Data Security and Privacy with the Privacy Professor

Latest Episodes:

Fighting International Cybercrime and Cyber Security Threats Aug 14, 2018

Show notes

Cybercrime throughout the world is increasing. As technologies evolve while legacy systems & applications continue to be used, & long-time physical & operational information threats & vulnerabilities still exist, the pathways to & through information systems & devices increase astronomically. The threats to critical infrastructures (water/electric/gas grids, healthcare systems & medical devices, voting/elections systems, etc) are also increasing more quickly than security controls are being applied to stop them. • What are the most significant cyber threats in international online environments? • What are worldwide cybercrime activities? • How can private industry and law enforcement collaborate? Listen in as Roeland van Zeijst, an internationally renowned cybersecurity expert who has worked in international law enforcement & facilitated the development of INTERPOL’s Cyber Fusion Centre in Singapore, discusses these topics. #Cybersecurity #CyberCrime #INTERPOL #DataPrivacyAsia

Physical Fails for Information Security and Privacy Aug 07, 2018

Show notes

This episode covers a problem as bad today as it was decades ago and in many ways worse. Breaches caused by unauthorized access to physical forms of information: on printed paper (e.g. boxes of customer records on the curb for trash pickup); getting access to the physical USB drives and external hard drives; getting access to backup media; and numerous other ways that expose personal information and many other types of sensitive information. What are some of the most bizarre incidents involving physical access breaches to information? What are some common real-life incidents involving physical access to information? What do organizations, and every person in their private lives, need to do better? What are related legal requirements? What is a certificate of destruction and do you need one? Listen in as Andrew Ysasi, Vice President of Kent Record Management® and President of IG Guru™ provides examples, insights and advice that everyone can use at home and at work.

Education and Advice for Successful Information Security Careers Jul 31, 2018

Show notes

How have information security careers changed in the past three decades? What long-time information security capabilities and skills are still vital to have today, but that too many going into this field are simply deciding are not worth pursuing? What concepts are important for those going into information security to understand? What is the Parkerian Hexad and how does it contribute to implementing better security for emerging technologies and for protecting privacy? What degrees are recommended for success in information security fields? The answer may surprise you. What capabilities would you also be surprised to learn are vital for information security career success? Listen in as Dr. Mich Kabay from Norwich University answers these and more questions, and also discusses information security education, and advice for being successful in information security careers.

Are US Voting Systems and Voter Registration Data Secure? Jul 24, 2018

Show notes

On July 13 US special counsel indicted 12 Russian intelligence officers for hacking the Democratic National Committee & the Clinton presidential campaign during the 2016 elections. State & county offices responsible for administering the 2016 U.S. elections were also determined to have been targeted by the hackers in an effort to steal voter & other data. Hackers were successful in breaking into the voter registration systems in Illinois. They also targeted systems throughout all the states. Are USA voting and registration systems now secure enough to prevent successful hacks? What are the methods used to attack our voting systems and what social engineering methods are used for the nation state hackers to get access to the systems & databases? What risks exist? What needs to be done to better secure the technologies used in our voting systems and voter registration databases? Listen to voting systems researcher & security expert Maurice Turner for answers to these & other questions.

Are Encryption Backdoors Really Necessary for National Security? Jul 17, 2018

Show notes

There are continued efforts by US and worldwide governments and law enforcement to compel tech providers to create backdoors into encryption technologies to allow access to the data if they think they need it. We all want terrorists and criminals caught. But is putting backdoor access to encrypted data files actually the only way to solve cases where encrypted data is involved? Are there other methods available to get intelligence information beyond just the encrypted data, and are other methods available to obtain access to encrypted data instead of putting backdoors into the technology? Would such requirements even be effective with so many encryption technologies available from other countries? Or, should law enforcement investigations always be put before privacy risks? What are some important issues that should be considered for putting backdoors into encryption technologies? Tune in to hear this discussion with a world renowned senior cybersecurity leader and expert!For more details after listening see USACM’s statement on extraordinary law enforcement access at: https://www.acm.org/binaries/content/assets/public-policy/usacm/2018-usacm-statement-law-enforcement-access.pdf.

Curious Cases of Catphishing Executives and IT Pros Jul 10, 2018

Show notes

When people think of online catphishing, most think those targeted are using dating sites, gaming sites and social media sites such as Facebook and Instagram. However, catphishing is increasingly being done on professional sites, such as LinkedIn. There is a growing trend for catphishers to target business executives, IT pros, and middle managers. Why? For many reasons. Corporate espionage. As a form of nation state intelligence gathering, such as in what happened during the 2016 elections when Russian catphishers were reportedly connecting with those in the USA they thought would then spread their propaganda. To get valuable personal data from those catphished. To get access to networks and business assets. And many more motivations. So, what are some of the specifics involved with these catphishing activities targeting business professionals? Hear answers to these questions and also listen to the details of the curious catphishing case of Mia Ash in this episode.

Encryption Trends Around the World Jul 03, 2018

Show notes

In what countries do businesses have the most mature encryption strategies? Which ones are encryption strategy laggards? Do the countries that are lagging in encryption strategy maturity strategy also have weak encryption technologies? Or, do they actually have stronger encryption solutions? And what types of personal data are encrypted most often by organizations, and which are more rarely encrypted? Financial data? Healthcare data? Something else? In this episode I discuss these, and many more, worldwide encryption trends with Dr. Larry Ponemon, who has done many years of extensive research about encryption trends. Dr. Ponemon covers some of the major findings and points from his 2018 Global Encryption Trends Study sponsored by Thales. Plus, I provide five important and compelling reasons why putting in backdoors into encryption solutions, as many lawmakers still are trying to require, is a bad idea for security and privacy, and how it can also harm national economy.

Are Our Voting and Elections Processes Secure? Jun 26, 2018

Show notes

There is daily discussion in the USA about voting & elections security. The US Department of Homeland Security reported evidence that Russian hackers tried to breach election systems in 21 states during the 2016 elections. Many states are updating voting systems security before November 2018 elections. Security threats are not confined to the US; voting & elections security threats & active exploits are occurring worldwide. Who should be responsible for ensuring elections processes and voting systems security? What do cybersecurity pros recommend be done to secure elections & voting systems? How are nation states spreading propaganda & using social media to alter votes? What types of voting systems are at most risk of being hacked? How can interference in social media & the spread of propaganda be stopped? What are the most important actions to take to improve voting and elections security in the USA & worldwide? Hear an expert discuss some of his research findings in this episode.

Separating Facts from Fiction in Digital Forensics Jun 19, 2018

Show notes

In recent years government leaders & news reports have made statements similar to the following about Russian hacking activities: that if you don’t catch a hacker in the act, then there is no way to tell who was hacking, where they are hacking from, or what they were doing. This simply is not true. In this episode I discuss digital forensics with the most knowledgeable expert for this topic. Dr. Peter Stephenson will answer questions such as, is it better to watch a hack or stop it? Is digital forensics used on devices, networks, or both? What types of forensics can be used on smashed devices? What are the signs of hacking? Has digital forensics really solved crimes? Can forensics prevent crimes? How did digital forensics point to Russian hackers in the 2016 elections? Can forensics be used on IOT devices? What are common digital forensics mistakes? Join us as we discuss these, and many more, issues about digital forensics, cyber threat analysis, and cyber criminology.

GDPR: Debunking Personal Data and Applicability Myths Jun 12, 2018

Show notes

The GDPR is a very broad set of regulations, with 99 Articles that each contain one to many specific requirements related to personal data, and how it must be protected, restrictions on use and sharing, requirements for giving individuals access to their own personal data, and many other rights for the data subjects. This episode focuses on 3 of those many topics where much confusion exists. 1) Were all those email notifications on May 25 really necessary for GDPR compliance? 2) What is considered to be personal data, and in what possible forms? (HINT: It’s not just digital) 3) What types of organizations and people must comply with GDPR? We will also hit upon the additional requirements for data protection within individual countries, the protections for EU citizens as well as EU residents, is government surveillance in the EU subject to GDPR requirements, the growing tsunami of GDPR actions and complaints, and recommendations for GDPR compliance.

Our TOPPODCAST Picks

Follow Us

Stay Connected

Data Security and Privacy with the Privacy Professor

Related Podcasts

Links

Stay Connected