Cyber Defense eMagazine May Edition for 2022

More documents

Recommendations

Info

Recognizing Insider Threats The first step in preventing insider threat is to notice risk factors. Insider threat has some widely accepted indicators, including employees: ● ● ● ● ● ● ● whose jobs are in danger who disagree with a company policy or have exhibited activist behavior under financial distress leaving the company who work at odd hours who seem to be experiencing unexplained financial gain with suspicious travel patterns Staying aware of these general indicators of insider threat can help organizations take a big step towards mitigating the effect these insiders can have on your business’s security. Knowledge is power, and in this case simply paying attention to the actions of employees can be enough to raise a red flag. So, How To Deal With Insider Threats? Technically speaking, insider threats are a challenge that many security programs aren’t able to take on. A user with legitimate access and knowledge of an internal network is simply undetectable by traditional security software standards. Insider threat actors often do not exhibit the malicious patterns and signatures from known threat actors. So, is there a tool to help find them? In this case, deception technology is one of the best ways to detect threatening internal behaviors. Being able to generate high fidelity alerts is a critical capability when you are swamped in millions of security events per day. Decoy servers and files that act as breadcrumbs are created and deployed within an internal network. These decoys and breadcrumbs are designed to be documents that have no business being accessed. Therefore, by definition, anyone interacting with the decoys is, at minimum, snooping around where they shouldn’t be and potentially out to do damage to the company. This means the alerts given by deception technology within an internal network are high fidelity, preserving teams’ resources and helping analysts to do their job well. When it comes to creating the type of decoys and deception “campaigns” that will attract insiders and attackers, the most important factor is that they be realistic. It’s always a good idea when evaluating deception technologies to ask about the technology behind the decoys. Are they deployable across multiple endpoints? Can you deploy them externally, on internet-based platforms? Are they highinteraction? Can the activity on them be collected and analyzed in real time? The answers to these questions will reveal how effective the deception technology can be. Cyber Defense eMagazine – May 2022 Edition 118 Copyright © 2022, Cyber Defense Magazine. All rights reserved worldwide.
Shaping a defense against insider threats is possible, and a well-designed deception technology campaign is one of the only ways to achieve it. About the Author Entrepreneur, serial tech inventor, and visionary David Barroso is the CEO and founder of CounterCraft. Prior to founding the business and developing the Cyber Deception Platform, he was instrumental in the set-up of ElevenPaths, Telefónica’s flagship cybersecurity business, and led the cybercrime division at a leading pure-play European cybersecurity company. Barroso is recognised globally for his contribution to the industry as a captivating speaker, lecturer and thought leader, regularly found leading the debate about emerging threats at Black Hat and RSA conferences, among many others. After 15 years in the cybersecurity arena, quantifying cyber risk remains central to Barroso’s inclination for research and development. His knack for innovation in response to emerging threats and his exceptional ability to guide stakeholders towards delivering advanced cybercrime, threat intelligence, and active defense solutions underpin his position as founder at CounterCraft. David Barroso, Founder & CEO CounterCraft David Barroso can be reached online at (EMAIL (dbarroso@countercraftsec.com), TWITTER (https://twitter.com/lostinsecurity), LinkedIn (https://www.linkedin.com/in/davidbarroso/)) and at our company website https://www.countercraftsec.com/ and Social Media (TWITTER (https://twitter.com/countercraftsec), LinkedIn (https://www.linkedin.com/company/countercraft/) and YOUTUBE (https://www.youtube.com/c/CounterCraftSec) Cyber Defense eMagazine – May 2022 Edition 119 Copyright © 2022, Cyber Defense Magazine. All rights reserved worldwide.
Page 1 and 2:
Vulnerable Today, Hacked Tomorrow:
Page 3 and 4:
Interview with Morten Kjaersgaard,
Page 5 and 6:
@MILIEFSKY From the Publisher… De
Page 7 and 8:
Welcome to CDM’s May 2022 Issue F
Page 9 and 10:
Cyber Defense eMagazine - May 2022
Page 11 and 12:
Page 13 and 14:
Page 15 and 16:
Page 17 and 18:
Page 19 and 20:
Page 21 and 22:
Page 23 and 24:
occurs, then they are already too l
Page 25 and 26:
Understanding Russian Hacking Tacti
Page 27 and 28:
About the Author Chip Epps is the V
Page 29 and 30:
There are mobile device management
Page 31 and 32:
are complying according to a writte
Page 33 and 34:
‣ Map data transaction flows: A c
Page 35 and 36:
5 Key Learnings from Intel’s 2021
Page 37 and 38:
As with any broad technological hur
Page 39 and 40:
Zero Trust Architecture treats ever
Page 41 and 42:
Can you afford not to have zero tru
Page 43 and 44:
ETSI adopted a Delegated Act of the
Page 45 and 46:
deployment site3, ongoing secure up
Page 47 and 48:
References “EN 303 645 - V2.1.0 -
Page 49 and 50:
Tips for Implementing HITRUST for H
Page 51 and 52:
certified is only one part of a com
Page 53 and 54:
Cyber insurance policies: changing
Page 55 and 56:
Why cyber insurance matters? Cybera
Page 57 and 58:
If you want to establish SAP securi
Page 59 and 60:
A Resilience-Centered Approach to C
Page 61 and 62:
The importance of immediate action
Page 63 and 64:
1. Find a Cloud-Native Security Too
Page 65 and 66:
Interview with Morten Kjaersgaard,
Page 67 and 68: About the Author Morten Kjaersgaard
Page 69 and 70: The paucity of public fissures with
Page 71 and 72: Keys to the solution are pairing id
Page 73 and 74: The data shows that the digital ind
Page 75 and 76: Penetration Tester Is Well-Renumera
Page 77 and 78: through your network. In addition,
Page 79 and 80: Centralized Decryption and Smart Tr
Page 81 and 82: Data Poisoning Data poisoning happe
Page 83 and 84: Cybersecurity’s New Frontier: Spa
Page 85 and 86: About the Author Duncan Jones is He
Page 87 and 88: to before. The capability of drones
Page 89 and 90: Privileged Access Management as a K
Page 91 and 92: • Which legal and industry compli
Page 93 and 94: The Future of MFA Going Beyond Priv
Page 95 and 96: The Real Value of MFA In a modern o
Page 97 and 98: Historically, closing people out an
Page 99 and 100: How The Updated CMMC 2.0 Rule Impac
Page 101 and 102: • Physical Protection • System
Page 103 and 104: Bosch Aishield To Protect AI System
Page 105 and 106: About the Authors Amit is a seasone
Page 107 and 108: We could discuss the problems with
Page 109 and 110: Putting the Pieces Together Collect
Page 111 and 112: intermediaries, from cloud service
Page 113 and 114: A New Paradigm for Absolute Zero Tr
Page 115 and 116: Absolute Zero Trust - The Modern Pa
Page 117: 1) An insider with trusted access c
Page 121 and 122: Right-Sized Access and The Least Pr
Page 123 and 124: Prevent Browser-In-The-Browser Phis
Page 125 and 126: seen recently through known vulnera
Page 127 and 128: Figure 1: CEMA operations (adopted
Page 129 and 130: cyberspace operations (CO) by stimu
Page 131 and 132: the challenges faced by all RF tech
Page 133 and 134: About the Author Brendon McHugh is
Page 135 and 136: security. Few, if any, enterprises
Page 137 and 138: In the case of our own tools, we ca
Page 139 and 140: question is how do you protect your
Page 141 and 142: Automotive is probably the most for
Page 143 and 144: Defend Your Castle with Zero Trust
Page 145 and 146: Make it all easier The great news i
Page 147 and 148: Transparency And Collaboration Betw
Page 149 and 150: About the Author Nick Sorensen is C
Page 151 and 152: Detecting and responding to threats
Page 153 and 154: Security Gotcha of Consumer and Ind
Page 155 and 156: Common risk metrics for these can b
Page 157 and 158: The security system (XDR) should be
Page 159 and 160: Types of private personal data: •
Page 161 and 162: Google Passwords Check checks not o
Page 163 and 164: EXIF metadata includes camera model
Page 165 and 166: Russian mothers happily leak photos
Page 167 and 168: It looks like a regular document (l
Page 169 and 170:
How the Cloud Upended Security - an
Page 171 and 172:
as something that’s time consumin
Page 173 and 174:
With the Office of Personnel Manage
Page 175 and 176:
Page 177 and 178:
Page 179 and 180:
Page 181 and 182:
Page 183 and 184:
Page 185 and 186:
Page 187 and 188:
Page 189 and 190:
Page 191 and 192:
Page 193 and 194:
CyberDefense.TV now has 200 hotseat
Page 195 and 196:
Books by our Publisher: https://www
Page 197 and 198:
Page 199:
show all

Cyber Defense eMagazine May Edition for 2022

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?