Category: News

This is because the financial sector has always been a favorite target for hackers and will more likely be able to adopt active defense strategies, Eric Chan, regional technical director of Fortinet Southeast Asia and Hong Kong, explained. They also have high IT security budgets and are risk-averse, so they will be likely to consider them, he said.

However, among the enterprises that have the resources to dedicate to robust and complex defenses, there is a gradual move from honeypots to using more sophisticated active defense methods, Steinberg noted. Such methods include developing new technologies that mislead hackers, or coming up with false information to lure hackers down dead ends and away from organization’s critical information, he explained.

Other than in India, the technology, called Intrusion Deception software, has already been adopted by many private and government organizations worldwide, according to David Koretz, vice president and general manager of Mykonos Software, which Juniper Networks had bought for US$80 million in February last year. “In real life, almost every government has a traditional military defense like Army, Air Force and Navy, but there is also a secretive, deceptive group of spies and undercover organizations thwarting attacks before they are ever launched…. In real life, almost every government has a traditional military defense like Army, Air Force and Navy, but there is also a secretive, deceptive group of spies and undercover organizations thwarting attacks before they are ever launched,” Koretz said.

Moving forward, Steinberg expects more sophisticated active defense methods to be adopted by organizations and the move away from honeypots. Honeypots are merely “bait”, but enterprises today want to feel like they are able to fight back against hackers instead of passively defending themselves, he said. “they can start with low-interaction honeypots, such as a facade, which is a lightweight form of honeypot and most often implemented as a software emulation of a target service or application.”

In order for companies to effectively adopt active defenses, they should combine the use of both “the bait and the strategy”, Steinberg pointed out. Both honeypots, new technologies to mislead hackers and new strategies should be used together for a complete strategy, he explained.

Link: http://www.zdnet.com/enterprises-using-new-tech-to-deceive-hackers-7000010403/

“Cyberspace must be secure and reliable so that it is trusted as a medium for doing business but at the same time free and open to evolve and innovate naturally,” he added.

Cabinet Office minister for cyber security, Francis Maude, commented that by sharing the UK’s expertise with other nations all organisations will benefit from greater protection from cyber attacks. Maude has previously earmarked £650 million for the UK’s fight against cyber crime, and last month heralded the success of the UK’s Cyber Security Strategy, claiming that “a great deal has already been accomplished”.

The EU also made moves to create a more cohesive strategy to combat the “borderless” nature of cyber criminals, announcing the opening of a European Cybercrime Centre earlier this month, enabling greater colloboration between authorities in member states. However, the discovery of the Red October threat by Kaspersky Lab last week highlighted the extent of the challenge that faces businesses and government authorities in stemming the tide of increasingly sophisticated cyber attacks.

Link: http://www.cso.com.au/article/452001/uk_signs_up_world_economic_forum_cyber_crime_initiative/

Key features of RSA Archer Business Continuity Management and Operations include:

* Risk Register – Helps users identify, evaluate and mitigate risks that may impact their organization, locations, processes or partners.
* Business Impact Analysis (BIA) – Gives users the ability to evaluate the criticality of their processes and determine recovery objectives (RTO and RPO) that are coordinated across supporting infrastructure.
* Centrally managed business continuity and disaster recovery plans – Allows users to develop detailed recovery plans for business processes or IT assets, utilizing automated workflow for plan testing, activation and approval.
* Enhanced crisis management and response – Helps enable users to report and manage crisis events, send emergency notifications to communicate crisis information to appropriate personnel, and activate business continuity or disaster recovery plans to recover disrupted business operations, facilities or IT infrastructure.
* Tighter integration with other RSA Archer GRC components – Lets users relate business continuity management components to organizational units (e.g., divisions, business units) and infrastructure (e.g., processes, facilities, IT applications or vital records) for visibility, accountability and reporting.
Additionally, RSA has also introduced the availability of the RSA Archer BCM Mobile App. As a key component in a GRC mobile strategy, the app is designed to augment hard copy plans and enable rapid response during a crisis situation by offering visibility into business continuity or disaster recovery plans and associated strategies, tasks, calling trees and requirements from most locations. In the event that a data center is not available, the RSA Archer BCM Mobile App is engineered to provide high availability, allowing the end user offline access to resources from the time the app was last synced. Additional capabilities including a Mobile App Toolkit built to enable customers to create and design custom applications including questionnaires and assessments will also be supported in a future release.

Link: http://www.continuitycentral.com/news06623.html

The difference between the first and final outages reflect the fact that phishing attacks will sometimes fluctuate up & down on compromised hosts where the fraudster may still have access to the system and be able to replace his content after the site owner removes it.
Phishing attacks NetCraft dealt with in the UK & Ireland have a shorter median lifetime than those hosted in the US, whilst phishing attacks we have taken down in Iran have a median lifetime of just under 30 hours, around five times longer than Russia.

In addition to providing fast takedown of the fraudulent content, the countermeasures service is also linked to our phishing site feed, which is licensed by all of the main web browsers, together with many of the largest anti-virus and content filtering products, firewall and network appliance vendors, mail providers, registrars, hosting companies and ISPs.

Link: http://software.einnews.com/article/133794636/vTqnhs5_BDS4YwpM?n=2