Melih Abdulhayoglu’s Blog | Insights on Cybersecurity

Dwell time gap

Sometimes people fight over same things, because they define them differently. Cybersecurity, cryptography has come a long way where we use ciphers to protect data and enable encryption. But all these terms are still maturing. That’s why I am writing this blog…..to put a definition to these terms…. Cryptography: This term is made up of […]

Background: There is a type of certificate called DV certificate. These certificates have a positive security indicator, like a Padlock or “Secure” indicator. Here is an example of a DV certificate enjoying a security indicator..a green “Secure” with a padlock. Problem: As you probably have noticed, this is not a PayPal site. Its a phishing […]

And yes, 85 million plus endpoints are immune to ransomware attacks….proof!!!!! Recent attack that wrecked havoc in Europe is attributed to a ransomware called Wcry (WannaCry). Problem: Solution to prevent any Ransomware exists, people are unaware of the solution. How does Ransomware WannaCry work?: Once on user computer it wants to: 1)Read all your data […]

Here we are conversing with Ryan at Google, I must admit this has been a very healthy discussion where opinions are expressed and ideas are shared…..and few blogs later we arrive at crossroads…… -Do we (as the computer industry) accelerate investment (I say accelerate as there is already a momentum) in automation…. OR -Do we […]

We continue to exchange ideas, information and photos… And here is my latest response to the latest response First of all, the author is unaware that my company has built the most sophisticated Certificate Management system that can automatically request, issue, renew and manage the whole lifecycle of the certificate. Many Fortune 500 companies rely […]

My response to a recent blog has resulted in a quick response that I feel obliged to respond. First of all, the positive: Agreement on the need to invest on a new revocation infrastructure. “Basically, I see the value in revocation checking and think the investments need to be made to make it work and […]

Some in the industry have responded to my post about the need for the revocation infrastructure. They put forward an argument defending the need for short lived certificates by saying: “the main reason for them is to address the issue of key compromise“.  They followed it by “The most important thing to keep in mind […]

Why IT Management…… Operating system was big in the early days, because it enabled us to manage many different pieces like sound card, video card, hard disk etc without us having to write code directly for each and every hardware. We only have to write code for the operating system, then the operating system itself […]

With what is happening in the market place with superfish, there is a “realization” of an old and established method called “HTTPS Local Proxy”. What is it, well http://en.wikipedia.org/wiki/Proxy_server will explain it in more detail. *********from Wikipedia************** Filtering of encrypted data Web filtering proxies are not able to peer inside secure sockets HTTP transactions, assuming the […]