Cyber Defense eMagazine June 2020 Edition

More documents

Recommendations

Info

Cleaning up “Dirty” Wi-Fi for Secure Work-from-Home Access By Matias Katz, CEO, Byos A great deal of emphasis has been placed on the use of VPNs to help provide safe, secure connectivity during this historic COVID-19 crisis and the massive move to working from home that has resulted. However, VPNs are not a definitive answer for secure connectivity; the major problem lies with the nature of home Wi-Fi, and with threat vectors that VPNs can’t address. VPNs encrypt data in transit, but they don’t isolate the device from the network. This means that corporate devices are still exposed to threats, even when using a VPN. The Risks of Home Wi-Fi Networks Wi-Fi networks, whether in public or private, are by their very nature dirty, and home Wi-Fi networks are no different. There are often 10 or more unmanaged devices connecting to the average home Wi-Fi network, such as personal laptops, cellphones, gaming consoles, and home IoT devices. Home internet usage compounds the risk because family members often unwittingly helping bad actors: gamers may download malicious Cyber Defense eMagazine –June 2020 Edition 58 Copyright © 2020, Cyber Defense Magazine. All rights reserved worldwide.
executables, teens are known to visit risky sites, and many family members don’t understand the risks of spam, unable to spot the difference between real and fake apps and emails. Each of these devices represents an entry point for attackers, and threat actors know this. They understand that WFH employees are unprotected by centralized enterprise security stacks. Once a bad actor has gained access to an edge device on the home network, they can go undetected, moving laterally across the network to the end goal: the company’s corporate devices and data. With the millions of additional points of remote access now in use, threat actors will be scanning more often, leading to more brute force attacks and more lateral movement. Security teams quickly need to find an alternative method for securing WFH Wi-Fi connections. Shoring Up Home Defenses: Work from Home (WFH) is a viable alternative for many companies, but unfortunately, IT teams weren’t ready for the inherent risks and implications that home Wi-Fi networks pose. Organizations have no visibility or control over these home Wi-Fi networks, and therefore cannot trust them. Home Wi-Fi hygiene can be improved by regularly changing passwords for Wi-Fi networks, changing the default router password, creating a guest network, and keeping router's firmware up to date. However, even with those steps, risks persist for organizations with WFH employees because enforcement is impossible, meaning the organization will never achieve full compliance. These steps also don’t solve the gap in protection left by VPNs Organizations need to find an easier, enforceable way for securing WFH employees. Extending Zero Trust Access to Any Remote Wi-Fi Connection The assumption that all networks are dirty is fundamental to any effective remote work security strategy such as Zero Trust. The best way to ensure that a home worker doesn’t corrupt the corporate network or otherwise expose key assets is to isolate their devices from their untrusted home Wi-Fi networks. In essence, this means micro-segmenting the remote device and creating a network of one. This step extends Zero Trust access to any remote Wi-Fi network connection. The Center for Internet Security's Wireless Access Controls recommends users “Create a separate wireless network for personal or untrusted devices. Enterprise access from this network should be treated as untrusted and filtered and audited accordingly.” That’s what endpoint micro-segmentation achieves: the employee’s device is physically isolated from the rest of the home Wi-Fi network, with plug and play USB hardware that delivers a “micro-segment of one.” This approach protects the individual’s device and the organization’s network from the various home Wi- Fi borne threats that security software doesn’t address. Cyber Defense eMagazine –June 2020 Edition 59 Copyright © 2020, Cyber Defense Magazine. All rights reserved worldwide.
Page 1 and 2:
Post-COVID-19 Cybersecurity Predict
Page 3 and 4:
Ditch Legacy Approaches - Reimagine
Page 5 and 6:
@MILIEFSKY From the Publisher… Ne
Page 7 and 8: Welcome to CDM’s June 2020 Issue
Page 9 and 10: Cyber Defense eMagazine -June 2020
Page 23 and 24: Post-COVID-19 Cybersecurity Predict
Page 25 and 26: Indeed, almost all organizations ar
Page 27 and 28: Being Inside the Physical Perimeter
Page 29 and 30: Cybersecurity Education and Practic
Page 31 and 32: International Federation for Inform
Page 33 and 34: The Stats on Cyber Security Percept
Page 35 and 36: deliberate around retaining mid to
Page 37 and 38: What is the Justification for This
Page 39 and 40: Mobile App Security in The Midst of
Page 41 and 42: Secure communication: It’s not th
Page 43 and 44: • The risk that critical informat
Page 45 and 46: containing sensitive information as
Page 47 and 48: Speed as an action When a security
Page 49 and 50: Having a positive workplace culture
Page 51 and 52: GDPR Working from Home Checklist in
Page 53 and 54: ● Companies must have taken Data
Page 55 and 56: Cybercriminals can also send phishi
Page 57: unauthorized access. Face recogniti
Page 61 and 62: Cyber Crime is Paying What the Evol
Page 63 and 64: With all of this doom and gloom fro
Page 65 and 66: Lifting Physical Security Measures
Page 67 and 68: a single opcode on the customer env
Page 69 and 70: Building a “Culture of Caring”
Page 71 and 72: clients and employees, guide them o
Page 73 and 74: To rapid response or not to rapid r
Page 75 and 76: In a highly competitive industry su
Page 77 and 78: Over the course of this journey, th
Page 79 and 80: The Devil Inside Insider Threats on
Page 81 and 82: The devil lives the cloud 39% consi
Page 83 and 84: 36% of organizations are looking at
Page 85 and 86: as cloud computing, big data, Inter
Page 87 and 88: Healthcare information systems mark
Page 89 and 90: What is the motive? First and forem
Page 91 and 92: In addition to that usage of cloud
Page 93 and 94: Steps to be taken to ensure the sec
Page 95 and 96: Women’s Health and Safety Amidst
Page 97 and 98: Network Monitoring Solutions and Th
Page 99 and 100: Emergence of smart cities and the s
Page 101 and 102: spreadsheet-based tracking and manu
Page 103 and 104: Introducing the Role of The Chief C
Page 105 and 106: About the Author Matt Cable is VP S
Page 107 and 108: Not only do IoT devices share some
Page 109 and 110:
How to Secure IT And OT In Industri
Page 111 and 112:
It’s clear that as these vulnerab
Page 113 and 114:
Biggest Obstacles Frustrating Cyber
Page 115 and 116:
You must be current Your knowledge
Page 117 and 118:
There are no perfect candidates Com
Page 119 and 120:
Mitigating Against Ransomware: Don
Page 121 and 122:
Securing data backups This brings u
Page 123 and 124:
Ransomware can be grouped into some
Page 125 and 126:
Jigsaw: it was inspired by the prot
Page 127 and 128:
About the Author Pedro Tavares is a
Page 129 and 130:
Deterministic or Accidental Multi-c
Page 131 and 132:
Cyber Operations Could Cause Trauma
Page 133 and 134:
policies. Apparently, there is stil
Page 135 and 136:
new collapse! Your entire IT asset
Page 137 and 138:
so many inexperienced staffs would
Page 139 and 140:
manager should get capable to termi
Page 141 and 142:
Hackers Are the Future of Cybersecu
Page 143 and 144:
Cyber Crimes Will Increase with Shi
Page 145 and 146:
Cyber Attacks at Sea: Blinding Wars
Page 147 and 148:
The Art of Hacking Navigation Syste
Page 149 and 150:
powered supercarriers. Therefore, a
Page 151 and 152:
national prosperity and power depen
Page 153 and 154:
Cyber Defense eMagazine -June 2020
Page 155 and 156:
Page 157 and 158:
Page 159 and 160:
Page 161 and 162:
Page 163 and 164:
Page 165 and 166:
Page 167 and 168:
You asked, and it’s finally here
Page 169 and 170:
TRILLIONS ARE AT STAKE No 1 INTERNA
Page 171 and 172:
8 Years in The Making… Thank You
Page 173 and 174:
Page 175 and 176:
Page 177:
i https://www.beazley.com/documents
show all

Cyber Defense eMagazine June 2020 Edition

Create successful ePaper yourself

Delete template?

Save as template?