McAfee Labs examines threat landscape in latest edition of “Security Journal”
November 17, 2011 - 6:47pm In its 2011 Security Journal, McAfee has examined the future of information security as it pertains to interconnected technologies, recent acts of cyberespionage, the rise in hacktivism, and increasingly sophisticated malware such as Stuxnet and Duqu. Hacktivism (such as the recent threat from hacker group ‘Anonymous’ to remove the City of Toronto from the Internet), cyberespionage (such as the attack that targeted three Canadian government departments earlier this year), and malware (such as Stuxnet and Duqu) are growing in sophistication, frequency, and reach. Enterprises are feeling increasingly threatened and concerned about their ability to maintain IT security defenses that are strong enough to protect proprietary information. The report details the following highlights on the evolution of cyberthreats and the need for a more inclusive security strategy: The human link: There is an ever-widening disparity between the sophistication of a network and the people who use them. Cybercriminals often use social engineering toolkits to exploit unsuspecting employees when direct attacks on an organization’s defenses fail. Educating employees on secure practices is not enough; organizations need to install the proper framework to empower and encourage employees to use these secure practices. Mobile is everywhere: Mobile attacks are becoming increasingly sophisticated every year. Instead of rendering the compromised device unusable, hackers are now finding ways to steal sensitive personal data. Additionally, hackers are broadening their target range to include other, less common mobile systems, such as the GPS system in a car. Cloud-based apps are on the rise: The popularity of cloud-based applications has made them an attractive target for hackers and other cybercriminals. However, the cloud is also a highly efficient way to scale security and protection for a business. Leveraged correctly, the cloud helps reduce your security costs while increasing your overall security posture and protection. Data is king: Whether stored on a smartphone, in the cloud, or on a network, data is what cybercriminals seek. Taking the proper precautions to secure this often ubiquitous data is a crucial step for many organizations. Learn from previous mistakes: History is a great teacher for those who take the time to study it. Analytics help identify patterns, vulnerabilities, and even motives. Understanding any of these concepts can help prevent attacks in the future.
|
IP Subscriber Log-In...User login |