We live in a world that is networked together, where companies rely on networked systems and their data is stored in the cloud. The year 2018 will bring more connectivity, digital transformation initiatives, and data to companies, along with a number of new cybersecurity threats and landscape changes making cybersecurity one of the most crucial issues that need to be addressed in the present scenario.
Let’s just take a quick look to what we witnessed in 2017. Last year, incidents like WannaCry and Netya illustrate how our adversaries are becoming more and more creative in the way they architect their attacks. But, in the end, it’s more about who has not been breached vs who is the latest.
The world of cybersecurity witnessed changes frequently with securityexperts trying to gain know-how about what is happening and how they can mitigate it. The universal fact is that we have to accept that we can’t protect everything, but we can find a way to control what matters the most.
1. Shift in focus from protection to prevention
An ounce of prevention is worth a pound of cure, so the saying goes. Historically IT organizations focused heavily on perimeter network security to protect their networks from cyberattacks. Protection at the perimeter edge works well for data moving toward the protected assets. However, recent breaches have shown that perimeter security alone isn’t sufficient to combat advanced persistent threats. By focusing on more proactive and offensive approaches, rather than strictly defensive, that help detect and respond to possible threats rather than react, it is possible to stop threats before they expose the organization to risk. Your security setup will need to focus on detection, response, and remediation. That’s where the cybersecurityfight is today. In the future it will most likely move to prediction of what’s coming before anything happens.
2. More IoT attacks will be motivated by financial gain than chaos
It’s only a matter of time before every house and company is connected through the Internet of Things (IoT). We predict that as many as 1 million new connections per hour will be added to the internet by 2020 expanding the attack surface and making IoT vulnerabilities more critical and more dangerous. IoT will move from being seen as a massive security risk in the enterprise, to a critical part of an Enterprise’s securityposture. To meet the security challenges of the IoT—an attack surface that is both growing rapidly and becoming increasingly difficult to monitor and manage, a proactive and dynamic approach to security, and a layered defense strategy, are the keys to protecting IoT devices from infection and attack—or at least, mitigating the impact when some are inevitably compromised by adversaries.
Unfortunately, ransomware attacks will almost certainly become more pervasive and varied during 2018. Some attacks will adhere to the brute-force model of infect, lock and extort, while others will be more sophisticated. Evolutions in ransomware, such as the growth of Ransomware-as-a-Service, will make it easier for criminals, regardless of skill set, to carry out these attacks. It turns out that ransomware generated a lot of cash for criminals, an estimated $1 billion in 2016. In the future, ransomware will not merely target individual users, but also target entire networks. Given that ransomware can penetrate organizations in multiple ways, reducing the risk of ransomware infections requires a portfolio-based approach, rather than a single product. Often, victims of ransomware choose to pay the ransom, because they have no other means by which to restore their systems and data. Don’t pay the ransom. Create strong plans for system and data recovery as soon as possible, including backing up all systems daily.
4. Many enterprises will give priority to cloud security
More applications and servers are moving to the cloud to take advantage of cost savings, scalability, and accessibility. As a result of this, cloud environments will be a potential target of security breaches. Cloud is a journey and cloud security must be a driver, not an afterthought. According to the Cisco 2017 Midyear Cybersecurity Report hackers recognise that they can infiltrate connected systems faster by breaching cloud systems and we expect more problems related to cloud security arise in 2018. Cloud computing security is best executed in a phased approach matching the value of the cloud workload to the bad guys’ motivation. When it comes to cloud, security experts will need to decide who they can trust and who they can’t and enterprises will need to develop security guidelines for private and public cloud use and utilize a cloud decision model to apply limitations to cloud risks.