CS Mar-Apr 2020

More documents

Recommendations

Info

2020 predictions Mike Riemer, Pulse Secure: A big focus will be the increase in regulatory requirements around IoT and IIOT devices. Stuart Reed, Nominet: this year will see the cyber industry redesigned in some key areas. security architect at Pulse Secure. "A big focus for 2020 will be the increase in regulatory requirements around IoT and IIOT devices as they proliferate in corporate networks and OT systems. When organisations do not know where a device is on their network, or who it is communicating with, that poses severe security risks." And, as more organisations adopt IoT and IIoT devices in the workforce, there need to be security policy and controls in place. "In the United States, much of this regulatory reform has been spearheaded by the state of California, which recently passed SB-327, the first law to cover IoT devices. It took effect on January 1 and regulators around the world will certainly be watching to see how effective the legislation is at minimising security risks from IoT devices," he adds. "Since the regulatory laws often have a cascading effect, we can certainly expect to see similar bills appearing across the country and eventually at a federal level. Organisations will need to make sure they, or any third-party security vendors, are compliant to protect IoT devices and the information they contain." SOAR POINT In terms of trends that will shape the cybersecurity landscape in 2020, Security Orchestration, Automation and Response (SOAR) will rocket as attacks demand an AIbased approach to security, believes Azeem Aleem, VP Consulting Security, NTT. "Cyberattacks are happening at machine speed, not human speed. To keep up, organisations will need the help of machines - and data scientists - and SOAR will be the hottest area in cybersecurity. It enables organisations to predict when an attack is going to happen - and fast. We don't talk about proactive security anymore, but predictive security, which will become essential for delivering an active cyber-defence in 2020." There are four other key trends that Aleem identifies for the security industry in 2020: Applications are becoming the new attack vector: Application-specific and webapplication attacks now account for a third (32%) of hostile traffic - according to the NTT 2019 Global Threat Intelligence Report (GTIR). "Now that infrastructure is more cloud-based and software-defined, we're entering a world where the application is the easiest way to compromise data," he states. "The number of attacks on applications will increase, so organisations need to regularly evaluate the security hygiene of applications across their business and apply necessary patches - an exercise that can no longer be neglected." Security goes to the cloud: "While organisations still buy on-premises equipment, largely for compliance reasons, more is being created and hosted in cloud environments," says Aleem. "However, if organisations are using multiple hosting centres or hyperscalers, it's more difficult to apply standardised, software-based security controls across the entire infrastructure. Applying security to the application or workload will enable them to monitor and implement the appropriate controls." Hyperscaler patterns continue to be elusive: Fixed infrastructure tends to have standard traffic patterns that make it relatively easy to identify anomalies. "This is not the case with hyperscalers, which also make hundreds of thousands of high-speed updates to their platform on any given day. This will make it very difficult for organisations to monitor the interactions between humans, machines, data and applications in order to identify patterns and anomalies. Information, context and intelligence therefore need to be applied for a robust security posture." Data lakes and data wallets: Data lakes will enable new models of predictive analytics, he says. "What's more, we will see data wallets that put data in the hands of the person who owns it and making it completely secure for them. Nobody can access that data without certain permissions being in place and, if the user is under threat, can be locked down." 12 computing security Mar/Apr 2020 @CSMagAndAwards www.computingsecurity.co.uk
Maintaining secure access during an emergency When freak weather hits, transport strikes disrupt commuters, or a global health pandemic ensues; the need for secure, immediate access is at its greatest. Users need to maintain access to business-critical data and applications in a secure environment; providing access with a password alone simply is not secure enough. In the event of an emergency, many organisations allow remote users to authenticate with a standard username and password. But this is when the need for secured access is at its highest: during emergency situations corporate defences are often at their weakest and the threat from attack at its greatest. SecureIdentity SecurICE SecurICE from SecurEnvoy is a revolutionary approach to the age-old problem of providing secure access to corporate systems in the event of an emergency - without the need for fobs, tokens or smartcards. SecurICE provides clients with the ability to turn on robust, multi-factor authentication for users in the event of an factor, and a passcode sent to the user’s mobile phone is the second. There is no need for the user to enrol and remember an additional PIN, and no need for extra tokens or smartcards - the ideal, emergency two-factor authentication system. Part of the new SecureIdentity Platform by SecurEnvoy passcodes, can be sent via SMS to an entire organisation, or a Why use our SecurICE solution • Rapidly deploy multi-factor authentication in an emergency • Keep users informed with status updates • Provide users with instructions of what to do during an emergency • Users are free to select their preferred authentication • Enhance your business continuity strategy Identity Beyond Boundaries T: 44 (0) 845 2600010 E: info@securenvoy.com www.securenvoy.com/en-us/securice
Page 1: Computing Security Secure systems,
Page 4 and 5: Secure systems, secure data, secure
Page 6 and 7: editor's focus RICH VEIN OF POSSIBI
Page 8 and 9: expert insights WHY CYBERSECURITY P
Page 10 and 11: 2020 predictions MORE 20/20 VISIONS
Page 14 and 15: expert view CEOS IN THE FIRING LINE
Page 16 and 17: data management THE PLOT THICKENS W
Page 18 and 19: data management All of this potenti
Page 20 and 21: cybersecurity and ISPs WORLD-WIDE M
Page 22 and 23: fraud & cybercrime CYBERCRIME FIGUR
Page 24 and 25: Coronavirus scam SPOOF ATTACK UNLEA
Page 26 and 27: GDPR BREACHED - AND TOTALLY UNAWARE
Page 28 and 29: encryption systems THE QUANTUM CRYP
Page 30 and 31: expert insights THE INTELLIGENT APP
Page 32 and 33: product review CLOUD PROTECTION FOR
Page 34 and 35: expert insights ESSENTIAL BUILDING
Page 36: Shearwater Group plc is an award-wi

CS Mar-Apr 2020

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?