Defend-Forward-2-01

Defend Forward – Cloud Smart

A Change in Cybersecurity Tactics

The 2018 Department of Defense Cyber Strategy was released on September 18, 2018, and set the cyber-world humming. The path of cyber defense is shifting. No longer will cyber defense (at least as they DoD views it) be content to building a wall and making sure nothing breaches that wall.  The new directive is for cybersecurity to “defend forward to disrupt or halt malicious cyber activity at its source….” But what exactly does this mean?

Defend Forward

“The Department must respond to these activities by exposing, disrupting, and degrading cyber activity threatening U.S. interests, strengthening the cybersecurity and resilience of key potential targets, and working closely with other departments and agencies, as well as with our allies and partners.” -2018 Department of Defense Cyber Strategy

As you can see from the above quote, cyber defense is, in essence, going on the offense. An easy way to visualize this is by picturing a phalanx of hoplite soldiers in Ancient Greece. They have their protective shields in place and they are in close formation – amazing protection from any attack. However, they don’t stand still. They march forward and engage the enemy. They are bringing the defense toward the enemy’s position and using their defense as part of an offensive plan. They are, to bring it back to the new cyber strategy, defending forward.

defend forward

This is what the DoD plans for the future of cybersecurity. Rather than that waiting for the threat to attack, Defending Forward has your cyber defenses move forward to meet the attacker or, preferably, engage the threats before they can attack. It is an aggressive defense, but one that is needed in today’s ever hostile world. But that’s not all. Not only must we change our defensive tactics, we must also evolve our thoughts on the cloud.

Cloud Smart

 “Cloud Smart is about equipping agencies with the tools, knowledge, and flexibilities they need to move to cloud according to their mission needs.” – 2018 Federal Cloud Computing Strategy

According to the most recent (recent as of this time of writing – October 2018) draft of the 2018 Federal Cloud Computing Strategy, the Office of Management and Budget (OMB) is adding a new spin to how government should think of and interact with the cloud. The new Cloud Smart initiative is a trident approach to being safe on the Internet: security, procurement, and workforce.

First, Cloud Smart calls for a modernization of cloud security. Network security at the outer layer should no longer be the be all and end all – the necessity for security throughout a network is imperative, expressly surrounding actual data stored on the network. The Cloud Smart strategy points out that data is key, and it is an agency’s responsibility to the public to keep that data safe and secure.

office cybersecurity

The procurement tine of the Cloud Smart trident deals with giving agencies the power and knowledge to purchase the proper security products for their agency. But unlike the past, where each agency gets whatever it has found on its own, agencies are encouraged to share. In fact, the push is to standardize security products across all agencies.

The final prong of the Cloud Smart trident deals with the actual workforce of government agencies. To paraphrase the OMB, key cybersecurity talent needs to be recruited and/or grown and trained from current personnel. These new cyber-warriors will be responsible not just for cybersecurity, but also for procurement and engineering of Cloud Smart solutions.

Fognigma is Cloud Smart and Defends Forward

Fognigma is a patented enterprise software solution which creates secure, invisible, and encrypted networks on the cloud called Mission Partner Networks (MPNs). It does this by taking randomly leased virtual machines from multiple cloud servers and connecting them to form one network. Inside these networks are all the communication and collaboration tools organizations need for mission success: traceless telephony, encrypted file share, secure chat messaging and video conferencing, and virtual desktops (VDI) with Fognigma-unique features. These networks exist over public infrastructure yet are invisible to spying eyes.

Every connection in a Fognigma network is wrapped in cascading layers of AES-256 encryption using two separate encryption libraries, OpenSSL and wolfSSL, for added security. This encryption protects the connections that make the network, but also all the connections inside the network. This provides protection at the outer layer of the network, but also surrounding the data stored inside – just like Cloud Smart dictates. Plus, Fognigma is FIPS 140-2 validated.

Fognigma offers even more protection by giving admins granular user controls. Fognigma protects against threats from the inside, as well, by letting admins set which users can access which tools, folders, and files – controlling even the type of access each user has (read only, write, etc.). And Fognigma does all of this without any third-party access or oversight – you own it and you run it.

granular controls for admin

Fognigma’s MPNs are designed to allow for the easy collaboration of multiple agencies without disrupting or endangering each agency’s users or data. In our experience, once an agency gets a taste of what Fognigma can do, it wants Fognigma for its own operations. We completely support that choice (and so does Cloud Smart)!

Fognigma embraces the Defend Forward mindset. Since MPNs are built across multiple cloud providers, they can reach out into over 50 regions spread across 5 continents. Fognigma lets you boldly go into any part of the world your mission dictates. You will advance upon the enemy, yet they will not know you are there due to the invisible nature of MPNs. In fact, MPNs defend forward a little differently from other networks. They defend forward in space, but they also defend forward in time.

Let’s explain. Fognigma lets you extend your network, part of your network, and/or one or more of your communication components into enemy territory – you have defended forward in space. But Fognigma also gives you complete control over when the network, parts, and/or components exist, giving you the ability to defend forward in time. Because Fognigma acknowledges that “always on” isn’t always desired – both for conserving resources and extra security – it gives you the ability to manually or automatically, on a schedule, remove components, network parts, or the entire network. Or, conversely, you can add to your networks. Basically, your entire network’s topography can be constantly in flux; you will be defending forward by being everywhere and nowhere, seemingly at the same time (like Schrödinger’s network). Your shields will forever be raised, yet your troops will be constantly and silently moving around the battlefield defending forward in four dimensions (i.e., in space and in time).

Fognigma combines all the best parts of the Cloud Smart strategy with a solid Defend Forward stance. With Fognigma, your organization will be able to protect itself while not having to sit still hiding behind walls. It can move, it can flow, it can adapt to any situation. Your organization will be able to smartly glide through the cloud towards mission success, while defending in all directions. This is why we can proudly say: Fognigma helps you Cloud Smart while Defending Forward.

bigstock-Isometric-Internet-Security-Lo-238957666-Converted-01

Protect Your Things

IoT Is Only Getting Bigger

The Internet of Things (IoT) is growing larger day by day. With thermostats monitoring and virtual personal assistants listening, it’s getting quite easy to become surrounded by things. Things are great! They can help you turn on lights and buy dog food and find out what the weather is like without having to look out a window. But things do come with risks. These things could risk your network security, data, users, intellectual property (IP), and even your entire company!

internet of things (ioT)
Connected to everything with cybersecurity

It’s to be expected, really, if you think about it. Each device asks to connect to your network and then monitors something, often communicating out to the Internet. Each thing is now a new window or door into your network – a new safety vulnerability disguised as a handy device.

People Forget About Security

Often, people add smart devices in their homes and offices without any thoughts of security. It’s assumed that the company who created the device was smart enough to add in some measure of safety. Sometimes this is true with the more conscientious manufacturers, but many times network safety is sacrificed for speed to market (gotta get those sales numbers up). This isn’t safe for your home network, and it can be disastrous for your office network.

open network
Opening your network to leaks due to devices

Imagine an enemy agent out there watching your company. Suddenly, a thing pops up on his radar. To you, it’s just a little monkey on your desk that opens its umbrella when it is going to rain (and if that doesn’t exist, it really should). To the enemy agent, it’s a poorly protected entry point to your company’s network. The monkey might tell you that it’s going to rain, but what it isn’t telling you is that the rain is really the tears of your company as all its important information is exploited.

Insecure IoT Can Ruin Your Company

The monkey might be a simplistic and dramatic example, but the main points are solid. Adding unsecure items to your office network can be disastrous. Though we highlighted a frivolous IoT toy, there are many things that are very valuable and useful to businesses and organizations: the aforementioned thermostat, moisture sensors, factory automation things, HAL 9000, security devices, and even a fishtank in a casino!

The first thing to do is make an IoT security plan (i.e., what to do when someone wants to add a new device to your network), and the first step of that plan is to take the new device to the IT department for evaluation. Is it from a known and/or trusted manufacturer? Does it have any safety features built into it? Does it often get its firmware updated? Who will monitor and make sure updates are done in a timely manner (this one is really important)? In short, is this good for the company (read: worth the risk to your network)?

How to securely add a device to your network, discuss with your IT department

Making a plan gets everyone in the habit of thinking before they add a new thing – and, to be quite blunt, users should never stop thinking. But we want to make your IoT security easier and safer – with Fognigma.

Fognigma takes a multi-prong approach in protecting your things by protecting everything on your network. In a nutshell, Fognigma creates a Mission Partner Network (MPN) in parts spread out across multiple cloud platforms, which function as one. This creates an invisible-to-outsiders network in which your data, your communication tools, even your current network (depending on your Fognigma deployment) live. Your IoT devices are also inside the protection of your MPN, as well.

IoT devices connect to the MPN through a bit of hardware called a Wicket. Depending on how you have your IoT spread out through your organization, each device can have its own Wicket, or they can clump into little IoT hives and several devices can connect through one Wicket. Once connected to the MPN, your things are now invisible to external threats.

MPNs prevent metadata snooping (a key way third parties discover networks to exploit), which means network threats won’t even know your IoT devices exist. Fognigma is already in line with the NIST’s recommendations for IoT security by wrapping each connection inside an MPN with the recommended AES-256 encryption. Only, Fognigma doesn’t just use one layer of AES-256 encryption – everything inside your MPN is double wrapped for extra security.

A company that uses Fognigma will have a major advantage in the IoT world, as Fognigma makes sure your IoT remains only your IoT. That’s the magic of Fognigma. We’d like to chat more about this, but the thing on our wrist (which is connected to our phone, which is connected to the refrigerator) is telling us it’s time to get up and get a snack.