I'm a C I Double S P (CISSP Parody)
Think you know what being a CISSP is all about? Not all CISSP's are equal, some are more equal than others!
Aamir Lakhani1 min read
~/authors/aamir-lakhani
Aamir Lakhani
Founder · Packet.Zip
Aamir Lakhani is a leading senior security strategist responsible for providing IT security solutions to major enterprises and government organizations. He creates technical security strategies and leads security implementation projects for Fortune 500 companies, and has designed offensive counter-defense measures for the Department of Defense and national intelligence agencies.
His areas of expertise include adversarial AI, cyber defense, mobile application threats, malware management, Advanced Persistent Threat (APT) research, and the dark web. He is the author or contributor of several books, and has appeared on FOX Business News, National Public Radio, and other media outlets as an expert on cybersecurity.
Writing under the pseudonym Packet.Zip, he operates this blog. In its list of 46 Federal Technology Experts to Follow on Twitter, Forbes described Aamir Lakhani as "a blogger, InfoSec specialist, super hero…and all around good guy."
~/articles
Articles by Aamir Lakhani
200 published articles
Mobile Security should be your top concern
The world is much smaller than it was thirteen years ago. In 2007 Steve Jobs announced the Apple iPhone. It was an innovative product because it brought mobile Internet into the pockets of millions of people. Smartphones were in existence before the iPhone. Blackberry devices were standard issued de
Aamir Lakhani13 min read
Podcast: What is XDR?
Tony G and Packet.Zip return to discuss what is XDR. Is it hype? Is it more than repackaged tools? Let's break down the new industry buzzword.Click here to listen directly on SoundCloud
Aamir Lakhani1 min read
Clark-Wilson Security Model
The Clark-Wilson security model is based on preserving information integrity against the malicious attempt of tampering with data. The security model maintains that only authorized users should make and be allowed to change the data, unauthorized users should not make any changes, and the system sho
Aamir Lakhani2 min read
Scammers Posing as Board of Elections to Obtain Social Security Numbers
Everybody in the USA that used the mail-in or dropbox voting option, be on alert that there are criminals lurking about with the goal of abusing the confusion going on with the US election the next few days. If anybody calls you and asks you to verify anything about you as a means to “validate y
Aamir Lakhani2 min read
Baselines and Anomaly Detection – The Future of Security Capabilities
In a previous lesson, I pointed out that there are three essential ways security tools detect threats. Those methods are signature-based, behavior, and anomaly detection. Most security tools use a combination of one or more of these capabilities to detect threats. The following figure represents
Aamir Lakhani1 min read
Why is my Network Down?
Over the last few days, many of us in the USA have experienced network outages. I’m not sure about you, but I have become the default “IT Support Guy” at my house meaning when the network goes down, my family starts throwing tomatoes at me while they blame me for the outage. As the IT Support Gu
Aamir Lakhani1 min read
Active DDoS Attack – What to Do
Don't Panic!You will inevitably be affected by a Distributed Denial of Service (DDoS) attack at some point. A DDoS attack is a shock to the system and how you react is everything. When it happens, stay calm and accept it. Someone comfortable at making the right decisions needs to take control of the
Aamir Lakhani6 min read
Open Source Security Tools You Can Use Now
One common question I’ve received is what open source tools are available that I can download now. The answer to this question is simple: LOTS! I will point out however, there are reasons why organizations don’t just run only open-source products within their security operation center. There are
Aamir Lakhani1 min read
Snort 3 is FINALLY out
Snort 3 is out. This comes from the official release. This post can be found HERE. We know users have been anticipating this day for years. So, we are excited to announce that the official release of Snort 3 is here! The version number is 3.1.0.0. Snort is an open-source intrusion prevention system
Aamir Lakhani1 min read
Zombie Speed 101: They are getting faster
They say the strong survive. How does that apply when you are dead? The Zombie Apocalypse is among us. What are your chances of making it?It really depends on what types of Zombies you are “lucky” enough to encounter. It does look like our advantage of speed from the Zombies, and relying on running
Aamir Lakhani2 min read
LISP Multihop Extended Subnet Mode
(This blog posting was written with the understanding that the reader already understands how standard LISP operates from a control and data plane perspective.)OverviewFor those who have looked into LISP Extended Subnet Mode (ESM), we have all come to the realization that it is a great leap in tec
Aamir Lakhani7 min read