Get Ahead of the Game by Combating Cyber Criminals

Get Ahead of the Game by Combating Cyber Criminals

Cybercriminals are building ladders faster than organizations can build walls, and while their tactics continue to evolve, so too has the typical hacker profile. No longer led by “script-kiddies” or those pursuing academic challenge, today hackers oversee well-funded development efforts with very specific financial or political goals.  As a result – and despite best efforts – the good guys are usually a step (or many steps) behind. 

Hackers have adopted a number of attack methods, which include combinations of social engineering attacks, malicious mobile applications, phishing scams, and ransomware, to name a few. These attacks have been and in all likelihood will remain, successful methods of penetrating corporate networks.  

Fortify defenses, collect intelligence, and respond rapidly

Given the recent surge in data breaches, there is a clear need for a paradigm shift in how we approach security. Existing fortifications still need to remain strong, but the deep analysis of networks and systems to detect potential threats is equally critical. Ultimately, organizations need to contain the risks posed by threats that may already be inside their walls.  

How security defenders detect and respond to existing vulnerabilities also needs to change. Verizon’s 2015 Data Breach Investigations Report indicates that organizations take an average of 205 days to detect a data breach. This gives threat actors plenty of time to conduct surveillance, steal data and spy on their targets.

Often times a data breach is a drawn out process that slowly siphons data from an organization. This approach of gradually extracting data allows these attacks to go unnoticed for extended lengths of time. Organizations need to improve the process by which they detect and respond to threats so they can reduce the window of opportunity.

Separate the meaningful from the mundane

The average organization receives more than 16,000 alerts every week. According to a report from Ponemon Institute, only 4% of these alerts are investigated. In what is now one of the most notable cyber security incidents, Target famously ignored an alert that could have potentially reduced the scale of the attack it experienced two years ago. The consequences were millions of stolen customer payment details, hundreds of millions of dollars in fines and settlements, and the dismissal of corporate leaders.

By sheer numbers, investigating every single alert is unrealistic for most organizations. So how do we better qualify these alerts and effectively reduce / refine this to a manageable number? There needs to be a greater focus placed on discerning the meaningful events from the benign. This has been a longstanding challenge, but one that can be overcome by leveraging big data to gauge and prioritize these threats. Understanding user behavior and historical trends can also help identify usage  irregularities or network anomalies, which can often be an indication of a tangible threat.

Most organizations implement a medley of security solutions to combat different vulnerabilities; encryption, DLP, endpoint security, anti-malware, firewalls, among other solutions. This is important since sophisticated attacks will not be isolated to a single layer within your security infrastructure.

As cybercriminals advance in their penetration of your network, their presence will often expand from one area to another – attacking more and more devices and users as they learn your environment and understand the potential opportunity.  The breach itself is simply their entry point into your network. Once they’re inside, they will examine each security layer to plan their offensive. This activity could produce benign or minor blips that – if properly analyzed – could provide you with the early heads-up you need to avoid a bad outcome.

Share your war stories

Organizations are learning from previous attacks, but unfortunately for many, the damage has already been done.

One valuable model is to cultivate a network of peers where knowledge and experiences can be shared. This is important since, once an attempted attack is detected, odds are the same technique will be used on other targets. One recent development is with crowdsourced platforms which are evolving, providing a forum for IT professionals to collaborate and share threat intelligence.

By sharing these experiences (without revealing any sensitive information), IT security leaders can improve their defenses. Think about it…with the exponential growth of vulnerabilities and so many successful attacks, relying on your singular experience means you’re unaware of the majority of the attacks that could be heading your way.

By gathering intelligence from a wider circle of experience, you’re expanding your knowledge and ultimately your ability to respond to these types of attacks.

Featured

  • Survey: 54% of Organizations Cite Technical Debt as Top Hurdle to Identity System Modernization

    Modernizing identity systems is proving difficult for organizations due to two key challenges: decades of accumulated Identity and Access Management (IAM) technical debt and the complexity of managing access across multiple identity providers (IDPs). These findings come from the new Strata Identity-commissioned report, State of Multi-Cloud Identity: Insights and Trends for 2025. The report, based on survey data from the Cloud Security Alliance (CSA), highlights trends and challenges in securing cloud environments. The CSA is the world’s leading organization dedicated to defining standards, certifications, and best practices to help ensure a secure cloud computing environment. Read Now

  • Study: Only 35 Percent of Companies Include Cybersecurity Teams When Implementing AI

    Only 35 percent of cybersecurity professionals or teams are involved in the development of policy governing the use of AI technology in their enterprise, and nearly half (45 percent) report no involvement in the development, onboarding, or implementation of AI solutions, according to the recently released 2024 State of Cybersecurity survey report from ISACA, a global professional association advancing trust in technology. Read Now

  • New Report Series Highlights E-Commerce Threats, Fraud Against Retailers

    Trustwave, a cybersecurity and managed security services provider, recently released a series of reports detailing the threats facing the retail sector, marking the second year of its ongoing research into these critical security issues. Read Now

  • Stay Secure in 2024: Updated Cybersecurity Tips for the Office and at Home

    Cyber criminals get more inventive every year. Cybersecurity threats continue to evolve and are a moving target for business owners in 2024. Companies large and small need to employ cybersecurity best practices throughout their organization. That includes security integrators, manufacturers, and end users. Read Now

Featured Cybersecurity

Webinars

New Products

  • ResponderLink

    ResponderLink

    Shooter Detection Systems (SDS), an Alarm.com company and a global leader in gunshot detection solutions, has introduced ResponderLink, a groundbreaking new 911 notification service for gunshot events. ResponderLink completes the circle from detection to 911 notification to first responder awareness, giving law enforcement enhanced situational intelligence they urgently need to save lives. Integrating SDS’s proven gunshot detection system with Noonlight’s SendPolice platform, ResponderLink is the first solution to automatically deliver real-time gunshot detection data to 911 call centers and first responders. When shots are detected, the 911 dispatching center, also known as the Public Safety Answering Point or PSAP, is contacted based on the gunfire location, enabling faster initiation of life-saving emergency protocols. 3

  • EasyGate SPT and SPD

    EasyGate SPT SPD

    Security solutions do not have to be ordinary, let alone unattractive. Having renewed their best-selling speed gates, Cominfo has once again demonstrated their Art of Security philosophy in practice — and confirmed their position as an industry-leading manufacturers of premium speed gates and turnstiles. 3

  • FEP GameChanger

    FEP GameChanger

    Paige Datacom Solutions Introduces Important and Innovative Cabling Products GameChanger Cable, a proven and patented solution that significantly exceeds the reach of traditional category cable will now have a FEP/FEP construction. 3