Stonesoft's 2012 Security Predictions
(Thomson Reuters ONE) -
Stonesoft predicts hackers will continue to become more sophisticated
Helsinki, Finland - December 21, 2011 - As the year 2011 draws to a close, it is
time for Joona Airamo, Chief Information Security Officer at Stonesoft, to gaze
into his crystal ball and predict on what 2012 might have set in store for us.
Shocking security incidents in 2011?
None of the security incidents in 2011 were technically shocking. However, what
was surprising was the fact that, at last organisations are actually publically
admitting that there is a problem/breach. However, I still feel we are only at
the tip of the iceberg, in terms of how many breaches occur, and as such, are
only hearing about a small fraction of these breaches.
What will be new in 2012?
In 2012, I believe that we will hear a lot more about Advanced Persistent
Threats (APTs) and advanced malware. Using the term "APT" alone, gives little or
no information as to what the problem is/was and I believe further details will
be given on these types of attacks. Both the media and vendors will begin to
communicate more information about the actual type of hacking method, such as
Advanced Evasion Techniques (AETs), another topic which I am sure we will hear
lots more about in 2012. I also feel that DDoS (Distributed Denial of Service)
attacks will continue to be a major problem. Furthermore, I believe we will hear
a lot more about "state on state" hacking.
Hackers to become even more sophisticated
Without a doubt, hackers will continue to become more sophisticated and more
elusive and thus even more difficult to capture. What really concerns me is not
what we hear but what we do NOT hear about; my concerns are the intellectual
property and government information that may be leaking to rouge states and
organisations without our knowledge.
Police to tackle cybercrime
Police are taking cybercrime, specifically the topic of hacking, more seriously.
In 2012, I hope that we will see more criminal prosecutions. However, what we
won't see are the key prosecutions until we have full cooperation from the rogue
states that help harbour the key hacking syndicates.
The 'big' issue of 2012
I wouldn't pick any particular virus or malware to be a 'big' problem for 2012.
However, the delivery techniques, such as AETs, will pose a big threat. Until
organisations patch correctly and update AV technologies regularly, I feel that
not only will we have to worry about the new zero-day viruses but also old
viruses such as Conficker etc., it is imperative organisations take a "belt and
braces" approach with antivirus, using good patch management, but also IPS
technologies to catch what they can't patch against.
Certificate Authority Trust Problems
Following the collapse of DigiNotar CA, I predict we will witness an increasing
amount of trust problems within the whole certificate authority industry. Not
only will the number of breaches increase, with the man-in-the-middle attacks
and malicious software using signatures of real CAs, but the discussions about
the whole future of the certificate roles will be abundant. We may also see more
CA bankruptcies in 2012. Furthermore, many certificate attacks that have been
made against PC browsers during the past decade will now be targeted against
mobile browsers, showing how little the vendors have learned from the errors
that have been made in the past.
Life-Threatening Security Incidents
I would be glad to be wrong with my last prediction: The year 2012 may be the
first when we see lives lost due to security incidents. Whether that is the
result of attacks against SCADA systems or through vulnerabilities in hospital's
automated drug dispensers shall be seen. The security solutions and procedures
used to protect these systems require much more attention than they have
received so far.
Contact:
For more information, please contact:
Joona Airamo
Chief Information Security Officer
Stonesoft Corporation
Tel. +358 9 476 711
E-mail: joona.airamo(AT)stonesoft.com
About Stonesoft
Stonesoft Corporation (NASDAQ OMX: SFT1V) is an innovative provider of
integrated network security solutions to secure the information flow of
distributed organizations. Stonesoft customers include enterprises with growing
business needs requiring advanced network security and always-on business
connectivity.
Stonesoft(TM) Secure Connectivity Solution unifies firewall, VPN, IPS and SSL
VPN blending network security, end-to-end availability and award-winning load
balancing into a unified and centrally managed system. The key benefits of the
Stonesoft solution include low TCO, excellent price-performance ratio and high
ROI. The StonesoftVirtual Security Solutions protect the network and ensure
business continuity in both virtual and physical network environments.
Stonesoft Management Center provides unified management for Stonesoft Firewall
with VPN, IPS and SSL VPN. Stonesoft Firewall and IPS work together to provide
intelligent defense all over the enterprise network while Stonesoft SSL VPN
provides enhanced security for mobile and remote use.
Founded in 1990, Stonesoft Corporation is a global company with corporate
headquarters in Helsinki, Finland and Americas headquarters in Atlanta, Georgia.
For more information, visit www.stonesoft.com, www.antievasion.com and the
corporate blog http://stoneblog.stonesoft.com.
This announcement is distributed by Thomson Reuters on behalf of
Thomson Reuters clients. The owner of this announcement warrants that:
(i) the releases contained herein are protected by copyright and
other applicable laws; and
(ii) they are solely responsible for the content, accuracy and
originality of the information contained therein.
Source: Stonesoft Oyj via Thomson Reuters ONE
[HUG#1573099]
Unternehmensinformation / Kurzprofil:
Datum: 21.12.2011 - 12:00 Uhr
Sprache: Deutsch
News-ID 99171
Anzahl Zeichen: 6535
contact information:
Town:
Helsinki
Kategorie:
Business News
Diese Pressemitteilung wurde bisher 223 mal aufgerufen.
Die Pressemitteilung mit dem Titel:
"Stonesoft's 2012 Security Predictions"
steht unter der journalistisch-redaktionellen Verantwortung von
Stonesoft Oyj (Nachricht senden)
Beachten Sie bitte die weiteren Informationen zum Haftungsauschluß (gemäß TMG - TeleMedianGesetz) und dem Datenschutz (gemäß der DSGVO).
