This content is restricted.
Telling the FBI Your Company Has Been Hacked
For this, we turn to Galligan’s afternoon panel on cyber crime, where she was accompanied by attorneys in private practice, a law professor, the head of a computer forensics firm, and the chief of the Manhattan District Attorney’s investigations division.
First, as Ed Stroz, of the investigative firm Stroz Friedberg, explained, it’s important to recognize that you could be attacked by different categories of attackers, including state-sponsored actors, organized criminal groups, individual hackers or “hacktivists,” and company insiders. “What happens with the FBI is right now, approximately 60 percent of the time, we are going out and telling a company that they have been intruded upon,” says Galligan. Well, either they’re getting the information from another FBI investigation, “or we’re getting it from our partners in the government,” Galligan says, which includes all 16 of the U.S. intelligence agencies.
Whether you call them or they call you, Galligan and her FBI team are going to hope your company has already contemplated the possibility of a cyber attack, that you have a response plan, and that your general counsel is involved in it.
“Because we say over and over—and I have seen it over and over—that unless the general counsels and/or your outside counsel are involved in these issues from the beginning, are part of your plan, it becomes very, very difficult for the government to help you,” Galligan says,
The bureau also pointed out to the banks that a DDoS can serve as an opportunity for criminal actors to “come in and commit crime in your system.”
“It’s a discussion where we say, ‘We recognize you need to make a business decision,” she says, “and that business decision is going to be a very complicated one.’
“You have to really figure out what exactly you’re going to be willing to do,” says DeVore & DeMarco partner Joseph DeMarco, who specialized in cyber crime as an assistant U.S.
Keeping Up With the Andromeda Botnet
This content is restricted.
Cyber crime ‘costs small companies £800m a year’
The lobby group is concerned that the cost to the wider economy could be much greater, as small businesses refuse to trade online because they believe the security framework does not give them adequate protection.
Mike Cherry, FSB chairman, said: “Cyber crime poses a growing threat for small firms and it isn’t something that should be ignored. “While we want to see clear action from the Government and the wider public sector, there are clear actions that businesses can take to help themselves.”
The FSB issued 10 tips to help businesses protect themselves, including a combination of standard security protection steps (e.g. putting up a firewall and using antivirus and anti-spam software); carrying out regular security updates on all software and devices; and ensuring there is a resilient IT system and email password policy. The Government has urged small companies to spend more on security to address the rise in cyber crime and meet the terms of a tough EU directive.
New Security Intelligence Solution, EnCase® Analytics, Unveiled by Guidance Software
“One of the main goals of big data security analytics is to improve operations and accelerate incident detection/response,” said Jon Oltsik, senior principal analyst at the Enterprise Strategy Group. There is a need for solutions to easily discover changes in the system, trends and patterns, and other anomalous behavior that may expose signs of risks and threats.”
With EnCase Analytics, we are leveraging this expertise to empower organizations to derive useful insights from the noise that endpoint data produces,” said Victor Limongelli, chief executive officer, Guidance Software, Inc. “Unlike other endpoint security solutions, EnCase Analytics does not rely on signatures, heuristics or indicators, but instead leverages big data analytics to draw useful connections between seemingly unrelated activities in disparate data types.” EnCase Analytics leverages data from across all your endpoints from the kernel level instead of trusting a compromised operating system, resulting in a repository of the most reliable and useful data for insights into undetected risks and threats.
Link: http://www.it-analysis.com/technology/security/news_release.php?rel=38406
In a sea of malware, viruses make a small comeback
“Although we don’t have complete data for all the aforementioned locations, we can see that 30 percent to 40 percent of computers in some of these locations do not have up-to-date real-time anti-virus software installed, compared to the worldwide average of 24 percent,” Rains wrote.
More than 8 million computers worldwide are infected with Sality, a virus that infects files with certain extensions such as “.scr” and “.exe” and can also shut down the processes and services of security software, he wrote.
To infect computers, Sality has used a vulnerability that was also targeted by Stuxnet, the malware designed to wreck Siemens equipment used by Iran in its nuclear fuel refinement program.