Cyber Defense eMagazine August 2020 Edition

More documents

Recommendations

Info

Fortunately, information security professionals still have a range of tools and techniques they can use to help prevent breaches and to mitigate them when they do happen. Many attack scenarios, especially ones involving remote access attacks, start with targeting the users themselves. Many penetration testers will tell you the users are the easiest target and the first thing they’ll go after. But this also gives an organization the opportunity to convert their user base from part of the attack surface into their first line of defense. Making sure you have trained them on best practices and have enabled a strong multi-factor authentication scheme can go a long way to preventing unauthorized access. For many organizations, the Security Operations team, rather than their users, is the main line of defense. Even when the services are provided whole, or in part, by a third party, they are the ones who have the ultimate responsibility for the organization’s security well-being. Which means assuring they have the correct tools and the right training is as important as making sure the users are trained and equipped. The question becomes whether they have the right tools and training to identify and mitigate attack profiles that have now shifted to target the remote workforce. The threats they have been historically focused on have not disappeared, but they may no longer be the primary attack surface. Likewise, the tools they use to identify and mitigate attacks may not be the best ones now that the attacker’s focus has shifted. Threat actors have become increasingly skilled at compromising systems and then hiding their activity “below the radar” to avoid detection, which makes their activity harder to detect. More so now that they have a remote workforce to both target for attack and use for concealment. That means the SecOps team will need to look at the situation holistically rather than relying on single indicators of compromise. To that end, an advanced security analytics platform that can consolidate all the organization’s security data into a single place and then perform AI-based analytics the entirety of the data may be in order. By looking at all the information, it is possible to identify anomalous behavior that differs subtly from what’s expected, or accepted, for a normal user. That can be the first indication of a compromise. Using machine learning techniques, the system can adapt to the changing threat surface and present a riskbased assessment to the SecOps team. Combined with their existing tools and efficient automation, security operations personnel can get ahead of an attack to keep a single compromised account or remote access system from escalating to a serious data breach. Cyber Defense eMagazine – August 2020 Edition 68 Copyright © 2020, Cyber Defense Magazine. All rights reserved worldwide.
About the Author Saryu Nayyar is the CEO of Gurucul. She is an internationally recognized cybersecurity expert, author and speaker with more than 15 years of experience in the information security, identity and access management, IT risk and compliance, and security risk management sectors. She was named EY Entrepreneurial Winning Women in 2017. She has held leadership roles in security products and services strategy at Oracle, Simeio, Sun Microsystems, Vaau (acquired by Sun) and Disney, and held senior positions in the technology security and risk management practice of Ernst & Young. She is passionate about building disruptive technologies and has several patents pending for behavior analytics, anomaly detection and dynamic risk scoring inventions. Saryu can be reached on Twitter at @Gurucul Cyber Defense eMagazine – August 2020 Edition 69 Copyright © 2020, Cyber Defense Magazine. All rights reserved worldwide.
Page 1 and 2:
Security by Design: How to Protect
Page 3 and 4:
4 Simple Ways to Repel Ransomware a
Page 5 and 6:
@CYBERDEFENSEMAG CYBER DEFENSE eMAG
Page 7 and 8:
Cyber Defense eMagazine - August 20
Page 9 and 10:
Page 11 and 12:
Page 13 and 14:
Page 15 and 16:
Your website could be vulnerable to
Page 17 and 18: Cyber Defense eMagazine - August 20
Page 23 and 24: Security by Design: How to Protect
Page 25 and 26: Security by Design = Growth by Desi
Page 27 and 28: How To Grow Your Cyber Expertise Du
Page 29 and 30: Cyber competitions and hackathons a
Page 31 and 32: that 60-day threshold has begun to
Page 33 and 34: About the Author Carolyn holds the
Page 35 and 36: Since the cloud business infrastruc
Page 37 and 38: COVID-19 And Security Team Cuts Are
Page 39 and 40: Soc Teams Impacted by Redundancies
Page 41 and 42: Security Tech Investments Also on H
Page 43 and 44: Work from Home = New Challenges for
Page 45 and 46: Most Companies Continue to Use/Inve
Page 47 and 48: Mitigation and Legal Costs Are the
Page 49 and 50: The findings from our survey clearl
Page 51 and 52: normal that not everyone was prepar
Page 53 and 54: What companies can do... Start with
Page 55 and 56: Regulatory compliance is becoming m
Page 57 and 58: WireGuard - Separating Fact from Fi
Page 59 and 60: Running in-kernel Can you achieve t
Page 61 and 62: The reality is that many organizati
Page 63 and 64: About the Author Egon Rinderer is t
Page 65 and 66: Countless times I have seen an orga
Page 67: CERT Warns Bad Actors Are Targeting
Page 71 and 72: Luckily there are several best prac
Page 73 and 74: Ransomware, Risk, And Recovery Why
Page 75 and 76: Under the very best circumstances,
Page 77 and 78: Getting Employees Back to the New N
Page 79 and 80: ● Equip IT and security teams wit
Page 81 and 82: The 14 th Annual State of Agile Rep
Page 83 and 84: About the Author Danny is Chief Met
Page 85 and 86: The Rising Cost of Failure How much
Page 87 and 88: About the Author Steve Salinas is t
Page 89 and 90: One of the defining characteristics
Page 91 and 92: TLS/ SSL Decryption - One of the Ma
Page 93 and 94: Key features of a good TLS/ SSL Dec
Page 95 and 96: increasingly interested in enforcin
Page 97 and 98: Attitude Adjustments There is a lot
Page 99 and 100: Why Academic Openness and A Rise in
Page 101 and 102: Of course, it is always a good idea
Page 103 and 104: and mitigated. Unfortunately, the f
Page 105 and 106: HIPAA Compliance and The Protection
Page 107 and 108: ● Verifying that the workforce co
Page 109 and 110: Smart Gadgets in Proving Workplace
Page 111 and 112: Through this effort, we would try t
Page 113 and 114: who would take advantage over whom
Page 115 and 116: legal frameworks and regulations. I
Page 117 and 118: ad actors the highest hit rates fro
Page 119 and 120:
Are the Worst Cryptocurrency Securi
Page 121 and 122:
Shortcuts Lead to Cryptocurrency Vu
Page 123 and 124:
Only initially could you claim that
Page 125 and 126:
Page 127 and 128:
Page 129 and 130:
Page 131 and 132:
Page 133 and 134:
Page 135 and 136:
Page 137 and 138:
You asked, and it’s finally here
Page 139 and 140:
TRILLIONS ARE AT STAKE No 1 INTERNA
Page 141 and 142:
8 Years in The Making… Thank You
Page 143 and 144:
Page 145 and 146:
Page 147:
i Multiple sources - Microsoft SIR,
show all

Cyber Defense eMagazine August 2020 Edition

Create successful ePaper yourself

Delete template?

Save as template?