Here's how you can tackle cybersecurity challenges using innovation in Telecommunications Engineering.

When considering system cybersecurity needs, I have found that considering the unique threats posed at each network layer helps, as each layer will have different vulnerabilities to the next. For example the physical network layer is particularly vulnerable to interrogation and "listening in"; whilst the data layer (one layer up) is susceptible to denial of service attacks. These two types of cyber attack are almost opposite in what they aim to achieve (one looks to steal data, whilst the other seeks to bring a network down). However, ultimately they both have the same outcome - loss of service. So when designing a network, take care to ensure your cyber solution focuses on each network layer.

Pour tout ce qui concerne les télécommunications le modèle OSI est la base. Savoir sur quelle couche nous nous trouvons est essentiel pour bien comprendre les différents échanges.

Telecommunications engineers can drive innovation that enhances network performance and bolsters cybersecurity defenses against evolving threats by focusing on these areas.

In my experience, AI learning regarding maintaining and delivering an effective cybersecurity managed service improves both successful detection rates as well as response times. AI can decrease the time required to triage and quarantine possible attacks significantly through learning and preprogramming regarding what threats to look for. In the event of a real cyber attack, that time to respond is also significantly reduced, but this still needs human input. There is still a balance to be struck between man and machine. AI can only do so much, human decision making regarding effective response is still key.

L'isolation des réseaux sur la couche de niveau 2 permet un premier niveau de cloisonnement des flux et contribue à ne pas tout mélanger sur un même réseau.

Le Zero Trust est une approche qui fait désormais parti des basiques en matière de cybersécurité. Nous ne pouvons plus nous permettre de faire confiance à des flux qui ne sont pas identifiés dans les échanges réseaux. Par défaut, tout peut représenter une menace, donc on interdit tout et n'autorisons que les flux légitimes.

Zero Trust is considered a journey because it involves a continuous, evolving process rather than a one-time implementation. Unlike traditional security models that rely on a strong perimeter defense, Zero Trust requires constant verification of all users, devices, and network traffic regardless of their location. This approach necessitates ongoing assessments, updates, and refinements to address emerging threats, integrate new technologies, and adapt to changing organizational needs. Therefore, achieving and maintaining a Zero Trust architecture is a dynamic and iterative effort that evolves over time.

In my experience, tackling the challenges of keeping yours or your customer's infrastructure safe from cyber attacks can sometimes force us to take a more "archaic" approach; minimising the threat surface area or disconnecting altogether. As organisations we need to look at innovative ways to detect and protect against cyber risk rather than shy away from the challenge; taking an approach that is more focused on managing risk and the cybersecurity lifecycle. There are ever evolving technologies and services on the market today that can help us take that proactive lifecycle approach, but perhaps the greatest challenge is that of changing our mindset and finding innovative ways to educate and disperse the myths surrounding cybersecurity.