Category: Fity Feeds

Intel and Boeing, two of the pillars of American industry.

Amazon SageMaker, like other services in Amazon Web Services (AWS), includes security-related parameters and configurations that you can use to improve the security posture of resources as you deploy them. However, many of these security-related parameters are optional, allowing you to deploy resources without them. While this might be acceptable in the initial exploration stage, customers want resources to be deployed more securely in production.

In this post I will discuss three approaches for deploying Amazon SageMaker resources more securely and highlight some pros and cons with each approach.

Before you begin

This post assumes general familiarity with machine learning and Amazon SageMaker. In addition, it assumes knowledge of the services used to implement security controls, including:

Approaches

Amazon SageMaker contains security-related parameters for the secure deployment of resources within it. For example, when creating an Amazon SageMaker notebook instance, root access on the notebook instance can be disabled. Another example is when creating an Amazon SageMaker training job, it can be set up to access other services like Amazon Simple Storage Service (Amazon S3) through an endpoint in the customer’s Amazon Virtual Private Cloud (Amazon VPC).

However, these and most other security-related parameters and configurations are optional. As examples of less-secure configuration, Amazon SageMaker notebook instances can be created with root access enabled, and training jobs can access Amazon S3 over the public endpoints.

There are two main methods of implementing controls to improve the security of AWS services during deployment. One of them is preventive and uses controls to stop an event from occurring. The other is responsive, and uses controls that are applied in response to events.

Preventive controls protect workloads and mitigate threats and vulnerabilities. A couple of approaches to implement preventive controls are:

• Use IAM condition keys supported by the service to ensure that resources without necessary security controls cannot be deployed.
• Use the AWS Service Catalog to invoke AWS CloudFormation templates that deploy resources with all the necessary security controls in place.

Responsive controls drive remediation of potential deviations from security baselines. An approach to implement responsive controls is:

• Use CloudWatch Events to catch resource creation events, then use a Lambda function to validate that resources were deployed with the necessary security controls, or terminate resources any if the necessary security controls aren’t present.

The next few sections talk about each of these approaches in respect to Amazon SageMaker.

IAM condition keys approach

IAM condition keys can be used to improve security by preventing resources from being created without security controls. When a principal makes an API request to AWS to create a resource, the request information is gathered into a request context. This request context is compared to conditions in the principal’s policy. If the conditions pass, the API request is allowed to proceed and the resource will be created. However, if the conditions fail, the API request is stopped and the resource won’t be created.

The optional Condition element (or block) in an IAM policy is where expressions are built using condition operators (such as StringEquals or NumericLessThan). These condition expressions match the condition keys and values in the policy to the keys and values in the request context. The condition key specified in a condition element can be global or service-specific.

A condition element has the following syntax:

"Condition": { "{condition-operator}": { "{condition-key}": "{condition-value}" } }

What is MFA (and why should you care)?

In a nutshell, multi-factor authentication (MFA) means using something else besides your password to gain access to your account. There are many ways to do this – some, such as texting a one-time PIN to your phone are less secure than others, such as using a $25 Google Titan security key or the free Authy/Twilio smartphone app. The idea is that if your password is compromised (such as a reused one that has been already leaked in another breach), your account is still secure because you have this additional secret to gain access.

As COVID-19 infections surge in parts of the U.S., many workplaces remain empty or are operating with skeleton crews.

Please disregard these resources about doing so legally and securely

The leak of classified U.S and UK trade documents in the run-up to Britain’s 2019 elections were allegedly stolen by Russian hackers. The documents were supposedly accessed from the email inbox of former trade minister, Liam Fox, between July 12 and October 21, revealed Reuters. Whilst choosing not to name the Russian organisation responsible, the anonymous sources affirmed that it was likely a state-backed operation.

Days after President Donald Trump announced he could use an executive order to ban TikTok from the United States, Secretary of State Michael Pompeo said the administration is “closing in on a solution and I think you’ll see the president’s announcement shortly.”

Pixel 4a also has Live Caption, which provides real-time captioning (English only) for your video and audio content. New with the Pixel 4a launch — and also rolling out for Pixel 2, 3, 3a and 4 phones — Live Caption will now automatically caption your voice and video calls. The Pixel 4a has a Qualcomm Snapdragon 730G Mobile Platform, Titan M security module for on-device security, 6 GB of RAM and 128 GB of storage with an even bigger battery that lasts all day1. […] This fall, we’ll have two more devices to talk about: the Pixel 4a (5G), starting at $499, and Pixel 5, both with 5G2 to make streaming videos, downloading content and playing games on Stadia or other platforms faster and smoother than ever. Pixel 4a (5G) and Pixel 5 will be available in the U.S., Canada, the United Kingdom, Ireland, France, Germany, Japan, Taiwan and Australia. In the coming months, we’ll share more about these devices and our approach to 5G.

The Pixel line has always felt like more of an underdog product than one should reasonably expect from a corporation as massive as Google. After years of partnerships and Nexus devices, when Google finally did enter the smartphone market in earnest, it found itself attempting to chip away at an already mature category — an even more difficult feat when most of that competition is already running your operating system.

High-usage bucket-getters like Donovan Mitchell are essential for most title contenders, and before the 2019-20 season began, that’s exactly what his Utah Jazz were. Their preseason over/under was lower than that of only three other teams, Posted on 2020-08-03Categories Fity Feeds

Tyler Griffin Contributor

“Never run a dual-track process.”

Europe has been in COVID-containment mode for the last month, in contrast to the prior three months of serious lockdown. Kids went back to school, in shifts, and people went on vacation to countries with similarly low infection rates. Legoland and the zoo opened back up, capped at 1/3 capacity. Hardware stores and post offices are running “normally” once you’ve accommodated mandatory masks and 1.5 meter separations while standing in line as “normal”. To make up for the fact that half of the tables have to be left empty, most restaurants have sprawled out onto their terraces. It’s not really normal, but it’s also no longer horrible.

The Cybersecurity and Infrastructure Security Agency (CISA), the Federal Bureau of Investigation (FBI), and the Department of Defense (DoD) have identified a malware variant—referred as TAIDOOR—used by the Chinese government. In addition, U.S. Cyber Command has released the malware sample to the malware aggregation tool and repository, VirusTotal.

As reported by The Guardian, hackers have carried out a “malicious” cyber attack on Telstra, creating connectivity issues for some home internet users.

In May, some players in the popular competitive shooter Valorant seemed to have super powers. Every time they fired their guns, they hit their opponents right in the head, killing them quickly. They practically couldn’t miss.

Facebook has branded a legal order to globally block a number of Brazilian accounts linked to the spread of political disinformation targeting the country’s 2018 election as “extreme”, claiming it poses a threat to freedom of expression outside the country.

The Sydney Morning Herald has announced yet another cyberattack in a string of attacks targeted at Australian organisations and critical infrastructure. Suspected to be the work of an overseas actor, Regis, the aged care operator, is the latest to be affected. Already struggling with the coronavirus outbreak, the company now has to deal with the breach of sensitive personal data. The federal Australian government has issued further ‘critical’ warning that Maze ransomware will likely continue to threaten aged care facilities across the country.