When malware successfully infiltrates a network, it typically evolves through the cyber kill chain in an attempt to reach the final goal of data exfiltration, a ransom request and so on. During the lateral movement stage, when it tries to propagate the network and access resources, it generates specific types of network traffic. It is here that it becomes most vulnerable to detection. However, distinguishing potential threats from legitimate traffic requires the management and analysis of huge amounts of data often complicated by the high number of false positives.
DPI software, embedded in security solutions, is highly effective in accurately detecting network-based lateral movement, allowing rapid containment of attacks and remediation. The protocol information and metadata can be used to improve the results of user behavior analysis and machine learning, and to enable mitigation at each stage of the kill chain, improving the effectiveness of security solutions.
This white paper looks at attack techniques, the vulnerability of an attack during the lateral movement phase, the ability of DPI to detect infiltration during this phase and different techniques for doing so.
The EU sets out a "European" visihttps://t.co/yLLWE670UdyLLWE670Ud
25 April 2018 @ 17:51:40 UTC
Huawei gets US probe for suspected Iran naughtiness https://t.co/KfYj5sl4x0
25 April 2018 @ 16:50:27 UTC
Comcast gazumps Murdoch/Disney with 22 billion bid for Sky hhttps://t.co/UlNPKs1Pu9
25 April 2018 @ 16:50:25 UTC
AI is going to take over the world, just not the way you think https://t.co/niJLV2bQbG
25 April 2018 @ 12:46:22 UTC
Nokia takes 5G to the edge in Brooklyn https://t.co/RTheVg5DsF
25 April 2018 @ 11:45:14 UTC