Page 95 - White Papers - information risk management

Critical Capabilities for Securing Against Data Exfiltration

Data exfiltration describes the unauthorized transfer of data signifying a data breach. The data theft occurs during dwell time, the gap between when your network is infected and when the infection is detected. The Internet is evolving and unfortunately, cyber criminals are changing their tactics to exploit the...

10 Key Considerations when Choosing a Cybersecurity Solution

What Gartner calls "the new threat landscape" is more than just a clever metaphor, it describes a new era of cyber threats aimed at outmaneuvering any security solutions that get in their way. As today's highly publicized data breaches illustrate, the threats launched by these sophisticated cyber criminals seem to be...

Security Efficacy Analysis of Malware, Zero Day, and Advanced Attack Protection

Miercom, a leading security testing firm, recently performed a head to head security efficacy analysis of network-based breach detection and Advanced Persistent Threat (APT) prevention solutions that utilize sandboxing. Zscaler Internet Security and FireEye Web MPS 1310 were tested, and Miercom found the Zscaler...

APT30: The Mechanics Behind a Decade Long Cyber Espionage Operation

FireEye just released a report called "APT30 AND THE MECHANICS OF A LONG-RUNNING CYBER ESPIONAGE OPERATION" .The report focuses on a targeted threat group that we call APT30 (Advanced Persistent Threat group 30) and details how a cyber-threat group exploited Governments and commercial entities across India and...

How Secure Do You Want to Be?

Protecting against advanced cyber-attacks requires, among other things, that you meet the same level of sophistication as your attackers. Unfortunately, most current security technologies fail to meet that bar, resulting in organizations being breached when they thought they were protected. A resulting breach can be...

Sponsored by IBM

Beyond the Next Generation: Meeting the Converging Demands of Network Security

As the demands of an increasingly complex threat landscape have been compounded by the shift of functionality toward applications, the common needs of a diverse range of network security requirements have led to overlaps in emerging technologies that are forging a convergence of functionality. Download this white...

Sponsored by IBM

The Pitfalls of Two-Factor Authentication

Most financial institutions used to allow customers to log in to their accounts with a simple username and password. But passwords are notoriously insecure - many users choose weak passwords that can be easily guessed or cracked. In an effort to help strengthen security, large numbers of banks began using a second...

Sponsored by IBM

Win the Race Against Time to Stay Ahead of Cybercriminals

Of all the questions organizations face in protecting against cyber attacks, one may be paramount: How long does it take to thoroughly investigate a security incident? Ideally, the answer should be that attackers and their dirty work have virtually no time at all. But in reality, many organizations give attackers all...

Sponsored by IBM

What Can You Do Differently to Guard Against Threats From Rapidly Evolving Mobile Malware?

Just when you thought it was safe to go mobile, everything is different. The risks are different. Only a few years ago, predictions stated that smartphones and tablets had little vulnerability to malware and hacking. But in the one-year period ending March 2013, malware aimed at mobile platforms grew 614 percent,...

Sponsored by IBM

Breaking Down Silos of Protection: An Integrated Approach to Managing Application Security

An enterprise today runs hundreds, if not thousands, of applications, many of which harbor vulnerabilities that make them gateways for attack. Web applications, which provide a two-way path for employees to access the outside world and outsiders to access enterprise resources, now account for 31 percent of all...

Sponsored by IBM

Manage Identities and Access for Continuous Compliance and Reduced Risk

As organizations strive to securely deliver high-quality, high-availability services to users around the world, they grapple with ever-changing user populations, access points and applications that are increasingly dynamic, distributed and mobile. While the traditional forms of server, network and data security are...

Sponsored by IBM

IBM Security Intrusion Prevention Solutions

As networks continue to grow in size, complexity and level of business importance, the potential for malicious attacks grows right along with them. Today, there are hackers working around the clock, plotting threats through spyware, worms, botnets and shell code to exploit new vulnerabilities. Responding to these...

Sponsored by IBM

Elevate Data Security to the Boardroom Agenda

Analyzing data can generate transformative insights, whether for individualizing marketing campaigns, understanding business risks or creating smarter cities. Leading organizations are looking to develop more and deeper insights by extending their enterprise architectures to accommodate data from new sources. When...

Sponsored by IBM

Strategy Considerations for Building a Security Operations Center

Building an enterprise security operations center (SOC) can be an effective path to reducing security vulnerabilities. An enterprise SOC encompasses the people, processes and technologies that handle information technology (IT) threat monitoring, forensic investigation, incident management and security reporting. It...

Sponsored by IBM

Security Essentials for CIO's: Responding to Inevitable Incident

It could come tomorrow, or perhaps two years from now. It could arrive in many forms, perhaps as a distributed denial of service attack or malware siphoning off company secrets. Whatever its shape or nature, the first question is not whether an enterprise-threatening incident will come, but instead when. And the same...