Cyber Defense eMagazine May Edition for 2022

More documents

Recommendations

Info

actually spoofed and contains malicious files through application updates. A layered approach is important for threat mitigation for this type of attack, and there are many best practices that energy organizations should adopt. The first step would be to implement Remote Browser Isolation (RBI) solutions to prevent malware from being delivered to the user’s endpoint. Additionally, scanning all files that are downloaded to both the IT and OT networks within the organization, and then using either static scanning for known malware, or sandbox dynamic analysis which can detect malicious behavior in unknown files, are effective ways to stay ahead of threats. Organizations can also introduce URL/domain reputation and sandboxing capabilities to detect network communications to known bad hosts as part of the behavior analysis. Further, proper network architecture and complying with NERC and NRC requirements can help prevent the propagation of threats from entering the OT domain. Safeguarding the OT network also entails network segmentation using unidirectional gateways and a protocol break to ensure OT assets are protected from outside threats. While the above prevention protocols are best practices, hackers may still find their way into networks, so it’s important to deploy intrusion prevention systems right before critical assets, such as PLCs, RTUs and other industrial appliances. Finally, an organization can deploy automated workflows to scan for malicious links and file scanning to prevent human error. A Chain of Attacks As we’ve seen with SolarWinds and Log4j compromises, software supply chain attacks are another common tactic used by cybercriminals and one that has been leveraged by the Russian espionage groups. In this case, the hackers worked to hide malware in software updates used by systems that control the equipment in power plants. To mitigate this common type of attack, organizations should adopt a zero-trust philosophy and consider software updates from third-party vendors to be suspect and thoroughly inspected until considered safe. This entails disabling automatic software updates in OT networks, validating all updates in a test environment prior to delivery in production, checking software against known malware and vulnerabilities and running them through dynamic analysis, and inspecting the software component’s country of origin for compliance. As U.S. legislation and global conversations on contingency planning for attacks on critical infrastructure evolve—and as these types of cyber incidents increasingly play out— the security of the energy sector should be at the top of everyone’s mind and mitigation list. Cyber Defense eMagazine – May 2022 Edition 26 Copyright © 2022, Cyber Defense Magazine. All rights reserved worldwide.
About the Author Chip Epps is the VP of Product Marketing at OPSWAT. He joined OPSWAT in 2021 with a 15+ year security career in both Product Management and Product Marketing, having been CISSP certified. He's focused primarily on emerging product categories and associated go-to-market strategies spanning security domains including Endpoint, Datacenter, Network, Gateway, Cloud, IAM, SOAR and Threat Intelligence. Prior to a career in security, Chip spent 10+ years in IT operations and service delivery across numerous market segments including Healthcare, Finance, and Government, being ITIL certified. Chip received his BME (Mechanical Engineering) from Georgia Tech, was certified Chief Engineer by Naval Reactors (submarine qualified) and obtained his MBA with a focus on new ventures from University of San Diego. Chip can be reached at chip.epps@opswat.com and at our company website https://www.opswat.com/. Cyber Defense eMagazine – May 2022 Edition 27 Copyright © 2022, Cyber Defense Magazine. All rights reserved worldwide.
Page 1 and 2: Vulnerable Today, Hacked Tomorrow:
Page 3 and 4: Interview with Morten Kjaersgaard,
Page 5 and 6: @MILIEFSKY From the Publisher… De
Page 7 and 8: Welcome to CDM’s May 2022 Issue F
Page 9 and 10: Cyber Defense eMagazine - May 2022
Page 23 and 24: occurs, then they are already too l
Page 25: Understanding Russian Hacking Tacti
Page 29 and 30: There are mobile device management
Page 31 and 32: are complying according to a writte
Page 33 and 34: ‣ Map data transaction flows: A c
Page 35 and 36: 5 Key Learnings from Intel’s 2021
Page 37 and 38: As with any broad technological hur
Page 39 and 40: Zero Trust Architecture treats ever
Page 41 and 42: Can you afford not to have zero tru
Page 43 and 44: ETSI adopted a Delegated Act of the
Page 45 and 46: deployment site3, ongoing secure up
Page 47 and 48: References “EN 303 645 - V2.1.0 -
Page 49 and 50: Tips for Implementing HITRUST for H
Page 51 and 52: certified is only one part of a com
Page 53 and 54: Cyber insurance policies: changing
Page 55 and 56: Why cyber insurance matters? Cybera
Page 57 and 58: If you want to establish SAP securi
Page 59 and 60: A Resilience-Centered Approach to C
Page 61 and 62: The importance of immediate action
Page 63 and 64: 1. Find a Cloud-Native Security Too
Page 65 and 66: Interview with Morten Kjaersgaard,
Page 67 and 68: About the Author Morten Kjaersgaard
Page 69 and 70: The paucity of public fissures with
Page 71 and 72: Keys to the solution are pairing id
Page 73 and 74: The data shows that the digital ind
Page 75 and 76: Penetration Tester Is Well-Renumera
Page 77 and 78:
through your network. In addition,
Page 79 and 80:
Centralized Decryption and Smart Tr
Page 81 and 82:
Data Poisoning Data poisoning happe
Page 83 and 84:
Cybersecurity’s New Frontier: Spa
Page 85 and 86:
About the Author Duncan Jones is He
Page 87 and 88:
to before. The capability of drones
Page 89 and 90:
Privileged Access Management as a K
Page 91 and 92:
• Which legal and industry compli
Page 93 and 94:
The Future of MFA Going Beyond Priv
Page 95 and 96:
The Real Value of MFA In a modern o
Page 97 and 98:
Historically, closing people out an
Page 99 and 100:
How The Updated CMMC 2.0 Rule Impac
Page 101 and 102:
• Physical Protection • System
Page 103 and 104:
Bosch Aishield To Protect AI System
Page 105 and 106:
About the Authors Amit is a seasone
Page 107 and 108:
We could discuss the problems with
Page 109 and 110:
Putting the Pieces Together Collect
Page 111 and 112:
intermediaries, from cloud service
Page 113 and 114:
A New Paradigm for Absolute Zero Tr
Page 115 and 116:
Absolute Zero Trust - The Modern Pa
Page 117 and 118:
1) An insider with trusted access c
Page 119 and 120:
Shaping a defense against insider t
Page 121 and 122:
Right-Sized Access and The Least Pr
Page 123 and 124:
Prevent Browser-In-The-Browser Phis
Page 125 and 126:
seen recently through known vulnera
Page 127 and 128:
Figure 1: CEMA operations (adopted
Page 129 and 130:
cyberspace operations (CO) by stimu
Page 131 and 132:
the challenges faced by all RF tech
Page 133 and 134:
About the Author Brendon McHugh is
Page 135 and 136:
security. Few, if any, enterprises
Page 137 and 138:
In the case of our own tools, we ca
Page 139 and 140:
question is how do you protect your
Page 141 and 142:
Automotive is probably the most for
Page 143 and 144:
Defend Your Castle with Zero Trust
Page 145 and 146:
Make it all easier The great news i
Page 147 and 148:
Transparency And Collaboration Betw
Page 149 and 150:
About the Author Nick Sorensen is C
Page 151 and 152:
Detecting and responding to threats
Page 153 and 154:
Security Gotcha of Consumer and Ind
Page 155 and 156:
Common risk metrics for these can b
Page 157 and 158:
The security system (XDR) should be
Page 159 and 160:
Types of private personal data: •
Page 161 and 162:
Google Passwords Check checks not o
Page 163 and 164:
EXIF metadata includes camera model
Page 165 and 166:
Russian mothers happily leak photos
Page 167 and 168:
It looks like a regular document (l
Page 169 and 170:
How the Cloud Upended Security - an
Page 171 and 172:
as something that’s time consumin
Page 173 and 174:
With the Office of Personnel Manage
Page 175 and 176:
Cyber Defense eMagazine - May 2022
Page 177 and 178:
Page 179 and 180:
Page 181 and 182:
Page 183 and 184:
Page 185 and 186:
Page 187 and 188:
Page 189 and 190:
Page 191 and 192:
Page 193 and 194:
CyberDefense.TV now has 200 hotseat
Page 195 and 196:
Books by our Publisher: https://www
Page 197 and 198:
Page 199:
show all

Cyber Defense eMagazine May Edition for 2022

Create successful ePaper yourself

Delete template?

Save as template?