A Super Passion for Cybersecurity and Advice for Newbies

“My advice to everyone trying to be more cyber-secure is to start at the beginning: passwords.”

In the BBC series Sherlock, the pilot episode begins with Dr. Watson, an ex-soldier, being told to start a blog and write about everything that happens to him. His response is, “Nothing happens to me.” My employer asked if I would write a blog about cybersecurity events and how an analyst thinks. Before I switched from my previous career to cybersecurity, I would have said the same thing as Dr. Watson—“Nothing happens to me.” Being a military veteran myself, when you compare the life of a soldier to others’ lifestyles, it seems like nothing happens in the civilian world. But, like Dr. Watson, once one finds a career that brings their passion back, they can suddenly blog. I have found my passion again in all things cybersecurity, and I hope you find that passion helpful and engaging. I will not be sharing any cases, but tips and practical advice on how to be a blue teamer or defender.

As a defender, you are not an avenger. Instead, you protect—you establish risks, set up parameters, and do cyber hunting in your domain. If you’re wondering where to begin, my advice to everyone trying to be more cyber-secure is to start at the beginning: passwords.

Passwords and MFA (Multi-Factor Authentication)

If you are new to cybersecurity, a password must be replaced with a passphrase and, if possible, a password manager.

Creating a passphrase

1. Level Up Your Password Game. When it comes to passwords, go for the ultimate power-ups! Craft them with a mix of uppercase and lowercase letters, numbers, and epic special characters. Beware of newbie moves like using birthdays, common words, and cliché phrases. And to really power up and go for the bonus levels, use a passphrase. Take a quote from your favorite book or movie and mix it up or combine multiple. Here’s an example mashing quotes from The Avengers with The Lord of the Rings:

All who wonder, lack conviction.

We’ll take that passphrase and change certain letters to symbols:

A//whoW0nder,la(kConviction!

Now you have added your signature move with special characters!

2. Save Your Game by Using a Password Vault. Do not let it be game over because you reuse your passwords, or because they are not strong enough, or worse, because you forget them. Get a trusty password vault, and be the superhero of

your online security! With a password vault, you’ll organize your accounts and generate long, strong passwords that even Sherlock Holmes couldn’t crack. With a password vault, you only need to memorize one passphrase or cheat code: one vault to rule them all, one place to find them, one vault to bring them all… well, you get it.

Utilizing MFA

3. Enable Multi-Factor Authentication (MFA): Block Like a Fighting Game Hero! MFA is your secret move, the combo that makes you unbeatable. To unlock MFA, you must master the trifecta of authentication: something you know (your username/password combo), something you have (like your trusty authenticator application), and something you are (like your thumbprint or facial recognition).

First, you unleash your cyber knowledge uppercut, entering your username and password. Next, unleash your right cross and let it fly through the interwebs to connect to your authenticator app, generating a unique code that only you can access to your digital passcode power-up box. With MFA, you become the hero of your digital security. Blocking unauthorized access, you’re ready to TKO an advisory in their tracks from accessing your accounts!

Are you ready to get in the game and ignite your passion for cybersecurity? Then select the start button, stop reading, and start working!