{"id":35494,"date":"2019-11-18T09:45:10","date_gmt":"2019-11-18T09:45:10","guid":{"rendered":"https:\/\/www.intelligentcio.com\/eu\/2019\/11\/18\/sans-institute-identifies-security-blind-spots-as-organisations-tackle-advanced-threats\/"},"modified":"2019-11-18T09:45:14","modified_gmt":"2019-11-18T09:45:14","slug":"sans-institute-identifies-security-blind-spots-as-organisations-tackle-advanced-threats","status":"publish","type":"post","link":"https:\/\/www.intelligentcio.com\/eu\/2019\/11\/18\/sans-institute-identifies-security-blind-spots-as-organisations-tackle-advanced-threats\/","title":{"rendered":"SANS Institute identifies security blind spots as organisations tackle advanced threats"},"content":{"rendered":"\n<p>As the quantity\nand frequency of advanced threats continue to accelerate, a SANS Institute\nsurvey entitled, <em>Effectively\nAddressing Advanced Threats<\/em> has found that a continued lack of visibility and the\ncomplexity of managing data across both on-premise and cloud infrastructures is\nfurther complicating the battle against such threats. <\/p>\n\n\n\n<p>Of\nthe organisations surveyed, 74% have a blend of on-premise and cloud\nenvironments, in many cases using multiple cloud providers.<\/p>\n\n\n\n<p>The survey, of 366 security and IT professionals across various industries worldwide, provides insights into how organisations deal with advanced threats and highlights key technology challenges and limitations that organisations are self-identifying in their efforts to detect and respond to highly sophisticated cyberattacks.\u00a0<br> <br>According to\u00a0the findings, 48% of respondents said\u00a0they lack visibility into what data and where data is being processed within the organisation. Access\u00a0to sensitive data by insecure, unmanaged devices or individuals as well as a lack of geolocation information of the data were also identified as concerning blind spots.<br> <br> When asked about the major barriers to detecting and remediating advanced threats, nearly half of the respondents emphasised an\u00a0inability to understand or baseline normal user behaviour, with\u00a0shortages in funding and resources coming in as a close second. Conversely, account or credential hijacking and privileged user abuse topped the list of major threats and risks realised within respondents&#8217; environments.<br> <br> The survey, which was sponsored by IBM Security, also looked at the challenges that respondents face within\u00a0their cloud infrastructures, and found that a lack of visibility remains at the core of their limitations. When it comes to major gaps in the security analytics of their cloud-based infrastructure, survey found:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>More&nbsp;than half of\nthe respondents have concerns&nbsp;about integrating data with analytics tools\nand combining data across cloud environments&nbsp;<\/li><li>Nearly 55%\nstruggle&nbsp;with a lack of integration between current security analytics\ntools and cloud infrastructure&nbsp;<\/li><li>Approximately 43% face\na lack of threat insights targeting cloud environments.&nbsp;<\/li><\/ul>\n\n\n\n<p>Endpoint alerts and network access\ndevices are the top sources of incident information, providing alerts and\ninvestigation support, respectively. <\/p>\n\n\n\n<p>&#8220;Clearly, visibility of data, users, devices and the cloud environment are playing a critical role in how and whether security professionals can fight advanced threats effectively,&#8221; said SANS instructor and survey author\u00a0Matt Bromiley. <\/p>\n\n\n\n<p>&#8220;While many tools such as security analytics are available to the security community, implementing them is dependent on understanding the organisation&#8217;s environment.&#8221;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>As the quantity and frequency of advanced threats continue to accelerate, a SANS Institute survey entitled, Effectively Addressing Advanced Threats has found that a continued lack of visibility and the complexity of managing data across both on-premise and cloud infrastructures is further complicating the battle against such threats. Of the organisations surveyed, 74% have a [&hellip;]<\/p>\n","protected":false},"author":25,"featured_media":35495,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[57,6617,93],"tags":[13904,183,8477,13905,7867],"class_list":["post-35494","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-enterprise-security","category-research","category-top-stories","tag-advanced-threats","tag-cyberattacks","tag-ibm-security","tag-matt-bromiley","tag-sans-institute"],"acf":[],"publishpress_future_workflow_manual_trigger":{"enabledWorkflows":[]},"_links":{"self":[{"href":"https:\/\/www.intelligentcio.com\/eu\/wp-json\/wp\/v2\/posts\/35494","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.intelligentcio.com\/eu\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.intelligentcio.com\/eu\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.intelligentcio.com\/eu\/wp-json\/wp\/v2\/users\/25"}],"replies":[{"embeddable":true,"href":"https:\/\/www.intelligentcio.com\/eu\/wp-json\/wp\/v2\/comments?post=35494"}],"version-history":[{"count":0,"href":"https:\/\/www.intelligentcio.com\/eu\/wp-json\/wp\/v2\/posts\/35494\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.intelligentcio.com\/eu\/wp-json\/wp\/v2\/media\/35495"}],"wp:attachment":[{"href":"https:\/\/www.intelligentcio.com\/eu\/wp-json\/wp\/v2\/media?parent=35494"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.intelligentcio.com\/eu\/wp-json\/wp\/v2\/categories?post=35494"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.intelligentcio.com\/eu\/wp-json\/wp\/v2\/tags?post=35494"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}