From the course: CompTIA Advanced Security Practitioner (CASP+) (CAS-004) Cert Prep

Emerging technology

- In this section of the course, we're going to discuss some emerging technologies. Throughout this section, we're going to be focused on Domain 1, Security Architecture, and specifically, Objective 1.8, that states that you must explain the impact of emerging technologies on enterprise security and privacy. Your organization is constantly being exposed to new threats and technology trends, every single day. As a cybersecurity professional, it is your job to keep up with them, understand how to address them, and understand how to get ahead of new and disruptive technologies, that are constantly being released into the industry. It seems like not a single day goes by, that we don't see some news about a newly discovered threat or exploit that's being used against our networks. Whether it's a new type of ransomware, a buffer overflow attack, or simply a different social engineering technique, threats are constantly evolving in an effort to get around our defenses. One way that we can keep up with all the latest emerging threats is to use Threat Intelligence. Now, Threat Intelligence helps organizations with gaining knowledge about new risks and exploits that are being used across the industry. Open-source and commercial-based Threat Intelligence are also going to be available in the marketplace. Now, Threat Intelligence organizations have been designed to find the trends in that data from a wide variety of sensors across the internet, and across the organizations that they're contracted to help protect. With this large amount of data at their disposal, these specialized Threat Intelligence organizations can usually spot the emerging threats and emerging trends before a single cybersecurity professional, like you or I really could. Now, disruptive technologies are going to exist in every industry. For example, if we look back over the last 10 years or so, we saw companies like Uber and Lyft that caused a huge disruption to the traditional taxi cab marketplace. Online training is another disruptive technology, and it's displaced many traditional certification bootcamp style providers from the technical training industry. Many of these disruptive technologies though, are really focused on being revolutionary and getting to the marketplace first. Now, sometimes this can be at the detriment of security. Security takes time, effort, and resources to achieve. If your organization is looking at adopting a disruptive technology, you should first do a proper security assessment of that technology. Over the next couple of years, there's going to be a lot of disruptive technologies out there affecting our organizations. For example, there's the upgrading of our cellular networks from 4G to 5G wireless, with its increased speeds and always-on connections. We have Machine Learning, Big Data, and Artificial Intelligence, that will all become commonplace throughout the organizations as well. A large movement has already begun to occur towards mobility, with a focus of bringing your own device initiatives, taking place at many organizations. As we look towards these disruptive technologies and their impact, it's important to identify security trends. A few trends have already begun to emerge that are going to continue into the next several years and decades. This includes the use of blockchain technology and security, automated threat-seeking artificial intelligence bots, behavioral analytics for system protection, and the move towards securing the Internet of Things. Many organizations have also begun to adopt a zero-trust model. This is where an organization has a highly-defensible posture, and essentially trusts no one, either internal or external to their organization. So, in this section, we're going to explore some of the newer, more modern technologies that are used in IT and the cybersecurity industries, and how this can affect our organizations and our enterprise networks. First, we're going to explore Artificial Intelligence and Machine Learning, also known as AI and ML, and the differences between these two. Next, we're going to take a look at Deep learning, which is a class of Machine Learning algorithms that use multiple layers to extract higher-level features from different types of raw data input. Then we'll move into Big data, which is a term used to describe extremely large and hard to manage amounts of data. This data can either be structured or unstructured data that your organization needs to process and extract information from, so that it can make sense of all the data it collects on a given topic area. Next, we'll move into our coverage of the Blockchain, and distributed consensus and their business applications, then we're going to jump into Advanced authentication and Advanced encryption. After that, we'll explore virtual and augmented reality technologies, as well as 3D printing, nanotechnology, and finally, quantum computing. As you can see, we have a lot of different topics and technologies to cover in this section of the course, so let's jump right into our discussion of the different emerging technologies that might be utilized within your security architectures. (logo reverberates)

Contents