Page 233 - White Papers - information security careers

Symantec Intelligence Report: June 2014

The largest data breach reported in June resulted in the exposure of 1.3 million identities. This seems like a small number when compared to the 145 million exposed in the largest breach of May. However, while reported in June, this breach also took place during the month of May. This brings the total number of...

Cyberespionage Attacks Against Energy Suppliers

A cyberespionage campaign against a range of targets, mainly in the energy sector, gave attackers the ability to mount sabotage operations against their victims. The attackers managed to compromise a number of strategically important organizations for spying purposes and, if they had used the sabotage capabilities...

Gartner Magic Quadrant for Endpoint Protection Platforms

The endpoint protection platform provides a collection of security capabilities to protect PCs, smartphones and tablets. Vendors in this market compete on the quality of their protection capabilities, the depth and breadth of features, and the ease of administration. This analysis provides: An evaluation of...

Fraud Protection for Native Mobile Applications

The use of smartphones, tablets, and other mobile devices to conduct online transactions has rapidly grown into a standard practice. A large percentage of these now-common mobile transactions are completed using mobile apps. Unfortunately, crime associated with their use has increased correspondingly, resulting in a...

Why You Need a Next-Generation Firewall

Next-generation (NG) firewalls, with features such as deep packet inspection, intrusion detection, application identification, and granular control, are important weapons in the battle against hacking and malware. Mobile applications have taken the overall scheme of corporate IT, and NG firewalls enable organizations...

Mobile is the New Normal for Conducting Business

Mobile devices have offered organizations unparalleled access to information and a new level of flexibility in doing business. However, with this newfound freedom comes inherent risks and the danger of security breaches. This whitepaper discusses: The growth of mobile devices in the workplace; Inherent...

A Proactive Approach to Protecting Corporate Email

Encryption makes the contents of email, both the message text and any attachments, indecipherable to unauthorized individuals. Encryption can be used in transit, so that if an unauthorized individual outside the company intercepts an email while it moves across the Internet it cannot be read. Encryption can...

How Secure Do You Want to Be? Evaluating and Evolving Your Security Program

All too often, an enterprise invests in security technology and services thinking that they'll be protected from a cyber attack only to discover that they are breached anyway. It prompts some sober reflection and a reassessment of their whole approach to security. Businesses undertake a security program assessment...

Understanding the Enemy: Cybersecurity in the Oil and Gas Industry

There is no single adversary and no single threat to the information technology (IT) and operational technology (OT) infrastructures of the oil and gas industry. Although the differing motives- notoriety, money, business advantage or military superiority- to an extent determine the targets of each category, the...

Ransom-based Attacks: Choosing the Right Mitigation Strategy

For years, organizations have been threatened by DDoS attacks on several fronts, ranging from volumetric attacks to application-level and DNS strikes. Now come ransom-based attacks. In this interview with Trey Guinn - head of solution engineering at CloudFlare - he discusses the importance of matching your DDoS...

The Cybersecurity Maturity Model for Oil and Gas

A maturity model is a framework that allows an organization to assess the rigor of its security practices and processes according to industry best practices. This can help create a more robust security footing over time, reducing the number of successful cyber-attacks and enabling a quicker return to normal operations...

PSD2 Compliance: Are You Prepared?

The European Commission's Payment Services Directive II, or PSD2, stands to revolutionize the payment industry. In addition to driving innovation and competition, the new regulation calls for a new generation of customer security. As the volume of financial transactions in remote channels increase, so does the...

Improve Fraud Investigation with Web Behavior Analytics

Cyber security practitioners commonly lament that reducing consumer fraud would be a whole lot more effective if only the products could understand the business better. This is especially true with websites, the primary interface for businesses with its customers. Beyond the login, it is important to have visibility...

Web Application Attack Vectors: Delving into XXS and Shellshock Activity

In 2015, there were nine common web application attack vectors. They represent a cross section of many of the most common categories seen in industry vulnerability lists. The goal of this report is not to validate any one of the vulnerability lists, but instead to look at some of the characteristics of these...

5 Critical Ways To Take A More Collaborative Approach To IT Security

Studies show the average time to resolve a security breach once detected is more than 45 days, and companies lose more than $1.6 million during that time. The obstacles to faster response include lack of resources and an inability to effectively communicate and collaborate among the multiple teams and tools larger...