The recent Sony Hack Attack tells us that a data breach could inflict huge damage and embarassment to a company. Investigators have not ruled out the possibility of a disgruntled former employee behind the attack.
One way to prevent your employees from stealing the data of your company is to detect abnormal behavior from an employee behavior online and even offline computer behavior that is wandering outside line, which is somewhat unexpected.
This is called anomaly detection, and it can help prevent a data breach. But it is easier said than done, because this technology is relatively new. This is part of a kingdom called data science. Scientific data shows behavior that is not considered reasonable, which deviates somewhat of an established standard. This is the first step in the detection of a threat.
A fine balance must be struck so that detection is not going above and start-signaling a Benin behavior, but at the same time, do not miss the behavior that is committed by a fraudster. .. subtle changes from the norm.
companies do not want too many alerts, which can confuse what is really happening, desensitize the effect of the anomaly detection. There have been cases where an anomaly is detected (and possibly a data breach has occurred), but so many red flags have been raised that the threat was lost in the confusion, essentially the boy crying wolf.
When the abnormal action is detected, the next step is to inform the security team to investigate hands on. And there are two steps to alert the boss of the suspect user and stop altogether the user to have any access to the corporate system. The threat must be understood, with evidence gathered to present to the user.
Ideally, they want not only to detect real threats accurately (no false alarms) but also know how to react and manage threats. There must rhyme and reason, the structure and methodology of detecting anomalies :. A monitoring plan by
Anomalous behavior detection is a growing field of technology has come a long way, but it has a long way to go. It is far from perfect, but businesses desperately need. It is preventive medicine. It is worth the investment and continuous improvement. No company should be without it
Meanwhile, protect yourself from account recovery if an insider gets your data :.
- Monitor your accounts: The most effective way to prevent fraud is to review all statements carefully. This could mean a monthly paper statements or daily by statements online or even text alerts via your smartphone
- Protect your devices :. . "Microsoft Update" Run Windows Update, also known as It scans your computer on a regular basis for all necessary software and hardware updates. You can access Windows Update from the Control Panel. Make sure it is configured to download and update critical security patches automatically. Use comprehensive security software and keep it updated to avoid keyloggers and other malware
- Encrypt WiFi :. Your home network needs its own encryption that is built into your router. Set to WPA or WPA2. When you are on the free, open use public WiFi Hotspot Shield encrypts all your data as it travels over unencrypted WiFi
- strong passwords :. There is no such thing as a really secure password. There are passwords safer or less safe. Do not reuse passwords across multiple sites, use different passwords for each of your accounts, use at least eight characters to uppercase and lowercase letters, numbers, and if possible, symbols.
0 Komentar