Security - Michelin IT Engineering Blog

Sign in Subscribe

Security

A collection of 16 posts

When AI help us find a strong password

When AI help us find a strong password

This article was co-authored by Edgar Peronnin, a Telecom Nancy student who wrote all the code, and Pierre Raufast, based on an initial idea by Maxime Escourbiac (CERT Michelin). Why is a strong password important? Password strength remains a key issue in cyber security. Indeed, password hashes are regularly compromised

Nietzsche, Lockbit and Darwin...

Nietzsche, Lockbit and Darwin...

"What does not kill me, makes me stronger” When Nietzsche penned this phrase in 1888 in his book Twilight of the Idols, he was referring to recurring physical pain that haunted him. Little did the philosopher know that this idea would be used extensively in many fields, including personal

Securing a Virtual Desktop in a Public Cloud - Conclusion

Securing a Virtual Desktop in a Public Cloud - Conclusion

As I documented in previous articles we moved our VDI platform to dedicated subscriptions and segmented the users by separating Michelin and Non-Michelin. On this last leg of our journey we look to implement the final step in securing our Virtual Desktops in the cloud by implementing a form of

Journey to Identity Governance : Benefits, Challenges and Pitfalls

Journey to Identity Governance : Benefits, Challenges and Pitfalls

Identity Governance and Administration (IGA) by definition refers to a set of processes and tools which enable lifecycle management of human and non human identities and efficient management of access into the different systems in an enterprise. The Problem Michelin like many large enterprises has a complex portfolio of applications

QUIC Analysis - A UDP-Based Multiplexed and Secure Transport

QUIC Analysis - A UDP-Based Multiplexed and Secure Transport

Introduction The goal of this article is to do the analysis of the QUIC protocol, how it works, what are its advantages/disadvantages and what kind of impacts it will have on the network world. QUIC is a new connection-oriented protocol that creates a stateful interaction between a client and

Smashing received ideas : iptables

Smashing received ideas : iptables

Discover how you can make efficient and secure local-firewall templates in 10 lines. It makes things easier to maintain, debug, automate, and operate.

Knowledge : sharing is caring

Knowledge : sharing is caring

Delve into malicious software detection and the ways to avoid them . Take the opportunity to win the book "Ethical Hacking" by @editionsENI or a special surprise.

Securing a Virtual Desktop Environment in a Public Cloud - Part 2

This has turned out to be quite the learning adventure. Much more so than I had envisioned. I thought it would be 'simple' to just deploy NSX Cloud [https://www.vmware.com/products/nsx-cloud.html] to our existing Horizon Cloud environment and we would easily have another security

Securing a Virtual Desktop Environment in a Public Cloud - Part 1

Securing a Virtual Desktop Environment in a Public Cloud - Part 1

At Michelin, like most organizations, COVID-19 brought us an increased need and usage of Virtual Desktop Infrastructure (VDI) [https://www.vmware.com/topics/glossary/content/virtual-desktop-infrastructure-vdi#:~:text=Virtual%20desktop%20infrastructure%20%28VDI%29%20is%20a%20technology%20that,to%20end-users%20on%20request.%20How%20does%20VDI%20work%3F] in a Public cloud

Vulnerability : at the springs of the Styx

Vulnerability : at the springs of the Styx

What is vulnerability and why it is so crucial for cyber risks management.

Network As a Service - NSX

Network As a Service - NSX

As I began the journey towards network as a service I was unsure where to start. How do I begin with the end in mind? The end target being a fully sustainable network environment where users can land on a user portal, click the network options they need and then