Dr. Frederick Chang, former NSA Director of Research observed:
… cybersecurity is fundamentally about an adversarial engagement. Humans must defend machines that are attacked by other humans using machines.
A recent blog posting by Cyveillance demonstrates this concept. In Sophisticated DDoS Botnets Bypass Defenses, Phil Annibale, Manager, Cyber Intelligence Division, writes about Dirt Jumper, a new Distributed Denial Of Service (DDoS) tool. Dirt Jumper is a DIY tool that is available for as little as $150 on the black market. The humans who developed Dirt Jumper examined the defenses that human defenders deploy to defend against DDoS. The Dirt Jumper developers then engineered Dirt Jumper to turn the DDoS defenses against the defenders.
Spearphishing is a direct human-to-human engagement of cyberspace. In spearphishing the attacker attacks the systems through the human defenders by sending highly targeted emails to the defenders. These highly targeted emails deceive the defender into compromising his system. The FBI calls spearphishing the #1 attack method.
Humans’ email decisions can compromise security. IT needs to help employees make better email processing decisions. That is where SP Guard comes into play. Using SP Guard, IT can determine a list of trusted senders and provide this information to staff in a simple and highly effective manner.
You can contact us at 408-727-6342,ext 3 or use our online form.