Want Better Cloud Security? Make Your Detections Multi-Dimensional

omeronsecurity.com · 1,740 words · saved by 1 readers

It took decades for the security community to get the upper hand against attacks on endpoints, and cloud environments pose an even bigger detection challenge. Where endpoint attacks often involve malware to package attacker capabilities, cloud attacks succeed through seemingly legitimate requests to the cloud provider. In the hustle and bustle of an enterprise cloud environment, atomic (one-dimensional) detections face a harsh tradeoff between low accuracy and overwhelming noise. Correlating between cloud and non-cloud activity can provide fidelity for effective detection coverage. Subscribed A recent study of cloud threat detection by Invictus IR should be a wake-up call for any SOC with a cloud footprint to secure. The researchers ran 32 well-known attack techniques in AWS, each leaving traces in the CloudTrail logs. Despite having access to evidence of the attack, the researchers found that “GuardDuty only triggered for just three of the simulated attacks, which is very limited. Esp

Want Better Cloud Security? Make Your Detections Multi-Dimensional How detection engineers are using data from other sources to secure their clouds Omer Singer Feb 29, 2024 4 Share It took decades for the security community to get the upper hand against attacks on endpoints, and cloud environments pose an even bigger detection challenge. Where endpoint attacks often involve malware to package attacker capabilities, cloud attacks succeed through seemingly legitimate requests to the cloud provider. In the hustle and bustle of an enterprise cloud environment, atomic (one-dimensional) detections f

Want Better Cloud Security? Make Your Detections Multi-Dimensional

related reading