Imperva released its April Hacker Intelligence Initiative (HII) report, “The Non-Advanced Persistent Threat.” The report presents an in-depth view of how techniques attributed to Advanced Persistent Threats (APTs) require only basic technical skills. The report exposes simple ways that attackers are obtaining access privileges and accessing protected data by targeting weaknesses of the Microsoft NTLM protocol.
• Data breaches commonly associated with APT can be achieved by simple means, using basic technical skills.
• Built-in Windows functionality, combined with “innocent” file shares and SharePoint sites, can provide attackers with an entry-point to accessing an organization’s most critical data.
• A mitigation strategy should be implemented that focuses on monitoring the authentication process itself and data access patterns, in addition to tailoring authorization mechanisms for increased security.
This entry was posted in Product Security Assurance and tagged HII, Imperva on May 13, 2014 by admin.
1. New and unique to SecureSphere 10.5 the ability to protect against access to SharePoint files in real-time based on business policy.
3. SecureSphere WAF for AWS is now shipping with SecureSphere 10.5.
4. Dramatically Lowers TCO in Database Security- up to 90% fewer virtual appliances, reduce labour costs by up to 70% and reduces infrastructure costs by up to 90%.
This entry was posted in Product Security Assurance and tagged Imperva, SecureSphere on May 13, 2014 by admin.
This entry was posted in Due Diligence, Product Security Assurance, SG LABS and tagged due diligence, Product Assurance, Technical Risk Assessments on May 10, 2012 by securusnews.