Statistically effective protection against APT attacks (paper)

MrBrian · Jan 15, 2014

From http://www.virusbtn.com/conference/vb2013/abstracts/Niemela.xml:

There are a lot of different hardening and best practice guides available which tell how operating system and applications should be hardened against attacks.

However, as anyone who has worked with corporate security knows, implementing hardening at corporate level is a rather expensive operation - and thus there is significant resistance to applying any measures that fall outside of standards and what is already known to work.

This research paper investigates different exploits used during 2012 and early 2013 and identifies which defensive measures would have been effective in blocking them, thus giving guidance as to which defensive measures should be applied first as they provide as wide a coverage as possible.
Click to expand...

Direct pdf: hxxp://www.virusbtn.com/pdf/conference_slides/2013/Niemela-VB2013.pdf

Sandboxie is mentioned. So is EMET.

Minimalist · Jan 15, 2014

Interesting paper. As usually, layered security is most effective.

Conclusions:
• Most important thing to do is not to rely on a single security layer.
Click to expand...

Regards, hqsec

Log in or Sign up

Statistically effective protection against APT attacks (paper)

MrBrian Registered Member

Minimalist Registered Member

Log in or Sign up

Statistically effective protection against APT attacks (paper)

MrBrian Registered Member

Minimalist Registered Member

Useful Searches