Disaster Recovery as a Service (DRaaS)

Disaster recovery as a service (DRaaS) is the replication and hosting of physical or virtual servers by a third party to provide failover in the event of a natural catastrophe, power outage or another type of business disruption.

RTO - recovery time objective & RPO - recovery point objective

 The recovery time objective (RTO) is the maximum tolerable length of time that a computer, system, network, or application can be down after a failure or disaster occurs.

8 DRaaS risks to identify and remediate

Before signing with a specific DRaaS provider, get information on how the vendor handles data protection and recovery and restoration, among other things.

Steps for a successful DRaaS implementation

For organizations with an established technology disaster recovery (DR) program, disaster recovery as a service (DRaaS) can automate specific functions, such as updating procedures, providing real-time analytics on the status of the program and DR plan exercising. Organizations with minimal or no DR activities can use DRaaS resources to configure a suitable and cost-effective program in a relatively short amount of time. Depending on the resources available from the DRaaS vendor, additional activities such as monitoring critical infrastructure elements, backing up data and applications and even monitoring of production environments can be selected

DRaaS vs. cloud DR: What are the differences?

 Disaster recovery as a service and cloud DR have the same end goal, but there are pros and cons to each approach that admins must consider before going with one over the other.

The difference between disaster avoidance and recovery

Disasters are an unavoidable fact of everyday business. If the forces of nature aren't conspiring against you, there is certainly no shortage of man-made atrocities that can shutter a data center. This means disaster planning and preparation are a critical aspect of any business plan. But there is no single approach to disaster preparedness, and the emphasis on disaster response is changing as new technologies and capabilities become readily available to everyday businesses. Let's examine the relationship between disaster recovery and disaster avoidance for the modern data center.

Forensic Readiness

Every year publish the statistics of detected attacks.
These numbers are increasing (30% in 2014, 51% in 2015, 69% in 2016 each regarding the last two years).
According to annual reports, the duration until an attack is detected is 148 days in median. 148 days is a long time to gain persistence, hide, and gather assets.

What is ransomware attack?

Million-dollar ransomware payouts, government protection, and ease of access will continue to fuel the growth of cybercrime.
Imagine coming to work and turning on the computer only to see a message that says “repairing file system on C:” or “oops, your important files are encrypted” demanding a payment in bitcoin to decrypt them.

Understanding passwords and their problems - The Good, the Bad, and the Ineffective

Today, with the Internet, social media, personal computers, online banking and everything else that exists, end-users need to create and maintain a large number of usernames and passwords for all of the accounts they have. This begins to create a problem. The many accounts we need to remember leads us to want to share passwords between different platforms, potentially including our work accounts. This is just one of the few contributors to the many password problems that exist today.

A history of passwords

Let’s talk about passwords. In particular, let’s talk about where we’ve come from, where we are at the moment, and where things are going in the future.

What are cookies and how they work?

If you have ever surfed the web, you have almost certainly encountered browser cookies among your digital travels. Although for some they may be a nuisance, for the majority browser cookies are an essential part of the internet experience, often interacting with you without your knowledge.

TLS Perfect Forward Secrecy and Session Resumption

Perfect Forward Secrecy (PFS) is a concept in Transport Layer Security (TLS) that makes sure that even if attackers manage to gain access to the private key of a certificate, they are not able to decrypt communication from the past (or communication in the future, without using active man in the middle attacks). 

From Open Wi-Fi to WPA3

Security in Wi-Fi networks has been, at some point non-existent, then questioned, improved and questioned again over the last two decades.

The Wi-Fi certification is a certification program which is backed by the standards developed from the 802.11 IEEE Working Group.  Wi-Fi certifications are issued by the Wi-Fi Alliance to devices that comply to one of their certifications, WPA2 for example.

Docker For Pentesting

In this module we are going to learn docker, nowadays its become more useful for everyone. You can build and deploy services in it in the form of container. It allows you to customize, clone your container, and also you can push/upload a customized image by the docker hub. We can build our penetration testing image easily and use it smoothly in docker. If you want to build a penetration testing lab, its very easy to set up a lab in docker then your host system. So let’s start…