When malware successfully infiltrates a network, it typically evolves through the cyber kill chain in an attempt to reach the final goal of data exfiltration, a ransom request and so on. During the lateral movement stage, when it tries to propagate the network and access resources, it generates specific types of network traffic. It is here that it becomes most vulnerable to detection. However, distinguishing potential threats from legitimate traffic requires the management and analysis of huge amounts of data often complicated by the high number of false positives.
DPI software, embedded in security solutions, is highly effective in accurately detecting network-based lateral movement, allowing rapid containment of attacks and remediation. The protocol information and metadata can be used to improve the results of user behavior analysis and machine learning, and to enable mitigation at each stage of the kill chain, improving the effectiveness of security solutions.
This white paper looks at attack techniques, the vulnerability of an attack during the lateral movement phase, the ability of DPI to detect infiltration during this phase and different techniques for doing so.
Click here to read this whitepaper.
How rApp ecosystems drive network optimization, service monetization and user experience. The ability to intelligen hhttps://t.co/Dv1cKvXsCw
20 May 2022 @ 14:20:42 UTC
Canada belatedly bans Chinese vendors from its 4G and 5G networks. US neighbour Canada is the last of the 'Five Eye hhttps://t.co/72cQtsKn1p
20 May 2022 @ 12:20:25 UTC
Inmarsat tunes up Orchestra to tackle network congestion. UK-based satellite firm Inmarsat has completed trials of hhttps://t.co/zz0LDWsxDe
20 May 2022 @ 10:20:07 UTC