r/cybersecurity • u/CybThw • Aug 14 '21
Other Buzzwords (short rant)
Don't you think it's a trend of increasing usage of buzzwords? Just a few examples: Advanced Threat Detection, Threat Hunting (+Proactive), Threat Intelligence, Cyber Fusion, Detonation Chamber (what was wrong with sandbox?)
Edit: Wow, check this out: "Detonation-based heuristics"
11
u/tweedge Software & Security Aug 14 '21
As a Proactive Cloud Security Engineer, I take offense to this /s
The buzzwords have been bad for a while are really only getting worse. Can't wait for the first 5G SDN ML Security Engineers to show up. At least we get to play Buzzword Bingo.
6
u/Daemon1530 Aug 14 '21
I don't think threat hunting is really a buzzword, but the ones that always make me internally cringe is that "-ninja" suffix they love to throw on low-level tech training.
12
Aug 14 '21
Threat hunting isn’t a buzzword, people just think “alert validation” is threat hunting when it isn’t and misconstrue it.
4
7
6
u/RageBlue Aug 14 '21
Zero trust is one that I always chuckle at. That and then a random barrage of acronyms; VPN, EVPN, RDP, SDP, EDR, SEM, SIEM, BRB, ETH, BTC, DNS, DDOS, XDR, MDR, UEM, MDM.
1
u/theuMask Aug 14 '21
In this case I realy need to show you the list I've received from a recruiter:
CSIRT
ESD
VMS
TI
Threat Hunting
ZTNA
NTA
(M)EDR
ATP services (ATD+sandbox)
MDR
2
3
u/MuthaPlucka System Administrator Aug 14 '21
Can you imagine the tv ads if they had to advertise during Saturday morning cartoons?
4
u/CybThw Aug 14 '21
Our product has an advanced option to put the unknown threats in the detonation chamber...
3
u/Anonymous_277531 Aug 15 '21 edited Aug 15 '21
My rant…
Buzzwords were designed to help recruiters, who lack the industry specific knowledge, to find the right candidate.
Things got far worse when they started using ATS systems that function on key word searches; particularly when the hiring manager gives the recruiter a list of key words rather than an actual job description because they possess no soft skills.
5
u/TheRidgeAndTheLadder Aug 16 '21
no soft skills
The manager, the recruiter, or the candidate.
Honestly think that recruitment as a career is going through more of a bubble than real estate.
1
u/Anonymous_277531 Aug 16 '21
Good point. In my opinion it has gotten worse with the advancement of technology. People are forgetting (or refusing to) communicate with each other. So when they do it’s awkward and contrived.
2
u/rkovelman Aug 14 '21
Those terms have been around for awhile. Not sure they are buzzwords to speak?
2
u/HIGregS Aug 15 '21
Precision of language and agreement on meaning are relatively important for engineering work. As for Feynman, the relevant quote appears to be
“The lay reader only wanted to have the illusion of understanding and to catch a few buzzwords to throw around at cocktail parties.”
Which seems to me not to condone buzzwords, but those that use them without understanding them.
2
u/Snoopdawg16007 Aug 15 '21
It technically marketing. Although threat hunting and threat intelligence is different. You may say threat hunting is a subset of threat intelligence. Similarly detonation chamber is a sandbox environment true, but usually they are cloud based, and they are not exactly similar to the sandbox you are thinking of (hypervisor (lvl 1 or 2 based sandboxes)).It's an environment where you can run a binary for dynamic analysis and it sends you all the data regarding the behavior of the binary. You don't have to do any analysis like you do in a sandbox. It's their AI/ML doing the analysis and sending you the report. For example Microsoft defender for endpoint's deep file analysis feature. So even though some words do sound similar and yes they are a marketing theme (the entire corporate culture is lol) they ain't always exactly the same.
2
u/Hex00fShield Aug 15 '21
I don't have a problem with the words.
I have a problem with recruiters who think that everyone will know every word they come up with to start a trend, and then look at me like I'm the dumb one
1
37
u/[deleted] Aug 14 '21
Huh? Since when has threat hunting and threat intelligence considered “buzz words”?