When malware successfully infiltrates a network, it typically evolves through the cyber kill chain in an attempt to reach the final goal of data exfiltration, a ransom request and so on. During the lateral movement stage, when it tries to propagate the network and access resources, it generates specific types of network traffic. It is here that it becomes most vulnerable to detection. However, distinguishing potential threats from legitimate traffic requires the management and analysis of huge amounts of data often complicated by the high number of false positives.
DPI software, embedded in security solutions, is highly effective in accurately detecting network-based lateral movement, allowing rapid containment of attacks and remediation. The protocol information and metadata can be used to improve the results of user behavior analysis and machine learning, and to enable mitigation at each stage of the kill chain, improving the effectiveness of security solutions.
This white paper looks at attack techniques, the vulnerability of an attack during the lateral movement phase, the ability of DPI to detect infiltration during this phase and different techniques for doing so.
Click here to read this whitepaper.
The European Union is reportedly looking at creating a fund to help with the cost of fibre and 5G build-out, with b hhttps://t.co/dLHjmeGNsS
31 January 2023 @ 10:30:49 UTC
Rogers and Shaw have once again moved back the deadline for their proposed merger, having failed to secure the appr hhttps://t.co/u2fUXmBfKa
31 January 2023 @ 10:30:29 UTC
Canadian incumbent Bell Canada has become the latest telco to invest in budding Open RAN software supplier Cohere T hhttps://t.co/wkcFYKJ9fu
31 January 2023 @ 10:30:10 UTC