Download - Bitpipe

More documents

Recommendations

Info

| EMERGING THREATSConsider the following recommendations to prepare for dealing with incidents thatmight be attributed to attackers with long-term incidents:• Change the perspective of your security efforts from attempting to preventbreaches—which unrealistic in the face of most targeted attacks—to resisting intrusions.The change involves accepting that a compromise will occur and considering how youwill detect and respond to it.• Understand where your valuable data is located and adjust your defensive spendingaccordingly, making it more expensive for attackers to achieve their likely objectives.• Identify the individuals who are most likely to be targeted, perhaps because theyare in the public eye or because they have access to valuable data. Provide them withadditional security training and security mechanisms to better resists attacks directedat them.• Educate employees about risks of data leaked inadvertently on public forums, suchas social networks and blogs. Explain how attackers who profile activities over time cangather meaning and actionable intelligence from the bits of data that might be innocuousby themselves.UNDERSTANDINGMODERN ATTACK ANDDEFENSE TECHNIQUESSPONSOR RESOURCESModern computer attacks understand the weaknesses inherent in their targets’defensive capabilities sometimes better than the targeted organizations themselves.Intruders often incorporate elements of social engineering to persuade victims to takeactions desired by the attackers, such as clickingon links, spreading URLs or supplying logoncredentials. Attackers frequently target clientsidevulnerabilities, recognizing that enterpriseshave a hard time keeping workstations up todate on security patches.Cybercriminals also target vulnerabilitiesin web applications to obtain access to valuabledata and to gain a platform for attacking websitevisitors. Many attackers are part of wellorganizedprofit-motivated groups, who areModern computer attacksunderstand the weaknessesinherent in their targets’defensive capabilitiessometimes better thanthe targeted organizationsthemselves.willing to invest time and money towards achieving their objectives. As the result,organizations need to be prepared to handle attack campaigns that might spanmonths and years. Resisting the attack tactics discussed above involves understandingthe threats, so you can build and adjust your defenses accordingly.wLenny Zeltser leads the security consulting team at Savvis and teaches classes on combating and analyzingmalware at SANS Institute. He regularly discusses information security topics on his blog and on Twitter.8SEARCHSECURITY.COMTechnical Guide on Emerging Threats
| EMERGING THREATSTECHTARGET SECURITY MEDIA GROUPVICE PRESIDENT/GROUP PUBLISHERDoug OlenderEDITORIAL DIRECTOR Michael S. MimosoSEARCHSECURITY.COMSENIOR SITE EDITOR Eric ParizoSITE EDITOR Marcia SavageUK BUREAU CHIEF Ron CondonNEWS DIRECTOR Robert WesterveltSITE EDITOR Jane WrightASSISTANT EDITOR Maggie SullivanASSOCIATE EDITOR Carolyn GibneyASSISTANT EDITOR Greg SmithART & DESIGNCREATIVE DIRECTOR Maureen JoycePUBLISHER Josh GarlandDIRECTOR OF PRODUCT MANAGEMENTSusan ShaverDIRECTOR OF MARKETING Nick DowdSALES DIRECTOR Tom ClickCIRCULATION MANAGER Kate SullivanPROJECT MANAGER Elizabeth LareauPRODUCT MANAGEMENT & MARKETINGCorey Strader, Andrew McHugh,Karina RousseauSALES REPRESENTATIVESEric Belcher ebelcher@techtarget.comPatrick Eichmannpeichmann@techtarget.comLeah Paikin lpaikin@techtarget.comUNDERSTANDINGMODERN ATTACK ANDDEFENSE TECHNIQUESJeff Tonello jtonello@techtarget.comNikki Wise nwise@techtarget.comTECHTARGET INC.CHIEF EXECUTIVE OFFICER Greg StrakoschPRESIDENT Don HawkSPONSOR RESOURCESEXECUTIVE VICE PRESIDENT Kevin BeamCHIEF FINANCIAL OFFICER Jeff WakelyEUROPEAN DISTRIBUTIONParkway Gordon Phone 44-1491-875-386www.parkway.co.ukLIST RENTAL SERVICESJulie BrownPhone 781-657-1336 Fax 781-657-1100“Technical Guide on Emerging Threats” is published by TechTarget, 275 Grove Street,Newton, MA 02466 U.S.A.; Toll-Free 888-274-4111; Phone 617-431-9200; Fax 617-431-9201.All rights reserved. Entire contents, Copyright © 2011 TechTarget. No part of this publicationmay be transmitted or reproduced in any form, or by any means without permissionin writing from the publisher, TechTarget or SearchCloudSecurity.com.9SEARCHSECURITY.COMTechnical Guide on Emerging Threats
Page 1 and 2: SEARCHSECURITY. COMtechnicalguide o
Page 3 and 4: | EMERGING THREATSCYBERCRIMEUnderst
Page 5 and 6: | EMERGING THREATSTARGETING WORKSTA
Page 7: | EMERGING THREATSwith the details
Page 11: RESOURCES FROM OUR SPONSOR• Webse

Download - Bitpipe

Create successful ePaper yourself

Delete template?

Save as template?