Andy DENG’s Post

#inthemeantime you cannot outsmart AI attacks no matter how smart and using SIEM on non secure by design devices including firewalls, SIEM itself and the overburdened analists. What can you do? Easy- make sure your frontdoor gets a new unbreakable lock for the next 15 year and get rid of the cameras, security guards, monitoring dogs, house sweeps . And make sure your graduates enhance your business because thats where the future is and should be, not protecting that which is flaky from the beginning. #time4achange #tripled what is for you impossible is now made possible- secure by design encryption SBD -futureproof

It is no surprise that we have over 500,000 cybersecurity job vacancies and a severe shortage of skilled practitioners to fill those vacancies. https://lnkd.in/eErBwPfb If you fail to invest in trustworthy secure systems for decades and instead adopt a “penetrate and patch” protection strategy or no strategy at all, the demand for vulnerability chasers (a.k.a., "the fixers") will continue to skyrocket (paralleling the growth in attack surface). This is like an arms race. We will never be able to keep up with the endless supply of vulnerabilities that accrue due to the endless supply of exploitable weaknesses and deficiencies in our increasingly complex systems. And, to exacerbate the problem, we have lost a couple of generations of cybersecurity practitioners who understand the importance of "assurance" in developing trustworthy secure systems. The only solution to this problem is to rebuild the "farm system." That is, increase the available pool of scientists, engineers, and mathematicians who understand the basic principles and concepts needed to develop trustworthy secure systems. The National Centers of Academic Excellence in Cybersecurity are making a difference but more is needed. https://lnkd.in/esmaxz3z This is not a spectator sport and we are up against the clock. - Support the STEM programs in your local school systems - Mentor students; encourage them to pursue STEM careers - Support the Cybersecurity Academic Centers of Excellence We need to fix this problem – one student at a time. Join the "Ensurgency."  Team SSE. #STEM #Mentors #STEMCareers #SoftwareEngineers #ComputerEngineers #ElectricalEngineers #Mathematicians #HigherEducation #HighSchools #Colleges #Universities #SystemsSecurityEngineers #CybersecurityCoE #SSE #TrustworthySystems #Assurance #CyberSecurity

It is no surprise that we have over 500,000 cybersecurity job vacancies and a severe shortage of skilled practitioners to fill those vacancies. https://lnkd.in/eErBwPfb If you fail to invest in trustworthy secure systems for decades and instead adopt a “penetrate and patch” protection strategy or no strategy at all, the demand for vulnerability chasers (a.k.a., "the fixers") will continue to skyrocket (paralleling the growth in attack surface). This is like an arms race. We will never be able to keep up with the endless supply of vulnerabilities that accrue due to the endless supply of exploitable weaknesses and deficiencies in our increasingly complex systems. And, to exacerbate the problem, we have lost two generations of cybersecurity practitioners who understand the importance of "assurance" in developing trustworthy secure systems. The only solution to this problem is to rebuild the "farm system." That is, increase the available pool of scientists, engineers, and mathematicians who understand the foundational principles and concepts needed to develop trustworthy secure systems. The National Centers of Academic Excellence in Cybersecurity are making a difference but more is needed. https://lnkd.in/esmaxz3z This is not a spectator sport and we are up against the clock. - Support the STEM programs in your local school systems - Mentor a few students and encourage them to pursue a STEM career - Support the Cybersecurity Academic Centers of Excellence We need to fix this problem – one student at a time. Join the "Ensurgency."  Team SSE. #STEM #Mentors #STEMCareers #SoftwareEngineers #SystemsEngineers #ComputerHardwareEngineers #ElectricalEngineers #Mathematicians #HigherEducation #SSE #TrustworthySystems #HighSchools #Colleges #Universities  #SystemsSecurityEngineers #CybersecurityCoE

Great Opportunity in the field of CYBER SECURITY

Frequently Asked Question: Can Electronics and Communication Engineering (ECE) graduates apply for Computer Science Engineering (CSE) related government jobs? As someone who frequently interacts with aspiring engineers, this is one of the most common questions I receive from ECE graduates. The short answer is yes – there are numerous opportunities where ECE graduates can step into roles typically associated with CSE. While both fields have their unique strengths, there’s a significant overlap when it comes to skills in software development, IT management, and cybersecurity. Here’s a list of key government opportunities that accept both CSE and ECE graduates: **1. Deputy Central Intelligence Officer (DCIO) - Technical under the Intelligence Bureau (IB)** - **Roles:** Technical intelligence, cybersecurity, and IT systems - **Focus Areas:** Protecting national security through advanced technical solutions **2. National Informatics Centre (NIC)** - **Roles:** Scientist and Technical Assistant - **Focus Areas:** Software development, database management, and cybersecurity **3. NIELIT (National Institute of Electronics & Information Technology)** - **Roles:** Scientist and Technical Assistant - **Focus Areas:** IT management, software solutions, and cybersecurity **4. Indian Computer Emergency Response Team (ICERT)** - **Roles:** Cybersecurity experts, incident responders, and IT protectors - **Focus Areas:** Safeguarding India’s cyberspace, ensuring robust protection against cyber threats **5. IBPS Specialist Officer (IT Officer)** - **Roles:** IT management within public sector banks - **Focus Areas:** Ensuring the smooth operation of IT systems in the banking sector, managing data security, and more These positions highlight the fact that a strong foundation in ECE can be just as valuable as a CSE degree when it comes to IT and cybersecurity roles in the government sector. ECE graduates bring a unique perspective to these roles, often contributing with expertise in hardware, embedded systems, and telecommunications. If you're from an ECE background and aspire to work in IT, software development, or cybersecurity within the government sector, don’t hesitate to apply for these positions. Your skills are in demand, and you have the potential to make a significant impact. Tip: When applying, focus on highlighting your relevant technical skills, such as programming, networking, and cybersecurity, to align with the job requirements. For those looking to explore these paths, these roles offer a chance to build a fulfilling and impactful career within various government sectors. #GovernmentJobs #CSE #ECE #CareerOpportunities #Cybersecurity #NIC #NIELIT #ICERT #DCIO #IBPS #CareerGuidance

In the last few years, my identity has become popular for use in academic research EMAIL PHISHING attacks. Please see the email below, which was sent to one of my CURRENT PhD students. To all students interested in working with me: please know that I do not cold-call student researchers, instead, I recruit students out of undergraduate research programs (e.g., AURA, SURE, REU) and UM CSE and ECE's PhD candidate pools. On many occasions, students have replied to my actual email address with the phish'ed information, at which point I have had to let them know the bad news. Often they get frustrated with me, telling me to contact my IT department to stop these attacks. I try to remind students to read cold-calling emails DEFENSIVELY, noting who the email is ACTUALLY from and asking the question if the proposal is TOO GOOD TO BE TRUE. Meanwhile, I will post on my socials that these attacks are happening. BTW, I am looking for PhD students to mentor. You can apply to UM CSE's MS and PhD programs here: https://lnkd.in/dpSaJWCJ #research #phishing #email

Requiring bachelor's degrees and decades of experience for cybersecurity positions (this means you Remo Bassan) is like defining variables that you don't intend to use. Again, no one is going to use arts to test a web app for vulnerabilities. No one is going to use humanities to run Linux shell commands or steal credentials in an LLMNR poisoning attack to prove that the client needs to up their security controls game. No one is going to use gender studies to obtain a reverse shell on a target. Yet every single UC or Ivy League college I'm aware of is requiring all of this as a prerequisite. Certifications, meanwhile, contain all of the relevant material for getting these things done while also containing none of these junk subjects. Proof that HR teams absolutely *suck* at efficiency.

"UNT cybersecurity researchers to modernize Department of Defense hiring" The U.S. Department of Defense (DoD) has enlisted cybersecurity experts from the University of North Texas to overhaul its hiring processes, with the ultimate goal of safeguarding national security. UNT researchers, led by computer science and engineering faculty Ram Dantu and Cihan Tunc, have received funding from the Cyber Service Academy under the DoD’s Chief Information Officer. For more information: https://lnkd.in/gVZvg9-4 We are still looking for UNT students who can contribute as research assistants or software developers. For more information, please refer to the first comment. #UNT #CSE #CoE #computer #science #engineering #cybersecurity #LLM #NLP #research #opportunity #support #funding

What University should do better in training cybersecurity students. I posted my answer as a comment but I think it needs more prominence: Stop training them on stuff only large corporations will have. Focus more on analysis and problem solving as 99% of what they do and will use at first will already exist as an infrastructure and they'll mainly be troubleshooting. They will not be building any new networks. Drop the "best practices" crap and teach facts, it's an academic institution - you wouldn't teach alchemy as part of chemistry so don't do it with cybersecurity either. Recent grads have so much garbage in their heads they need years of real world experience to know it's mostly not true. That shouldn't happen. If we avoid those things grads could move directly into practical positions immediately after university.

## My talk on cybersecurity careers: igniting interest in the next generation of defenders! I recently got the wonderful chance to discuss the fascinating field of cybersecurity careers with a group of engineering students. We looked into the wide spectrum of jobs that are accessible, including architects, compliance professionals, security analysts and penetration testers. The conversation brought attention to the increasing need for qualified experts in this important subject, particularly in light of new developments such as: Cloud security: The demand for experts who comprehend this environment and its particular security challenges is growing as more businesses shift to the cloud. Machine learning and AI: The rising usage of these technologies in offensive and defensive cybersecurity strategies presents the opportunity for skilled practitioners who know how to best utilize them. The dynamic threat landscape necessitates a workforce capable of rapid learning and adaptation as new risks surface regularly. Seeing the students' excitement and interest in this exciting topic was inspiring. Investigate the fascinating opportunities of a career in cybersecurity if you're enthusiastic about technology and want to have a significant influence! #cybersecurity #careers #engineering #GRC #futureofwork