Because Security Gives Us Freedom.
onShore Security CEO Stel Valavanis recently spoke to the Illinois Chamber of Commerce to discuss the importance of detection.
Protecting a network against a hacker used to mean that you had to be on your game 100%, but the hacker only needed to be right once to get in. With detection, however, the tables are turned, and they’re on your territory. Detection becomes your advantage, as they have to avoid making any mistakes and all you have to do is watch and wait.
The following is a press release by onShore Security. Click here to read the original release.
onShore Security announces a new machine learning cluster for their Panoptic Cyberdefense® platform. This cluster is a substantial step forward for onShore, as it increases their machine learning capabilities. These new capabilities include better-informed tuning, modeling larger data sets, generating more high-fidelity signals for analysis, and speeding up the process for analysts to normalize and match. These new capabilities mean that onShore clients will be seeing improved outcomes through better anomaly detection, a shorter window of time for zero-day detection, and quicker profiling of client data during on-boarding.
Anil Mudholkar, Manager of Product Development at onShore, says, “Machine learning in our Elastic environment has given us real visibility into data previously hidden and buried by volume and complexity. It acts kind of like a multiplier, allowing us to deploy many more anomaly detection models on much broader collections of much less ordered data than we could in the past.”
Stel Valavanis, onShore’s CEO, adds, “Machine Learning is finally providing some real value to cybersecurity analysis, so we jumped into the deep end with our expansion. Expect better outcomes from the modeling of data that wasn’t practical to do before. Expect some new offerings from us down the pike too!”
It’s safe to say at this point in the pandemic remote work is here to stay. Many companies are deciding to keep remote work and hybrid options in place for the foreseeable future, and millions of workers are demanding this kind of flexibility. Studies are showing that employees are maintaining, or even increasing productivity at home. Top reasons why include: fewer interruptions, quieter work environments, the lack of time and expenses associated with commuting, and more comfortable workspaces.
Now knowing that remote work will likely be here for the long haul, companies need to focus on building better security practices and maturing their security postures. To do this, companies need to do the following:
+Implement Zero Trust
Adopting zero trust can be crucial when securing your company’s network. Zero trust is the idea that anyone could be an attacker, so users must readily prove who they are. Each user must comply with identity verification when trying to access company resources, even while already logged in. Also, limiting users’ access within the network can help prevent an attacker from getting very far.
+Require MFA
Multi-factor authentication (MFA) is another critical resource for employees in a remote environment. It provides more secure login procedures when accessing company resources. MFA can divert potential security threats by having employees use authentication apps like Google Authenticator, which sends a time-sensitive code to the user’s app. This additional login step can help to guarantee that the person who is trying to access these resources is who they say they are.
+Utilize Tools That Secure Conversations
Working remotely has also created an opportunity for increased communication within the workplace. Processes can be documented in a way in which all parties that need information can easily find it. Previously some work may have been discussed in a face-to-face setting where things were agreed to or promised with no written record of the interaction. Now, online meetings can be recorded and saved to reference later. Software can be utilized for people to comment or create tangible tasks for themselves or others. This way of working eliminates the physical office as an attack vector, by moving important office communication to the secure network.
Overall, building a remote-first workplace is the safest way to go. Perhaps most surprisingly in terms of cybersecurity, the pandemic has taught us that remote work is not only secure but actually more secure than when we had been commuting to work every day.
onShore Security recently spoke with Bob Clark, host of the 808 Podcast, about the differences between MDR and XDR.
onShore Security relaunches vulnerability management services, massively expanding the previously offered service. Vulnerability management is necessary for organizations today and required by all cybersecurity compliance frameworks. This newly launched service goes way beyond standard Common Vulnerabilities and Exposure (CVE) scanning, ingesting policies, configurations, and full cloud assets with an automated continuous scan, all incorporated into our Elastic cluster for correlation. Unlike its competitors, onShore Security’s service includes a monthly analyst briefing. The briefing helps organizations make sense of the findings and provides insights that other providers overlook. On top of that, these features are fully integrated with our Elasticsearch-powered Panoptic SIEM®.
Steve Kent, CTO of onShore Security, said, “By correlating found vulnerabilities with system and network activity, we can prioritize critical patches within specific environments, and help reduce our client’s risk exposure – both in the immediate and long term.”
“This is a complete revamp of our CVMaaS offering,” Stel Valavanis, CEO of onShore Security adds. “Because vulnerability management, beyond just regular scanning, has risen to the level of a required GRC [Governance, Risk, Compliance] process for enterprise, we’ve added continuous scanning and full analytics via our Elastic Stack big data platform. Add to this much deeper inspection of AD, GPOs, Azure configurations, etc., and you get a whole other level of offering that begs for a new name.”
To find out more about this new service, go to www.onshore.com/continuous-vulnerability-management/.