Cyber Defense eMagazine July 2021 Edition

More documents

Recommendations

Info

Customer Success, the mechanism of engaging with customers to understand their needs and drive value from the solution. Guided-SaaS NDR takes this concept to the next level. Guided-SaaS staffs their customer success teams with field-tested security analysts and incident responders who understand the pressures their customers face sitting in the defender’s hot-seat. This empathy allows for better initial and ongoing enablement on the product, increasing product proficiency and value. As trusted advisors, these Guided-SaaS security experts also can pass along best practices for triage, hunting and investigations, resulting in stronger skills for the customer’s security teams. Perhaps the most valuable and unique benefit is that when a customer is actively investigating an incident, they have access to experienced Guided-SaaS analysts and responders to ask for guidance and knowledge of the threat and how best to triage and investigate. During these high-pressure incidents, having access to expertise and thus gaining confidence you are taking the right steps to respond alleviates pressure and allows for faster and more comprehensive response actions. A Call for Vendors to Do Better Simply put, vendors must have empathy for the challenges facing SOC/IR teams and transition from delivering products that place a burden on the customer to delivering a comprehensive offering that frees security professionals to remain focused, ensure optimum visibility, and have access to expertise in the dismantling of adversaries. The Guided-SaaS model redefines and evolves how vendors should deliver security solutions to ensure technological advances such as enabling extensive visibility, machine learning adversary detection, and speedy triage, hunting, and investigation result is three steps forward without taking three steps back. About the Author Fayyaz Rajpari is the Sr. Director of Product Management of ThreatINSIGHT Guided-SaaS NDR at Gigamon, where he leads the firm’s security products. Fayyaz’s expertise includes serving as a lead incident responder for a large insurance provider before transitioning to bringing his expertise to driving products for FireEye, Mandiant, and Recorded Future. Fayyaz can be reached online at fayyaz.rajpari@gigamon.com or at http://www.gigamon.com Cyber Defense eMagazine – July 2021 Edition 94 Copyright © 2021, Cyber Defense Magazine. All rights reserved worldwide.
Hardware Trojan Detection By Sylvain Guilley, General Manager and CTO at Secure-IC Hardware Trojan attacks have become more concerning in recent years due to a series of serious events in the electronics industry supply chain around the world because of them, such as data theft and backdoor insertions. These attacks are based on the concealment and subsequent exploitation of malicious hardware in integrated circuits and thus have been nicknamed “Trojan Horses”. These malicious attacks can have several purposes such as sabotaging the infrastructures used by the circuits or eavesdropping on confidential communications. The ability to detect and deal with Trojan Horses has become vital for organizations charged with protecting key infrastructure, government and assets. On a business level, today’s applications can be critical and security is paramount in many industries such as automotive or avionics; it is important to screen and check unreliable chips. A Trojan Horse is often defined as malware disguised as legitimate software. Nowadays, we are talking about Hardware Trojan Horses that have proven to be very dangerous and have the ability to maliciously modify integrated chips. Classification of Trojans and the means to detect them There are many types of Trojans, and they can be inserted pretty much everywhere in the microchip. This is what makes them so difficult to locate, as one could well be located in the chip’s processor while another crouches in the chip’s power supply. The stealthiest Hardware Trojans are virtually undetectable because they do not appear in the bill of materials (BoM). They are implanted in the chip itself and therefore must be investigated at the silicon- Cyber Defense eMagazine – July 2021 Edition 95 Copyright © 2021, Cyber Defense Magazine. All rights reserved worldwide.
Page 1 and 2:
Colonial Key Business Pipeline, Les
Page 3 and 4:
Ransomware, the Ultimate Cyber Thre
Page 5 and 6:
@MILIEFSKY From the Publisher… Ne
Page 7 and 8:
Welcome to CDM’s July 2021 Issue
Page 9 and 10:
Cyber Defense eMagazine - July 2021
Page 11 and 12:
Page 13 and 14:
Page 15 and 16:
Page 17 and 18:
Page 19 and 20:
Page 21 and 22:
Page 23 and 24:
Page 25 and 26:
Page 27 and 28:
Page 29 and 30:
Page 31 and 32:
Page 33 and 34:
Colonial Pipeline, JBS Cyber Attack
Page 35 and 36:
is clear: Cyberattacks will continu
Page 37 and 38:
of management complexity for any bu
Page 39 and 40:
Flipping the Cyber Script Getting A
Page 41 and 42:
Trust strategies, they will prevent
Page 43 and 44: The growing threat In the last 12 m
Page 45 and 46: Common Sense Cybersecurity Steps fo
Page 47 and 48: The next big thing: addressing remo
Page 49 and 50: Applying PR tactics is a new page i
Page 51 and 52: NATO to Consider Military Response
Page 53 and 54: The number of open positions in var
Page 55 and 56: 3. Delivery - Transmission of the p
Page 57 and 58: Uncovering the Dark Side of the Col
Page 59 and 60: Energy and Utilities - You Have No
Page 61 and 62: a cyberattack that shut down approx
Page 63 and 64: Ransomware and the Cybersecurity In
Page 65 and 66: About the Author Jack Blount is Pre
Page 67 and 68: The airline industry’s poor recor
Page 69 and 70: Ransomware, the Ultimate Cyber Thre
Page 71 and 72: About the Author Yehudah Sunshine,
Page 73 and 74: A second reason for the increase in
Page 75 and 76: A Case of Identity: A New Approach
Page 77 and 78: Implementing a digital trust ecosys
Page 79 and 80: A 3-Part Plan for Getting Started w
Page 81 and 82: As threats continue to evolve, it
Page 83 and 84: 1. Endpoint and user protection Des
Page 85 and 86: The Risks of The Vulnerable Iot Dev
Page 87 and 88: Insecure Data Transfer and Storage
Page 89 and 90: Three Steps to Building Email Cyber
Page 91 and 92: Plan Ahead and Avoid Disaster The H
Page 93: NDR technology is built on three pr
Page 97 and 98: the properties (user mode, memory a
Page 99 and 100: About the Author My Name is Sylvain
Page 101 and 102: outside coaches - to help them impr
Page 103 and 104: Tips for Avoiding Online Scams Duri
Page 105 and 106: Phishing Example 1 Phishing refers
Page 107 and 108: About the Author Cindy Murphy is th
Page 109 and 110: The recent Feedzai report confirms
Page 111 and 112: Why Cyber Risk Is the Top Concern o
Page 113 and 114: (BEC) attacks, also known as “fak
Page 115 and 116: What Educational Institutions Need
Page 117 and 118: Firewall Security VPN connectivity,
Page 119 and 120: Business Continuity: Where InfoSec
Page 121 and 122: ● ● ● ● How educated are em
Page 123 and 124: Biometrics Challenges By Milica D.
Page 125 and 126: Epic V. Apple Trial - Impact of Big
Page 127 and 128: About the Author Brad Ree is the Ch
Page 129 and 130: eaches because large amounts of hig
Page 131 and 132: • securing mobile and remote work
Page 133 and 134: This topic has great relevance beca
Page 135 and 136: I recommend that leaders of private
Page 137 and 138: fail that promptly. After, say, sev
Page 139 and 140: 1. Infosecurity Europe Where: Olymp
Page 141 and 142: leaders, and help each other advanc
Page 143 and 144: Cyber Defense eMagazine - July 2021
Page 145 and 146:
Page 147 and 148:
Page 149 and 150:
Page 151 and 152:
Page 153 and 154:
You asked, and it’s finally here
Page 155 and 156:
9 Years in The Making… Thank You
Page 157 and 158:
show all

Cyber Defense eMagazine July 2021 Edition

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?