The year that will be?
As we enter 2017 with renewed vigour and enthusiasm, let's take a step back and consider what the year 2017 will bring (in relation to Cyber-Security). Immediately, we have Professor Richard Benham, chairman of the National Cyber Management Centre, giving a dire warning: "A major bank will fail as a result of a cyber-attack in 2017 leading to a loss of confidence and a run on that bank."
As we increase in the number of devices (Internet of Things), we increase the amount of devices (attack surface) which could be managed for a DDoS attack, by 2020 it is forecasted that there will be 34 billion connect devices. Additionally, as we expand our Artificial Intelligent capability, we enable the ability to generate a smart system that can craft contextually aware attacks to the individual (resonating with the target and therefore more likely to fall victim).
There isn't a way to escape the cyber-security (problem) of 2017, rather we must adopt, collaborate and enhance capability within some key principles.
- The efforts to improve cybersecurity must properly reflect the borderless, interconnected, and global nature of today's cyber environment
- Efforts to improve cybersecurity must be based on risk management
- Efforts to improve must focus on awareness
- Patch vulnerable systems and software
- Protect privileged accounts