Page 233 - White Papers in Governance & Risk Management

Vulnerability Management: Think Like an Attacker to Prioritize Risks

To most effectively manage vulnerabilities, you need to think like the attacker: how would you go about doing damage, exfiltrating valuable information and making money? What are the key assets in your network that you would target? How would you get to these assets? Drawing on decades of real-world experience,...

AlienVault USM- A Security Operations Center for the SMB

AlienVault's USM is tailor-made for the needs of the security-savvy SMB. It offers affordability, and a comprehensive and ever-increasing feature set powered by the respectable AV Labs and Open Threat Exchange." In this analyst report, Javvad Malik of 451 Research, reviews AlienVault's SMB-focused approach to SIEM and...

SANS 2014 Security Analytics and Intelligence Survey

Based on the results of this year's survey, there are several key takeaways for the security community. The use of analytics and threat intelligence to ferret out complex and stealthy threats from advanced attackers and insiders is improving security for some; automation is improving; and intelligence providers are...

IT Security by the Numbers: Calculating the Total Cost of Protection

Humorist Franklin P. Jones may have said it best: "When you get something for nothing, you just haven't been billed for it yet." These are wise words of warning for businesses counting on so-called "free" IT security software. Kaspersky Lab has created an eBook to help you calculate the true cost of protecting...

Security Technologies for Mobile and BYOD

Businesses today are faced with the almost insurmountable task of complying with a confusing array of laws and regulations relating to data privacy and security. These can come from a variety of sources: local, state, national, and, even, international law makers. This is not just a problem for big businesses. Even a...

Consumer Web Portals: Platforms At Significant Security Risk

The increasing number of digital identities, prevalence and impact of data breaches, and loss of customer information are driving a heightened requirement for effective consumer-facing identity and access management (IAM) solutions. Many organizations with consumer portals, however, do not have effective protections...

Card-Not-Present Fraud in a Post-EMV Environment: Combating the Fraud Spike

This white paper is based on data collected in two separate research efforts. In the first, Aite Group surveyed fraud executives at 36 large U.S. merchants from March to May 2014 to understand points of pain and planned solutions. Aite Group also interviewed card executives from payment networks and 18 of the top 40...

Countering Cyber Threats with Behavioral Analytics

Today's flood of digital data-flowing from hundreds of millions of devices and contained in billions of online transmissions and transactions-often presents organizations with more raw information than they are able to absorb. Even more worrisome, this data deluge provides cyber criminals with a means to hide...

Enterprise Mobility: How to Protect Corporate Data

Every company will have a different path to mobile adoption, and final implementations will vary, depending on the needs of various business functions and on regulations that impact mobile policies. A simple way to evaluate where a business is and where it wants to be is to look at devices in terms of who owns them,...

5 Requirements for Secure Enterprise Mobility

With the mobility trend in full swing, most organizations today are already vulnerable to potential security risks. The security basics of yesterday (policy, encryption, and authentication) no longer cover fundamental security needs. Businesses must act quickly to get the most from mobility while effectively...

Understanding Pass-the-Hash Attacks - and Mitigating the Risks

Even though the pass-the-hash (PtH) attack was originally published by Paul Ashton in 1997 and several white papers and tech briefs have been written on the topic, these attacks have recently come to the forefront again. Read this white paper to: Find out how these attacks work; Learn about the mitigation...

Ponemon Institute Survey Report: Top Enterprise Threats to Data Security

With the rise of the data-centric enterprise, there is a necessary and parallel development of the security architecture meant to protect it. But in the time it's taken for data security to catch up with the changing datascape, organizations have found their compliance and data protection programs...

Q2 2014 State of Infections Report

This "State of Infections" report discusses the state of the enterprise under attack and trends in threats seen in the second quarter of 2014. Key findings in this report include: The rise of ransomware; The relationship between the size of an enterprise and its infection rate....

Integrated Threat Defense - Visibility to Discover and Protect Against Socially Engineered Exploits

This infographic hightlights a specific example of attackers targeting a feature within Microsoft Word - Visual Basic Scripting for Applications. While basic, the Office Macro attack vector is obviously still working quite effectively. When the victim opens the Word document, an On-Open macro fires, which results in...

Case Study: Making Threat Protection More Intelligent and More Accurate

Weill Cornell Medical College, which is part of Cornell University, ranks among the top clinical and medical research centers in the country. With some 7,000 faculty, staff and students, as well as approximately 2.5 million patients under its care, the medical college also ranks as a big target for...