Search across the whole site

Search across essays, posts, projects, research, talks, and site pages

Curated by the author

Reading paths

Choose a topic and follow the steps, from an introduction to practical examples and a deeper look.

01Steps: 5IoT securityFrom smart-home risks to BLE testing, choosing safeguards and TinyML robustness.Explore this path

Step 1 of 5. Understand the risks
Does a smart home with Alice transmit data to intelligence agencies?
Essay
Start with everyday concerns: compromised devices, account access and privacy. The article separates smart-home risks from assumptions about mass surveillance.
Step 2 of 5. Choose safeguards
Information Security Specialist Diploma. Part No. 1 - Methodology for ensuring the security of Internet of Things devices
Essay
Move from risks to designing protection for BLE devices: how to prioritize security measures when development resources are limited.
Step 3 of 5. See how protection is tested
Information Security Specialist Diploma. Part #5 - Unauthorized access to IoT devices with BLE
Essay
See the method tested on SmartLight and SmartPulse. Attempts to access BLE characteristics show how the chosen safeguards affect device behavior.
Step 4 of 5. Explore the research
An approach to the selection of protection mechanisms for personal Internet of Things devices based on a mathematical model with two criteria
Research
Explore the formal basis for choosing safeguards: a mathematical model using implementation complexity and versatility as its two criteria.
Step 5 of 5. Discover a related direction
The impact of quantization of TinyML models on the stability of audio systems of the personal Internet of things
Talk
Finish by moving from BLE to on-device ML: how quantization affects audio systems' robustness against adversarial inputs.

02Steps: 5DevSecOps and supply chainsHow secure development, dependency analysis and runtime protection fit together.Explore this path

Step 1 of 5. Understand the process
KapIBara×Maxim Knyazev - what you need to know about DevSecOps
Talk
Start with the big picture: what DevSecOps means and what its specialists do. The podcast looks beyond tools to the underlying process.
Step 2 of 5. See the whole supply chain
Supply Chain Security using the example of a coffee machine: why your code is bitter
Essay
Use a coffee-machine analogy to connect dependencies, builds, infrastructure and people, and see why securing your own code is not enough.
Step 3 of 5. Examine dependency analysis
SCA: checking application dependencies
Post
Learn how SCA examines direct and transitive dependencies, vulnerabilities and licenses, then connect these checks to SBOMs and CI/CD.
Step 4 of 5. Move from inventory to behavior
From SBOM to CBOM: how runtime dependency control is changing AppSec in web development
Talk
Ask not just which components an application contains, but what they may do. This talk introduces Capability BOM and runtime control of dependencies.
Step 5 of 5. Look at a concrete threat
Containers versus miners or a story about cryptojacking in Kubernetes
Talk
Finish with defense against cryptojacking: image checks, runtime protection, network policies and monitoring in container environments.

03Steps: 5Getting into cybersecurityFrom foundational skills and choosing a role to interviews and your first steps in a team.Explore this path

Step 1 of 5. Build your foundations
An IT career map: foundations, practice and mentorship
Post
Start with engineering fundamentals, personal projects and a mentor. Build this foundation before choosing a specialization.
Step 2 of 5. Compare roles
Who does what in cybersecurity
Post
Explore AppSec, DevSecOps, penetration testing, SOC and other roles. Compare their work with your interests before choosing a path.
Step 3 of 5. Plan your direction
An updated map of cybersecurity career paths
Post
Use the updated Positive Technologies career map to find learning resources for your chosen role and explore adjacent fields, including MLSecOps and presales.
Step 4 of 5. Prepare for hiring
Who is hired for information security?
Talk
Move on to CVs, interviews and seniority levels. Maxim Knyazev and Maxim Gusev discuss candidates' experience and using AI during a job search.
Step 5 of 5. Settle into the team
After getting hired: onboarding and support
Post
Finish with life after the offer: why junior specialists need feedback, support and opportunities to develop.

276 stars · 300 connections

Explore the connections between materials on the star map.

A few materials from the map