Professeur De La Casa De Papel

I was watching the TV series, La Casa De Papel (Coin Heist) on Netflix, a few weeks agone. I realized that the story of the gang tin reveal some all-time practices we should use while dealing with the security of the products we build.

Beware, the text contains spoilers. If you lot haven't seen the evidence till the finish and you are planning to, please visit the article on a later mean solar day. Or proceed with your at your own risk :)

Threat Modeling Can Protect you Against Unexpected Events

First of all, what is threat modeling? Threat modeling, in layman terms, is an belittling procedure. In there, the engineers who build a product coordinate with the security team. They collaborate towards the security architecture of the product.

More specifically, the model, how someone can assault the product, and what is worth protecting (assets). They as well model what they tin can be loose about. Being loose, not because they don't care. Only because protecting it can be more than plush than the nugget itself.

Threat modeling can get yous a long way and protect you from events, confronting the odds. What is threat modeling in our "Coin Heist" instance? It is Professor's (aka Sergio Marquina's) plan against all potential routes the program will take. In having alternatives, even for the edgiest scenarios. The assets are clearly, the stolen coin or his comrades in the heist.

A Single Indicate of Failure can Crusade a Chain of Bad Reactions

Threat modeling might help yous recover from many security problems that will arise. You tin recover from a cyber-attack but things volition never be the aforementioned. A crack in the security wall tin have a domino effect.

Imagine a lake dam, with a few cracks around, going unnoticed and being exploited by nature. You tin can ever prepare information technology, but it might take time for the lake visitors to found trust again.

Like the Professor, where he lost respect subsequently the aureate (temporarily) vanished. Even though his great problem-solving skills, helped resolve the event, things got hairy very fast.

Chain reactions

Luck is not a Strategy in the Long Term.

In the show, there are some provocative cases of luck. For case:

Raquel renegading the police organization
Police and regular army failing plans to invade the bank
Failing to shoot to the target many times. From troops, that are supposed to be professional shooters.

Snitches and beneath-expectations defense force might requite you some extra time. to move with your plan or escape. Merely y'all accept to accept advantage of it. To either move with your program or escape. Ever recollect your luck might get abroad, whatever time soon.

Never Drop the Weapons

This is not specific to cybersecurity only to life in full general.

Hurting is temporary, quitting lasts forever. Accept your mistakes, remediate them and learn from them. As long as your center is pumping blood, you are not dead notwithstanding.

Architectural mistake? Patch it immediately and re-builder the production (yeah, I know...delivery and business constraints)
Below expectations monitoring? Fix it now. Add more people and run into how they can exist more constructive
Serious defects in the code? Train your team insecure practices and lawmaking review focused on security. Buy a license to a parcel like Snyk or Nessus. Plan some percentage of your capacity to patch the almost severe ones

Budget constraints

Upkeep constraints

Even in the Worst of Moments, Keep your Composure

Imagine a ransomware attack. It is there, it is happening. Screaming over people'southward heads will not solve the problem.

When you cannot win against an set on, you still accept to practice your all-time, to at least not lose. For certain, don't panic. As the Stoics say, you take to be your best self on the things you control. And let the rest, merely be. Accept them.

Y'all cannot control the side by side phase of an attack. But y'all can exercise your best to prevent it, to non echo the same mistakes, and to close the open doors that exist now.

Don't lose your temper and clear heed, Every bit Tamayo lost it when he realized the gang was blackmailing him for various reasons.

He got angry, he got blackmailed, he was even ridiculed in the optics of the European Central Bank. And what was the result? He lost, hands downward, fifty-fifty though he lied to the media about winning.

Conclusion

Top-notch cybersecurity is not a free lunch. And non everyone can do it, every bit the caveats are and so many. Simply with some discipline, retrospection, and humility, you tin do wonders. Also, the testify is great, if you haven't seen it, delight do.

First published hither

L O A D I N G
. . . comments & more!

Source: https://hackernoon.com/cybersecurity-lessons-from-the-netflix-series-la-casa-de-papel

Posted by: estradaanight.blogspot.com