Visibility is security

August 2018 Cyber Security

There is no shortage of cyber threats in the world today and while it’s possible to spend an age listing the various types of cyber-attacks and their methods, they all have one thing in common. Cyber criminals are after data in order to commit online fraud, identity theft and a host of other cybercrimes. To get their hands on what they need, they target organisations that make use of personal data in their everyday operations.

Given that every organisation in the world deals with personal or sensitive data in some form or another, whether global corporation, small business, municipality or financial service, there is no business that is not a potential target for a data breach in the form of a cyber-attack. Despite their differences, two things remain the same for organisations large and small: effective cybersecurity and vulnerability management all hinges on visibility.

See the forest for the trees

It’s easy to get caught up in the hype about cybercrime and lose focus of what’s important: protecting an organisation’s digital assets, infrastructure and people from cyber harm. It’s not possible to protect against something that cannot be seen, which is why vulnerability management and threat detection are such hot topics right now. After all, that’s the element that hackers are relying on: stealth tactics to exploit the weaknesses and vulnerabilities inherent in technology.

As fast as businesses are pushing for new technologies to be able to do new things and innovate, new vulnerabilities are appearing just as quickly. This makes it important to achieve visibility over all connections entering and leaving the corporate network, in order to ascertain that these connections pose no threat.

To this end, there are already gateway security solutions that exist that will integrate easily into the existing network architecture, redirecting all inbound and outbound internet traffic in order to classify and monitor connections. The benefit of utilising intelligent gateway solutions to create visibility is that this unlocks the power of reporting.

Without a meaningful view of the Internet gateway an organisation is at risk by default, so the benefits of an intelligent gateway solution is that creating visibility is made possible through the power of reporting. This depends obviously on artificial intelligence, and the AI engine that runs this is the key to unlocking that meaningful network view.

Simple solutions to complicated problems

To be effective, security needs to be proactive and preventative. Intelligent threat detection solutions need to deliver the ability to block, in addition to visibility and control. This allows the security-conscious network administrator to clamp down on all malware, and proactively identify possible suspicious connections so that these can be dealt with appropriately. By ensuring visibility over all connections in the network at a gateway level, this also performs a preventative security function.

Why is visibility over every single connection so important? Let’s consider ransomware. On average, a hacker, targeting a specific organisation, takes about 180 days from point of penetration before they can successfully encrypt the entire organisation’s data.

However, if the network administration team has visibility into all of the connections on the network, it becomes possible to more effectively identify suspicious connections, report on them, and have them blocked and thus neutralised in under an hour.

The benefits of visibility and control

Such an approach to cybersecurity is a very effective way of killing off potentially risky connections in a proactive manner. Unless it’s been deemed safe, disable suspicious connections. Once disabled, it becomes possible to safely assess that connection and if it is deemed safe, it can be added to a whitelist of security exceptions.

This approach is two-fold: block all connections to known malware and phishing sites, and report on those with the option to allow or kill. It is this reporting function that is especially important, because these phone-home ransomware connections don’t present themselves as known malware if your organisation has been specifically targeted. As we add more devices to the Internet of Things and we start to build more connections with the world and devices around us, it’s better to err on the side of being too restrictive and blocking as much as possible, than not.

It must be stressed, however, that technological security measures are insufficient on their own. Given that the weakest link in any security system will always be the human element, security awareness training and risk management education is important and is a necessary component of a successful cybersecurity strategy based on visibility.

For more information, contact LucidView, 086 110 3117, www.lucidview.net





Share this article:
Share via emailShare via LinkedInPrint this page



Further reading:

More is less in cybersecurity
Issue 2 2021 , Cyber Security
Post-pandemic paradox: more solutions do not bring better protection. Despite 80% of organisations running up to 10 different protection and cybersecurity solutions simultaneously, more than 50% of them experienced downtime from data loss last year.

Read more...
Ransomware and Microsoft Exchange Server attacks are surging
Issue 2 2021 , Cyber Security
Check Point Research sees global surges in ransomware attacks, alongside increases in cyberattacks targeting Microsoft Exchange Server vulnerabilities at a time where CISA has raised the alarm about ransomware attacks against Microsoft Exchange servers.

Read more...
Malware disguised as meeting apps spiked by 1067%
Issue 2 2021 , Cyber Security
Atlas VPN analysis reveals that cyber threats disguised as videoconferencing applications jumped by 1067% in a year. The data analysed was provided by Kaspersky.

Read more...
Free technology to boost future careers
Issue 2 2021 , Cyber Security, Security Services & Risk Management
A global shortage of cybersecurity professionals has become so severe that companies are increasingly at risk from hacking and industrial espionage.

Read more...
IoT malware attacks worldwide surge by 66%
Issue 2 2021 , News, Cyber Security
Based on the ‘Global Cyberattack Trends’ report by SonicWall, in 2020, malware attacks on IoT devices spiked by 66% compared to 2019. In a year, they grew from 34,3 million cases to nearly 56,9 million.

Read more...
New security frontiers: An opportunity to rewrite the rules
Issue 2 2021 , Cyber Security
Paul Crichard, chief security technology strategist, BT, explores how organisations can reimagine their security for the cloud, turning it into an enabler for better ways of operating.

Read more...
Seven simple steps to keep your SME cyber-safe
Issue 2 2021 , Cyber Security
Cybersecurity experts at ENHALO, a full-circle cyber defence group, understand the cyber-challenges facing the SME owner; here are seven simple steps to keep your SME cyber-safe in 2021.

Read more...
Snyk launches in South Africa
Issue 2 2021 , News, Cyber Security
Snyk provides a platform to secure all of the critical components of today’s cloud native application development, including the code, open source libraries, container infrastructure and infrastructure as code.

Read more...
Acronis acquires Synapsys in South Africa
Issue 2 2021 , News, Cyber Security
Acronis has acquired Synapsys, its long-time partner located in Cape Town, South Africa, that specialises in distributing Acronis Cyber Protection Solutions through the service provider channel.

Read more...
Gallagher achieves UK cybersecurity standard
Issue 1 2021, Gallagher , Access Control & Identity Management, Cyber Security, Government and Parastatal (Industry)
The Gallagher UK CPNI CAPSS High Security System features compliances to the Cyber Assurance for Physical Security Systems (CAPSS) standard, and the Centre for the Protection of National Infrastructure (CPNI) Readers and Tokens standards.

Read more...