Page 7 - White Papers in Training & Security Leadership > Security Awareness Programs & Computer-Based Training

Making the Case for Continuous Authentication: Why 2FA is Not Secure Enough to Combat Online Fraud

Most organizations that enable users to perform online transactions have implemented security measures to address fraud. Currently, one of the most common safeguards used in a wide array of products/services is two-factor authentication (2FA). In recent years, 2FA has become employed by global tech leaders like...

Fraud in The Mobile Era: A Hacker's Delight

As mobile devices eclipse computers and laptops as the preferred method of going online, fraudsters have followed users, porting their modus operandi -account takeover, social engineering, and malware based remote control attacks - to the mobile arena. Thus, hackers have many more opportunities to perpetrate fraud and...

Oh, RATs! Current Fraud Detection Doesn't Catch Remote Access Trojans

Many IT professionals use remote administration tools to troubleshoot and fix PC problems remotely, just as if they were sitting behind the keyboard themselves. But these tools are also used for different purposes today. Both nation states and hacktivists use modified these tools, creating Remote Access Trojan's...

A Guide to Surviving a Cyber Breach

The importance of data security is no secret, so you've thought ahead and taken steps to safeguard sensitive information. But then it happens; you discover a cyber breach. It's no time to panic. What steps do you follow in this time of crisis? Your first step should be to consult your incident response plan (IRP)....

The DIY Guide to PCI: Implementing PCI Compliance in the Cloud

Looking to go at it alone when securing your public cloud environment? Without a clear understanding of its nuances, even the most state-of-the-art solution won't make it past an annual compliance audit. This detailed guide is for those pursuing PCI DSS compliance on their DIY cloud security environment. Download...

Testing the Top 9 Market Leaders in Breach Detection: How They Measure Up

As the New Year unfolds, finding a breach prevention provider will be critical in order to safeguard an organization's assets. NSS Labs subjected nine cybersecurity market leaders to comprehensive, rigorous testing to determine how well each product handled current advanced threats and attack methods. All vendor...

Top 11 Automated Malware Analysis Providers Ranked by Forrester

Despite significant investments in the signature-based defenses of today's network, email and endpoint security solutions, since 2010, these solutions have been ineffective against the sheer volume of evolving malware. Security and risk professionals have turned to automated malware analysis (AMA) for help. These...

Cybercrime Projected to Exceed $2 Billion by 2019: What You Need to Know

As defense stategies become stronger year after year, it seems as though the prevalence of malware is growing proportionately, projected to exceed $2 trillion by 2019 - a four-fold increase in the cost of security breaches over 2015.Posing a threat to every industry, profession, and company, malware not only...

Aim Small, Miss Small: Producing a World-Class Threat Intelligence Capability

Building a threat intelligence team from the ground up can be riddled with political inertia. This whitepaper details how to merge operational and strategic capabilities to automate and analyze external attack data to identify current and future security threats. Discover the six core competencies that comprise a...

Sponsored by NSS Labs

The Encrypted Web: Be Wary of What Travels Inside TLS/SSL

Encrypted web communication routinely bypasses enterprise security controls. Left unscanned, these channels are perfect vehicles for hiding infection, command & control, and data exfiltration. The malicious use of encryption is growing at an alarming rate, from 104 in 2014, to 13,542 as of mid-2016, according to...

Sponsored by NSS Labs

Global Adoption of Encryption; Is it Inevitable?

Encryption keeps data confidential, but we're left unprotected from threats that may be embedded in the data. In fact, encryption actually conceals these threats and adds network performance burdens for organizations that wish to inspect encrypted traffic. The first in a series on encryption, this technical brief...

Sponsored by NSS Labs

Breach Detection Systems: Product Selection Guide

Breach detection systems (BDS) are security products that offer timely detection of threats. When evaluating these products, customers must take into account traditional factors, such as security effectiveness, deployment options, performance and administrative capabilities. Since cybercriminals prize new threats...

Sponsored by NSS Labs

Advanced Endpoint Protection: Strategic Guidance When Replacing Antivirus

Replacing traditional antivirus (AV) with advanced endpoint protection (AEP) products may not be the best decision for every organization. If you do decide to switch, determining which AEP product is the best fit can be challenging as claims of capabilities and value differ between products. This guide provides...

Sponsored by NSS Labs

When Should Your Enterprise Move to Advanced Endpoint Protection?

Advanced endpoint protection (AEP) products are still relatively immature, which makes it difficult to decide whether to replace or augment existing endpoint protection (EPP). Adding to the difficulty in assessing AEP products is the fact that measuring some of their features can be complicated. AEP products are...

Cyber Threat Hunting Season is Now Open; Detect Attackers Already Inside Your Network

Determined cyber attackers invade even the best security defenses with the same stealth as wolves creeping up on sheep; if they make themselves known before you spot them, it's too late. Attackers only need to successfully invade once to cause serious damage, but preventing them all is simply not possible. By...