Context Is King in the Fight Against Modern Cyberattacks
For most of its history, cybersecurity has been reactive by design. Spot the bad event, shut it down. But as cyberattacks evolve, this thinking must evolve too. In the past, attackers relied on a single dramatic exploit to access the crown jewels. But the nature of attacks has changed.
Defenders see ordinary events they don’t think are important enough to follow up on, but before they realize it, these events lead to a dramatic breach. A breach can start with a common event like an admin login or an unfamiliar tool being downloaded after office hours. This first step, if left unchallenged, leads to each following step growing more severe, resulting in a security incident.
Lack of Data Sensibility
It’s wrong to assume that attackers have more data than defenders do about their own environment. Defenders know their users, devices, applications, network traffic, and vulnerabilities. Having access to such diverse...
Copyright of this story solely belongs to www.securityweek.com. To see the full text click HERE