Ekene Okafor

[Ekene Okafor @Ekene_ok]

@MrCharlesky Fill me in bro

[Ekene Okafor @Ekene_ok]

handling and securing user accounts and how they are accessed, configurations and permissions etc. Any misunderstanding of the shared responsibility can pose a serious security risk.
#VACyberMentorship #VictorAkinode #TheVAInitiatives

[Ekene Okafor @Ekene_ok]

Day 17. Cloud security is different from traditional security because of the shared responsibility model. Today I also learned how encryption protects data at rest and in transit. Here is what the shared responsibility model means in plain terms, as I understand it now: while

[Ekene Okafor @Ekene_ok]

the cloud service provider has her own responsibilities of securing the physical data centre, hardware and networking, cloud services etc depending on type of service the customer is signed up to e.g SaaS, PaaS or IaaS the customer/business also have her own responsibilities of

[Ekene Okafor @Ekene_ok]

simulate real attack to know the potential risk and possible impact on the business.
#VACyberMentorship #VictorAkinode #TheVAInitiatives

[Ekene Okafor @Ekene_ok]

Day 16. Security should be built into software from the very first line of code. Today I learned why web applications are constantly targeted and how vulnerability management works. The concept that surprised me most was VAPT(Vulnerability Assessment and Penetration Testing):

[Ekene Okafor @Ekene_ok]

both of them are often used together but are not the same as widely thought. Vulnerability assessment identifies weaknesses within a system while penetration testing attempts to exploit those identified weaknesses in order to

[Ekene Okafor @Ekene_ok]

attack and one click on a link from an email can trigger a major security breach, thereby affecting the CIA of the system. Hence, the need to take email security extremely serious.
#VACyberMentorship #VictorAkinode #TheVAInitiatives

[Ekene Okafor @Ekene_ok]

Day 15. Email is the number one attack vector in cybersecurity. Not malware. Not hacking. Email. Today I also learned how VPNs actually work and why endpoint security is often overlooked. Here is why every professional should care about email security: it is the primary source of

[Ekene Okafor @Ekene_ok]

the detection of suspicious activity on a network and raises alert when things look wrong while on the other hand, IPS goes beyond detection, it actually blocks malicious traffic and automatically stops attacks.
#VACyberMentorship #VictorAkinode #TheVAInitiatives

[Ekene Okafor @Ekene_ok]

Day 14. Two weeks done. Today was about network security fundamentals: firewalls, IDS, IPS, and the protocols that make secure communication possible. The difference between an IDS and an IPS is something most beginners confuse. Here is how I now explain it: IDS focuses on

[Ekene Okafor @Ekene_ok]

similar attack and improve future response when need be.

#VACyberMentorship #VictorAkinode #TheVAInitiatives

[Ekene Okafor @Ekene_ok]

Day 13. When a breach happens, what do you do first? Today covered incident response and digital forensics. These two disciplines work together after an attack. The step in the incident response process that most organisations skip is lessons learned. Here is why it matters:

[Ekene Okafor @Ekene_ok]

having a review of what went wrong, what worked well and what needs to change in the incident response after an attack happened is critical in guarding against a re-occurrence of a

[Ekene Okafor @Ekene_ok]

help reduce session risks and one of the secure practices we must ensure to implement is to use short session lifetimes.
#VACyberMentorship #VictorAkinode #TheVAInitiatives

[Ekene Okafor @Ekene_ok]

Day 12. After you log in, a token keeps you logged in. If that token is stolen, so is your session. Today I also learned why logs are the most important tool a security team has. Here is one insight about session security I had not thought about before: strong configuration can

[Ekene Okafor @Ekene_ok]

#VACyberMentorship #VictorAkinode #TheVAInitiatives

[Ekene Okafor @Ekene_ok]

Day 11. Every time you click 'Sign in with Google', OAuth is running in the background. Today I learned how access control models like RBAC work and what makes SSO secure when it is done right. Here is the access control model I think is most relevant to African organisations

[Ekene Okafor @Ekene_ok]

right now and why: Role based access control model which restricts system access to an employee's job function and nothing more. The reason for this is because it entails strict data security, good regulatory compliance and offers ease of management for rapidly growing businesses

[Ekene Okafor @Ekene_ok]

@zillionokoye Interested