“How are you going to identify these devices? How are you going to secure them? How do you deal with alerts coming in from all types of devices, and do you have playbooks to respond to those alerts equally across all of those devices? How are you going to track or respond when alerts show up in case threats are not prevented but detected?” Starting with endpoints “You have to think of everything that runs software or code in your network as you do threat modeling for your network, and then have a plan in place,” Ganacharya said. “Identities can be stolen on any of the devices that employees on a given network log in to.” Importance of an end-to-end approach for securityĭetecting and preventing attacks on endpoints is just one part of protecting your network and the resources it connects, and you won’t always catch everything in time. “Yes, you can break in, but isn’t it better - for an attacker anyway - if they can just log in?” Ganacharya said. Attackers have also shifted so that in addition to trying to compromise endpoint devices, they’re also targeting credentials and identities. SEE: Mobile device security policy (TechRepublic Premium)īYOD policies have made enterprise networks more diverse, and devices that used to only be connected to corporate networks are now likely on the internet as well.
“As Windows protection has gotten better and better over the last many years, the low hanging fruit now is not targeting Windows endpoints but some of these other endpoints that people assume are secure,” Ganacharya said. “We’ve seen a significant rise in vulnerabilities being found and reported for non-Windows platforms, and also in malware and threat campaigns in general.”Īs the dominant desktop OS, Windows used to be the most popular target for attackers, but the MITRE stats for CVEs show the numbers of vulnerabilities found on other platforms rising fast. “Over the last few years, we’ve seen the threat landscape evolve where attackers and cyber criminals are targeting all platforms equally,” Tanmay Ganacharya, partner director for security research at Microsoft, told TechRepublic. Microsoft’s security tools aren’t just for Microsoft platforms, because attackers don’t just go after Windows. Now that attackers can phish employees on any device and try to extract credentials, endpoint protection has to cover more than just Windows. Microsoft Defender protects Mac and Linux from malicious websites
0 kommentar(er)
