the safer you are.

187
00:07:23,600 --> 00:07:24,600
Awesome.

188
00:07:24,600 --> 00:07:26,080
Thanks for breaking it all down for us.

189
00:07:26,080 --> 00:07:49,960
And for everyone listening, thanks for joining our cybersecurity deep dive.