news.buyenne.com

Enlarge / Randori's Attack platform aims to automate the "red team" adversarial security role so that more companies can afford to constantly check their security. (credit: CSA Images via Getty Images)

Attack simulation and "red teaming as a service" have become a hot area of development over the past few years as companies continue to seek ways to better train their network defenders and find problems before attackers do. Randori, a company pulling together red-teaming skills and security software experience, today is launching a new platform that attempts to capture the expertise of a high-budget security testing team as a cloud-based service—giving chief information security officers a way to continuously take the pulse of their companies' defenses.

Red teaming, the practice of actively researching and exploiting vulnerabilities in systems to help find and fix gaps in their security, has long been the realm of high-paid security consulting firms with hands-on-keyboard (and occasionally, with full penetration testing, hands-on-lockpick) engagements, and not something most companies can afford to do regularly. Large organizations and software firms with a business imperative to keep their systems secure have typically maintained internal red teams, but smaller organizations that need red teams for things like getting credit card compliance certification or checking the security of other financial systems often rely on hit-and-run engagements with outside specialists.

There have been other efforts to streamline and automate components of red teaming to make it a more regular part of companies' security programs. For example, Scythe, a firm that spun out of the security research company Grimm, has focused on providing attack simulation as a service—allowing a company to test the mettle of its "blue team" defenders and users by running modular "attacks" that mimic the techniques of known threat groups, while creating a marketplace for security testing modules. And other companies, such as Pwnie Express, have used passive and "offensive" security tools to scan and audit networks for potential attack vectors.

Enlarge / NASA astronauts Doug Hurley and Bob Behnken familiarize themselves with SpaceX’s Crew Dragon. (credit: NASA)

NASA and SpaceX are closing in on the first launch of humans into orbit from US soil since 2011, when the space shuttle made its final flight.

Although the space agency has not yet said so publicly, NASA is working toward a May 7 launch of a Crew Dragon spacecraft carrying astronauts Doug Hurley and Bob Behnken to the International Space Station.

Asked Monday about the early May launch date, the director of Johnson Space Center, Mark Geyer, said it is tentative and that no final decisions have been made. The International Space Station and Commercial Crew programs are continuing to consult with NASA Administrator Jim Bridenstine and the agency's chief of human spaceflight, Doug Loverro. "That's the target the two programs have agreed is reasonable, but we're still confirming with Jim and Doug really when we think we're going to launch," he said.