Misc https://womenscyberjutsu.org/forums/topics.aspx?forum=185510 Tue, 16 Jun 2026 11:08:07 GMT Sun, 17 Feb 2019 21:54:02 GMT Copyright © 2019 Women's Society of Cyberjutsu Need to show how static analysis has value, to save my position. https://womenscyberjutsu.org/forums/posts.aspx?topic=1474606 https://womenscyberjutsu.org/forums/posts.aspx?topic=1474606 We use Autoruns on several clients to pull persistent mechanisms on clients endpoints, and we have alerts that present data to about 7 different people/shifts, with all "new" PM's on a device that they inspect for maliciousness using the hashes (for the most part).  That is our Dynamic analysis. 

My position looks at all the autorun and registry entries, as well as the new PM's that were alerted on for the past 24 hours, on all endpoints, for all clients, the following day, in an effort to catch anything that was missing during the dynamic analysis.  

My boss wants to do away with my static analysis because he doesn't see the value in it.  I know that these dynamic alerts could be pulled together to be used to identify attacks that utilize several legitimate processes, that may seem benign when seen by itself in an alert.  But, my boss wants metrics that show the value of my position.  I'm a bit overwhelmed with trying to show this to him.  I know there is value, but how and where do I find "metrics" that proof that my position really is valuable.  I haven't found a lot of malware, but I have found PUPs that pose a threat...and that treat could lead to malicious network connections. But that would hopefully be caught by those who analyze the network traffic.  I know there is value in seeing "all" the processes and files on an endpoint, I just don't know how to prove it.

I really need help with this. I am 1 of only 2 women who work in this department and I feel like I just can not get their respect for my perspective, without some solid ground to stand on.  I need that ground!!  How do I prove this? with metrics?  Women's intuition is just not enough in this career!

 

thanks for any ideas!

Kimberly

]]> Sun, 17 Feb 2019 22:54:02 GMT Static Code Analysis Tool for use within Continuous Integration https://womenscyberjutsu.org/forums/posts.aspx?topic=1286705 https://womenscyberjutsu.org/forums/posts.aspx?topic=1286705 My company would like to do static code analysis within continuous integration (bamboo).  There are so many tools out there, so I thought I would throw it out there - does anyone have a suggestion on the tool or tools we should look at?  Of course we are interested in open source tools, but all suggestions are welcomed.

If there are different types of security testing that work well within continuous integration, I would also be interested in hearing suggestions in that area.

Thanks,

Karen

]]> Wed, 13 Jul 2016 15:40:19 GMT Technology Audit position(s) at Verizon https://womenscyberjutsu.org/forums/posts.aspx?topic=1284169 https://womenscyberjutsu.org/forums/posts.aspx?topic=1284169 I hope this is allowed. I'm not an official recruiter and I won't make any money from this, I just want to give people a heads up about a job opportunity at Verizon.

Verizon is looking for people with good technical skills in the areas of IT operations or applications reviews, network operations or security audits, SSAE16 or PCI compliance, and/or ERP security and controls review. This is a Technology Audit position - you bring the skills and we'll teach you how to audit. It's actually a lot of fun! I'm totally serious about this!
http://www.verizon.com/about/work/jobs/5438331-technology-auditor

Please feel free to share the information. I'd love to see some more women on the Technology Audit team. We're extremely outnumbered! :) 

]]> Tue, 28 Jun 2016 20:36:48 GMT DEFCON Roommate https://womenscyberjutsu.org/forums/posts.aspx?topic=1122941 https://womenscyberjutsu.org/forums/posts.aspx?topic=1122941 Hi Ladies!

DEFCON is Aug 6-9 in Vegas!! I'm looking for a roommate to split hotel costs! I have a room booked at Planet Hollywood at a discounted rate but I'm on a budget :-) You can also email me at vho823@gmail.com

]]> Thu, 25 Jun 2015 14:13:57 GMT Help with Statement of Purpose https://womenscyberjutsu.org/forums/posts.aspx?topic=1107072 https://womenscyberjutsu.org/forums/posts.aspx?topic=1107072 Hello, 

I'm applying for my Master's in Cybersecurity with a concentration in Digital Forensic at USF. I would like to get any suggestions, comments, or advise for my Statement of Purpose. I do not wish to write a generic essay, and will love to get your inputs and ideas, or experiences if any. 

Thank you so much in advance,

Ana

]]> Fri, 8 May 2015 15:08:11 GMT need help with infosec assignment https://womenscyberjutsu.org/forums/posts.aspx?topic=1102102 https://womenscyberjutsu.org/forums/posts.aspx?topic=1102102 I have to do an analysis of an online pharmacy system for security risks and need some assistance identifying the risks and appropriate controls. I need someone who has put together a security control map and has experience identifying risks related to CIA. Willing to pay $25/hr 
]]> Wed, 29 Apr 2015 02:33:02 GMT Work/LIfe Balance https://womenscyberjutsu.org/forums/posts.aspx?topic=1101408 https://womenscyberjutsu.org/forums/posts.aspx?topic=1101408 ]]> Mon, 27 Apr 2015 22:55:36 GMT New WSC Logo https://womenscyberjutsu.org/forums/posts.aspx?topic=1101391 https://womenscyberjutsu.org/forums/posts.aspx?topic=1101391 WSC is looking for a new look to represent the essence of women in cybersecurity.

How would you, a women in cyber like to be represented?

Do you have ideas? Please share!

]]> Mon, 27 Apr 2015 22:31:06 GMT