Page 605 - White Papers - bank information security

Breaches Happen: Be Prepared - A SANS Analyst White Paper

Attackers are leaving no stone unturned, prying into web applications, operating systems and even deeper in the hardware. They're taking advantage of conventional endpoints and mobile devices, slipping past and through network security, and even taking advantage of the human element operating the devices. In this...

A Proactive Approach to Protecting Corporate Email

Encryption makes the contents of email, both the message text and any attachments, indecipherable to unauthorized individuals. Encryption can be used in transit, so that if an unauthorized individual outside the company intercepts an email while it moves across the Internet it cannot be read. Encryption can...

Understanding the Enemy: Cybersecurity in the Oil and Gas Industry

There is no single adversary and no single threat to the information technology (IT) and operational technology (OT) infrastructures of the oil and gas industry. Although the differing motives- notoriety, money, business advantage or military superiority- to an extent determine the targets of each category, the...

The Cybersecurity Maturity Model for Oil and Gas

A maturity model is a framework that allows an organization to assess the rigor of its security practices and processes according to industry best practices. This can help create a more robust security footing over time, reducing the number of successful cyber-attacks and enabling a quicker return to normal operations...

5 Steps to Building a Security Intelligence Center

Despite taking significant steps to strengthen their cybersecurity, banks and other financial services (FS) organizations will continue to be challenged by the speed of technological change and the sophisticated nature of cyber threats. Larger FS organizations who want to stay ahead of cyber criminals and reduce...

Web Application Attack Vectors: Delving into XXS and Shellshock Activity

In 2015, there were nine common web application attack vectors. They represent a cross section of many of the most common categories seen in industry vulnerability lists. The goal of this report is not to validate any one of the vulnerability lists, but instead to look at some of the characteristics of these...

5 Things to Look for in a Cloud Provider When it Comes to Security

Cloud computing is changing the way enterprises do business. Technology has long been a facilitator for business processes, so cloud computing is not unusual in that regard. Few technologies, however, have been adapted as rapidly or have had the wide-reaching ripple effects of cloud computing. Security is a concern...

6 Activities for an Effective Data Breach Preparedness Plan

This year more companies have a baseline data breach response plan in place. Since 2013, the percentage of organizations that reported having a data breach response plan increased from 61 percent to 81 percent. However, data breach response plans are often missing crucial steps. While it is encouraging to...

Infographic: How You Connect to the Cloud Matters

Cloud is a key enabler of improved business performance. Better and more consistent application performance and availability, greater flexibility and business agility, and lower costs can all be found through with the right connection to the cloud. Download this infographic to discover the key components and...

Ransom-based Attacks: Choosing the Right Mitigation Strategy

For years, organizations have been threatened by DDoS attacks on several fronts, ranging from volumetric attacks to application-level and DNS strikes. Now come ransom-based attacks. In this interview with Trey Guinn - head of solution engineering at CloudFlare - he discusses the importance of matching your DDoS...

PSD2 Compliance: Are You Prepared?

The European Commission's Payment Services Directive II, or PSD2, stands to revolutionize the payment industry. In addition to driving innovation and competition, the new regulation calls for a new generation of customer security. As the volume of financial transactions in remote channels increase, so does the...

Improve Fraud Investigation with Web Behavior Analytics

Cyber security practitioners commonly lament that reducing consumer fraud would be a whole lot more effective if only the products could understand the business better. This is especially true with websites, the primary interface for businesses with its customers. Beyond the login, it is important to have visibility...

Healthcare: Where Are The Threats and How Are They Mitigated?

To know where healthcare IT security is going - and what it needs to protect in 2017 and beyond - it's instructive to take a look at where we've been. In general, compromised credentials remain the leading source of intrusion across industries. Specific to healthcare, the top three sources of unauthorized data...

Threat Intelligence Integration: From Source to Secure

Threat intelligence can be a useful addition to your security toolkit. It can provide your analysts with information and context they would not have otherwise. There are many factors to consider, including where to obtain the intelligence, how to collect it, how to integrate it, and how much to...