Offense Must Inform Defense: The Importance of Continuous Monitoring

Written by v2r on July 20, 2012 – 5:51 pm -

In light of the introduction yesterday of the seminal Cyber Security Act and the Presidents OP-Ed in the WSJ: Taking the Cyberthreat Seriously.

It is time we learn a lesson from those learned by the Federal Government in Cybersecurity.

For the last 6 years the United States government has been struggling to determine how nation state and non-state hackers have bypassed perimeter defenses.   After the Comprehensive National Cyber Initiative (CNCI) it was determined that most government agencies over rely on their perimeter defenses. The gauntlet was thrown down to determine how the offensive tactics utilized by the cyber intruders could inform the United States government’s defensive posture.  One critical lesson was that many agencies did not test their security controls nor could they valid if these controls were working in concert with other controls and personnel to defend against the cyber onslaught. In order to improve defense in depth a mandate was issued for agencies to maintain “continuous monitoring”.

The paradigm of  continuous monitoring began in the form of a memo sent from the President’s Office of Management and Budget to all heads of U.S. executive departments and agencies – it represented a leap forward taken in the name of helping these organizations adopt the practices necessary to begin gathering these types of enterprise-level security metrics. The directive issued from the highest levels of federal oversight has compelled organizations to aggressively ramp up their security testing practices.  Continuous monitoring is a risk management process facilitated by people and technology to ensure overall ecosystem health, integrity and quality of service.  According to NIST (National Institute of Standards and Technology) continuous monitoring has specific key tenants¹:

• promote the concept of near real-time risk management and ongoing information system authorization through the implementation of robust continuous monitoring processes;
• provide emphasis on the selection, implementation, assessment, and monitoring of security controls, and the authorization of information systems;
• Establish responsibility and accountability for security controls deployed within organizational information systems and inherited by those systems (i.e., common controls).

¹ NIST, Guide for Applying the Risk Management Framework to Federal Information Systems: A Security Life Cycle Approach, Special Publication 800-37 (Gaithersburg, Md.: February 2010).

 

Focus now must become centered on automation and embedding security into the operating system of your organization and ecosystem.  If the enemy is going to shift the playing field, we must be prepared to spin the virtual chess board. To tap into the power of Web-based, mobile, and virtualization, and thus build stouter virtual castles in the sky, we must appreciate the evolution of blended threats from the simple virus of yesteryear to the virulent malware and organized cyber campaigns of 2012 (See: Security Intelligence).   The cyber kill chain has dictated that we must also build dungeons within those castles.   Continuous monitoring is the first step in addressing the use of intelligent metrics to empower greater cyber-situational awareness within government agencies, and represents a significant bridge between military-type assessment programs and civilian standards and risk assessment paradigms. The future of Cyber security will be grounded in continuous monitoring and the paradigm that we must increase the level of discomfort of our adversaries so that they no longer choose to expend the resources to attack and/or remain persistent within our networks.   Offense must inform our cyber defense.

 

Trend Micro has developed a layered security platform that provides defense in depth and continuous monitoring of both traditional and virtual infrastructure: Deep Security. See: Cloud Solutions

read source...

 

Tags: computer security, malware remove, President, Security, Threats, virus remove, Whitehouse
Posted in Virus removal tools |

Remove Virus, Malware, Trojans - Computer virus Removal tools

Nothing can be worse than a malware infected PC. With its domination on how you browse and an irritating spray of websites that you never opened, malware can make regular browsing experience a nightmare. Not just that, spuriously it might pass on critical information as well. Thank God for antimalware programmers, browsing gets a little sane with anti malware. It catches such malicious programs, takes them off and revive the same browsing experience.

Computer Malware is a Real Problem

You never know what purpose a malware has been designed with until you catch it. Is it to track your usernames and passwords, to catch your browsing history, or your shopping habits? Depending on who makes them, the purpose of malware differs; yet collectively they remain a big threat. They operate in disguise and not only risk your personal information but consume processing power and bandwidth as well.

Common Sources of Catching a Malware

If you have been wondering how your PC got infected and why antimalware program become crucial for you, here are some pointers for you: Malicious sites: If you by mistake landed on sites that looked suspicious, there is a high possibility that you got a malware from there. Third party packages: If you keep trying unreliable third party software as a habit, chances are you have many malware running on your PC. Most of the malicious marketers club their malware with popular applications. Next time, you install an application, keep the anti-virus program active. Torrent downloads: While people may not accept, piracy is a common practice and thanks to torrents, malware programmers find a new outlet for spreading their programs. If you have downloaded files through torrents, especially through seeders not known for reliable downloads, you might have downloaded malware without even knowing about it. If your PC shows sign of being infected by malware, your best bet is to download a reliable anti malware program now and run it to catch the bad boys! Trust us, further you delay running anti malware programs, worse the situation gets.

Computer Viruses, Malwares, Trojans - Remove

Each year the particular problems via personal computer malware cost US corporations immeasureable dollars. These pricing is with missing efficiency, however everlasting loss in essential organization info. Perhaps, nearly all if not all attacks are avoidable with the appropriate comprehension, education and defense. Do not be another sufferer, take the actions today to make certain safety and recovery in the event the most detrimental need to take place.Initial, let’s realize personal computer malware. Usually the phrase malware is employed to explain all adware and spyware. Technically speaking, there are malware, rootkits, Trojan horses, viruses as well as spy ware. The actual strike approach may differ however they are almost all harmful.A virus is a plan that goes by itself and also illegal copies themselves. It could influence documents or perhaps the trunk field and will delete all your files. The particular “Melissa” and “I Really like You” viruses gained worldwide interest. Any rootkit or even Trojan viruses horse allows use of one’s body without you knowing. Usually they look just like a beneficial software application but in fact they may be again or snare doorways.A pc earthworm is a self-replicating computer program. That utilizes a network to deliver duplicates involving by itself with nodes. After on the method, viruses don’t need to put on an additional software and can run by themselves. Viruses create a rejection of service assault generating the system not used. In general, earthworms focus on the network and infections attack files.