Ethical hacker contends info protection relies on simple steps

Good security does not have to be expensive and complex, Kevin Johnson says.


Kevin Johnson is an ethical hacker helping companies to better understand the real world of cyber attacks. He and his team at Secure Ideas, a security firm, consult and conduct penetration testing, vulnerability assessments and intrusion analysis.

At HIMSS17, Johnson will speak during a presentation outlining certain attacks, why they are successful and simple ways healthcare organizations can protect themselves. Most breaches are very simple, he says; they are mistakes made in response to an attack. Johnson said he plans to discuss four ways attackers get in and steal data, the mistake made to allow that attack to succeed, and how to fix it.



Many organizations do not understand that attacks are not magic but are simple attacks for activism or profit, and it doesn’t require millions of dollars to fix the problem. The answer, Johnson says, is “basic IT hygiene.” He will give simple ways organizations can arm themselves with information that both technical and non-technical persons can use.

“We’ve convinced people that they have to buy products or hire a professional,” he asserts. “But this is obtainable, easy to do and just something we have to do.”

Session CS11, “Once More into the Breach: Real World Attacks,” is scheduled at 10 a.m. on February 21 at Booth 376|Cybersecurity.

More for you

Loading data for hdm_tax_topic #care-team-experience...