Page 12 - White Papers in Next-Generation Technologies & Secure Development

Five Stages to Create a Closed-Loop Security Process with MITRE ATT&CK

Finding a security framework comprehensive enough to serve the tactical needs of security operations teams can be difficult. MITRE ATT&CK is the first framework to meet these needs and provide a basis for real-time security operations improvements.

SANS Review: Investigate East-West Attacks on Critical Assets with Network Traffic Analysis

Internal threat activities (privilege escalation, lateral movement, etc.) are difficult if not impossible to detect using endpoint and perimeter protection alone. ExtraHop Reveal(x) provides network traffic analysis that helps security analysts efficiently detect and investigate these late-stage threats, as well as...

Real-Time Transaction Monitoring: Time to get real?

Disruption continues to reshape the financial services industry. Time-proven products and services have been rendered obsolete in the blink of an eye, rewriting the banking landscape and leaving it scattered with new challenges.

Definitive Guide to Next Gen Fraud Prevention

The digitalization of business processes and advent of mobile computing have given rise to the next generation of fraud. Cyber-criminals have a variety of tools and techniques - as well as opportunities to steal money and services. Companies need a new approach to fraud prevention - one that stops fraud early and...

Penn State Medical Center Leverages FireEye Integrated Solutions and Threat Intelligence

Matthew Snyder, chief information security officer at Hershey Medical Center, observed, "A single data compromise can negate the work that a researcher has performed over a 20-to-30 year span. This is just one of a multitude of reasons why cyber security is a mission-critical imperative for us."

Are You APT-Ready? The Role of Breach and Attack Simulation

With the volume of data breaches and cyberattacks continuing to rise, organizations are increasingly relying on Breach and Attack Simulation tools to provide more consistent and automated validation of controls, says Cymulate's Tim Ager. Download this eBook to learn more about: The state of data breaches and...

Adapting to the New Reality of Evolving Cloud Threats of 2019

Cloud computing has inherited security advantages when properly deployed, but the reality is that any fast-growing platform is bound to see a proportionate increase in incidents. Organizations are finding that they have to realign - and in some cases, reinvent - their security programs for this new reality. This...

The New Threat Intelligence - How Automated Static Analysis Finds the Destructive Objects Existing Solutions Miss

Malware continues to increase in sophistication and routinely evades organizations' cyber defenses. Organizations must develop new strategies for combating malware that evades their detection.

2018 Annual Threat Report

This report provides a snapshot of events investigated by the eSentire Security Operations Center in 2018. With the exponential growth of cyber threats being a common theme in 2018, 2019 will present significant challenges for security teams looking to stay ahead of threats. The 2018 Annual Threat Report provides...

Optimizing OT Security Through Automatic Attacker Evaluation

Estimating potential cyber intruder activities and what attack path they may take to access our critical assets is important in understanding how we prioritize our security measures. This whitepaper focuses on an optimized method for automatically assessing those attack routes taking into account the challenges found...

Meet Your Attacker: Taxonomy & Analysis of a SCADA Attacker

Cyber incident reporting in SCADA systems gives us invaluable insight into the burgeoning threat landscape and helps the security community understand what threats we face, thus enabling teams to establish a robust defense strategy. However, the increase in the number of reports, each with different analysis...

Sponsored by Tenable

Predictive Prioritization: How to Focus on the Vulnerabilities That Matter Most

Overwhelmed by the number of vulnerabilities your team faces? Uncertain which cyber threats pose the greatest risk to your business? You're not alone. Cybersecurity leaders have been grappling with these challenges for years - and the problem keeps getting worse. On average, enterprises find 870 vulnerabilities per...

Sponsored by Tenable

Predictive Prioritization: Data Science Lets You Focus on the 3% of Vulnerabilities Likely to Be Exploited

In 2017, 15,038 new CVEs were published, up from 9,837 in 2016. Last year, 16,500 new CVEs were disclosed. With vulnerabilities growing year after year, patching every potential threat to your business is a futile exercise. The need to prioritize is clear, but where to start, especially when CVSS categorizes the...

Sponsored by Tenable

Help America Vote Act (HAVA) Funding and Critical Infrastructure Security

In 2017 the US Department of Homeland Security (DHS) added Election Infrastructure as a cyber-resiliency Critical Infrastructure Subsector under the Presidential Policy Directive/PPD 21 (2013) and raised the profile of elections security substantially. By doing this, DHS empowered states to integrate elections...

Sponsored by Tenable

Analysis and Compliance to Meet CJIS and FTI Security Standards

Most organizations face a constantly changing compliance landscape, and often must adhere to multiple regulatory compliance standards, each with their own set of requirements. Tenable.sc can help these organizations fulfill multiple standards' requirements for meeting and demonstrating compliance, can help save time...