Page 32 - White Papers in Security Operations

SANS Maturing and Specializing: Incident Response Capabilities Needed

The SANS 2015 survey of the incident response capabilities of more than 500 security professionals found good news and bad news. The good news is that reported malware incidents, breaches, and remediation time declined slightly compared to last year, indicating a maturing of defenses and incident response...

Breach Response: How to Prepare for the Inevitable

To avoid being breached, you have to get your defenses right every single time. To breach you, hackers only have to get their attack right once. Experts advise breaches are inevitable. According to Ponemon Institute, the average time to resolve a cyber attack is 45 days, with an average cost of $35,647 per day. The...

Orchestrating Enterprise Security in the Cloud

Most businesses use the cloud for at least some applications - collaboration, email, backups and disaster recovery. And many more plan to in the next 12 months. According to "Orchestrating Security in the Cloud," a SANS survey, 40 percent of businesses store or process sensitive data in the cloud. But is it safe from...

Breach Prevention: Hunting For Signs of Compromise

The ground has shifted under most enterprise IT security staff. Breaches are now capturing prime-time air across mainstream media outlets. As the world becomes more connected, it is no longer enough for enterprises to react once an alert indicates an attacker is inside the network. Instead, with continuous packet...

The Numbers Game: An In-Depth Look at Alert Management in Asia

The numbers are staggering. Security alerts come in by the thousands every month, and you and your IT team are tasked with handling each one. Even when alerts are caught and categorized correctly, the sheer volume is overwhelming. And when they're not responded to quickly, the consequences can be disastrous. The high...

Securing the Virtual Infrastructure without Impacting Performance

Virtualization offers remarkable benefits to organizations. However, organizations that are aggressively pursuing virtualization are not realizing the full possible return on investments in virtualization. However, too often, organizations don't consider the need to identify new endpoint antimalware solutions. ...

Finding Alerts that Lead to Compromise

With every new layer of cyber security you put in place, the attackers respond by evolving their own tools and techniques. To combat this constantly changing threat you, too, need a new approach: FireEye as a Service. This is not a usual Managed Security Service and it's not your typical Managed Security Services...

Sponsored by IBM

Dating Apps Vulnerabilities & Risks to Enterprises

A 2013 Pew Research study revealed one in 10 Americans have used a dating site or app and the number of people who dated someone they met online has grown to 66 percent.1 Today, the goal is work-life integration. Employees multi-task work obligations between banking, gaming, tweeting, networking and yes, even dating....

Sponsored by IBM

Five Steps to Achieve Risk-based Application Security Management

Typically, IT and business management have no visibility into the overall state of application security. Activities for assessing, prioritizing and remediating application vulnerabilities are ad hoc, fragmented, and carried out at low levels in the IT security organization. Quality assurance and software development...

Sponsored by IBM

State of Mobile App Security

Mobile has become a cornerstone of the global economy; use of mobile applications continues to grow rapidly. The concept of there being an app for everything has only moved further away from being a joke, and closer towards becoming a reality. Staggering statistics across various reports indicate that mobile apps,...

Sponsored by IBM

Security Essentials for CIOs: Securing the Extended Enterprise

Let's assume that your security operations are stellar. You have procedures in place to keep software patches up to date, and a team that responds to incidents within minutes. A relentless focus on security permeates your enterprise. In short, in-house you're doing everything right. But how about outside your...

Sponsored by IBM

Security Essentials for CIO's: Establishing a Department of Yes

Consider for a moment the most vital operation in your enterprise. It might run financial processing around the world, control a city's electrical distribution, or handle millions of passengers' airline reservations. What happens to your business if the computers directing such operations are hacked, sabotaged or...

State of Cybersecurity: Implications for 2015 Infographic

According to the State of Cybersecurity: Implications for 2015 report, cybersecurity now has executive support and increased budgets. Yet there is still a shortage of skilled professionals. This study provides an eye-opening look into cybersecurity at today's organizations and points to key issues that need to be...

Sponsored by IBM

Bridging the Data Security Gap - Unified Data Protection For Four Key Data Environments

Data security presents a multidimensional challenge in today's complex IT environment. Multiple access paths and permission levels have resulted in a broad array of security threats and vulnerabilities. Traditional "fortress approaches" such as firewalls and IDS/IPS systems are no longer sufficient to defend against...

Sponsored by IBM

Ensuring Progress Toward Risk Management and Continuous Configuration Compliance

Soon after putting monitoring, configuration and remediation capabilities into place to help ensure compliance with IT security objectives, an organization will have questions. Are we secure? Where are we exposed? Are our initiatives working? Have we met our targets? What progress are we making toward achieving...