Defense

The How: Cybersecurity Products and Services

This page is and will remain a work in progress

Most of this site focuses on what to do/not do and why. This pages looks at the “how” with lists of types of defenses, actions and (will) list some of the myriad companies providing cybersecurity products and services.

The many challenges that are faced include:

Categorizing the types of defenses needed from the list below

Understanding what function is in a solution described by a marketing term (SASE, SSE, Threat Intelligence, XDR Anti-Virus, BEC/AntiPhishing, come to mind)
Comparing how well one product performs v. another while prioritizing the importance of the functions v. nice to have!
Decision to use a Managed Security Servces Provider(MSSP) v. inhouse defenses based and location of operations and budget
Cloud, Multi-Cloud and inhouse center for gravity
Previously selected defenses in use
Trustworthiness and Verification of third party suppliers (part of oure Security as a Service offering)
The importance of prioritizing non-IT -based defenses (e.g. Anti-Phishing Training, Insider Threat Strategies, Automated Asset Curation, etc.)

To be clear none of the companies that will be listed represent recommendations but are intended as potential suppliers of solutions.

Defense Tool Types

Defense Tool Types		Defense Marketing Solution types
Air Gap Attack Surface Reduction Biometric Security Browser Isolation CAPTCHA CASB and SWG Cipher Content Disarm and Reconstruction Content Disarm and Recovery Data Loss Prevention Deflection DNS Protocol Filtering DNS Security & Protocol Filtering Domain Name Filtering Encryption End-to-End Encryption HyperText Transfer Protocol Secure Hypervisor-protected Code Integrity Identity Management	Internet Protocol Security IP, Port and Protocol Filtering Memory-Safe Languages Microsegmentation mTLS Multi-factor Authentication Multi-Layer Security Mutual Transport Layer Security Passkey Protective DNS Proxy Server Remote Browser Isolation Secure APIs Secure Containers Security Strategy Transport Layer Security URL Filtering Virtual Private Network	Anti-Malware Software Anti-Virus Software Business Email Compromise Solutions Cloud Access Security Broker Distributed Firewall Endpoint Detection and Response Extended Detection & Response Firewall Firewall as a Service Intrusion Detection System Intrusion Prevention System Malware Detection and Removal Secure Access Service Edge Secure Internet Gateway Secure Service Edge Secure Web Gateway Threat Detection Threat Protection

To Be Continued …