Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.
2016 Cyber Security Predictions
Posted on 15-Dec-2015 21:50 by Amit Yoran, President of RSA. | Tags Filed under: Articles.



By Amit Yoran, President of RSA

2015 was most notably characterised by security vendors claiming to be able to prevent advanced threat breaches when the reality is, they can’t.  It was characterised by enterprises recognising the need to monitor and defend their digital environments differently, but continuing to centre their security programs on the same technologies and approaches they have been using – hoping for a different outcome, but not acting differently. 

2015 saw threats continuing to evolve faster than most organisations’ ability to detect and respond to them. What was considered an “advanced” threat in years past has become a commodity today with sophisticated malware and exploits available for the price of a movie ticket.  As troublesome as these observations seem, the most impactful evolution goes almost entirely unreported and misunderstood.  The threats that matter most, today’s pervasive threat actors execute attack campaigns comprised of multiple compromise methods and multiple backdoors to assure persistence. Incomplete incident scoping has become a critical failure point.

We’re starting to see progress in some areas as security investments begin to shift from a maniacal focus on prevention, toward greater balance on monitoring, detection, and response capabilities.  It’s become cliché to say that breaches are inevitable and that faster detection and more accurate incident scoping is the way forward, but too many organisations are trying to do these very different tasks using the technologies and processes they have on hand…not designed nor capable of answering their need. Here are some of the emerging trends that our industry and organisations need to be ready for in 2016:

 

  1. Strategic Data Manipulation and Disruption – Organisations will begin to realise that not only is their data being accessed inappropriately, but that it is being tampered with. Data drives decision making for people and computer systems. When that data is unknowingly manipulated, those decisions will be made based on false data.  Consider the potentially devastating consequences of misrepresented data on the mixing of compounds, control systems, and manufacturing processes. 
  1. Increasing Attacks on Application Service Providers – As organisations become more comfortable with the “as a Service” model, many of their most sensitive applications and data reside in the Cloud. The aggregation of this valuable data from many companies creates an incredibly lucrative target for cybercriminals and cyber espionage. A deeper appreciation of third party risk is needed. 
  1. Hacktivism and the Attack Surface – Per my earlier comment, as cyber-attack tools and services become increasingly commoditised; the cost of attacking an organisation is dropping dramatically, enabling more attacks that do not have financial gain as the primary focus. Sophisticated hacktivist collectives like Anonymous have been joined by relatively unsophisticated cyber vigilantes.  Organisations need to realise that financial gain is no longer the only or even the biggest driver of some of their adversaries.  Security operations and risk managers should evolve their understanding not only of the threat, but also of what, why, where, and how they are being targeted. 
  1. ICS (Industrial Control Systems) pushed to the Breaking Point – Intrusions into systems that control operations in the chemical, electrical, water, and transport sectors have increased 17-fold over the last three years. The advent of connected and automated sensors with the IoT aggressively exacerbates these issues. The growth in the use of cyber technology for terrorism, hacktivists and other actors, combined with the weakness of ICS security generally, combined with the potential impact of bringing down a power grid or water treatment plant (hello, California), makes the critical breach of an ICS in 2016 extremely concerning and increasingly likely. 
  1. Shake-out of the Security Industry – Our industry has been awash in venture capital and as a result, foolish investments have been made in strategies and technologies that are little more than snake oil. As organisations’ security programs continue to mature, they are learning that claims of being able to prevent advanced threat breaches are nothing more than fantasy.  Expect to see a shake-out in the security industry as organisations maturing understanding of advanced threats increasingly drives their security investment decisions.

 

 




comments powered by Disqus




Trending now »

Hot discussions in our forums right now:

The President Of The USA - Who do you think?
Created by TimA, last reply by tdgeek on 3-Dec-2016 22:07 (870 replies)
Pages... 56 57 58


NetFlix: Download and go
Created by jamesrt, last reply by PhantomNVD on 1-Dec-2016 22:16 (28 replies)
Pages... 2


Woooaaahh earthquake 2016-11-14
Created by Fred99, last reply by Pumpedd on 1-Dec-2016 11:50 (470 replies)
Pages... 30 31 32


1GB Plan Capping Out at 100Mb Download
Created by Kopkiwi, last reply by sbiddle on 3-Dec-2016 17:10 (23 replies)
Pages... 2


'Quality' NZ news on the way?
Created by Rikkitic, last reply by Fred99 on 3-Dec-2016 23:05 (90 replies)
Pages... 4 5 6


Christmas. Bah, humbug.
Created by Rikkitic, last reply by alasta on 3-Dec-2016 13:43 (40 replies)
Pages... 2 3


Spark Ultra Fast Fibre MAX performance and discussion (Some might say Gigabit)
Created by Talkiet, last reply by sbiddle on 3-Dec-2016 21:15 (55 replies)
Pages... 2 3 4


FS: NES Classic Mini - New and unopened
Created by thewanderingv, last reply by thewanderingv on 2-Dec-2016 22:47 (17 replies)
Pages... 2